last executing test programs: 17.826191106s ago: executing program 0 (id=53): r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) epoll_create1(0x80000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x8000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x67}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 17.757551819s ago: executing program 0 (id=54): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x100000000) 17.371996271s ago: executing program 0 (id=55): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) fcntl$lock(r2, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17.159138318s ago: executing program 0 (id=57): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000300), 0xf7, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_setup(0x1, &(0x7f00000004c0)=0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x7, r2, &(0x7f0000000140)='i', 0x1, 0x9fd}]) 16.891824826s ago: executing program 0 (id=59): openat(0xffffffffffffff9c, 0x0, 0x1c1040, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x1, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.593138956s ago: executing program 0 (id=62): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, 0x0, 0x0) 16.586131166s ago: executing program 32 (id=62): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, 0x0, 0x0) 5.033013739s ago: executing program 4 (id=225): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000180)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c5805000000451697efe42811ee1df0fa9264f7d866b19705487b00", 0xb2, 0xfffffff7, 0x4, 0xe}, 0x3c) 4.99421353s ago: executing program 4 (id=227): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x64048040) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0xfffffffffffffece, 0x0}, 0x8a}], 0x40001b1, 0x22, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000200)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@utf8no}, {@fat=@usefree}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@rodir}, {@fat=@debug}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1882a6, 0x0) 4.456807607s ago: executing program 1 (id=243): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xb) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 4.393613569s ago: executing program 1 (id=246): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) 4.330012491s ago: executing program 1 (id=247): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x2}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 3.12182383s ago: executing program 4 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.919317406s ago: executing program 2 (id=254): socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x7df2, 0x7721, 0x16, 0x0, 0x0) 2.890939038s ago: executing program 2 (id=255): socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x40}, 0x8) 2.031062675s ago: executing program 2 (id=256): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 1.357696067s ago: executing program 2 (id=257): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100002b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x9a, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.357329196s ago: executing program 3 (id=258): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_io_uring_setup(0x22b5, &(0x7f0000000140)={0x0, 0x85f3, 0x1, 0x0, 0x2f0}, 0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) io_uring_enter(r0, 0x7350, 0xd6, 0x60, 0x0, 0x0) 1.333974917s ago: executing program 4 (id=259): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x40000) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/64) 1.312950998s ago: executing program 2 (id=260): ioprio_set$uid(0x3, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000140)='S\r', 0x2) sendfile(r3, r2, 0x0, 0x7fffffff) 1.2627275s ago: executing program 4 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988ca", 0xe}, {&(0x7f0000000100)="e61fede66066e1457ac7b933b68d4e19", 0x10}], 0x2) 1.225021661s ago: executing program 3 (id=263): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, 0x0, 0x0, 0x3ff, 0xc, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) open(0x0, 0x14f840, 0xa4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101402, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x2, 0x2, 0xfffffffffffffffc, 0xfe, 0x2, 0x7f}) 1.217009612s ago: executing program 1 (id=264): syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 1.215390641s ago: executing program 5 (id=265): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 917.898121ms ago: executing program 1 (id=266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x7, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="18080000000000000000000000800000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 886.197832ms ago: executing program 3 (id=267): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) mknod$loop(0x0, 0x4200, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$eJzs3c9vVFsdAPDv3P6kr++1T0n8ERVEFA1hph2gIaxwozGExEhcuYDaDk3TmU7TmSKtLMr/YCKJK/0TXJi4MGHl3p3ujAkuTFCJhpq4mJc7cwttmSkNlLmk8/kkJ3PPvXPv9xzoPef223ZOAAPrbERsR8RoRNyNiKlsfyErcaNT0ve9eP5wYef5w4VCjMbtfxXax9N9seec1EfZNccj4kffj/hp4fW4jc2tlflqtbKe1UvN2lqpsbn1t+Xa/FJlqbJaLs/Nzs1cu3y1fGx9PVP77bPvLd/88R9+/9Wnf9r+zs/TZk1mx/b2Y6/pd4zZ6frIyzip4Yi4+Y7X/VAMZf0ZzbshvJUkIj4XEefS+7+Vd2sAgH5otaaiNbW3DgCcdEk7B1ZIilkuYDKSpFjs5PBOx0RSrTeaF+/VN1YXO7my6RhJ7i1XKzNZrnA6RgppfTbLle3WywfqlyPi04j4xdipdr24UK8u5vngAwAD7KMD8/9/xzrzPwBwwo3n3QAAoO/M/wAweMz/ADB4zP8AMHjM/wAweMz/ADB4zP8AMFB+eOtWWlo72edfL97f3Fip37+0WGmsFGsbC8WF+vpacaleX2p/Zk/tTder1utrs1di40GpWWk0S43NrTu1+sZq8077c73vVEb60isA4DCfnnnyl0JEbF8/1S6xZy0HczWcbEneDQByM5R3A4DcDOfdACA3vscHuizRu0/PXxF63PMUQwt84C58Sf4fBpX8Pwwu+X8YXPL/MLharYI1/wFgwMjxA+/h5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw4k22SyEpZmuBT0aSFIsRH0fEdIwU7i1XKzMR8UlE/HlsZCytz6YnjubdcgDg7SX/KGTrf12YOj958Oho4X9jkU33P/vV7V8+mG8212fT/f8eO5W9p/k4218+NJClBgEgJ7vz9O48vuvF84cLu6Wf7Xn23c7iomncnax0jgzHcPt1vP3gMPGfQlbvSJ9Xho4h/vajiPhit/4X2rmR6Wzl04Px09gf9zV+si9+0j7WeU3/LT5/DG2BQfMkHX9udLv/kjjbfu1+/4+3R6h3tzv+7bw2/iUvx7+hHuPf2aPGuPLHH/Q89ijiy8Pd4hey4XW8Hatb/PNHjP/Xr3zt3P4zX2n9OuJCdI2/74xSs7ZWamxuXVquzS9Vliqr5fLc7NzMtctXy6V2jrq0m6l+3T+vX/zksP5P9Ig//ob+f/OI/f/N/+/+5OuHxP/2N7r//58+JH46J37riPHnJ37Xc/nuNP5i9/5n5/Tu/8Ujxn/6963FI74VAOiDxubWyny1Wlm30beN9NntA2iGjdw20q+A47jOF95jU/MemYD37dVNn3dLAAAAAAAAAAAAAACAXvrxB0959xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICT67MAAAD//x4p1Yw=") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) chmod(&(0x7f00000002c0)='./file1\x00', 0x8) 876.519292ms ago: executing program 5 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 810.798644ms ago: executing program 5 (id=269): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) 803.830154ms ago: executing program 1 (id=270): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 784.356365ms ago: executing program 4 (id=271): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) 348.254809ms ago: executing program 5 (id=272): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) tkill(r0, 0x20) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 199.254054ms ago: executing program 3 (id=273): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20002, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000000) io_uring_enter(0xffffffffffffffff, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xc, r0, 0x3e8000000, &(0x7f0000000180)=""/54) 181.865174ms ago: executing program 5 (id=274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x1010, 0x10001) 117.933596ms ago: executing program 2 (id=275): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000004dc0)={0x53, 0xfffffffffffffffd, 0x20, 0x29, @buffer={0x0, 0x0, 0x0}, &(0x7f0000003d40)="1f082aae1002cb326abbd60d0a3b9c43041d242a1877780664dbef1c7e5a875f", &(0x7f0000004d40)=""/57, 0x101, 0x2, 0x3, &(0x7f0000004d80)}) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f0000000100)=""/213, 0xd5) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfdef) 54.229589ms ago: executing program 3 (id=276): r0 = socket(0x1, 0x2, 0x0) close(0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000010}) 11.95494ms ago: executing program 5 (id=277): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000002c0)={0x15, 