last executing test programs: 27.914434082s ago: executing program 1 (id=2): socket$inet_icmp(0x2, 0x2, 0x1) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x800, 0xa, 0x20002f7}) unshare(0x22020400) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0xfe, 0x0, 0x2, 0x9}, 0x10) 27.774740814s ago: executing program 1 (id=12): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$kcm(0x2, 0xa, 0x2) inotify_init1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 26.70497245s ago: executing program 1 (id=26): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 26.494353494s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 26.455162714s ago: executing program 1 (id=35): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000600)="06", 0x1}], 0x1, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) 25.613470237s ago: executing program 1 (id=45): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x15402, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0x400c8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 25.611332508s ago: executing program 32 (id=45): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x15402, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0x400c8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.413301598s ago: executing program 3 (id=261): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 2.128732957s ago: executing program 3 (id=277): socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x100, 0x2}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xa, 0x800014c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0xfffffffffffffdd7, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.061739819s ago: executing program 3 (id=281): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) 1.561095707s ago: executing program 3 (id=290): socket$inet(0x2, 0xf, 0xa7a0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mq_open(0x0, 0xc1, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.238368631s ago: executing program 2 (id=294): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x6844, 0x4, 0x0, 0x1, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000048b00000000000000000000071101c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r0, 0x0, 0x4004000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x38, 0x0, @void}, 0x10) 1.054192994s ago: executing program 2 (id=296): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x1) 1.053049804s ago: executing program 5 (id=306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) 1.037567915s ago: executing program 0 (id=297): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x2}], 0x1}, 0x24048081) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x3057, 0x7721, 0x7f, 0x0, 0x0) 947.745386ms ago: executing program 4 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000008c0)=@gcm_128={{0x303}, "ce8d1c91499b74be", "050176e0dda87463d0c67a9e6d510c94", "77cd9195", "aaec637dc558c1e8"}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)="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", 0xfb}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0xb) 918.405246ms ago: executing program 0 (id=299): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40080a0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40012) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 892.310797ms ago: executing program 4 (id=300): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) close(0xffffffffffffffff) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 869.675147ms ago: executing program 5 (id=301): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000100000000000000000", @ANYRES32=r3, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac"], 0x38}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="11", 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x6558, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 582.816971ms ago: executing program 4 (id=302): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) 559.031272ms ago: executing program 5 (id=303): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf, 0x9a, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x85, 0x4, @perf_config_ext={0x2, 0x8}, 0x10001a, 0x7ff, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x3743, 0x0, 0x25143d52}, 0x0, 0x4, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r2) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x190) 529.257822ms ago: executing program 3 (id=304): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 527.925202ms ago: executing program 2 (id=305): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 515.487593ms ago: executing program 4 (id=307): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='u']) 494.643673ms ago: executing program 5 (id=308): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r2, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}, 0xc) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 485.922353ms ago: executing program 0 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 366.733725ms ago: executing program 2 (id=310): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 353.513785ms ago: executing program 2 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd7a, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) close(0xffffffffffffffff) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 341.543365ms ago: executing program 0 (id=312): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, 0x0}}, 0x10) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) signalfd4(r1, &(0x7f0000000140), 0x8, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x3a008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x102801, 0xb, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 240.627917ms ago: executing program 2 (id=313): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x9}, 0x100600, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) write$9p(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 172.343918ms ago: executing program 0 (id=314): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ae3e2fd69805000000000000009b429d9a2a07130000000000007ec012d0", 0x1001800, r0, 0x4}, 0x38) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d3ec66ecc053c543da5f", @ANYRES64=r1], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='c '], 0xa) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/249}, 0x20) 171.605598ms ago: executing program 4 (id=315): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e", 0x4}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 114.300949ms ago: executing program 5 (id=316): fdatasync(0xffffffffffffffff) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x4880) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 111.037299ms ago: executing program 3 (id=317): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31001000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000ae979be1fe7cf1745c5fad77250c4e9b73b3984868156176b76bd36f3d25eb4785abd93ee536c989399653ecfaee3c170eeef1e2d669f5d441daf4cc2e73e2f15b2af5ad2a5d2e3e75511856db8969ccc11a7de6a1cb09b9697fdd5ee576c18dc1d60591e0fec06b12d0edc06d6ac32a871a227edc6011f2812be09d51db126fd88c97e3b1f72d03ae28ca2b2c86e71efa35d0021ea593cfc9921301fe18b7f"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x1) 98.661109ms ago: executing program 0 (id=318): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 37.53294ms ago: executing program 4 (id=319): unshare(0xc060200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) unshare(0x22020600) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x28000400) 0s ago: executing program 5 (id=320): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@canfd={{0x3}, 0x20, 0x1, 0x0, 0x0, "1b2abe4c212e70fad8d96d9c85c49661faa0b87626326e9e840c861a455c47161aeb4dea1756b5deb18311ce161cdeb7cd1d5733b74e9aa6a7ef0f3649c449b7"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) kernel console output (not intermixed with test programs): [ 21.010424][ T28] audit: type=1400 audit(1777933456.051:100): avc: denied { write } for pid=3179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.033674][ T28] audit: type=1400 audit(1777933456.071:101): avc: denied { write } for pid=3190 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.196722][ T28] audit: type=1400 audit(1777933456.241:102): avc: denied { write } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.220064][ T28] audit: type=1400 audit(1777933456.241:103): avc: denied { write } for pid=3204 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.456156][ T28] audit: type=1400 audit(1777933456.501:104): avc: denied { write } for pid=3207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.479134][ T28] audit: type=1400 audit(1777933456.521:105): avc: denied { write } for pid=3218 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.837399][ T28] audit: type=1400 audit(1777933456.881:106): avc: denied { write } for pid=3221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.860451][ T28] audit: type=1400 audit(1777933456.901:107): avc: denied { write } for pid=3232 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.083244][ T28] audit: type=1400 audit(1777933457.131:108): avc: denied { write } for pid=3235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.106272][ T28] audit: type=1400 audit(1777933457.131:109): avc: denied { write } for pid=3246 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 31.439519][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 31.439536][ T28] audit: type=1400 audit(1777933466.481:117): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.468777][ T28] audit: type=1400 audit(1777933466.511:118): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.469477][ T3285] cgroup: Unknown subsys name 'net' [ 31.496872][ T28] audit: type=1400 audit(1777933466.551:119): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.621939][ T3285] cgroup: Unknown subsys name 'cpuset' [ 31.628199][ T3285] cgroup: Unknown subsys name 'rlimit' [ 31.737705][ T28] audit: type=1400 audit(1777933466.781:120): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.762038][ T28] audit: type=1400 audit(1777933466.781:121): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.787085][ T28] audit: type=1400 audit(1777933466.781:122): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.794755][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.813880][ T28] audit: type=1400 audit(1777933466.781:123): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.837520][ T28] audit: type=1400 audit(1777933466.791:124): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.845062][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.862738][ T28] audit: type=1400 audit(1777933466.791:125): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.894579][ T28] audit: type=1400 audit(1777933466.831:126): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.180340][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.187701][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.195148][ T3299] bridge_slave_0: entered allmulticast mode [ 33.201718][ T3299] bridge_slave_0: entered promiscuous mode [ 33.224187][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.231661][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.239215][ T3302] bridge_slave_0: entered allmulticast mode [ 33.245928][ T3302] bridge_slave_0: entered promiscuous mode [ 33.252577][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.259884][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.267358][ T3299] bridge_slave_1: entered allmulticast mode [ 33.273830][ T3299] bridge_slave_1: entered promiscuous mode [ 33.290927][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.298053][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.305327][ T3302] bridge_slave_1: entered allmulticast mode [ 33.311764][ T3302] bridge_slave_1: entered promiscuous mode [ 33.328486][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.335605][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.343024][ T3298] bridge_slave_0: entered allmulticast mode [ 33.349277][ T3298] bridge_slave_0: entered promiscuous mode [ 33.369763][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.377088][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.384380][ T3298] bridge_slave_1: entered allmulticast mode [ 33.391032][ T3298] bridge_slave_1: entered promiscuous mode [ 33.400790][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.411346][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.436846][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.446971][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.456174][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.463353][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.470731][ T3307] bridge_slave_0: entered allmulticast mode [ 33.477392][ T3307] bridge_slave_0: entered promiscuous mode [ 33.504085][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.511253][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.518563][ T3307] bridge_slave_1: entered allmulticast mode [ 33.525369][ T3307] bridge_slave_1: entered promiscuous mode [ 33.533088][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.551005][ T3299] team0: Port device team_slave_0 added [ 33.562369][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.571535][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.578748][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.586193][ T3303] bridge_slave_0: entered allmulticast mode [ 33.592726][ T3303] bridge_slave_0: entered promiscuous mode [ 33.600267][ T3302] team0: Port device team_slave_0 added [ 33.606755][ T3299] team0: Port device team_slave_1 added [ 33.628673][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.635963][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.643173][ T3303] bridge_slave_1: entered allmulticast mode [ 33.649810][ T3303] bridge_slave_1: entered promiscuous mode [ 33.656803][ T3302] team0: Port device team_slave_1 added [ 33.667544][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.678204][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.692616][ T3298] team0: Port device team_slave_0 added [ 33.706590][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.713907][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.740097][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.756230][ T3298] team0: Port device team_slave_1 added [ 33.770583][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.777755][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.803938][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.815692][ T3307] team0: Port device team_slave_0 added [ 33.826258][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.835681][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.842648][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.868669][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.882486][ T3307] team0: Port device team_slave_1 added [ 33.893138][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.902590][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.909572][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.935745][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.954294][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.961378][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.988005][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.014218][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.021322][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.047455][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.063265][ T3303] team0: Port device team_slave_0 added [ 34.070059][ T3303] team0: Port device team_slave_1 added [ 34.076045][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.083017][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.109187][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.142145][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.149409][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.176368][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.192170][ T3299] hsr_slave_0: entered promiscuous mode [ 34.198122][ T3299] hsr_slave_1: entered promiscuous mode [ 34.213264][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.220428][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.246712][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.257894][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.264884][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.291049][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.305032][ T3302] hsr_slave_0: entered promiscuous mode [ 34.311144][ T3302] hsr_slave_1: entered