0x923, &(0x7f0000000580)="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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e53300da5b1523053a727c900"}) 0s ago: executing program 3 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e3279f"}}}}, 0x3b) kernel console output (not intermixed with test programs): [ 25.200856][ T28] audit: type=1400 audit(1780931576.019:113): avc: denied { search } for pid=3252 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.222938][ T28] audit: type=1400 audit(1780931576.019:114): avc: denied { search } for pid=3252 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.245720][ T28] audit: type=1400 audit(1780931576.019:115): avc: denied { search } for pid=3252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. [ 32.632074][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 32.632115][ T28] audit: type=1400 audit(1780931583.449:126): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.661314][ T28] audit: type=1400 audit(1780931583.479:127): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.663508][ T3287] cgroup: Unknown subsys name 'net' [ 32.689110][ T28] audit: type=1400 audit(1780931583.509:128): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.784019][ T3287] cgroup: Unknown subsys name 'cpuset' [ 32.790212][ T3287] cgroup: Unknown subsys name 'rlimit' [ 32.900709][ T28] audit: type=1400 audit(1780931583.719:129): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.937323][ T28] audit: type=1400 audit(1780931583.719:130): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.957960][ T28] audit: type=1400 audit(1780931583.729:131): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.978455][ T28] audit: type=1400 audit(1780931583.729:132): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.997102][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.999154][ T28] audit: type=1400 audit(1780931583.739:133): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.032443][ T28] audit: type=1400 audit(1780931583.739:134): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.055914][ T28] audit: type=1400 audit(1780931583.749:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.085918][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.319858][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.327004][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.334194][ T3306] bridge_slave_0: entered allmulticast mode [ 34.340763][ T3306] bridge_slave_0: entered promiscuous mode [ 34.359398][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.366502][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.373664][ T3306] bridge_slave_1: entered allmulticast mode [ 34.380143][ T3306] bridge_slave_1: entered promiscuous mode [ 34.433927][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.444492][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.486896][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.494082][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.501232][ T3300] bridge_slave_0: entered allmulticast mode [ 34.507670][ T3300] bridge_slave_0: entered promiscuous mode [ 34.519015][ T3306] team0: Port device team_slave_0 added [ 34.529669][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.536844][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.543995][ T3299] bridge_slave_0: entered allmulticast mode [ 34.550287][ T3299] bridge_slave_0: entered promiscuous mode [ 34.556973][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.564077][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.571243][ T3300] bridge_slave_1: entered allmulticast mode [ 34.577762][ T3300] bridge_slave_1: entered promiscuous mode [ 34.589472][ T3306] team0: Port device team_slave_1 added [ 34.599201][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.606403][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.613560][ T3299] bridge_slave_1: entered allmulticast mode [ 34.619914][ T3299] bridge_slave_1: entered promiscuous mode [ 34.662592][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.674880][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.681845][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.707846][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.722419][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.732520][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.746556][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.753662][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.779626][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.796382][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.817104][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.824304][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.831400][ T3305] bridge_slave_0: entered allmulticast mode [ 34.838137][ T3305] bridge_slave_0: entered promiscuous mode [ 34.844960][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.852033][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.859240][ T3305] bridge_slave_1: entered allmulticast mode [ 34.865850][ T3305] bridge_slave_1: entered promiscuous mode [ 34.886642][ T3300] team0: Port device team_slave_0 added [ 34.896694][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.903795][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.910965][ T3304] bridge_slave_0: entered allmulticast mode [ 34.917490][ T3304] bridge_slave_0: entered promiscuous mode [ 34.929590][ T3299] team0: Port device team_slave_0 added [ 34.936149][ T3300] team0: Port device team_slave_1 added [ 34.946552][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.953709][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.960784][ T3304] bridge_slave_1: entered allmulticast mode [ 34.967272][ T3304] bridge_slave_1: entered promiscuous mode [ 34.978650][ T3299] team0: Port device team_slave_1 added [ 34.994432][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.022186][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.038082][ T3306] hsr_slave_0: entered promiscuous mode [ 35.044188][ T3306] hsr_slave_1: entered promiscuous mode [ 35.050320][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.057509][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.083450][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.094493][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.101538][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.127534][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.143804][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.154079][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.168348][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.175382][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.201417][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.212572][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.219566][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.245501][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.262355][ T3305] team0: Port device team_slave_0 added [ 35.290211][ T3305] team0: Port device team_slave_1 added [ 35.302060][ T3304] team0: Port device team_slave_0 added [ 35.308638][ T3304] team0: Port device team_slave_1 added [ 35.346367][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.353478][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.379444][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.390446][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.397443][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.423370][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.443380][ T3300] hsr_slave_0: entered promiscuous mode [ 35.449357][ T3300] hsr_slave_1: entered promiscuous mode [ 35.455297][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 35.461032][ T3300] Cannot create hsr debugfs directory [ 35.466820][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.473833][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.499920][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.510762][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.517762][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.543875][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.556463][ T3299] hsr_slave_0: entered promiscuous mode [ 35.562559][ T3299] hsr_slave_1: entered promiscuous mode [ 35.568490][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 35.574291][ T3299] Cannot create hsr debugfs directory [ 35.616323][ T3304] hsr_slave_0: entered promiscuous mode [ 35.622347][ T3304] hsr_slave_1: entered promiscuous mode [ 35.628432][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 35.634230][ T3304] Cannot create hsr debugfs directory [ 35.677004][ T3305] hsr_slave_0: entered promiscuous mode [ 35.683133][ T3305] hsr_slave_1: entered promiscuous mode [ 35.689084][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 35.694839][ T3305] Cannot create hsr debugfs directory [ 35.854690][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.863483][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.873678][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.882462][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.890177][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.898967][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.906728][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.915612][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.939658][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.949212][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.957163][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.965922][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.978696][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.987870][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.995642][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.004591][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.030881][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.039412][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.047233][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.055967][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.063810][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.072456][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.080052][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.089046][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.126674][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.135604][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.144197][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.152816][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.165251][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.173868][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.181429][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.190220][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.199264][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.235912][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.246579][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.253679][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.262264][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.271132][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.279856][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.289064][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.296962][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.306015][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.321007][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.329885][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.339545][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.346729][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.385135][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.419805][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.439025][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.447898][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.463464][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.470761][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.479929][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.495125][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.504332][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.511475][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.524172][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.531252][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.548918][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.556036][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.566255][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.573399][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.582172][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.589303][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.604879][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.623725][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.637205][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.644422][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.667714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.674795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.686742][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.849584][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.925750][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.958018][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.026941][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.044825][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.129968][ T3305] veth0_vlan: entered promiscuous mode [ 37.147901][ T3299] veth0_vlan: entered promiscuous mode [ 37.164115][ T3305] veth1_vlan: entered promiscuous mode [ 37.177033][ T3299] veth1_vlan: entered promiscuous mode [ 37.183538][ T3306] veth0_vlan: entered promiscuous mode [ 37.208189][ T3306] veth1_vlan: entered promiscuous mode [ 37.215211][ T3305] veth0_macvtap: entered promiscuous mode [ 37.233242][ T3299] veth0_macvtap: entered promiscuous mode [ 37.247926][ T3305] veth1_macvtap: entered promiscuous mode [ 37.255615][ T3299] veth1_macvtap: entered promiscuous mode [ 37.262968][ T3304] veth0_vlan: entered promiscuous mode [ 37.275969][ T3300] veth0_vlan: entered promiscuous mode [ 37.283880][ T3304] veth1_vlan: entered promiscuous mode [ 37.292518][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.301603][ T3300] veth1_vlan: entered promiscuous mode [ 37.316372][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.330601][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.339950][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.348744][ T3306] veth0_macvtap: entered promiscuous mode [ 37.359601][ T3306] veth1_macvtap: entered promiscuous mode [ 37.367591][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.385947][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.394822][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.405415][ T3300] veth0_macvtap: entered promiscuous mode [ 37.420045][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.428967][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.441716][ T3300] veth1_macvtap: entered promiscuous mode [ 37.451590][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.460688][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.477839][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.485474][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.498796][ T3304] veth0_macvtap: entered promiscuous mode [ 37.510438][ T3304] veth1_macvtap: entered promiscuous mode [ 37.519661][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.525899][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.532793][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.555017][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.564731][ T2230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.577624][ T2230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.590838][ T2230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.602718][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.616410][ T2230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.632889][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 37.632904][ T28] audit: type=1400 audit(1780931588.449:160): avc: denied { kernel } for pid=3505 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.635569][ T2230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.668889][ T2230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.669646][ T3507] loop3: detected capacity change from 0 to 1024 [ 37.680258][ T2230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.698700][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.712457][ T3507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.715254][ T28] audit: type=1400 audit(1780931588.539:161): avc: denied { block_suspend } for pid=3505 comm="syz.2.