promiscuous mode [ 34.317162][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.322998][ T3302] Cannot create hsr debugfs directory [ 34.348575][ T3298] hsr_slave_0: entered promiscuous mode [ 34.354893][ T3298] hsr_slave_1: entered promiscuous mode [ 34.360824][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 34.366710][ T3298] Cannot create hsr debugfs directory [ 34.385041][ T3307] hsr_slave_0: entered promiscuous mode [ 34.391192][ T3307] hsr_slave_1: entered promiscuous mode [ 34.397068][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 34.402820][ T3307] Cannot create hsr debugfs directory [ 34.453130][ T3303] hsr_slave_0: entered promiscuous mode [ 34.459081][ T3303] hsr_slave_1: entered promiscuous mode [ 34.465118][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.470947][ T3303] Cannot create hsr debugfs directory [ 34.636801][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.645573][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.653290][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.661993][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.672050][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.680464][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.688145][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.697110][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.718810][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.727806][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.735736][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.744344][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.752024][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.760464][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.768548][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.777058][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.809942][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.819332][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.827332][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.835850][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.844364][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.852933][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.861501][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.870050][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.911018][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.919619][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.927433][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.936331][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.944571][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.953198][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.961191][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.970120][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.995098][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.019977][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.035902][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.045039][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.053085][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.061714][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.069568][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.078387][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.086321][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.095028][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.104889][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.112061][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.123642][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.133909][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.141174][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.172602][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.189065][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.196190][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.210462][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.226887][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.233996][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.260501][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.279819][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.287592][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.312302][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.319611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.334400][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.346900][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.381208][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.397977][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.417563][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.425083][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.436316][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.443456][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.461678][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.469179][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.479863][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.486997][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.516919][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.595428][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.748233][ T3302] veth0_vlan: entered promiscuous mode [ 35.771952][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.793850][ T3302] veth1_vlan: entered promiscuous mode [ 35.813228][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.824619][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.865269][ T3302] veth0_macvtap: entered promiscuous mode [ 35.883159][ T3302] veth1_macvtap: entered promiscuous mode [ 35.916545][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.926163][ T3299] veth0_vlan: entered promiscuous mode [ 35.935322][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.954798][ T3299] veth1_vlan: entered promiscuous mode [ 35.974143][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.988175][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.001354][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.010549][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.053580][ T3303] veth0_vlan: entered promiscuous mode [ 36.059888][ T3307] veth0_vlan: entered promiscuous mode [ 36.066058][ T3298] veth0_vlan: entered promiscuous mode [ 36.076150][ T3299] veth0_macvtap: entered promiscuous mode [ 36.084197][ T3299] veth1_macvtap: entered promiscuous mode [ 36.093482][ T3307] veth1_vlan: entered promiscuous mode [ 36.095888][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.116102][ T3303] veth1_vlan: entered promiscuous mode [ 36.132725][ T3298] veth1_vlan: entered promiscuous mode [ 36.147497][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.173563][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.194789][ T3298] veth0_macvtap: entered promiscuous mode [ 36.202152][ T3307] veth0_macvtap: entered promiscuous mode [ 36.214295][ T3298] veth1_macvtap: entered promiscuous mode [ 36.222991][ T237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.235928][ T237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.249096][ T3303] veth0_macvtap: entered promiscuous mode [ 36.256983][ T237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.268491][ T237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.280785][ T3307] veth1_macvtap: entered promiscuous mode [ 36.287855][ T3303] veth1_macvtap: entered promiscuous mode [ 36.297721][ T3505] loop3: detected capacity change from 0 to 512 [ 36.300758][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.321465][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.333597][ T3505] EXT4-fs: test_dummy_encryption option not supported [ 36.342595][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.371441][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.385280][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.394007][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.403702][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.418624][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.433421][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.447888][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 36.447904][ T28] audit: type=1400 audit(1777933471.491:161): avc: denied { allowed } for pid=3507 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.478420][ T28] audit: type=1400 audit(1777933471.491:162): avc: denied { create } for pid=3507 comm="syz.3.