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.739919][ T2230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.756055][ T28] audit: type=1400 audit(1780931588.579:162): avc: denied { mount } for pid=3506 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.786276][ T28] audit: type=1400 audit(1780931588.609:163): avc: denied { create } for pid=3506 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.822968][ T2230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.834384][ T2230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.858815][ T28] audit: type=1326 audit(1780931588.679:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.2.6" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08f94bce59 code=0x0 [ 37.894870][ T2230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.904264][ T2230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.968348][ T28] audit: type=1400 audit(1780931588.789:165): avc: denied { allowed } for pid=3513 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.015357][ T28] audit: type=1400 audit(1780931588.789:166): avc: denied { create } for pid=3513 comm="syz.2.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.037972][ T28] audit: type=1326 audit(1780931588.809:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.2.6" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f94bce59 code=0x7ffc0000 [ 38.084832][ T28] audit: type=1326 audit(1780931588.809:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.2.6" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f94bce59 code=0x7ffc0000 [ 38.110718][ T28] audit: type=1326 audit(1780931588.809:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.2.6" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f94bce59 code=0x7ffc0000 [ 38.136801][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.162101][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.171074][ T2230] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.180542][ T2230] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.189985][ T2230] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.199350][ T3526] Zero length message leads to an empty skb [ 38.205516][ T2230] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.216322][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.278066][ T3530] loop3: detected capacity change from 0 to 512 [ 38.288301][ T3522] ======================================================= [ 38.288301][ T3522] WARNING: The mand mount option has been deprecated and [ 38.288301][ T3522] and is ignored by this kernel. Remove the mand [ 38.288301][ T3522] option from the mount to silence this warning. [ 38.288301][ T3522] ======================================================= [ 38.326049][ T3530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.339210][ T3530] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.434225][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.499720][ T3542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 38.574967][ T3547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.610948][ T3547] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 38.683578][ T76] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 38.776832][ T3560] netlink: 'syz.2.21': attribute type 4 has an invalid length. [ 38.792734][ T3560] netlink: 'syz.2.21': attribute type 4 has an invalid length. [ 38.805097][ T76] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 38.828430][ T3560] syz.2.21 (3560) used greatest stack depth: 10704 bytes left [ 38.904130][ T3566] loop4: detected capacity change from 0 to 2048 [ 38.922264][ T3566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.946334][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.089752][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.091890][ T3571] cgroup: fork rejected by pids controller in /syz2 [ 39.130499][ T3576] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 39.141639][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 39.166644][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 39.177487][ T3578] loop4: detected capacity change from 0 to 256 [ 39.206328][ T3578] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 39.235219][ T3578] FAT-fs (loop4): Filesystem has been set read-only [ 39.358120][ T3584] loop1: detected capacity change from 0 to 1024 [ 39.393815][ T3584] EXT4-fs: inline encryption not supported [ 39.433547][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.632857][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.705370][ T3600] loop1: detected capacity change from 0 to 512 [ 39.721605][ T3600] EXT4-fs: Ignoring removed bh option [ 39.749170][ T3600] ext3: Unknown parameter 'noacl' [ 39.776455][ T3600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36'. [ 39.923604][ T3589] loop4: detected capacity change from 0 to 65536 [ 40.001098][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 40.953489][ T2230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.042276][ T2230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.088887][ T2230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.149999][ T2230] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.244882][ T2230] bridge_slave_1: left allmulticast mode [ 41.260085][ T2230] bridge_slave_1: left promiscuous mode [ 41.277630][ T2230] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.292059][ T2230] bridge_slave_0: left allmulticast mode [ 41.301453][ T2230] bridge_slave_0: left promiscuous mode [ 41.308126][ T2230] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.476812][ T2230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.497000][ T2230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.518680][ T2230] bond0 (unregistering): Released all slaves [ 41.534844][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.593675][ T2230] hsr_slave_0: left promiscuous mode [ 41.615190][ T2230] hsr_slave_1: left promiscuous mode [ 41.625462][ T2230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.643135][ T2230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.655921][ T2230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.667762][ T2230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.687880][ T2230] veth1_macvtap: left promiscuous mode [ 41.698794][ T2230] veth0_macvtap: left promiscuous mode [ 41.708950][ T2230] veth1_vlan: left promiscuous mode [ 41.719681][ T2230] veth0_vlan: left promiscuous mode [ 41.803289][ T3691] loop0: detected capacity change from 0 to 1024 [ 41.846755][ T3691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 41.889613][ T2230] team0 (unregistering): Port device team_slave_1 removed [ 41.900195][ T2230] team0 (unregistering): Port device team_slave_0 removed [ 41.903117][ T3691] loop0: detected capacity change from 1024 to 64 [ 41.924436][ T3691] syz.0.57: attempt to access beyond end of device [ 41.924436][ T3691] loop0: rw=0, sector=162, nr_sectors = 2 limit=64 [ 41.977371][ T3676] syz_tun: entered allmulticast mode [ 41.984413][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 42.187835][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 42.205168][ T3719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.61'. [ 42.214383][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.221543][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.229208][ T3638] bridge_slave_0: entered allmulticast mode [ 42.236369][ T3638] bridge_slave_0: entered promiscuous mode [ 42.244897][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 42.257128][ T3695] kmmpd-loop0: attempt to access beyond end of device [ 42.257128][ T3695] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 42.259473][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 42.274601][ T3695] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 42.288161][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.301769][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.309217][ T3638] bridge_slave_1: entered allmulticast mode [ 42.317200][ T3638] bridge_slave_1: entered promiscuous mode [ 42.344635][ T3638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.356316][ T3638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.391499][ T3726] loop4: detected capacity change from 0 to 128 [ 42.404773][ T3638] team0: Port device team_slave_0 added [ 42.412340][ T3726] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.434771][ T3638] team0: Port device team_slave_1 added [ 42.450645][ T3726] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.465881][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.488191][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.544970][ T3638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.565020][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.572011][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.598400][ T3638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.644074][ T28] kauditd_printk_skb: 354 callbacks suppressed [ 42.644091][ T28] audit: type=1400 audit(1780931593.469:524): avc: denied { write } for pid=3727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.708442][ T28] audit: type=1400 audit(1780931593.519:525): avc: denied { create } for pid=3749 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.748839][ T3638] hsr_slave_0: entered promiscuous mode [ 42.762208][ T3638] hsr_slave_1: entered promiscuous mode [ 42.775007][ T28] audit: type=1400 audit(1780931593.529:526): avc: denied { listen } for pid=3749 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.792800][ T3638] debugfs: 'hsr0' already exists in 'hsr' [ 42.800401][ T3638] Cannot create hsr debugfs directory [ 42.811602][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 42.819833][ T28] audit: type=1400 audit(1780931593.529:527): avc: denied { accept } for pid=3749 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.839759][ T28] audit: type=1400 audit(1780931593.589:528): avc: denied { write } for pid=3749 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.863217][ T28] audit: type=1400 audit(1780931593.589:529): avc: denied { write } for pid=3751 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.146564][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.153894][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.161467][ T3728] bridge_slave_0: entered allmulticast mode [ 43.168788][ T3728] bridge_slave_0: entered promiscuous mode [ 43.180326][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.189221][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.197160][ T3728] bridge_slave_1: entered allmulticast mode [ 43.204480][ T3728] bridge_slave_1: entered promiscuous mode [ 43.218655][ T28] audit: type=1400 audit(1780931594.039:530): avc: denied { write } for pid=3765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.249726][ T3728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.260622][ T3728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.332995][ T28] audit: type=1400 audit(1780931594.149:531): avc: denied { write } for pid=3780 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.343128][ T3728] team0: Port device team_slave_0 added [ 43.397389][ T3638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.415987][ T3638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.425051][ T3728] team0: Port device team_slave_1 added [ 43.451352][ T3638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.467067][ T3638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.490349][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.503799][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.553052][ T3728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.578148][ T3638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.597992][ T3638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.613614][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.627644][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.664183][ T3728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.681632][ T3638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.728251][ T28] audit: type=1400 audit(1780931594.549:532): avc: denied { write } for pid=3787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.798888][ T28] audit: type=1400 audit(1780931594.599:533): avc: denied { write } for pid=3800 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.983505][ T3808] loop4: detected capacity change from 0 to 1024 [ 43.999584][ T3808] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 44.024533][ T3808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.479374][ T3638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.494625][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 44.527933][ T3819] loop1: detected capacity change from 0 to 1024 [ 44.536932][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.547425][ T3819] EXT4-fs: Ignoring removed bh option [ 44.595560][ T3819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.602263][ T3728] hsr_slave_0: entered promiscuous mode [ 44.628654][ T3728] hsr_slave_1: entered promiscuous mode [ 44.638893][ T3728] debugfs: 'hsr0' already exists in 'hsr' [ 44.650253][ T3728] Cannot create hsr debugfs directory [ 44.661183][ T3819] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.694855][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.815339][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.828046][ T3638] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.874882][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.882049][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.932788][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.939909][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.985421][ T3728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.020038][ T3728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.051883][ T3728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.084960][ T3728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.108769][ T3728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.130948][ T3728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.166286][ T3728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.474192][ T3728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.666613][ T3728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.717558][ T3728] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.752414][ T3959] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.759693][ T3959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.777907][ T2230] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.785034][ T2230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.858245][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.026497][ T4005] loop1: detected capacity change from 0 to 8192 [ 46.046125][ T3638] veth0_vlan: entered promiscuous mode [ 46.065618][ T3638] veth1_vlan: entered promiscuous mode [ 46.075343][ T4005] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.125497][ T3638] veth0_macvtap: entered promiscuous mode [ 46.145184][ T3638] veth1_macvtap: entered promiscuous mode [ 46.169793][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.193729][ T3728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.211766][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.230382][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.245853][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.268180][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.283218][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.404478][ T4040] loop1: detected capacity change from 0 to 8192 [ 46.500188][ T3728] veth0_vlan: entered promiscuous mode [ 46.511146][ T3728] veth1_vlan: entered promiscuous mode [ 46.529355][ T4055] xt_hashlimit: size too large, truncated to 1048576 [ 46.550073][ T3728] veth0_macvtap: entered promiscuous mode [ 46.566556][ T3728] veth1_macvtap: entered promiscuous mode [ 46.583959][ T3728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.598303][ T3728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.612494][ T2230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.631812][ T2230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.659817][ T2230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.670442][ T2230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.800482][ T4060] netlink: 'syz.5.63': attribute type 1 has an invalid length. [ 46.904401][ T4062] bond1: entered allmulticast mode [ 46.912076][ T4062] bond1 (unregistering): Released all slaves [ 46.950064][ T4040] syz.1.87: attempt to access beyond end of device [ 46.950064][ T4040] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 46.992112][ T4040] Buffer I/O error on dev loop1, logical block 57847, async page read [ 47.004929][ T4040] syz.1.87: attempt to access beyond end of device [ 47.004929][ T4040] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 47.042975][ T4040] Buffer I/O error on dev loop1, logical block 57847, async page read [ 47.065783][ T4040] syz.1.87: attempt to access beyond end of device [ 47.065783][ T4040] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 47.084220][ T4040] Buffer I/O error on dev loop1, logical block 57847, async page read [ 47.267455][ T4075] loop1: detected capacity change from 0 to 128 [ 47.296495][ T4075] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.368354][ T4075] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.407358][ T4075] capability: warning: `syz.1.94' uses 32-bit capabilities (legacy support in use) [ 47.439836][ T4085] netlink: 64 bytes leftover after parsing attributes in process `syz.5.98'. [ 47.472790][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.490832][ T4085] syzkaller1: entered promiscuous mode [ 47.514518][ T4085] syzkaller1: entered allmulticast mode [ 47.655972][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 47.655985][ T28] audit: type=1400 audit(1780931598.479:579): avc: denied { ioctl } for pid=4096 comm="syz.2.104" path="socket:[7078]" dev="sockfs" ino=7078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.689434][ T28] audit: type=1400 audit(1780931598.509:580): avc: denied { getopt } for pid=4096 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.737775][ T28] audit: type=1400 audit(1780931598.549:581): avc: denied { write } for pid=4100 comm="syz.2.105" name="snmp" dev="proc" ino=4026533377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.912248][ T28] audit: type=1400 audit(1780931598.729:582): avc: denied { setopt } for pid=4109 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.912389][ T3970] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.943100][ T28] audit: type=1400 audit(1780931598.769:583): avc: denied { bind } for pid=4109 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.070879][ T28] audit: type=1400 audit(1780931598.889:584): avc: denied { create } for pid=4117 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.112972][ T4118] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET) [ 48.123330][ T28] audit: type=1400 audit(1780931598.929:585): avc: denied { setopt } for pid=4117 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.186568][ T28] audit: type=1400 audit(1780931598.929:586): avc: denied { listen } for pid=4117 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.243373][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 48.259231][ T28] audit: type=1400 audit(1780931599.079:587): avc: denied { write } for pid=4119 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.300386][ T4122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 48.394130][ T4124] loop3: detected capacity change from 0 to 4096 [ 48.404515][ T4124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.422437][ T4124] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 48.461253][ T4124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.481198][ T4133] loop2: detected capacity change from 0 to 512 [ 48.489254][ T4133] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.491577][ T28] audit: type=1400 audit(1780931599.309:588): avc: denied { write } for pid=4123 comm="syz.3.114" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.500401][ T4133] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 48.618974][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.690726][ T4143] loop2: detected capacity change from 0 to 1024 [ 48.698746][ T4142] Unsupported ieee802154 address type: 0 [ 48.704707][ T4143] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 48.721410][ T4143] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.123: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.750876][ T4143] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.750981][ T4143] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.123: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.760165][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 48.760180][ C0] EXT4-fs (loop2): initial error at time 1780931599: ext4_map_blocks:791: inode 3: block 2 [ 48.760209][ C0] EXT4-fs (loop2): last error at time 1780931599: ext4_map_blocks:791: inode 3: block 2 [ 48.803819][ T4143] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.803920][ T4143] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.123: Failed to acquire dquot type 0 [ 48.824296][ T4143] loop2: lost filesystem error report for type 5 error -117 [ 48.824441][ T4143] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 48.843113][ T4143] loop2: lost filesystem error report for type 5 error -117 [ 48.843196][ T4143] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.123: mark_inode_dirty error [ 48.862591][ T4143] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.862772][ T4143] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 48.882752][ T4143] EXT4-fs (loop2): 1 orphan inode deleted [ 48.893025][ T3959] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.914692][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.930347][ T3959] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.932119][ T3959] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 0 [ 48.978639][ T4143] EXT4-fs (loop2): shut down requested (1) [ 49.011085][ T3638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.059660][ T3959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.076061][ T3959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.180453][ T4168] loop2: detected capacity change from 0 to 1024 [ 49.200548][ T4168] EXT4-fs: Ignoring removed bh option [ 49.216477][ T3959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.227211][ T3959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.250653][ T4168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.293185][ T3959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.320503][ T3959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.352005][ T3638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.409376][ T3959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.429226][ T4170] loop3: detected capacity change from 0 to 512 [ 49.441873][ T3959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.509924][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.517187][ T4170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.523420][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.606956][ T3959] bridge_slave_1: left allmulticast mode [ 49.614069][ T3959] bridge_slave_1: left promiscuous mode [ 49.623373][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.633292][ T3959] bridge_slave_0: left allmulticast mode [ 49.641879][ T3959] bridge_slave_0: left promiscuous mode [ 49.648006][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.672058][ T4170] syz.3.134 (4170) used greatest stack depth: 10560 bytes left [ 49.704022][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.778264][ T3959] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 49.787838][ T3959] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 49.896076][ T3959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.906829][ T3959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.915570][ T3616] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.925197][ T3959] bond0 (unregistering): Released all slaves [ 49.934285][ T3959] bond1 (unregistering): Released all slaves [ 