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.500700][ T28] audit: type=1400 audit(1777933471.501:163): avc: denied { create } for pid=3507 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.503174][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.521033][ T28] audit: type=1400 audit(1777933471.501:164): avc: denied { getopt } for pid=3507 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.549405][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.580385][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.591027][ T28] audit: type=1400 audit(1777933471.511:165): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.593851][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.638673][ T28] audit: type=1400 audit(1777933471.511:166): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.681498][ T28] audit: type=1400 audit(1777933471.511:167): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.710138][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.711678][ T28] audit: type=1400 audit(1777933471.521:168): avc: denied { map_create } for pid=3511 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.726309][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.787097][ T28] audit: type=1400 audit(1777933471.681:169): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.797950][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.868114][ T28] audit: type=1400 audit(1777933471.681:170): avc: denied { map_read map_write } for pid=3509 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.879698][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.931457][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.983921][ T3532] loop3: detected capacity change from 0 to 128 [ 37.032885][ T3532] ======================================================= [ 37.032885][ T3532] WARNING: The mand mount option has been deprecated and [ 37.032885][ T3532] and is ignored by this kernel. Remove the mand [ 37.032885][ T3532] option from the mount to silence this warning. [ 37.032885][ T3532] ======================================================= [ 37.103727][ T3537] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 37.142314][ T3539] loop2: detected capacity change from 0 to 764 [ 37.188104][ T3540] syz.3.11: attempt to access beyond end of device [ 37.188104][ T3540] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.221112][ T3540] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 37.232809][ T3539] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 37.245955][ T3540] syz.3.11: attempt to access beyond end of device [ 37.245955][ T3540] loop3: rw=2049, sector=129, nr_sectors = 2 limit=128 [ 37.295557][ T3532] syz.3.11: attempt to access beyond end of device [ 37.295557][ T3532] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.333406][ T3532] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 37.592825][ T3548] loop3: detected capacity change from 0 to 512 [ 37.618226][ T3548] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.681959][ T3548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 37.710335][ T3548] System zones: 0-2, 18-18, 34-34 [ 37.739323][ T3548] EXT4-fs (loop3): 1 orphan inode deleted [ 37.767835][ T3548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.781087][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 37.839495][ T49] loop3: lost filesystem error report for type 5 error -117 [ 37.839685][ T49] EXT4-fs (loop3): Remounting filesystem read-only [ 37.851123][ T3548] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.864478][ T3559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20'. [ 37.887896][ T3559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20'. [ 37.897594][ T3557] loop0: detected capacity change from 0 to 2048 [ 37.918592][ T3557] /dev/loop0: Can't open blockdev [ 37.979496][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.121204][ T3568] loop4: detected capacity change from 0 to 1024 [ 38.133062][ T3571] loop2: detected capacity change from 0 to 164 [ 38.174446][ T3568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.515699][ T3568] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 38.517640][ T3568] EXT4-fs (loop4): Remounting filesystem read-only [ 38.541398][ T3568] syz.4.24 (3568) used greatest stack depth: 9000 bytes left [ 38.579308][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.642493][ T3603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 38.643299][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 39.208526][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.295307][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.355604][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.377363][ T3628] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 39.395951][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.480603][ T3635] syz_tun: entered allmulticast mode [ 39.496328][ T3635] pimreg: entered allmulticast mode [ 39.509661][ T3634] syz_tun: left allmulticast mode [ 39.539152][ T55] bridge_slave_1: left allmulticast mode [ 39.571272][ T55] bridge_slave_1: left promiscuous mode [ 39.588088][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.614160][ T55] bridge_slave_0: left allmulticast mode [ 39.614186][ T55] bridge_slave_0: left promiscuous mode [ 39.614356][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.800373][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.829241][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.856491][ T55] bond0 (unregistering): Released all slaves [ 39.888307][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.978853][ T55] hsr_slave_0: left promiscuous mode [ 39.995953][ T3662] tipc: Failed to remove unknown binding: 66,0,0/0:3916727383/3916727385 [ 40.029895][ T55] hsr_slave_1: left promiscuous mode [ 40.051208][ T3662] tipc: Failed to remove unknown binding: 66,0,0/0:3916727383/3916727384 [ 40.061681][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.090540][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.125547][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.165927][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.193481][ T55] veth1_macvtap: left promiscuous mode [ 40.212244][ T55] veth0_macvtap: left promiscuous mode [ 40.226837][ T55] veth1_vlan: left promiscuous mode [ 40.241207][ T55] veth0_vlan: left promiscuous mode [ 40.412877][ T55] team0 (unregistering): Port device team_slave_1 removed [ 40.435314][ T55] team0 (unregistering): Port device team_slave_0 removed [ 40.514495][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.764451][ T3710] loop3: detected capacity change from 0 to 2048 [ 40.766087][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.782298][ T3629] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.789504][ T3629] bridge_slave_0: entered allmulticast mode [ 40.803358][ T3629] bridge_slave_0: entered promiscuous mode [ 40.815699][ T3710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.845027][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.862787][ T3629] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.879812][ T3629] bridge_slave_1: entered allmulticast mode [ 40.890905][ T3629] bridge_slave_1: entered promiscuous mode [ 40.902877][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 40.940475][ T3629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.959806][ T3629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.993562][ T3629] team0: Port device team_slave_0 added [ 41.007692][ T3629] team0: Port device team_slave_1 added [ 41.056527][ T3629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.070949][ T3629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.119494][ T3629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.152740][ T3629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.172885][ T3629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.215772][ T3629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.286841][ T3629] hsr_slave_0: entered promiscuous mode [ 41.304463][ T3629] hsr_slave_1: entered promiscuous mode [ 41.319505][ T3629] debugfs: 'hsr0' already exists in 'hsr' [ 41.331585][ T3629] Cannot create hsr debugfs directory [ 41.507338][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 41.507356][ T28] audit: type=1400 audit(1777933476.551:264): avc: denied { write } for pid=3729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.580916][ T28] audit: type=1400 audit(1777933476.601:265): avc: denied { write } for pid=3742 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.648464][ T3745] netlink: 'syz.0.62': attribute type 1 has an invalid length. [ 41.739521][ T30] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 41.772035][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 41.789904][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.789904][ T30] [ 41.814182][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 41.823834][ T30] EXT4-fs (loop3): Free/Dirty block details [ 41.845584][ T30] EXT4-fs (loop3): free_blocks=4096 [ 41.850885][ T30] EXT4-fs (loop3): dirty_blocks=512 [ 41.856207][ T30] EXT4-fs (loop3): Block reservation details [ 41.874027][ T30] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 41.891686][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 41.918572][ T3302] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 41.922440][ T3748] loop2: detected capacity change from 0 to 764 [ 41.948698][ T3748] Symlink component flag not implemented [ 41.957498][ T3748] Symlink component flag not implemented (105) [ 41.965151][ T28] audit: type=1400 audit(1777933477.011:266): avc: denied { read write } for pid=3747 comm="syz.2.64" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.000337][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 42.009656][ T28] audit: type=1400 audit(1777933477.041:267): avc: denied { open } for pid=3747 comm="syz.2.64" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.038301][ T28] audit: type=1400 audit(1777933477.041:268): avc: denied { ioctl } for pid=3747 comm="syz.2.64" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.160308][ T28] audit: type=1400 audit(1777933477.201:269): avc: denied { mount } for pid=3759 comm="syz.4.66" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 42.228212][ T28] audit: type=1400 audit(1777933477.271:270): avc: denied { watch } for pid=3767 comm="syz.3.68" path="/21" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.268802][ T28] audit: type=1400 audit(1777933477.311:271): avc: denied { create } for pid=3770 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.289378][ T28] audit: type=1400 audit(1777933477.311:272): avc: denied { connect } for pid=3770 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.293459][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 42.310594][ T28] audit: type=1400 audit(1777933477.311:273): avc: denied { read } for pid=3770 comm="syz.4.69" path="socket:[6287]" dev="sockfs" ino=6287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.319439][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 42.614221][ T3781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 42.987301][ T3797] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 43.050591][ T3797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 43.077509][ T3797] bond1: (slave bond2): making interface the new active one [ 43.090521][ T3797] bond1: (slave bond2): Enslaving as an active interface with an up link [ 43.143099][ T3808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 43.157970][ T3806] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 43.168052][ T3808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.177324][ T3825] loop0: detected capacity change from 0 to 512 [ 44.208217][ T3825] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.227584][ T3825] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 44.919564][ T3748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.934163][ T3629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.957693][ T3629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.970637][ T3629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.989017][ T3629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.010968][ T3629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.024759][ T3851] loop2: detected capacity change from 0 to 512 [ 45.036994][ T3629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.053236][ T3629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.084039][ T3851] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 45.101528][ T3851] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a843c018, mo2=0100] [ 45.102236][ T3629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.124183][ T3851] System zones: 2-12, 7-7 [ 45.153541][ T3851] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.204625][ T3851] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.98: Block bitmap for bg 0 marked uninitialized [ 45.245180][ T3851] loop2: lost filesystem error report for type 5 error -117 [ 45.245443][ T3851] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.253161][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 45.253187][ C1] EXT4-fs (loop2): initial error at time 1777933480: ext4_read_block_bitmap_nowait:517 [ 45.253214][ C1] EXT4-fs (loop2): last error at time 1777933480: ext4_read_block_bitmap_nowait:517 [ 45.297133][ T3868] loop3: detected capacity change from 0 to 512 [ 45.308891][ T3851] loop2: lost filesystem error report for type 5 error -117 [ 45.309153][ T3851] EXT4-fs (loop2): 1 orphan inode deleted [ 45.328910][ T3629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.339750][ T3868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.344556][ T3851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.362736][ T3629] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.396981][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.404214][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.419341][ T3851] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 45.438670][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.445894][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.453500][ T3868] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.489894][ T3851] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a843c018, mo2=0100] [ 45.506734][ T3851] EXT4-fs error (device loop2): __ext4_remount:6837: comm syz.2.98: Abort forced by user [ 45.556605][ T3851] EXT4-fs (loop2): Remounting filesystem read-only [ 45.575541][ T3851] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.650696][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.795062][ T3879] loop2: detected capacity change from 0 to 512 [ 45.878303][ T3629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.957945][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.304223][ T3629] veth0_vlan: entered promiscuous mode [ 46.315284][ T3629] veth1_vlan: entered promiscuous mode [ 46.340261][ T3904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.105'. [ 46.364951][ T3629] veth0_macvtap: entered promiscuous mode [ 46.382783][ T3629] veth1_macvtap: entered promiscuous mode [ 46.400561][ T3629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.423862][ T3629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.454233][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.482225][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.508414][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.533725][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.700868][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 46.700957][ T28] audit: type=1400 audit(1777933481.711:290): avc: denied { create } for pid=3888 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.702136][ T3936] xt_hashlimit: size too large, truncated to 1048576 [ 47.951520][ T3946] loop3: detected capacity change from 0 to 1024 [ 47.976604][ T3946] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.005178][ T3946] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.014097][ T3946] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.020730][ T3946] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.118: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.034882][ T3946] loop3: lost filesystem error report for type 5 error -117 [ 48.035086][ T3946] EXT4-fs (loop3): 1 orphan inode deleted [ 48.042504][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 48.042529][ C1] EXT4-fs (loop3): initial error at time 1777933483: ext4_free_blocks:6718 [ 48.042557][ C1] EXT4-fs (loop3): last error at time 1777933483: ext4_free_blocks:6718 [ 48.074141][ T3946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.147540][ T3946] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.118: path /49/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 48.178564][ T28] audit: type=1400 audit(1777933483.231:291): avc: denied { create } for pid=3952 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.224296][ T28] audit: type=1400 audit(1777933483.231:292): avc: denied { bind } for pid=3952 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.256742][ T28] audit: type=1400 audit(1777933483.231:293): avc: denied { listen } for pid=3952 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.277180][ T28] audit: type=1400 audit(1777933483.231:294): avc: denied { connect } for pid=3952 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.298143][ T28] audit: type=1400 audit(1777933483.231:295): avc: denied { read } for pid=3952 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.298192][ T3949] 9pnet: p9_errstr2errno: server reported unknown error 0000000000 [ 48.392567][ T28] audit: type=1400 audit(1777933483.431:296): avc: denied { module_request } for pid=3957 comm="syz.2.122" kmod="crypto-gcm(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.437354][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.489231][ T28] audit: type=1400 audit(1777933483.531:297): avc: denied { bpf } for pid=3966 comm="syz.3.123" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.540921][ T28] audit: type=1400 audit(1777933483.561:298): avc: denied { perfmon } for pid=3966 comm="syz.3.123" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.577877][ T28] audit: type=1400 audit(1777933483.561:299): avc: denied { sqpoll } for pid=3966 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.992941][ T3988] loop0: detected capacity change from 0 to 2048 [ 49.007210][ T3988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.041420][ T3988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.120351][ T3988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.130: bg 0: block 2: invalid block bitmap [ 49.134575][ T3988] EXT4-fs (loop0): Remounting filesystem read-only [ 49.158762][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.200411][ T3999] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 49.417244][ T3999] loop0: detected capacity change from 0 to 512 [ 49.516543][ T3999] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 49.577354][ T3999] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.133: iget: bogus i_mode (2) [ 49.590145][ T3999] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.617459][ T3999] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.133: couldn't read orphan inode 15 (err -117) [ 49.629500][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 49.630250][ C1] EXT4-fs (loop0): initial error at time 1777933484: ext4_orphan_get:1397: inode 15 [ 49.630676][ C1] EXT4-fs (loop0): last error at time 1777933484: ext4_orphan_get:1397: inode 15 [ 49.725653][ T3999] loop0: lost filesystem error report for type 5 error -117 [ 49.758759][ T3999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.854106][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.925820][ T4018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 49.982281][ T4018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.995443][ T4018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.069265][ T4018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.080747][ T4018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.297847][ T4034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'. [ 50.353126][ T4034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 50.534544][ T4014] loop3: detected capacity change from 0 to 1024 [ 50.623425][ T4032] loop2: detected capacity change from 0 to 512 [ 50.675614][ T4032] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 50.714468][ T4014] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.720801][ T4032] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.148: Invalid inode bitmap blk 4 in block_group 0 [ 50.743258][ T4039] netlink: 'syz.0.151': attribute type 4 has an invalid length. [ 50.754912][ T4032] loop2: lost filesystem error report for type 5 error -117 [ 50.759261][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.800457][ T4039] netlink: 'syz.0.151': attribute type 4 has an invalid length. [ 50.900919][ T4040] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 50.923440][ T4040] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 50.968414][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.516465][ T4069] loop5: detected capacity change from 0 to 512 [ 51.542585][ T4069] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.554167][ T4066] syzkaller0: entered promiscuous mode [ 51.566867][ T4066] syzkaller0: entered allmulticast mode [ 51.579925][ T4069] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.596364][ T4069] EXT4-fs (loop5): 1 truncate cleaned up [ 51.604071][ T4069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.752825][ T3629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.824865][ T4077] loop3: detected capacity change from 0 to 512 [ 51.839052][ T28] kauditd_printk_skb: 613 callbacks suppressed [ 51.839077][ T28] audit: type=1400 audit(1777933486.881:913): avc: denied { mount } for pid=4078 comm="syz.5.164" name="/" dev="autofs" ino=7239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 51.882735][ T4077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.903125][ T4077] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.933527][ T28] audit: type=1400 audit(1777933486.901:914): avc: denied { block_suspend } for pid=4080 comm="syz.4.166" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.963328][ T28] audit: type=1400 audit(1777933487.011:915): avc: denied { write } for pid=4076 comm="syz.3.165" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.008791][ T28] audit: type=1400 audit(1777933487.021:916): avc: denied { write } for pid=4076 comm="syz.3.165" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.031130][ T28] audit: type=1400 audit(1777933487.021:917): avc: denied { append } for pid=4076 comm="syz.3.165" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.109262][ T28] audit: type=1400 audit(1777933487.151:918): avc: denied { ioctl } for pid=4076 comm="syz.3.165" path="/59/bus/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.279665][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.522716][ T28] audit: type=1400 audit(1777933487.571:919): avc: denied { bind } for pid=4097 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.562449][ T4096] loop3: detected capacity change from 0 to 512 [ 52.633262][ T4103] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 52.672337][ T4103] bond1: entered promiscuous mode [ 52.693957][ T4103] bond1: entered allmulticast mode [ 52.769331][ T4103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.816944][ T28] audit: type=1326 audit(1777933487.861:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.5.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dea93cdd9 code=0x0 [ 52.822150][ T4096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.879236][ T4109] erspan1: entered allmulticast mode [ 52.882248][ T4096] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.895972][ T4109] bond1: (slave erspan1): making interface the new active one [ 52.896000][ T4109] erspan1: entered promiscuous mode [ 52.910003][ T4109] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 52.962134][ T28] audit: type=1400 audit(1777933488.001:921): avc: denied { write } for pid=4123 comm="syz.2.176" path="socket:[7297]" dev="sockfs" ino=7297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.035327][ T28] audit: type=1400 audit(1777933488.011:922): avc: denied { write } for pid=4100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.950644][ T4159] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.957965][ T4159] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.052219][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 54.119199][ T4174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 54.132724][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.148969][ T4159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.165416][ T4159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.209418][ T3386] kernel read not supported for file [fscontext] (pid: 3386 comm: kworker/1:4) [ 54.350328][ T4193] loop5: detected capacity change from 0 to 128 [ 54.560247][ T4193] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.590205][ T4193] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.658584][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 54.667987][ T4174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 54.671428][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.695017][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.724302][ T3629] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.733860][ T4194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.186'. [ 54.746835][ T4200] netlink: 172 bytes leftover after parsing attributes in process `syz.4.191'. [ 54.788856][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 54.824597][ T4174] Zero length message leads to an empty skb [ 54.861023][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.870063][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.948156][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.965749][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.974584][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.026472][ T4206] process 'syz.5.193' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 55.502469][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.154860][ T3379] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.182920][ T3379] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.360098][ T4248] ref_ctr increment failed for inode: 0xf5 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a9b8d80 [ 56.376997][ T4250] bond3: entered allmulticast mode [ 56.391074][ T4250] bridge1: entered promiscuous mode [ 56.396588][ T4250] bridge1: entered allmulticast mode [ 56.417442][ T4250] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 56.556067][ T4263] __nla_validate_parse: 3 callbacks suppressed [ 56.556086][ T4263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 56.651951][ T4267] tipc: Enabling of bearer rejected, failed to enable media [ 56.688290][ T4267] openvswitch: netlink: Message has 4 unknown bytes. [ 56.730243][ T4275] loop4: detected capacity change from 0 to 128 [ 56.925118][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 56.925137][ T28] audit: type=1326 audit(1777933491.971:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.3.207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a8976cdd9 code=0x0 [ 57.137517][ T4285] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 57.151572][ T4285] bond1: entered promiscuous mode [ 57.156925][ T4285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.180501][ T4285] bond1: (slave bridge1): making interface the new active one [ 57.188195][ T4285] bridge1: entered promiscuous mode [ 57.195377][ T4285] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 57.277375][ T28] audit: type=1400 audit(1777933492.321:955): avc: denied { name_bind } for pid=4291 comm="syz.0.219" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 57.456656][ T28] audit: type=1400 audit(1777933492.501:956): avc: denied { read } for pid=4298 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.505149][ T28] audit: type=1400 audit(1777933492.551:957): avc: denied { getopt } for pid=4300 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.910921][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.225'. [ 57.982437][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.225'. [ 58.164789][ T4315] loop0: detected capacity change from 0 to 1024 [ 58.176197][ T4315] EXT4-fs: Ignoring removed bh option [ 58.230474][ T4320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 58.244149][ T4315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.279802][ T28] audit: type=1400 audit(1777933493.321:958): avc: denied { write } for pid=4314 comm="syz.0.227" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.335553][ T28] audit: type=1400 audit(1777933493.321:959): avc: denied { add_name } for pid=4314 comm="syz.0.227" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.383909][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.472869][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 58.499474][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 58.821480][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.225'. [ 58.886759][ T4316] bond2: (slave veth3): Enslaving as an active interface with a down link [ 58.900333][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.225'. [ 58.923625][ T4320] bond2: entered promiscuous mode [ 58.970998][ T4320] bond2: entered allmulticast mode [ 58.985787][ T4320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.998274][ T28] audit: type=1400 audit(1777933494.031:960): avc: denied { ioctl } for pid=4335 comm="syz.5.232" path="socket:[10364]" dev="sockfs" ino=10364 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.036674][ T838] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.054875][ T838] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.122260][ T838] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.151235][ T838] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.587781][ T4344] loop4: detected capacity change from 0 to 1024 [ 59.630452][ T4344] EXT4-fs: Mount option(s) incompatible with ext3 [ 59.853084][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 59.937647][ T4328] loop0: detected capacity change from 0 to 512 [ 60.037638][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 60.120480][ T28] audit: type=1400 audit(1777933495.161:961): avc: denied { create } for pid=4371 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.148129][ T28] audit: type=1400 audit(1777933495.191:962): avc: denied { ioctl } for pid=4371 comm="syz.5.245" path="socket:[9535]" dev="sockfs" ino=9535 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.419460][ T4386] loop5: detected capacity change from 0 to 512 [ 60.431831][ T4328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.501919][ T4386] EXT4-fs: Ignoring removed oldalloc option [ 60.512605][ T4386] EXT4-fs (loop5): filesystem is read-only [ 60.520675][ T4386] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 60.535742][ T4328] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.602525][ T4386] EXT4-fs (loop5): filesystem is read-only [ 60.608533][ T4386] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.631559][ T4386] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.248: bg 0: block 64: padding at end of block bitmap is not set [ 60.646646][ T4386] loop5: lost filesystem error report for type 5 error -117 [ 60.646866][ T4386] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 60.654310][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 60.654330][ C0] EXT4-fs (loop5): initial error at time 1777933495: ext4_validate_block_bitmap:441 [ 60.654355][ C0] EXT4-fs (loop5): last error at time 1777933495: ext4_validate_block_bitmap:441 [ 60.704693][ T28] audit: type=1400 audit(1777933495.741:963): avc: denied { write } for pid=4327 comm="syz.0.230" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.761331][ T4386] loop5: lost filesystem error report for type 5 error -117 [ 60.763886][ T4386] EXT4-fs (loop5): 1 orphan inode deleted [ 60.778234][ T4386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.803713][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.817500][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.832851][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.860027][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.869718][ T3629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.936390][ T4396] loop2: detected capacity change from 0 to 256 [ 61.095483][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.192236][ T4400] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 61.577932][ T4421] __nla_validate_parse: 4 callbacks suppressed [ 61.577964][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 61.630139][ T4421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 61.953219][ T4443] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 62.325727][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.355259][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 62.366424][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.373386][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.380168][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.387169][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.394161][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.400976][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.401942][ T4421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 62.407789][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.407827][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.430347][ T4454] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.440684][ T4443] bond3: entered promiscuous mode [ 62.446183][ T4443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.448319][ T4460] capability: warning: `syz.5.274' uses deprecated v2 capabilities in a way that may be insecure [ 62.472139][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 62.472158][ T28] audit: type=1400 audit(1777933497.511:970): avc: denied { setopt } for pid=4459 comm="syz.5.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.622568][ T4449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.629978][ T4449] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 62.644226][ T4449] bond3: (slave sit1): Setting fail_over_mac to active for active-backup mode [ 62.660758][ T4449] bond3: (slave sit1): making interface the new active one [ 62.668633][ T4449] sit1: entered promiscuous mode [ 62.676160][ T4449] bond3: (slave sit1): Enslaving as an active interface with an up link [ 62.686115][ T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.695508][ T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.718722][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.733131][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.817948][ T4469] netlink: 172 bytes leftover after parsing attributes in process `syz.0.278'. [ 62.878178][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 62.890435][ T4469] netlink: 172 bytes leftover after parsing attributes in process `syz.0.278'. [ 62.904750][ T4469] netlink: 100 bytes leftover after parsing attributes in process `syz.0.278'. [ 62.916546][ T4469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.278'. [ 63.182465][ T4493] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 63.214856][ T28] audit: type=1400 audit(1777933498.261:971): avc: denied { ioctl } for pid=4484 comm="syz.2.286" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.218553][ T4495] loop5: detected capacity change from 0 to 1024 [ 63.270180][ T4495] EXT4-fs: Ignoring removed orlov option [ 63.289403][ T4495] EXT4-fs: Ignoring removed nobh option [ 63.289938][ T4493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.336934][ T4498] bond2: entered promiscuous mode [ 63.344427][ T4495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.373791][ T4502] bond2: (slave dummy0): making interface the new active one [ 63.392350][ T4502] dummy0: entered promiscuous mode [ 63.399170][ T4502] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 63.437921][ T4508] loop2: detected capacity change from 0 to 764 [ 63.456712][ T3629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.483709][ T4493] bond2 (unregistering): left promiscuous mode [ 63.513095][ T4493] dummy0: left promiscuous mode [ 63.518535][ T28] audit: type=1400 audit(1777933498.561:972): avc: denied { mounton } for pid=4507 comm="syz.2.291" path="/proc/137/task" dev="proc" ino=9751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 63.613523][ T4493] bond2 (unregistering): (slave dummy0): Releasing active interface [ 63.669189][ T4493] bond2 (unregistering): Released all slaves [ 63.688808][ T4513] tipc: Started in network mode [ 63.694435][ T4513] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 63.704609][ T4513] tipc: Enabled bearer , priority 10 [ 63.773425][ T28] audit: type=1400 audit(1777933498.811:973): avc: denied { relabelfrom } for pid=4517 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.838072][ T28] audit: type=1400 audit(1777933498.811:974): avc: denied { relabelto } for pid=4517 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.901480][ T28] audit: type=1400 audit(1777933498.931:975): avc: denied { connect } for pid=4522 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.957008][ T4524] loop2: detected capacity change from 0 to 128 [ 64.011102][ T28] audit: type=1400 audit(1777933499.051:976): avc: denied { ioctl } for pid=4530 comm="syz.4.300" path="socket:[9811]" dev="sockfs" ino=9811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.023219][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 64.124159][ T4524] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.167250][ T4524] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.231197][ T28] audit: type=1400 audit(1777933499.271:977): avc: denied { write } for pid=4520 comm="syz.2.296" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.306366][ T28] audit: type=1400 audit(1777933499.351:978): avc: denied { bind } for pid=4539 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.336068][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.380276][ T4546] loop4: detected capacity change from 0 to 512 [ 64.425911][ T28] audit: type=1400 audit(1777933499.471:979): avc: denied { bind } for pid=4551 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.448903][ T4546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.498505][ T4546] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.553720][ T4546] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.307: corrupted xattr block 33: invalid header [ 64.606121][ T4546] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 64.627307][ T4546] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.307: corrupted xattr block 33: invalid header [ 64.699663][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.831157][ T3401] tipc: Node number set to 8432298 [ 64.864499][ T4578] loop3: detected capacity change from 0 to 128 [ 64.985669][ T3299] ================================================================== [ 64.993830][ T3299] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 65.001422][ T3299] [ 65.003829][ T3299] read-write to 0xffff888104982050 of 8 bytes by task 4582 on cpu 0: [ 65.011923][ T3299] shmem_recalc_inode+0x3f/0x1f0 [ 65.016910][ T3299] shmem_get_folio_gfp+0x7a8/0xd60 [ 65.022055][ T3299] shmem_write_begin+0xfc/0x1f0 [ 65.027014][ T3299] generic_perform_write+0x183/0x490 [ 65.032331][ T3299] shmem_file_write_iter+0xc5/0xf0 [ 65.037655][ T3299] __kernel_write_iter+0x319/0x590 [ 65.042811][ T3299] dump_user_range+0xa73/0xd00 [ 65.047699][ T3299] elf_core_dump+0x21a2/0x2330 [ 65.052491][ T3299] coredump_write+0xacc/0xdd0 [ 65.057195][ T3299] vfs_coredump+0x26dd/0x31e0 [ 65.061985][ T3299] get_signal+0xd5c/0xf20 [ 65.066357][ T3299] arch_do_signal_or_restart+0x96/0x450 [ 65.072111][ T3299] irqentry_exit+0x140/0x5b0 [ 65.076822][ T3299] asm_exc_page_fault+0x26/0x30 [ 65.081707][ T3299] [ 65.084045][ T3299] read to 0xffff888104982050 of 8 bytes by task 3299 on cpu 1: [ 65.091613][ T3299] shmem_getattr+0x41/0x200 [ 65.096149][ T3299] vfs_getattr_nosec+0x146/0x1e0 [ 65.101118][ T3299] vfs_getattr+0x48/0x60 [ 65.105378][ T3299] vfs_statx_path+0x28/0x140 [ 65.110008][ T3299] vfs_statx+0xc4/0x170 [ 65.114374][ T3299] vfs_fstatat+0x118/0x170 [ 65.118821][ T3299] __se_sys_newfstatat+0x55/0x3e0 [ 65.123873][ T3299] __x64_sys_newfstatat+0x55/0x70 [ 65.128934][ T3299] x64_sys_call+0x2c64/0x3020 [ 65.133646][ T3299] do_syscall_64+0x12c/0x3b0 [ 65.138364][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.144293][ T3299] [ 65.146674][ T3299] value changed: 0x00000000000008d2 -> 0x00000000000008d5 [ 65.153970][ T3299] [ 65.156315][ T3299] Reported by Kernel Concurrency Sanitizer on: [ 65.162485][ T3299] CPU: 1 UID: 0 PID: 3299 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 65.171998][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 65.182093][ T3299] ================================================================== [ 65.792263][ T4578] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.811321][ T4578] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.890295][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.