49.945497][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 49.979091][ T3959] hsr_slave_0: left promiscuous mode [ 49.992403][ T3959] hsr_slave_1: left promiscuous mode [ 49.998404][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.010707][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.053393][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.060896][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.077173][ T3959] veth1_macvtap: left promiscuous mode [ 50.083873][ T3959] veth0_macvtap: left promiscuous mode [ 50.111051][ T3959] veth1_vlan: left promiscuous mode [ 50.123615][ T3959] veth0_vlan: left promiscuous mode [ 50.227971][ T3959] team0 (unregistering): Port device team_slave_1 removed [ 50.238321][ T3959] team0 (unregistering): Port device team_slave_0 removed [ 50.273470][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 50.281256][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 50.465804][ T4272] loop3: detected capacity change from 0 to 1024 [ 50.496151][ T4272] EXT4-fs: Ignoring removed orlov option [ 50.549556][ T4272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.564232][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 50.705527][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.795114][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 50.805936][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 50.991412][ T4317] ªªªªªª: renamed from vlan0 (while UP) [ 51.000967][ T3959] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.046238][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 51.727507][ T4352] netlink: 64 bytes leftover after parsing attributes in process `syz.5.182'. [ 51.776594][ T4352] syzkaller1: entered promiscuous mode [ 51.801146][ T4352] syzkaller1: entered allmulticast mode [ 51.824578][ T4358] loop4: detected capacity change from 0 to 1024 [ 51.849734][ T4358] EXT4-fs: Ignoring removed bh option [ 51.865048][ T4360] loop2: detected capacity change from 0 to 1024 [ 51.881214][ T4358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.922277][ T4360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.963874][ T3638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.123441][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.152057][ T4375] capability: warning: `syz.2.190' uses deprecated v2 capabilities in a way that may be insecure [ 52.516599][ T4385] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 52.545766][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 52.549562][ T4385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.569219][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 52.596101][ T4385] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 52.623935][ T4385] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 52.651912][ T4385] netlink: 'syz.2.193': attribute type 10 has an invalid length. [ 52.663076][ T3959] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 52.696870][ T4385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.193'. [ 52.720110][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 52.720147][ T28] audit: type=1400 audit(1780931859.539:661): avc: denied { write } for pid=4395 comm="syz.3.198" path="socket:[9281]" dev="sockfs" ino=9281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.723320][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.197'. [ 52.760950][ T4385] dummy0: entered promiscuous mode [ 52.766960][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.197'. [ 52.782642][ T4385] bond1: (slave dummy0): Removing an active aggregator [ 52.790210][ T4385] bond1: (slave dummy0): Releasing backup interface [ 52.924433][ T4410] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 52.941449][ T4410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.979459][ T28] audit: type=1400 audit(1780931859.799:662): avc: denied { watch watch_reads } for pid=4413 comm="syz.5.205" path="/28" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.019861][ T4410] bond1: (slave ip6erspan0): making interface the new active one [ 53.033097][ T4112] Bluetooth: hci0: command 0x1003 tx timeout [ 53.039527][ T3616] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.061725][ T4410] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 53.095589][ T28] audit: type=1400 audit(1780931859.919:663): avc: denied { read write } for pid=4415 comm="syz.1.207" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.127635][ T28] audit: type=1400 audit(1780931859.949:664): avc: denied { open } for pid=4415 comm="syz.1.207" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.140050][ T4417] netlink: 112 bytes leftover after parsing attributes in process `syz.1.207'. [ 53.154461][ T28] audit: type=1400 audit(1780931859.949:665): avc: denied { nlmsg_write } for pid=4415 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.210937][ T28] audit: type=1400 audit(1780931860.029:666): avc: denied { create } for pid=4422 comm="syz.5.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.231271][ T28] audit: type=1400 audit(1780931860.029:667): avc: denied { setopt } for pid=4422 comm="syz.5.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.251080][ T28] audit: type=1400 audit(1780931860.029:668): avc: denied { bind } for pid=4422 comm="syz.5.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.311957][ T28] audit: type=1400 audit(1780931860.129:669): avc: denied { create } for pid=4431 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 53.372234][ T4435] loop5: detected capacity change from 0 to 1024 [ 53.381521][ T28] audit: type=1326 audit(1780931860.199:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.2.215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92419ece59 code=0x7ffc0000 [ 53.407565][ T4435] EXT4-fs: Ignoring removed bh option [ 53.462711][ T4435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.486282][ T4439] bridge1: entered allmulticast mode [ 53.573663][ T3728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.600039][ T4449] loop5: detected capacity change from 0 to 512 [ 53.608513][ T4429] syz.1.212 (4429) used greatest stack depth: 10064 bytes left [ 53.649277][ T4449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.681616][ T4449] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.746440][ T4441] loop2: detected capacity change from 0 to 512 [ 53.757457][ T4441] EXT4-fs: Ignoring removed bh option [ 53.775969][ T4441] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.217: lblock 0 mapped to illegal pblock 3 (length 1) [ 53.815147][ T4441] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 53.815299][ T4441] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.217: error -117 reading directory block [ 53.824399][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 53.824420][ C1] EXT4-fs (loop2): initial error at time 1780931860: ext4_map_blocks:791: inode 2: block 3 [ 53.824456][ C1] EXT4-fs (loop2): last error at time 1780931860: ext4_map_blocks:791: inode 2: block 3 [ 53.890818][ T3728] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.907047][ T4468] syz_tun: entered allmulticast mode [ 53.931532][ T4441] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 53.940631][ T4472] loop1: detected capacity change from 0 to 128 [ 53.949866][ T9] dummy0: entered promiscuous mode [ 53.950634][ T4441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.996840][ T4441] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.217: lblock 0 mapped to illegal pblock 3 (length 1) [ 54.020619][ T4441] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.217: error -117 reading directory block [ 54.042298][ T4472] syz.1.226: attempt to access beyond end of device [ 54.042298][ T4472] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 54.058256][ T4477] loop4: detected capacity change from 0 to 128 [ 54.121846][ T3638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.154081][ T3959] kworker/u8:15: attempt to access beyond end of device [ 54.154081][ T3959] loop1: rw=1, sector=137, nr_sectors = 904 limit=128 [ 54.260914][ T4486] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.564650][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.593318][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.671441][ T4538] __nla_validate_parse: 9 callbacks suppressed [ 55.671457][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 55.687333][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 56.393130][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.634399][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.657155][ T4565] netlink: 'syz.5.261': attribute type 6 has an invalid length. [ 57.673381][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.736514][ T4575] netlink: 'syz.5.265': attribute type 1 has an invalid length. [ 57.747206][ T4568] tipc: Started in network mode [ 57.747300][ T4571] set_capacity_and_notify: 1 callbacks suppressed [ 57.747346][ T4571] loop3: detected capacity change from 0 to 1024 [ 57.758978][ T4568] tipc: Node identity fa89dcdc10ec, cluster identity 4711 [ 57.774977][ T4571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.783179][ T4568] tipc: Enabled bearer , priority 0 [ 57.793251][ T4571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.811813][ T4575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.832555][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 57.832571][ T28] audit: type=1400 audit(1780931864.659:721): avc: denied { write } for pid=4569 comm="syz.3.263" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.894898][ T28] audit: type=1400 audit(1780931864.659:722): avc: denied { add_name } for pid=4569 comm="syz.3.263" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.912969][ T4568] tipc: Resetting bearer [ 57.916451][ T28] audit: type=1400 audit(1780931864.719:723): avc: denied { append } for pid=4569 comm="syz.3.263" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.947902][ T4575] gretap1: entered promiscuous mode [ 57.962429][ T4575] bond1: (slave gretap1): making interface the new active one [ 57.984493][ T4575] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 58.017599][ T4567] tipc: Resetting bearer [ 58.035832][ T4567] tipc: Disabling bearer [ 58.064433][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.089373][ T28] audit: type=1400 audit(1780931864.909:724): avc: denied { map } for pid=4587 comm="syz.5.268" path="socket:[9598]" dev="sockfs" ino=9598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 58.189080][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.196414][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.227281][ T4591] loop3: detected capacity change from 0 to 512 [ 58.330144][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.363835][ T4591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.385476][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.406528][ T4591] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.458173][ T4595] gretap1: left promiscuous mode [ 58.465161][ T3959] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.474127][ T3959] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.501447][ T3959] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.516057][ T4591] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.267: corrupted xattr block 33: invalid ea_ino [ 58.529508][ T3959] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.598869][ T4591] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 58.615743][ T4591] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.267: corrupted xattr block 33: invalid ea_ino [ 58.643183][ T4591] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 58.661240][ T28] audit: type=1400 audit(1780931865.479:725): avc: denied { setattr } for pid=4590 comm="syz.3.267" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.661264][ T4591] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.267: corrupted xattr block 33: invalid ea_ino [ 58.712965][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.738662][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.832554][ T28] audit: type=1400 audit(1780931865.649:726): avc: denied { create } for pid=4609 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.858003][ T4615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.880369][ T4615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.894398][ T28] audit: type=1400 audit(1780931865.719:727): avc: denied { write } for pid=4619 comm="syz.3.276" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.956197][ T4624] netlink: 64 bytes leftover after parsing attributes in process `syz.3.278'. [ 58.988146][ T4624] syzkaller1: entered promiscuous mode [ 59.004216][ T3967] ================================================================== [ 59.012339][ T3967] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 59.020631][ T3967] [ 59.022971][ T3967] write to 0xffff88811a8868e0 of 44 bytes by task 4626 on cpu 0: [ 59.030711][ T3967] tty_set_termios+0xc0/0x910 [ 59.035426][ T3967] set_termios+0x4a7/0x4f0 [ 59.039878][ T3967] tty_mode_ioctl+0x37f/0x5b0 [ 59.044591][ T3967] n_tty_ioctl_helper+0x87/0x370 [ 59.049583][ T3967] n_tty_ioctl+0x101/0x220 [ 59.054034][ T3967] tty_ioctl+0x83e/0xb80 [ 59.058303][ T3967] __se_sys_ioctl+0xce/0x140 [ 59.062929][ T3967] __x64_sys_ioctl+0x43/0x50 [ 59.067563][ T3967] x64_sys_call+0x1563/0x3020 [ 59.072302][ T3967] do_syscall_64+0x12c/0x3b0 [ 59.076935][ T3967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.082883][ T3967] [ 59.085233][ T3967] read to 0xffff88811a8868fa of 1 bytes by task 3967 on cpu 1: [ 59.092823][ T3967] n_tty_lookahead_flow_ctrl+0x1c9/0x300 [ 59.098498][ T3967] tty_port_default_lookahead_buf+0x91/0xc0 [ 59.104422][ T3967] flush_to_ldisc+0x288/0x340 [ 59.109121][ T3967] process_scheduled_works+0x4f0/0x9c0 [ 59.114599][ T3967] worker_thread+0x58a/0x780 [ 59.119214][ T3967] kthread+0x22a/0x280 [ 59.123299][ T3967] ret_from_fork+0x146/0x330 [ 59.127909][ T3967] ret_from_fork_asm+0x1a/0x30 [ 59.132692][ T3967] [ 59.135033][ T3967] value changed: 0x13 -> 0xa7 [ 59.139722][ T3967] [ 59.142056][ T3967] Reported by Kernel Concurrency Sanitizer on: [ 59.148240][ T3967] CPU: 1 UID: 0 PID: 3967 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.157816][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 59.167895][ T3967] Workqueue: events_unbound flush_to_ldisc [ 59.173736][ T3967] ================================================================== [ 59.189284][ T4624] syzkaller1: entered allmulticast mode [ 59.433103][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.753086][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.553969][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.562220][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.793375][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.193300][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.834494][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.885224][ T28] audit: type=1400 audit(1780931868.709:728): avc: denied { write } for pid=4629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.918243][ T28] audit: type=1400 audit(1780931868.739:729): avc: denied { write } for pid=4640 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.068097][ T28] audit: type=1400 audit(1780931868.889:730): avc: denied { write } for pid=4643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.873283][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.941752][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 62.941768][ T28] audit: type=1400 audit(1780931869.759:734): avc: denied { write } for pid=4671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.977619][ T28] audit: type=1400 audit(1780931869.799:735): avc: denied { write } for pid=4682 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.592965][ T280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.913118][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.402975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.953121][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.673639][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.993165][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.954295][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.033024][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.073259][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.233687][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.712985][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog