last executing test programs: 4.545774391s ago: executing program 1 (id=703): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0xa, 0x4, 0x0, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x60}, 0xe) 4.545413321s ago: executing program 3 (id=704): socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0xa4b4, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x8926, 0x16, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.073125196s ago: executing program 3 (id=706): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) io_submit(0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0x7, {"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", 0x1000}}, 0x1006) 3.978633717s ago: executing program 0 (id=708): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x803) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.196293266s ago: executing program 1 (id=720): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 3.064647367s ago: executing program 0 (id=710): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x303}, "69eea668a13ae76a", "a302000000000000013547e49281cd00", "91a85e07", "ab3e5923fddb157c"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) writev(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) close_range(r0, r1, 0x0) 2.291346875s ago: executing program 4 (id=711): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) syz_clone(0x29080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 2.290477935s ago: executing program 0 (id=723): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x48c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_POLICE={0x44c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x81, 0x0, 0xb5a0, 0x3, 0x3b30, 0x4, 0x0, 0x401, 0x3cd9, 0x3, 0x7, 0x2c, 0x1, 0x7, 0x800, 0x3ff, 0x8, 0x1, 0x7, 0x8a30, 0x4, 0x3, 0x6, 0x0, 0x2, 0xfffffffd, 0x8, 0x3ff, 0x3, 0x3, 0xef4d, 0x2e0594bb, 0x7, 0x7fff, 0x400, 0x1725, 0x0, 0x5, 0x100, 0xfe26, 0xc748, 0x3, 0x4, 0xa, 0xda4, 0x1, 0x1, 0x2, 0x800, 0x0, 0xc7, 0x6, 0x4ee, 0x0, 0x4, 0x1, 0xf, 0x7, 0x6, 0x1000000, 0x4, 0x7, 0x401, 0x3, 0x4, 0x6, 0x4, 0x7f, 0x0, 0x0, 0x2, 0x5, 0x5, 0x3, 0x401, 0xd17a, 0x7, 0x0, 0xd6, 0x3, 0x800, 0x40, 0x669, 0x9, 0x0, 0x2c06, 0x3, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x5fac1451, 0x0, 0x9, 0x2, 0x5, 0x2, 0x5, 0x40, 0x1, 0x594, 0x7f, 0x4, 0x80000001, 0x7, 0x1ff, 0x1, 0x5, 0x4c13157c, 0x7fffffff, 0x5, 0x8, 0x6, 0xa, 0x6, 0x977e, 0x5, 0x4, 0x0, 0x9, 0x1ff, 0x6, 0x43e8, 0xf487, 0x1, 0x6a5, 0x35f1, 0xc, 0x8, 0x81, 0x6, 0x8a, 0x8, 0x9, 0x9, 0x0, 0x7, 0x8, 0xc29a, 0x7fff, 0x5b9a, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x80000001, 0xc, 0x1, 0xb9, 0x8, 0x1000, 0x5ec, 0x0, 0x80000001, 0x4, 0x3, 0x7ca, 0x6, 0x10001, 0x0, 0x101, 0x40, 0x9, 0xd260, 0xc75, 0xc, 0x10, 0x1, 0x7fff, 0x7535, 0x62, 0xe, 0x3ff, 0x3, 0x9, 0x9, 0x2, 0x3, 0x9, 0x63e, 0xff, 0x5, 0xffffff7f, 0x1, 0x2, 0x101, 0xfff, 0xfff, 0x5, 0x0, 0x8, 0x8499, 0x8000, 0x1, 0xd63, 0x8, 0x2, 0x80000000, 0x3ff, 0x1, 0xe, 0x2, 0x1, 0x6, 0x1000, 0xffff, 0x40, 0x2, 0x7, 0x6, 0xffffffd4, 0x2, 0x2, 0x100, 0x4, 0x6, 0x4, 0xef48, 0x8000, 0x0, 0x1, 0x6e, 0x9, 0xffffffff, 0x1, 0x7, 0x8, 0x0, 0x3, 0x3, 0x9, 0x0, 0x7, 0xde7, 0x384759cf, 0x1, 0x6, 0xff, 0xbcac, 0x3, 0x7f, 0xffffff7f, 0x7, 0x5, 0x2, 0x4, 0x6aed, 0x7, 0x0, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000007, 0x1800000, 0x2, 0x1, {0x5, 0x2, 0x7944, 0x8, 0xb, 0x3}, {0x7, 0x1, 0x9d7e, 0x3, 0x2, 0x8}, 0x5a, 0x9, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x48c}}, 0x2000c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.100846657s ago: executing program 0 (id=712): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 1.661670942s ago: executing program 4 (id=714): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.660854812s ago: executing program 1 (id=727): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000800000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 1.618598802s ago: executing program 1 (id=715): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd"], 0x1000f) 1.459686484s ago: executing program 4 (id=716): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r1, 0x1}}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2a, 0x1, 0x3, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1005, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) 1.419321225s ago: executing program 3 (id=717): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) 1.411762225s ago: executing program 4 (id=718): write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x200000c4) socket(0x15, 0x5, 0xfffffff1) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0x0, @in6=@remote, 0x0, 0x1}]}]}, 0x1fc}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000400)='./file1\x00', 0x2008800, &(0x7f0000000280), 0x3, 0x651, &(0x7f00000014c0)="$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") 1.406216165s ago: executing program 2 (id=719): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 1.211252057s ago: executing program 0 (id=721): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0xa, 0x4, 0x0, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x60}, 0xe) 1.208794137s ago: executing program 2 (id=734): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 936.16859ms ago: executing program 0 (id=722): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000001200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x62, 0x34, 0x35, 0x34, 0x62, 0xf2ef1a9bdf74a9, 0x32], 0x2d, [0x36, 0x38, 0x62, 0x38], 0x2d, [0x62, 0x64, 0x0, 0x37], 0x2d, [0x65, 0x30, 0x39, 0x37], 0x2d, [0x65, 0x33, 0x30, 0x37, 0x36, 0x0, 0x37, 0x30]}}}, {@appraise_type}, {@hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@uid_eq}]}, 0x1, 0xbd2, &(0x7f0000001840)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x1000, @empty}, {0x306}, 0x8, {0x2, 0x4, @multicast1=0xe000cc02}}) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800056, &(0x7f00000006c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c757466383d312c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c005a086502454ede48cd0c582ac337a877be0c36a8e60d572dbe625e0680a225abe4d4fc79e83de86dce78be26dba8f6ff0abfb9c2fba30a14b3b206ad905e994c27e6d4fc5d74f88b749758f85a07efcf3e17bd78aad46a325ec58b65332fe45ac5db6e722db0a32946415f0b3403d53ad233d1fe2593f1d4fe07041a0091b2f43c1e87fa638a217f4108c00d47c229ae1229250e"], 0x1, 0x373, &(0x7f0000000340)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x230, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x3ff}, {0x6, 0x400800, 0x9, 0x292}, {0x1000, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(camellia)\x00'}}}, @algo_auth_trunc={0xf5, 0x14, {{'hmac(sha256)\x00'}, 0x548, 0x60, "7d498d48f889a55f967b8241ebaf926fadc82556f13f768e38eb0e4238b0779590d1c6fa92b0ffe67f61e15289dfc7aa9a370acd652336504d75881a7bc4d1fe3def059f10c289b51c4c6ee96b9911e684b5f6b51c205daaef8402a9e4c32b8e72b3af89db4cc0b574f35ea90ecddb2d04af1a60d742356d25425e48a5c397666a55a5426a131dc7bbbe058d3c29365029f71d0774b544144aa4e98aa09731ee565ac796e0950543c3"}}]}, 0x230}}, 0x44050) 935.98202ms ago: executing program 2 (id=725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000240)=0xad, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "956a7ea5ee742f528ff45c79c9297740fdbde2ddfcfdc6d892b66d494e12527b", "40558ca5ed8d1419b044658fd67630ae9c3e8d210590c4cd7281b63878a985ea", "ef3dd21ee56a9fb59a8ec1d355e7768499bfe0eee62f1f1333a7692a43ac93d3", "532d09c44a6fdabce78c407eb0e1aa92b46f44016a416983e66b00d9c00be3c1", "068c44edd5cc30ffbd8abfa6dfcb00ce5c79f99126bd15c9de684e0cbf5e13e3", "a95a19c5ca253936777e16d2", 0xbbf, 0x7fffffff, 0x8, 0x6, 0x7}}) accept(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x0) 889.22022ms ago: executing program 4 (id=726): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1f41, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x5, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 847.120381ms ago: executing program 4 (id=728): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 831.614231ms ago: executing program 2 (id=729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x50) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 739.746432ms ago: executing program 1 (id=730): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setuid(0xee01) setpgid(0x0, r4) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, 0x0) 676.714483ms ago: executing program 1 (id=731): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 656.833913ms ago: executing program 2 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x42124, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x9}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a3, &(0x7f0000000080)) 304.859417ms ago: executing program 3 (id=733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x211a, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(0x0, 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060108000000000000000003001c0605000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) 170.395338ms ago: executing program 3 (id=735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x800001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x384e}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 161.052938ms ago: executing program 2 (id=736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 0s ago: executing program 3 (id=737): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 29.381272][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 29.381291][ T28] audit: type=1400 audit(1778024011.427:126): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.410471][ T28] audit: type=1400 audit(1778024011.457:127): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.411138][ T3288] cgroup: Unknown subsys name 'net' [ 29.438344][ T28] audit: type=1400 audit(1778024011.487:128): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.549166][ T3288] cgroup: Unknown subsys name 'cpuset' [ 29.555317][ T3288] cgroup: Unknown subsys name 'rlimit' [ 29.674616][ T28] audit: type=1400 audit(1778024011.717:129): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.698025][ T28] audit: type=1400 audit(1778024011.717:130): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.718829][ T28] audit: type=1400 audit(1778024011.717:131): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.739439][ T28] audit: type=1400 audit(1778024011.717:132): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.760202][ T28] audit: type=1400 audit(1778024011.747:133): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.785293][ T28] audit: type=1400 audit(1778024011.747:134): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.808692][ T28] audit: type=1400 audit(1778024011.767:135): avc: denied { read } for pid=3024 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.835337][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.874728][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.146317][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.153631][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.161006][ T3300] bridge_slave_0: entered allmulticast mode [ 31.167539][ T3300] bridge_slave_0: entered promiscuous mode [ 31.187576][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.194872][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.202107][ T3300] bridge_slave_1: entered allmulticast mode [ 31.208367][ T3300] bridge_slave_1: entered promiscuous mode [ 31.214643][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.221717][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.229098][ T3301] bridge_slave_0: entered allmulticast mode [ 31.235349][ T3301] bridge_slave_0: entered promiscuous mode [ 31.258407][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.265510][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.272783][ T3301] bridge_slave_1: entered allmulticast mode [ 31.279316][ T3301] bridge_slave_1: entered promiscuous mode [ 31.315560][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.332258][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.339503][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.346594][ T3306] bridge_slave_0: entered allmulticast mode [ 31.353014][ T3306] bridge_slave_0: entered promiscuous mode [ 31.364460][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.378865][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.394219][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.401577][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.408713][ T3306] bridge_slave_1: entered allmulticast mode [ 31.415203][ T3306] bridge_slave_1: entered promiscuous mode [ 31.421669][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.428842][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.436044][ T3308] bridge_slave_0: entered allmulticast mode [ 31.442490][ T3308] bridge_slave_0: entered promiscuous mode [ 31.453897][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.474873][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.482101][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.489436][ T3308] bridge_slave_1: entered allmulticast mode [ 31.495816][ T3308] bridge_slave_1: entered promiscuous mode [ 31.502721][ T3300] team0: Port device team_slave_0 added [ 31.512590][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.519785][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.526917][ T3304] bridge_slave_0: entered allmulticast mode [ 31.533434][ T3304] bridge_slave_0: entered promiscuous mode [ 31.548394][ T3300] team0: Port device team_slave_1 added [ 31.554732][ T3301] team0: Port device team_slave_0 added [ 31.560513][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.567755][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.575025][ T3304] bridge_slave_1: entered allmulticast mode [ 31.581401][ T3304] bridge_slave_1: entered promiscuous mode [ 31.588607][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.607197][ T3301] team0: Port device team_slave_1 added [ 31.622779][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.633056][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.659011][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.668446][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.675497][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.701566][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.712545][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.719578][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.745696][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.757640][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.774755][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.781757][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.807753][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.818862][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.825843][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.851866][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.863577][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.877734][ T3306] team0: Port device team_slave_0 added [ 31.897539][ T3306] team0: Port device team_slave_1 added [ 31.903872][ T3308] team0: Port device team_slave_0 added [ 31.911853][ T3304] team0: Port device team_slave_0 added [ 31.921865][ T3308] team0: Port device team_slave_1 added [ 31.937587][ T3304] team0: Port device team_slave_1 added [ 31.964116][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.971323][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.997419][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.012471][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.019613][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.045638][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.058420][ T3300] hsr_slave_0: entered promiscuous mode [ 32.064346][ T3300] hsr_slave_1: entered promiscuous mode [ 32.075232][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.082278][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.108362][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.121105][ T3301] hsr_slave_0: entered promiscuous mode [ 32.127086][ T3301] hsr_slave_1: entered promiscuous mode [ 32.132952][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.138740][ T3301] Cannot create hsr debugfs directory [ 32.151168][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.158119][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.184456][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.199572][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.206657][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.232672][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.255640][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.262660][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.288713][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.309894][ T3308] hsr_slave_0: entered promiscuous mode [ 32.315931][ T3308] hsr_slave_1: entered promiscuous mode [ 32.321892][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 32.327614][ T3308] Cannot create hsr debugfs directory [ 32.353670][ T3306] hsr_slave_0: entered promiscuous mode [ 32.359659][ T3306] hsr_slave_1: entered promiscuous mode [ 32.365494][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 32.371238][ T3306] Cannot create hsr debugfs directory [ 32.404675][ T3304] hsr_slave_0: entered promiscuous mode [ 32.410813][ T3304] hsr_slave_1: entered promiscuous mode [ 32.416544][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.422321][ T3304] Cannot create hsr debugfs directory [ 32.593286][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.602098][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.609865][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.618623][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.626337][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.634874][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.644597][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.653290][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.675502][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.684054][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.691987][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.700536][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.708612][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.716987][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.725668][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.734328][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.766334][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.776864][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.784517][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.793351][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.801133][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.809917][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.824151][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.832656][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.868791][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.876062][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.884761][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.892599][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.901318][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.914358][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.923182][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.931050][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.939531][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.973651][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.989095][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.997544][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.006456][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.013541][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.023234][ T1930] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.030464][ T1930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.038638][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.047247][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.055197][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.063683][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.071771][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.080521][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.095610][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.121916][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.141315][ T1930] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.148382][ T1930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.164367][ T1930] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.171449][ T1930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.190270][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.203961][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.221147][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.236640][ T1930] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.243757][ T1930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.255751][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.275345][ T1930] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.282463][ T1930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.311020][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.328875][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.354260][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.362614][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.369741][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.380977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.388075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.402662][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.409763][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.419673][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.426745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.454224][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.621029][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.705798][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.740135][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.757333][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.815241][ T3301] veth0_vlan: entered promiscuous mode [ 33.827030][ T3301] veth1_vlan: entered promiscuous mode [ 33.849796][ T3300] veth0_vlan: entered promiscuous mode [ 33.862985][ T3301] veth0_macvtap: entered promiscuous mode [ 33.879713][ T3301] veth1_macvtap: entered promiscuous mode [ 33.890084][ T3300] veth1_vlan: entered promiscuous mode [ 33.910756][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.926327][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.938651][ T3308] veth0_vlan: entered promiscuous mode [ 33.961095][ T3304] veth0_vlan: entered promiscuous mode [ 33.969344][ T3306] veth0_vlan: entered promiscuous mode [ 33.977584][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.986602][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.996744][ T3304] veth1_vlan: entered promiscuous mode [ 34.007789][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.016755][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.026566][ T3306] veth1_vlan: entered promiscuous mode [ 34.034485][ T3300] veth0_macvtap: entered promiscuous mode [ 34.045531][ T3308] veth1_vlan: entered promiscuous mode [ 34.052225][ T3300] veth1_macvtap: entered promiscuous mode [ 34.067979][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.084273][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.103275][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.113474][ T3306] veth0_macvtap: entered promiscuous mode [ 34.120827][ T3306] veth1_macvtap: entered promiscuous mode [ 34.121715][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.128997][ T3308] veth0_macvtap: entered promiscuous mode [ 34.150232][ T3304] veth0_macvtap: entered promiscuous mode [ 34.157146][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.176636][ T3308] veth1_macvtap: entered promiscuous mode [ 34.183753][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.186183][ T3506] loop0: detected capacity change from 0 to 512 [ 34.192942][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.209631][ T3506] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 34.220799][ T3304] veth1_macvtap: entered promiscuous mode [ 34.237795][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.256838][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.269636][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.286796][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.296265][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.305912][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.331917][ T361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.340813][ T361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.360658][ T361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.369797][ T361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.386240][ T361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.395400][ T361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.410578][ T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.419425][ T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.428933][ T361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.448892][ T361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.458494][ T361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.484185][ T361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.508693][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 34.508709][ T28] audit: type=1400 audit(1778024016.557:167): avc: denied { write } for pid=3515 comm="syz.0.8" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.562054][ T3519] loop4: detected capacity change from 0 to 128 [ 34.569238][ T28] audit: type=1400 audit(1778024016.587:168): avc: denied { open } for pid=3515 comm="syz.0.8" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.594458][ T28] audit: type=1400 audit(1778024016.587:169): avc: denied { read } for pid=3515 comm="syz.0.8" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.703144][ T28] audit: type=1400 audit(1778024016.587:170): avc: denied { create } for pid=3515 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.726587][ T28] audit: type=1400 audit(1778024016.597:171): avc: denied { open } for pid=3515 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.747665][ T28] audit: type=1400 audit(1778024016.597:172): avc: denied { kernel } for pid=3515 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.799324][ T3526] loop1: detected capacity change from 0 to 1764 [ 34.800751][ T3529] loop0: detected capacity change from 0 to 8192 [ 34.805757][ T28] audit: type=1400 audit(1778024016.597:173): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.835766][ T3526] iso9660: Bad value for 'sbsector' [ 34.838919][ T3529] ======================================================= [ 34.838919][ T3529] WARNING: The mand mount option has been deprecated and [ 34.838919][ T3529] and is ignored by this kernel. Remove the mand [ 34.838919][ T3529] option from the mount to silence this warning. [ 34.838919][ T3529] ======================================================= [ 34.873400][ T28] audit: type=1400 audit(1778024016.607:174): avc: denied { read write } for pid=3513 comm="syz.4.7" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.936384][ T28] audit: type=1400 audit(1778024016.607:175): avc: denied { open } for pid=3513 comm="syz.4.7" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.960711][ T3536] gre0 speed is unknown, defaulting to 1000 [ 34.979086][ T28] audit: type=1400 audit(1778024016.607:176): avc: denied { ioctl } for pid=3513 comm="syz.4.7" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.989284][ T3536] gre0 speed is unknown, defaulting to 1000 [ 35.037881][ T3536] gre0 speed is unknown, defaulting to 1000 [ 35.174900][ T3536] infiniband syz1: set active [ 35.203635][ T3402] gre0 speed is unknown, defaulting to 1000 [ 35.251291][ T3536] infiniband syz1: added gre0 [ 35.306065][ T3536] RDS/IB: syz1: added [ 35.314935][ T3536] smc: adding ib device syz1 with port count 1 [ 35.329241][ T3536] smc: ib device syz1 port 1 has no pnetid [ 35.336494][ T3550] gre0 speed is unknown, defaulting to 1000 [ 35.350208][ T3536] gre0 speed is unknown, defaulting to 1000 [ 35.462112][ T3536] gre0 speed is unknown, defaulting to 1000 [ 35.567321][ T3536] gre0 speed is unknown, defaulting to 1000 [ 35.645294][ T3536] gre0 speed is unknown, defaulting to 1000 [ 35.684728][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 35.715784][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 35.736595][ T3536] gre0 speed is unknown, defaulting to 1000 [ 35.743792][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 35.861430][ T3565] gre0 speed is unknown, defaulting to 1000 [ 35.925508][ T3536] syz.2.11 (3536) used greatest stack depth: 10480 bytes left [ 36.413900][ T3587] netlink: 72 bytes leftover after parsing attributes in process `syz.4.28'. [ 36.758052][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 36.822139][ T3603] loop4: detected capacity change from 0 to 128 [ 36.941533][ T3603] syz.4.34: attempt to access beyond end of device [ 36.941533][ T3603] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 36.958868][ T3603] syz.4.34: attempt to access beyond end of device [ 36.958868][ T3603] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 36.977937][ T3603] syz.4.34: attempt to access beyond end of device [ 36.977937][ T3603] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 36.999396][ T3603] syz.4.34: attempt to access beyond end of device [ 36.999396][ T3603] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 37.017583][ T3603] syz.4.34: attempt to access beyond end of device [ 37.017583][ T3603] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 37.031557][ T3603] syz.4.34: attempt to access beyond end of device [ 37.031557][ T3603] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 37.055028][ T3603] syz.4.34: attempt to access beyond end of device [ 37.055028][ T3603] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 37.071125][ T3603] syz.4.34: attempt to access beyond end of device [ 37.071125][ T3603] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 37.146098][ T36] kworker/u8:2: attempt to access beyond end of device [ 37.146098][ T36] loop4: rw=1, sector=174, nr_sectors = 1 limit=128 [ 37.169835][ T36] Buffer I/O error on dev loop4, logical block 174, lost async page write [ 37.186019][ T3569] kexec: Could not allocate control_code_buffer [ 37.260854][ T3625] loop0: detected capacity change from 0 to 512 [ 37.269389][ T3625] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.286738][ T3625] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.307060][ T3625] EXT4-fs (loop0): 1 truncate cleaned up [ 37.322138][ T3630] netlink: 64 bytes leftover after parsing attributes in process `syz.1.44'. [ 37.342427][ T3625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.366386][ T3625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.545208][ T3658] loop1: detected capacity change from 0 to 128 [ 38.672451][ T3676] futex_wake_op: syz.4.58 tries to shift op by -1; fix this program [ 38.711410][ T3678] tipc: Enabling of bearer rejected, failed to enable media [ 38.904558][ T3658] syz.1.54 (3658) used greatest stack depth: 10320 bytes left [ 40.253729][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 40.253771][ T28] audit: type=1400 audit(1778024022.297:254): avc: denied { bind } for pid=3718 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.322365][ T28] audit: type=1400 audit(1778024022.327:255): avc: denied { write } for pid=3718 comm="syz.0.70" path="socket:[6293]" dev="sockfs" ino=6293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.400471][ T28] audit: type=1400 audit(1778024022.327:256): avc: denied { read } for pid=3718 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.463555][ T28] audit: type=1400 audit(1778024022.397:257): avc: denied { write } for pid=3718 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.502513][ T3729] loop1: detected capacity change from 0 to 512 [ 40.504686][ T28] audit: type=1400 audit(1778024022.397:258): avc: denied { setopt } for pid=3718 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.767479][ T3734] loop1: detected capacity change from 0 to 512 [ 40.791819][ T3734] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.824116][ T3734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.871504][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.882589][ T3736] netlink: 277 bytes leftover after parsing attributes in process `syz.4.75'. [ 40.888302][ T3734] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.956475][ T28] audit: type=1400 audit(1778024022.997:259): avc: denied { write } for pid=3733 comm="syz.1.74" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.046425][ T28] audit: type=1400 audit(1778024023.027:260): avc: denied { add_name } for pid=3733 comm="syz.1.74" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.111692][ T28] audit: type=1400 audit(1778024023.027:261): avc: denied { create } for pid=3733 comm="syz.1.74" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.154041][ T28] audit: type=1400 audit(1778024023.027:262): avc: denied { write } for pid=3733 comm="syz.1.74" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.180493][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.189131][ T3736] loop4: detected capacity change from 0 to 512 [ 41.198680][ T28] audit: type=1400 audit(1778024023.027:263): avc: denied { open } for pid=3733 comm="syz.1.74" path="/19/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.283365][ T3736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.346507][ T3736] EXT4-fs (loop4): 1 truncate cleaned up [ 41.376899][ T3736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.431277][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.540235][ T3747] syz.4.78 (3747) used greatest stack depth: 10240 bytes left [ 41.601659][ T3749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 41.698845][ T3752] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 41.748856][ T3754] loop1: detected capacity change from 0 to 512 [ 41.804222][ T3754] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.81: Bad quota inum: 2, type: 1 [ 41.846032][ T3754] loop1: lost filesystem error report for type 5 error -117 [ 41.846234][ T3754] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 41.853609][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 41.853629][ C1] EXT4-fs (loop1): initial error at time 1778024023: ext4_quota_enable:7221 [ 41.853656][ C1] EXT4-fs (loop1): last error at time 1778024023: ext4_quota_enable:7221 [ 41.904098][ T3754] EXT4-fs (loop1): mount failed [ 42.403891][ T3775] batman_adv: batadv0: Adding interface: dummy0 [ 42.410736][ T3775] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.443640][ T3775] batman_adv: batadv0: Interface activated: dummy0 [ 42.462971][ T3776] batadv0: mtu less than device minimum [ 42.480550][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.491813][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.502744][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.513710][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.524617][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.535866][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.546906][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.557853][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.568919][ T3776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 42.632829][ T3780] loop4: detected capacity change from 0 to 1024 [ 42.655055][ T3780] EXT4-fs: inline encryption not supported [ 42.683845][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.723152][ T3780] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.740632][ T3389] IPVS: starting estimator thread 0... [ 42.750394][ T3780] tipc: Started in network mode [ 42.755991][ T3780] tipc: Node identity ac14140f, cluster identity 4711 [ 42.769930][ T3780] tipc: Enabled bearer , priority 10 [ 42.790995][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.833236][ T3796] loop4: detected capacity change from 0 to 128 [ 42.839712][ T3792] IPVS: using max 2688 ests per chain, 134400 per kthread [ 42.918793][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 42.928923][ T3797] FAT-fs (loop4): Filesystem has been set read-only [ 42.936068][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 42.944913][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 42.953222][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 42.961646][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 42.971737][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 42.988051][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 43.034845][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 43.052941][ T3797] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 43.068526][ T3795] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 43.390560][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 43.416211][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 43.589070][ T3813] loop1: detected capacity change from 0 to 8192 [ 43.768182][ T3403] tipc: Node number set to 2886997007 [ 43.883735][ T3831] loop3: detected capacity change from 0 to 256 [ 43.923281][ T3831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 44.049045][ T3831] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 44.085732][ T3372] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 44.525929][ T3794] loop0: detected capacity change from 0 to 512 [ 44.906217][ T3794] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 44.919751][ T3844] tmpfs: Bad value for 'mpol' [ 45.090546][ T3794] EXT4-fs (loop0): 1 truncate cleaned up [ 45.172381][ T3794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.257736][ T3862] mmap: syz.2.114 (3862) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.352875][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 45.352894][ T28] audit: type=1400 audit(1778024027.377:312): avc: denied { sys_admin } for pid=3847 comm="syz.1.107" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 45.423619][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.485525][ T28] audit: type=1400 audit(1778024027.527:313): avc: denied { create } for pid=3871 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.513075][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 45.543065][ T28] audit: type=1400 audit(1778024027.557:314): avc: denied { perfmon } for pid=3873 comm="syz.4.118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.595817][ T28] audit: type=1400 audit(1778024027.637:315): avc: denied { read } for pid=3875 comm="syz.4.119" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.639836][ T28] audit: type=1400 audit(1778024027.637:316): avc: denied { open } for pid=3875 comm="syz.4.119" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.689081][ T28] audit: type=1400 audit(1778024027.667:317): avc: denied { bpf } for pid=3875 comm="syz.4.119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.716269][ T3878] netlink: 'syz.4.120': attribute type 3 has an invalid length. [ 45.868414][ T3881] syz.4.122 uses obsolete (PF_INET,SOCK_PACKET) [ 46.307271][ T28] audit: type=1400 audit(1778024028.347:318): avc: denied { create } for pid=3895 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.885573][ T3903] loop1: detected capacity change from 0 to 1024 [ 46.894951][ T3903] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 46.894951][ T3903] [ 47.044353][ T28] audit: type=1400 audit(1778024029.087:319): avc: denied { name_bind } for pid=3909 comm="syz.1.132" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 47.132168][ T28] audit: type=1400 audit(1778024029.127:320): avc: denied { read write } for pid=3912 comm="syz.2.134" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.191679][ T28] audit: type=1400 audit(1778024029.137:321): avc: denied { ioctl open } for pid=3912 comm="syz.2.134" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.325416][ T3924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3924 comm=syz.0.138 [ 47.549796][ T3935] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 47.556443][ T3935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.598540][ T3935] vhci_hcd vhci_hcd.0: Device attached [ 47.613738][ T3935] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 47.620305][ T3935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.673326][ T3935] vhci_hcd vhci_hcd.0: Device attached [ 47.685213][ T3938] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 47.691824][ T3938] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.722754][ T3938] vhci_hcd vhci_hcd.0: Device attached [ 47.732651][ T3935] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(8) [ 47.739274][ T3935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.772200][ T3935] vhci_hcd vhci_hcd.0: Device attached [ 47.838206][ T35] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 48.040510][ T3957] syz.2.147 (3957) used greatest stack depth: 9856 bytes left [ 48.133109][ T3963] netlink: 'syz.4.150': attribute type 1 has an invalid length. [ 48.146021][ T3962] netlink: 'syz.2.149': attribute type 3 has an invalid length. [ 48.163601][ T3963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.171942][ T3962] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.149'. [ 48.225698][ T3963] bond1: (slave veth3): Enslaving as an active interface with a down link [ 48.299662][ T3963] vlan2: entered allmulticast mode [ 48.318392][ T3963] veth0_to_bond: entered allmulticast mode [ 48.340706][ T3963] veth0_to_bond: entered promiscuous mode [ 48.368611][ T3963] veth0_to_bond: left promiscuous mode [ 48.385527][ T3963] bond1: (slave vlan2): making interface the new active one [ 48.410138][ T3963] veth0_to_bond: entered promiscuous mode [ 48.428784][ T3963] vlan2: entered promiscuous mode [ 48.438660][ T3963] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 48.836955][ T3949] vhci_hcd: connection closed [ 48.837248][ T61] vhci_hcd vhci_hcd.1: stop threads [ 48.881287][ T3936] vhci_hcd: connection reset by peer [ 48.884468][ T61] vhci_hcd vhci_hcd.1: release socket [ 48.892230][ T3939] vhci_hcd: connection closed [ 48.892408][ T3945] vhci_hcd: connection closed [ 48.903514][ T3993] loop4: detected capacity change from 0 to 256 [ 48.905494][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 48.928652][ T3993] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.947715][ T61] vhci_hcd vhci_hcd.1: stop threads [ 48.959919][ T61] vhci_hcd vhci_hcd.1: release socket [ 48.975199][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 48.999742][ T61] vhci_hcd vhci_hcd.1: stop threads [ 49.011011][ T61] vhci_hcd vhci_hcd.1: release socket [ 49.027291][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 49.045499][ T61] vhci_hcd vhci_hcd.1: stop threads [ 49.051553][ T3995] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 49.055782][ T61] vhci_hcd vhci_hcd.1: release socket [ 49.077644][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 49.083369][ T3995] ref_ctr increment failed for inode: 0xb0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888105a92f40 [ 49.114621][ T3998] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 49.148193][ T3998] ref_ctr decrement failed for inode: 0xb0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888105a92f40 [ 49.167700][ T3998] uprobe: syz.2.159:3998 failed to unregister, leaking uprobe [ 49.183831][ T4002] netlink: 'syz.3.161': attribute type 29 has an invalid length. [ 49.210518][ T4002] netlink: 'syz.3.161': attribute type 29 has an invalid length. [ 49.410561][ T3935] syz.1.142 (3935) used greatest stack depth: 8888 bytes left [ 50.448892][ T4032] loop4: detected capacity change from 0 to 8192 [ 51.017490][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 51.017508][ T28] audit: type=1400 audit(1778024033.057:339): avc: denied { create } for pid=4054 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 51.089264][ T28] audit: type=1400 audit(1778024033.097:340): avc: denied { connect } for pid=4054 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.129812][ T28] audit: type=1400 audit(1778024033.177:341): avc: denied { create } for pid=4057 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.684395][ T28] audit: type=1400 audit(1778024033.727:342): avc: denied { write } for pid=4068 comm="syz.2.188" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.035239][ T4082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4082 comm=syz.0.193 [ 52.135749][ T4088] ref_ctr_offset mismatch. inode: 0x100 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 52.181941][ T28] audit: type=1400 audit(1778024034.227:343): avc: denied { create } for pid=4086 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.234381][ T4088] xt_hashlimit: size too large, truncated to 1048576 [ 52.265819][ T28] audit: type=1400 audit(1778024034.267:344): avc: denied { bind } for pid=4086 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.343557][ T28] audit: type=1400 audit(1778024034.287:345): avc: denied { read } for pid=4086 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.848274][ T35] usb 3-1: enqueue for inactive port 0 [ 52.864356][ T35] usb 3-1: enqueue for inactive port 0 [ 52.938233][ T35] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 53.077830][ T28] audit: type=1400 audit(1778024035.117:346): avc: denied { recv } for pid=3300 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.156 dest=33864 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 53.155132][ T28] audit: type=1400 audit(1778024035.187:347): avc: denied { connect } for pid=4113 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.003897][ T4131] -: renamed from syzkaller0 [ 54.088890][ T4136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4136 comm=syz.0.209 [ 54.147173][ T4138] netlink: 'syz.0.209': attribute type 3 has an invalid length. [ 54.163204][ T4138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 54.182829][ T4138] Zero length message leads to an empty skb [ 54.277237][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 55.277764][ T28] audit: type=1400 audit(1778024037.317:348): avc: denied { write } for pid=4154 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.734697][ T4147] gre0 speed is unknown, defaulting to 1000 [ 56.192670][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 56.193364][ T28] audit: type=1400 audit(1778024038.237:349): avc: denied { nlmsg_read } for pid=4169 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.287794][ T28] audit: type=1400 audit(1778024038.287:350): avc: denied { setopt } for pid=4171 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.346676][ T28] audit: type=1400 audit(1778024038.317:351): avc: denied { write } for pid=4171 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.380529][ T4174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.222'. [ 56.397754][ T4174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.222'. [ 56.414553][ T4159] kexec: Could not allocate control_code_buffer [ 56.429970][ T4179] loop0: detected capacity change from 0 to 512 [ 56.454336][ T4179] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.484184][ T4179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.526616][ T4179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.574697][ T4179] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.605537][ T28] audit: type=1400 audit(1778024038.647:352): avc: denied { write } for pid=4178 comm="syz.0.224" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.656665][ T28] audit: type=1400 audit(1778024038.687:353): avc: denied { getopt } for pid=4163 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.699989][ T28] audit: type=1400 audit(1778024038.717:354): avc: denied { write } for pid=4178 comm="syz.0.224" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.731776][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.739022][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.744852][ T28] audit: type=1400 audit(1778024038.727:355): avc: denied { read append } for pid=4178 comm="syz.0.224" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.806334][ T28] audit: type=1400 audit(1778024038.797:356): avc: denied { ioctl } for pid=4178 comm="syz.0.224" path="/45/bus/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.833705][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.945253][ T4192] bridge_slave_0: left allmulticast mode [ 56.957951][ T4192] bridge_slave_0: left promiscuous mode [ 56.981605][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.998296][ T28] audit: type=1400 audit(1778024039.037:357): avc: denied { read } for pid=4195 comm="syz.1.230" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.029055][ T28] audit: type=1400 audit(1778024039.047:358): avc: denied { open } for pid=4195 comm="syz.1.230" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.096040][ T4192] bridge_slave_1: left allmulticast mode [ 57.109708][ T4192] bridge_slave_1: left promiscuous mode [ 57.127641][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.167310][ T4192] bond0: (slave bond_slave_0): Releasing backup interface [ 57.186882][ T4186] loop3: detected capacity change from 0 to 512 [ 57.233972][ T4192] bond0: (slave bond_slave_1): Releasing backup interface [ 57.268731][ T4192] team0: Port device team_slave_0 removed [ 57.280322][ T4186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.295393][ T4192] team0: Port device team_slave_1 removed [ 57.314828][ T4192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.362698][ T4192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.379213][ T4192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.399126][ T4192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.517901][ T4186] EXT4-fs (loop3): 1 orphan inode deleted [ 57.534508][ T4186] EXT4-fs (loop3): 1 truncate cleaned up [ 57.543383][ T4192] net_ratelimit: 10 callbacks suppressed [ 57.543398][ T4192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.598822][ T61] bond1: (slave vlan2): link status definitely down, disabling slave [ 57.619701][ T61] vlan2: left promiscuous mode [ 57.629919][ T61] bond1: now running without any active interface! [ 57.886820][ T4186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.936203][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 58.446984][ T4224] loop2: detected capacity change from 0 to 8192 [ 58.482825][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.606166][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 58.629144][ T4240] loop4: detected capacity change from 0 to 256 [ 58.639930][ T4234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 58.661706][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 58.708678][ T4240] FAT-fs (loop4): codepage cp857 not found [ 58.824488][ T4245] loop0: detected capacity change from 0 to 512 [ 58.865647][ T4245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.901225][ T4250] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 58.937895][ T4245] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.980264][ T4245] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.245: Failed to acquire dquot type 0 [ 59.005219][ T4245] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.245: Failed to acquire dquot type 0 [ 59.013178][ T4254] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 59.047024][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 59.094503][ T4250] macvlan2: entered promiscuous mode [ 59.130668][ T4250] macvlan2: entered allmulticast mode [ 59.157479][ T4250] bond3: entered promiscuous mode [ 59.169402][ T4250] bridge1: entered promiscuous mode [ 59.186475][ T4250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.205171][ T4250] bond3: left promiscuous mode [ 59.219375][ T4250] bridge1: left promiscuous mode [ 59.229493][ T4261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4261 comm=syz.1.250 [ 59.863347][ T4279] netlink: 'syz.4.256': attribute type 10 has an invalid length. [ 60.068528][ T4284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 60.123764][ T4284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4284 comm=syz.2.258 [ 60.490137][ T4307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'. [ 60.571035][ T4310] tmpfs: Bad value for 'size' [ 60.614235][ T4314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 60.626684][ T4314] tipc: Enabling of bearer rejected, failed to enable media [ 60.962532][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 61.001977][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 61.146913][ T4332] vlan2: left allmulticast mode [ 61.158298][ T4332] veth0_to_bond: left allmulticast mode [ 61.171343][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.194480][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.218247][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.236811][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.573399][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 61.573430][ T28] audit: type=1400 audit(1778024043.597:451): avc: denied { execute } for pid=4342 comm="syz.1.280" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 62.161005][ T4353] netlink: 'syz.3.284': attribute type 2 has an invalid length. [ 62.179112][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 62.189037][ T4353] netlink: 199792 bytes leftover after parsing attributes in process `syz.3.284'. [ 62.236192][ T4356] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 62.259853][ T4356] bond4 (unregistering): (slave gretap0): Releasing backup interface [ 62.309038][ T4356] bond4 (unregistering): Released all slaves [ 62.424492][ T4365] loop1: detected capacity change from 0 to 4096 [ 62.534438][ T4365] EXT4-fs: Ignoring removed bh option [ 62.546314][ T4365] ext4: Unknown parameter 'fsuuid' [ 62.816827][ T4365] loop1: detected capacity change from 0 to 512 [ 62.933091][ T4365] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.607157][ T4386] gre0 speed is unknown, defaulting to 1000 [ 64.112493][ T4403] loop1: detected capacity change from 0 to 512 [ 64.112895][ T4403] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 64.130403][ T28] audit: type=1400 audit(1778024046.167:452): avc: denied { bind } for pid=4402 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.130509][ T28] audit: type=1400 audit(1778024046.167:453): avc: denied { name_bind } for pid=4402 comm="syz.1.298" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 64.130536][ T28] audit: type=1400 audit(1778024046.167:454): avc: denied { node_bind } for pid=4402 comm="syz.1.298" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 64.464826][ T28] audit: type=1400 audit(1778024046.507:455): avc: denied { name_bind } for pid=4404 comm="syz.1.299" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.506787][ T28] audit: type=1400 audit(1778024046.547:456): avc: denied { mount } for pid=4408 comm="syz.0.301" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.551182][ T28] audit: type=1400 audit(1778024046.587:457): avc: denied { getopt } for pid=4411 comm="syz.3.302" lport=52560 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 64.627247][ T28] audit: type=1400 audit(1778024046.667:458): avc: denied { watch watch_reads } for pid=4415 comm="syz.3.304" path="/47/control" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.686166][ T28] audit: type=1326 audit(1778024046.667:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766922cdd9 code=0x7ffc0000 [ 64.766670][ T28] audit: type=1326 audit(1778024046.667:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766922cdd9 code=0x7ffc0000 [ 64.873027][ T4432] netlink: 22 bytes leftover after parsing attributes in process `syz.3.309'. [ 66.104116][ T4466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'. [ 66.237821][ T4465] loop4: detected capacity change from 0 to 256 [ 66.904996][ T4463] loop2: detected capacity change from 0 to 1024 [ 66.952256][ T4463] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 66.952256][ T4463] [ 66.987139][ T4463] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 67.104516][ T4484] loop4: detected capacity change from 0 to 512 [ 67.132157][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 67.132224][ T28] audit: type=1400 audit(1778024049.177:523): avc: denied { mounton } for pid=4483 comm="syz.4.329" path="/file0" dev="ramfs" ino=8432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 67.162076][ T4484] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.189355][ T4484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.211817][ T4484] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.329: Allocating blocks 41-42 which overlap fs metadata [ 67.245833][ T4484] loop4: lost filesystem error report for type 5 error -117 [ 67.246129][ T4484] Quota error (device loop4): write_blk: dquota write failed [ 67.253555][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 67.253578][ C0] EXT4-fs (loop4): initial error at time 1778024049: ext4_mb_mark_diskspace_used:4222 [ 67.253605][ C0] EXT4-fs (loop4): last error at time 1778024049: ext4_mb_mark_diskspace_used:4222 [ 67.287247][ T4484] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 67.297290][ T4484] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.329: Failed to acquire dquot type 0 [ 67.308607][ T4484] loop4: lost filesystem error report for type 5 error -117 [ 67.310055][ T4484] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 67.353776][ T4484] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.329: corrupted inode contents [ 67.377578][ T4484] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 67.380399][ T4484] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.329: mark_inode_dirty error [ 67.428467][ T4484] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 67.429981][ T4484] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.329: corrupted inode contents [ 67.468209][ T4484] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 67.468737][ T4484] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.329: mark_inode_dirty error [ 67.498315][ T4484] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 67.498668][ T4484] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.329: corrupted inode contents [ 67.541861][ T4484] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 67.544103][ T4484] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 67.569537][ T4484] loop4: lost filesystem error report for type 5 error -117 [ 67.570814][ T4484] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.329: corrupted inode contents [ 67.602153][ T4484] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 67.603513][ T4484] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.329: mark_inode_dirty error [ 67.640490][ T4484] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 67.640607][ T4484] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 67.671921][ T4484] loop4: lost filesystem error report for type 5 error -117 [ 67.672899][ T4484] EXT4-fs (loop4): 1 truncate cleaned up [ 67.698626][ T4484] EXT4-fs (loop4): pa ffff8881088bd3f0: logic 1, phys. 41, len 23 [ 67.706503][ T4484] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 67.756329][ T4484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.769885][ T4484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.904690][ T28] audit: type=1400 audit(1778024049.947:524): avc: denied { ioctl } for pid=4521 comm="syz.0.342" path="socket:[7736]" dev="sockfs" ino=7736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.944724][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 67.982110][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 68.712062][ T4532] gre0 speed is unknown, defaulting to 1000 [ 68.926533][ T28] audit: type=1400 audit(1778024050.967:525): avc: denied { read } for pid=4539 comm="syz.4.347" lport=59433 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.189100][ T4545] loop0: detected capacity change from 0 to 128 [ 69.230721][ T4545] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.325894][ T4545] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.408800][ T28] audit: type=1400 audit(1778024051.457:526): avc: denied { write } for pid=4544 comm="syz.0.349" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.492019][ T28] audit: type=1400 audit(1778024051.477:527): avc: denied { add_name } for pid=4544 comm="syz.0.349" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.524561][ T3372] IPVS: starting estimator thread 0... [ 69.530977][ T28] audit: type=1400 audit(1778024051.477:528): avc: denied { read write open } for pid=4544 comm="syz.0.349" path="/73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.538155][ T4545] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 69.637282][ T28] audit: type=1400 audit(1778024051.487:529): avc: denied { ioctl } for pid=4544 comm="syz.0.349" path="/73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.683962][ T4552] IPVS: using max 2688 ests per chain, 134400 per kthread [ 69.905073][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.088325][ T4557] gre0 speed is unknown, defaulting to 1000 [ 70.105059][ T28] audit: type=1400 audit(1778024052.147:530): avc: denied { firmware_load } for pid=4556 comm="syz.4.353" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 70.273023][ T4555] loop2: detected capacity change from 0 to 512 [ 70.394703][ T4555] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 70.449926][ T4555] EXT4-fs (loop2): bad block size 32768 [ 71.264350][ T4574] netlink: 88 bytes leftover after parsing attributes in process `syz.0.357'. [ 71.305998][ T4574] netlink: 48 bytes leftover after parsing attributes in process `syz.0.357'. [ 71.593955][ T4587] netlink: 'syz.2.362': attribute type 4 has an invalid length. [ 71.613328][ T4585] process 'syz.3.363' launched './file0' with NULL argv: empty string added [ 71.642476][ T4587] netlink: 'syz.2.362': attribute type 4 has an invalid length. [ 72.315149][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 72.315167][ T28] audit: type=1400 audit(1778024054.357:532): avc: denied { setopt } for pid=4602 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.341122][ T28] audit: type=1400 audit(1778024054.387:533): avc: denied { connect } for pid=4602 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.016584][ T28] audit: type=1400 audit(1778024054.557:534): avc: denied { block_suspend } for pid=4605 comm="syz.2.368" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.400983][ T28] audit: type=1400 audit(1778024055.437:535): avc: denied { name_bind } for pid=4629 comm="syz.3.377" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.499056][ T4635] uprobe: syz.3.378:4635 failed to unregister, leaking uprobe [ 73.569507][ T28] audit: type=1400 audit(1778024055.617:536): avc: denied { bind } for pid=4639 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.663198][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 73.707476][ T28] audit: type=1400 audit(1778024055.747:537): avc: denied { write } for pid=4644 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.731744][ T4643] loop3: detected capacity change from 0 to 512 [ 73.740275][ T4652] netlink: 'syz.2.382': attribute type 3 has an invalid length. [ 73.782419][ T4643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.797297][ T28] audit: type=1400 audit(1778024055.747:538): avc: denied { bind } for pid=4642 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.860601][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.994828][ T4672] IPVS: persistence engine module ip_vs_pe_€ not found [ 74.089932][ T4681] syzkaller0: entered promiscuous mode [ 74.108250][ T4681] syzkaller0: entered allmulticast mode [ 74.674484][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 74.846195][ T4774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.900247][ T4774] bond2 (unregistering): Released all slaves [ 75.185613][ T28] audit: type=1400 audit(1778024057.227:539): avc: denied { create } for pid=4818 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.215025][ T28] audit: type=1400 audit(1778024057.227:540): avc: denied { listen } for pid=4818 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.240938][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.242801][ T28] audit: type=1400 audit(1778024057.257:541): avc: denied { create } for pid=4818 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 75.248305][ T4817] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.329530][ T4817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.350841][ T4817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.442896][ T4822] netlink: 72 bytes leftover after parsing attributes in process `syz.2.401'. [ 75.453025][ T116] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.059230][ T116] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.079156][ T116] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.105802][ T116] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.253674][ T4842] gre0 speed is unknown, defaulting to 1000 [ 76.356270][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 76.387634][ T4844] loop1: detected capacity change from 0 to 8192 [ 76.417578][ T4835] bond2: entered promiscuous mode [ 76.437599][ T4835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.448797][ T4844] loop1: p1 < > p2 p4 < p5 > [ 76.456420][ T4844] loop1: partition table partially beyond EOD, truncated [ 76.493487][ T4844] loop1: p1 start 134217728 is beyond EOD, truncated [ 76.522009][ T4844] loop1: p2 size 591360 extends beyond EOD, truncated [ 76.570270][ T4844] loop1: p5 size 591360 extends beyond EOD, truncated [ 77.107874][ T4865] loop0: detected capacity change from 0 to 512 [ 77.123177][ T4865] ext4: Unknown parameter 'nouser_xattr' [ 77.656382][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 77.656401][ T28] audit: type=1400 audit(1778024059.697:609): avc: denied { create } for pid=4872 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.709751][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 77.732881][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 77.744080][ T28] audit: type=1400 audit(1778024059.787:610): avc: denied { allowed } for pid=4879 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.770744][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 77.780398][ T4878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=4878 comm=syz.3.417 [ 77.793296][ T4880] tipc: Started in network mode [ 77.808189][ T4880] tipc: Node identity 4, cluster identity 4711 [ 77.818206][ T4880] tipc: Node number set to 4 [ 77.827087][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 77.881719][ T28] audit: type=1400 audit(1778024059.927:611): avc: denied { create } for pid=4882 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.933021][ T28] audit: type=1400 audit(1778024059.947:612): avc: denied { write } for pid=4882 comm="syz.3.420" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.196922][ T28] audit: type=1400 audit(1778024060.237:613): avc: denied { wake_alarm } for pid=4890 comm="syz.0.423" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.940714][ T28] audit: type=1326 audit(1778024060.987:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219c94cdd9 code=0x7ffc0000 [ 78.940849][ T28] audit: type=1326 audit(1778024060.987:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219c94cdd9 code=0x7ffc0000 [ 78.941497][ T28] audit: type=1326 audit(1778024060.987:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219c94cdd9 code=0x7ffc0000 [ 78.941751][ T28] audit: type=1326 audit(1778024060.987:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219c94cdd9 code=0x7ffc0000 [ 78.942099][ T28] audit: type=1326 audit(1778024060.987:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f219c94cdd9 code=0x7ffc0000 [ 79.922572][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 80.144274][ T4926] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 80.329976][ T4934] loop0: detected capacity change from 0 to 8192 [ 80.842715][ T4948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4948 comm=syz.2.445 [ 81.538774][ T4963] loop3: detected capacity change from 0 to 512 [ 81.577765][ T4963] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.451: Bad quota inum: 2, type: 1 [ 81.596120][ T4963] loop3: lost filesystem error report for type 5 error -117 [ 81.598155][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 81.612056][ C1] EXT4-fs (loop3): initial error at time 1778024063: ext4_quota_enable:7221 [ 81.620806][ C1] EXT4-fs (loop3): last error at time 1778024063: ext4_quota_enable:7221 [ 81.630655][ T4963] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 81.649417][ T4963] EXT4-fs (loop3): mount failed [ 81.894190][ T4987] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 81.960815][ T4987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.034131][ T4991] bond1: (slave veth3): Enslaving as an active interface with a down link [ 82.053949][ T4985] loop2: detected capacity change from 0 to 8192 [ 82.092989][ T4987] vlan2: entered allmulticast mode [ 82.130730][ T4987] veth0_to_bond: entered allmulticast mode [ 82.160937][ T4987] bond1: (slave vlan2): Opening slave failed [ 82.794594][ T5002] loop3: detected capacity change from 0 to 256 [ 82.827323][ T5002] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.830500][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 83.849951][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 83.862538][ T5016] netlink: 277 bytes leftover after parsing attributes in process `syz.2.468'. [ 83.880209][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 83.889962][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 83.900742][ T5013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=5013 comm=syz.4.469 [ 84.138064][ T5011] loop2: detected capacity change from 0 to 512 [ 84.211157][ T5011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.261840][ T5011] EXT4-fs (loop2): 1 truncate cleaned up [ 84.304588][ T5011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.369071][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.456083][ T5039] loop2: detected capacity change from 0 to 512 [ 84.465798][ T5033] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.471891][ T5038] loop3: detected capacity change from 0 to 1024 [ 84.473144][ T5033] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.480159][ T5038] EXT4-fs: inline encryption not supported [ 84.493853][ T5039] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.475: Bad quota inum: 2, type: 1 [ 84.601126][ T5038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.637843][ T5038] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.736846][ T3372] IPVS: starting estimator thread 0... [ 84.828431][ T5048] IPVS: using max 2640 ests per chain, 132000 per kthread [ 85.072615][ T5039] loop2: lost filesystem error report for type 5 error -117 [ 85.088316][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 85.102116][ C0] EXT4-fs (loop2): initial error at time 1778024067: ext4_quota_enable:7221 [ 85.109858][ T5039] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 85.110842][ C0] EXT4-fs (loop2): last error at time 1778024067: ext4_quota_enable:7221 [ 85.126946][ T5039] EXT4-fs (loop2): mount failed [ 85.185262][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.196191][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.253569][ T5038] tipc: Started in network mode [ 85.261485][ T5038] tipc: Node identity ac14140f, cluster identity 4711 [ 85.301943][ T5038] tipc: Enabled bearer , priority 10 [ 85.311034][ T4762] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.320357][ T4762] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.330646][ T5020] kexec: Could not allocate control_code_buffer [ 85.357001][ T4762] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.370613][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.379994][ T4762] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.431900][ T5053] gre0 speed is unknown, defaulting to 1000 [ 85.736782][ T5062] IPVS: persistence engine module ip_vs_pe_€ not found [ 86.087419][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 86.087436][ T28] audit: type=1400 audit(1778024068.127:696): avc: denied { create } for pid=5092 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.161835][ T28] audit: type=1400 audit(1778024068.157:697): avc: denied { bind } for pid=5092 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.298401][ T3429] tipc: Node number set to 2886997007 [ 86.340313][ T28] audit: type=1400 audit(1778024068.387:698): avc: denied { execute } for pid=5097 comm="syz.4.497" name="file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.475205][ T28] audit: type=1400 audit(1778024068.417:699): avc: denied { execute_no_trans } for pid=5097 comm="syz.4.497" path="/94/file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.633157][ T28] audit: type=1400 audit(1778024068.457:700): avc: denied { sqpoll } for pid=5094 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.188582][ T5115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5115 comm=syz.1.513 [ 87.314232][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 87.340924][ T5118] IPVS: persistence engine module ip_vs_pe_€ not found [ 87.341789][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 87.342170][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 87.395210][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 87.410993][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=5128 comm=syz.1.505 [ 88.204541][ T5139] gre0 speed is unknown, defaulting to 1000 [ 88.257749][ T5152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 89.850400][ T5197] -: renamed from syzkaller0 [ 90.082585][ T5192] loop3: detected capacity change from 0 to 8192 [ 90.338517][ T5204] __nla_validate_parse: 1 callbacks suppressed [ 90.338537][ T5204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 90.371075][ T5204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 90.886608][ T28] audit: type=1400 audit(1778024072.927:701): avc: denied { cmd } for pid=5209 comm="syz.1.534" path="socket:[10490]" dev="sockfs" ino=10490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.372749][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 91.391857][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 91.409412][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 91.449558][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 91.458625][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 91.547737][ T5225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=5225 comm=syz.0.540 [ 91.669641][ T5232] -: renamed from syzkaller0 [ 91.860581][ T5244] loop0: detected capacity change from 0 to 128 [ 92.087805][ T5246] syz.0.548: attempt to access beyond end of device [ 92.087805][ T5246] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 92.164618][ T5246] syz.0.548: attempt to access beyond end of device [ 92.164618][ T5246] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 92.279752][ T5246] syz.0.548: attempt to access beyond end of device [ 92.279752][ T5246] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 92.708989][ T2003] kworker/u8:10: attempt to access beyond end of device [ 92.708989][ T2003] loop0: rw=1, sector=174, nr_sectors = 1 limit=128 [ 92.738091][ T2003] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 92.804998][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 93.315711][ T5262] loop0: detected capacity change from 0 to 8192 [ 93.678907][ T5258] loop4: detected capacity change from 0 to 512 [ 93.771389][ T5258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.926026][ T5258] EXT4-fs (loop4): 1 orphan inode deleted [ 93.939739][ T5275] loop2: detected capacity change from 0 to 8192 [ 93.956776][ T5258] EXT4-fs (loop4): 1 truncate cleaned up [ 94.138243][ T5258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.421021][ T28] audit: type=1400 audit(1778024076.437:702): avc: denied { watch watch_reads } for pid=5257 comm="syz.4.553" path="/104/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.654550][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.276988][ T5295] kexec: Could not allocate control_code_buffer [ 96.323413][ T5307] tmpfs: Bad value for 'size' [ 96.397482][ T5310] -: renamed from syzkaller0 [ 96.825628][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 96.861325][ T5321] tipc: Enabling of bearer rejected, already enabled [ 98.140704][ T5337] gre0 speed is unknown, defaulting to 1000 [ 98.883946][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 98.892969][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 98.903834][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 99.001142][ T5349] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 100.551626][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 100.619777][ T5365] loop4: detected capacity change from 0 to 8192 [ 100.966165][ T5358] kexec: Could not allocate control_code_buffer [ 101.217661][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.225073][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.351653][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.392539][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.558088][ T116] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.582398][ T116] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.592225][ T5386] gre0 speed is unknown, defaulting to 1000 [ 101.598468][ T116] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.630026][ T116] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.859094][ T5413] gre0 speed is unknown, defaulting to 1000 [ 103.890968][ T5434] netlink: 'syz.0.607': attribute type 1 has an invalid length. [ 103.925019][ T5434] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 103.941335][ T5434] macvlan2: entered promiscuous mode [ 103.941424][ T5434] macvlan2: entered allmulticast mode [ 103.942698][ T5434] bond1: entered promiscuous mode [ 103.942764][ T5434] bridge1: entered promiscuous mode [ 103.943216][ T5434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.945134][ T5434] bond1: left promiscuous mode [ 103.945216][ T5434] bridge1: left promiscuous mode [ 104.827472][ T5431] kexec: Could not allocate control_code_buffer [ 104.874770][ T5441] netlink: 22 bytes leftover after parsing attributes in process `syz.4.609'. [ 105.022149][ T5445] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 105.997824][ T5469] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 106.075429][ T5454] gre0 speed is unknown, defaulting to 1000 [ 106.086500][ T5473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.620'. [ 106.826056][ T5483] loop3: detected capacity change from 0 to 128 [ 106.920719][ T5483] syz.3.624: attempt to access beyond end of device [ 106.920719][ T5483] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 106.967839][ T5483] syz.3.624: attempt to access beyond end of device [ 106.967839][ T5483] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 107.005175][ T5483] syz.3.624: attempt to access beyond end of device [ 107.005175][ T5483] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 107.037888][ T5490] loop0: detected capacity change from 0 to 128 [ 107.045996][ T116] kworker/u8:5: attempt to access beyond end of device [ 107.045996][ T116] loop3: rw=1, sector=174, nr_sectors = 1 limit=128 [ 107.073223][ T116] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 107.279609][ T5505] loop1: detected capacity change from 0 to 128 [ 107.322335][ T5509] loop3: detected capacity change from 0 to 512 [ 107.340734][ T5509] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.375901][ T5509] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.392453][ T5509] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.632: Allocating blocks 41-42 which overlap fs metadata [ 107.407215][ T5509] loop3: lost filesystem error report for type 5 error -117 [ 107.407422][ T5509] Quota error (device loop3): write_blk: dquota write failed [ 107.414774][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 107.414795][ C0] EXT4-fs (loop3): initial error at time 1778024089: ext4_mb_mark_diskspace_used:4222 [ 107.414820][ C0] EXT4-fs (loop3): last error at time 1778024089: ext4_mb_mark_diskspace_used:4222 [ 107.448387][ T5509] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 107.458629][ T5509] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.632: Failed to acquire dquot type 0 [ 107.470104][ T5509] loop3: lost filesystem error report for type 5 error -117 [ 107.470269][ T5509] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 107.492497][ T5509] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.632: corrupted inode contents [ 107.505132][ T5509] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.505252][ T5509] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.632: mark_inode_dirty error [ 107.525796][ T5509] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.526021][ T5509] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.632: corrupted inode contents [ 107.547077][ T5509] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.547188][ T5509] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.632: mark_inode_dirty error [ 107.567737][ T5509] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.567922][ T5509] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.632: corrupted inode contents [ 107.588997][ T5509] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.589177][ T5509] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 107.607029][ T5509] loop3: lost filesystem error report for type 5 error -117 [ 107.609005][ T5509] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.632: corrupted inode contents [ 107.647694][ T5509] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.647819][ T5509] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.632: mark_inode_dirty error [ 107.687397][ T5515] loop2: detected capacity change from 0 to 4096 [ 107.690171][ T5509] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 107.702431][ T5515] EXT4-fs: Ignoring removed bh option [ 107.717597][ T5509] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 107.732329][ T5515] ext4: Unknown parameter 'fsuuid' [ 107.744651][ T5509] loop3: lost filesystem error report for type 5 error -117 [ 107.747828][ T5509] EXT4-fs (loop3): 1 truncate cleaned up [ 107.786770][ T5509] EXT4-fs (loop3): pa ffff8881088bd3f0: logic 1, phys. 41, len 23 [ 107.794699][ T5509] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 107.805900][ T5518] loop1: detected capacity change from 0 to 256 [ 107.835483][ T5509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.860573][ T5509] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.024772][ T5515] loop2: detected capacity change from 0 to 512 [ 108.056447][ T5515] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.304328][ T5534] loop2: detected capacity change from 0 to 128 [ 108.408478][ T5534] syz.2.639: attempt to access beyond end of device [ 108.408478][ T5534] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 108.438314][ T5534] syz.2.639: attempt to access beyond end of device [ 108.438314][ T5534] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 108.481423][ T5534] syz.2.639: attempt to access beyond end of device [ 108.481423][ T5534] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 108.540446][ T49] kworker/u8:3: attempt to access beyond end of device [ 108.540446][ T49] loop2: rw=1, sector=174, nr_sectors = 1 limit=128 [ 108.580981][ T49] Buffer I/O error on dev loop2, logical block 174, lost async page write [ 109.744764][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 109.745451][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 109.747844][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 110.197302][ T5550] kexec: Could not allocate control_code_buffer [ 110.245567][ T5571] loop3: detected capacity change from 0 to 4096 [ 110.246972][ T5571] EXT4-fs: Ignoring removed bh option [ 110.247015][ T5571] ext4: Unknown parameter 'fsuuid' [ 110.317521][ T5573] loop0: detected capacity change from 0 to 8192 [ 110.638059][ T5571] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.897861][ T5595] set_capacity_and_notify: 1 callbacks suppressed [ 111.897904][ T5595] loop1: detected capacity change from 0 to 512 [ 111.936252][ T5595] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 111.954842][ T5595] EXT4-fs (loop1): bad block size 32768 [ 112.128715][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 112.402800][ T5622] loop3: detected capacity change from 0 to 128 [ 112.558364][ T5624] gre0 speed is unknown, defaulting to 1000 [ 112.889244][ T5634] loop2: detected capacity change from 0 to 512 [ 112.911737][ T5634] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.948238][ T5634] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.968536][ T5634] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.677: Allocating blocks 41-42 which overlap fs metadata [ 113.002445][ T5634] loop2: lost filesystem error report for type 5 error -117 [ 113.003559][ T5634] Quota error (device loop2): write_blk: dquota write failed [ 113.011055][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 113.011077][ C0] EXT4-fs (loop2): initial error at time 1778024095: ext4_mb_mark_diskspace_used:4222 [ 113.011103][ C0] EXT4-fs (loop2): last error at time 1778024095: ext4_mb_mark_diskspace_used:4222 [ 113.044488][ T5634] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 113.054477][ T5634] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.677: Failed to acquire dquot type 0 [ 113.065763][ T5634] loop2: lost filesystem error report for type 5 error -117 [ 113.067270][ T5634] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 113.110412][ T5634] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.677: corrupted inode contents [ 113.122253][ T5634] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 113.122424][ T5634] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.677: mark_inode_dirty error [ 113.129727][ T5610] kexec: Could not allocate control_code_buffer [ 113.133173][ T5634] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 113.151972][ T5634] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.677: corrupted inode contents [ 113.175676][ T5634] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 113.175930][ T5634] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.677: mark_inode_dirty error [ 113.196605][ T5634] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 113.196742][ T5634] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.677: corrupted inode contents [ 113.217941][ T5634] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 113.218368][ T5634] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 113.236289][ T5634] loop2: lost filesystem error report for type 5 error -117 [ 113.236416][ T5634] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.677: corrupted inode contents [ 113.255484][ T5634] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 113.255608][ T5634] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.677: mark_inode_dirty error [ 113.275948][ T5634] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 113.276093][ T5634] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 113.294200][ T5634] loop2: lost filesystem error report for type 5 error -117 [ 113.294476][ T5634] EXT4-fs (loop2): 1 truncate cleaned up [ 113.307589][ T5634] EXT4-fs (loop2): pa ffff8881088bd380: logic 1, phys. 41, len 23 [ 113.315420][ T5634] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 113.326112][ T5634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.339488][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.437411][ T5641] netlink: 'syz.2.678': attribute type 10 has an invalid length. [ 113.988477][ T28] audit: type=1400 audit(1778024096.027:703): avc: denied { read } for pid=5653 comm="syz.4.685" lport=35161 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 114.113058][ T5646] loop3: detected capacity change from 0 to 1024 [ 114.159610][ T5646] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 114.159610][ T5646] [ 114.209073][ T5646] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 114.292311][ T5663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'. [ 114.412723][ T5639] kexec: Could not allocate control_code_buffer [ 114.520297][ T5669] loop1: detected capacity change from 0 to 512 [ 114.563023][ T5672] loop2: detected capacity change from 0 to 256 [ 114.656276][ T5669] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.685878][ T5669] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.696334][ T5669] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.691: Allocating blocks 41-42 which overlap fs metadata [ 114.712454][ T5669] loop1: lost filesystem error report for type 5 error -117 [ 114.728188][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 114.742732][ C1] EXT4-fs (loop1): initial error at time 1778024096: ext4_mb_mark_diskspace_used:4222 [ 114.753078][ C1] EXT4-fs (loop1): last error at time 1778024096: ext4_mb_mark_diskspace_used:4222 [ 115.167040][ T5669] Quota error (device loop1): write_blk: dquota write failed [ 115.185115][ T5669] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 115.206896][ T5669] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.691: Failed to acquire dquot type 0 [ 115.218398][ T5669] loop1: lost filesystem error report for type 5 error -117 [ 115.218566][ T5669] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 115.241044][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.691: corrupted inode contents [ 115.252865][ T5669] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 115.253075][ T5669] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.691: mark_inode_dirty error [ 115.273634][ T5669] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 115.273795][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.691: corrupted inode contents [ 115.294981][ T5669] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 115.295120][ T5669] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.691: mark_inode_dirty error [ 115.315736][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.691: corrupted inode contents [ 115.327837][ T5669] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 115.419311][ T5669] loop1: lost filesystem error report for type 5 error -117 [ 115.419502][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.691: corrupted inode contents [ 115.443797][ T5669] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.691: mark_inode_dirty error [ 115.460454][ T5669] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 115.481862][ T5669] loop1: lost filesystem error report for type 5 error -117 [ 115.498185][ T5669] EXT4-fs (loop1): 1 truncate cleaned up [ 115.531918][ T5669] EXT4-fs (loop1): pa ffff8881088bd3f0: logic 1, phys. 41, len 23 [ 115.539992][ T5669] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 115.570696][ T5669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.576087][ T5686] gre0 speed is unknown, defaulting to 1000 [ 115.600137][ T5669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.746172][ T5667] kexec: Could not allocate control_code_buffer [ 116.969710][ T5697] loop0: detected capacity change from 0 to 1024 [ 116.999333][ T5697] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 116.999333][ T5697] [ 117.026180][ T5697] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 117.163377][ T5710] loop4: detected capacity change from 0 to 4096 [ 117.184642][ T5710] EXT4-fs: Ignoring removed bh option [ 117.202701][ T5710] ext4: Unknown parameter 'fsuuid' [ 117.343165][ T5715] loop0: detected capacity change from 0 to 256 [ 117.629193][ T5710] loop4: detected capacity change from 0 to 512 [ 117.686019][ T5710] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.088891][ T5717] loop1: detected capacity change from 0 to 8192 [ 120.117542][ T5747] loop4: detected capacity change from 0 to 1024 [ 120.151412][ T5747] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 120.151412][ T5747] [ 120.174223][ T5747] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 120.307076][ T5762] loop0: detected capacity change from 0 to 4096 [ 120.326633][ T5762] EXT4-fs: Ignoring removed bh option [ 120.352265][ T5762] ext4: Unknown parameter 'fsuuid' [ 120.358602][ T28] audit: type=1400 audit(1778024102.407:704): avc: denied { bind } for pid=5769 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.385779][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 120.643868][ T5780] bridge0: port 3(ip6gretap0) entered blocking state [ 120.674809][ T5780] bridge0: port 3(ip6gretap0) entered disabled state [ 120.729259][ T5780] ip6gretap0: entered allmulticast mode [ 120.771128][ T5780] ip6gretap0: entered promiscuous mode [ 120.790323][ T5780] bridge0: port 3(ip6gretap0) entered blocking state [ 120.798716][ T5780] bridge0: port 3(ip6gretap0) entered forwarding state [ 120.875073][ T5762] loop0: detected capacity change from 0 to 512 [ 120.881828][ T5778] ip6gretap0: left allmulticast mode [ 120.908804][ T28] audit: type=1400 audit(1778024102.947:705): avc: denied { ioctl } for pid=5781 comm="syz.3.733" path="socket:[12562]" dev="sockfs" ino=12562 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.936192][ T5778] ip6gretap0: left promiscuous mode [ 120.952374][ T5778] bridge0: port 3(ip6gretap0) entered disabled state [ 120.973807][ T5762] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.022074][ T5784] syzkaller0: entered promiscuous mode [ 121.037378][ T5784] syzkaller0: entered allmulticast mode [ 121.183662][ T5768] ================================================================== [ 121.191902][ T5768] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 121.198892][ T5768] [ 121.201237][ T5768] read-write to 0xffff88810dadbea4 of 4 bytes by task 5773 on cpu 0: [ 121.209331][ T5768] fifo_open+0x59f/0x5d0 [ 121.213610][ T5768] do_dentry_open+0x4be/0xa90 [ 121.218313][ T5768] vfs_open+0x37/0x1e0 [ 121.222403][ T5768] path_openat+0x1b70/0x2050 [ 121.227103][ T5768] do_file_open+0x16c/0x290 [ 121.231648][ T5768] do_sys_openat2+0x94/0x130 [ 121.236434][ T5768] __x64_sys_openat+0xf2/0x120 [ 121.241235][ T5768] x64_sys_call+0x1e39/0x3020 [ 121.245943][ T5768] do_syscall_64+0x12c/0x3b0 [ 121.250568][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.256578][ T5768] [ 121.258941][ T5768] read to 0xffff88810dadbea4 of 4 bytes by task 5768 on cpu 1: [ 121.266502][ T5768] wait_for_partner+0xd5/0x1e0 [ 121.271306][ T5768] fifo_open+0x462/0x5d0 [ 121.275590][ T5768] do_dentry_open+0x4be/0xa90 [ 121.280380][ T5768] vfs_open+0x37/0x1e0 [ 121.284475][ T5768] path_openat+0x1b70/0x2050 [ 121.289105][ T5768] do_file_open+0x16c/0x290 [ 121.293641][ T5768] do_sys_openat2+0x94/0x130 [ 121.298252][ T5768] __se_sys_openat2+0x193/0x1f0 [ 121.303132][ T5768] __x64_sys_openat2+0x55/0x70 [ 121.307928][ T5768] x64_sys_call+0x2170/0x3020 [ 121.312624][ T5768] do_syscall_64+0x12c/0x3b0 [ 121.317244][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.323154][ T5768] [ 121.325494][ T5768] value changed: 0x00000001 -> 0x00000002 [ 121.331229][ T5768] [ 121.333568][ T5768] Reported by Kernel Concurrency Sanitizer on: [ 121.339736][ T5768] CPU: 1 UID: 0 PID: 5768 Comm: syz.4.728 Not tainted syzkaller #0 PREEMPT(full) [ 121.348957][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.359209][ T5768] ================================================================== [ 121.660478][ T5773] ================================================================== [ 121.668626][ T5773] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 121.675617][ T5773] [ 121.677966][ T5773] read-write to 0xffff88813d9dd724 of 4 bytes by task 5768 on cpu 0: [ 121.686093][ T5773] fifo_open+0x86/0x5d0 [ 121.690287][ T5773] do_dentry_open+0x4be/0xa90 [ 121.694994][ T5773] vfs_open+0x37/0x1e0 [ 121.699084][ T5773] path_openat+0x1b70/0x2050 [ 121.703698][ T5773] do_file_open+0x16c/0x290 [ 121.708228][ T5773] do_sys_openat2+0x94/0x130 [ 121.712847][ T5773] __se_sys_openat2+0x193/0x1f0 [ 121.717746][ T5773] __x64_sys_openat2+0x55/0x70 [ 121.722538][ T5773] x64_sys_call+0x2170/0x3020 [ 121.727246][ T5773] do_syscall_64+0x12c/0x3b0 [ 121.731870][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.737968][ T5773] [ 121.740310][ T5773] read to 0xffff88813d9dd724 of 4 bytes by task 5773 on cpu 1: [ 121.747872][ T5773] wait_for_partner+0xd5/0x1e0 [ 121.752678][ T5773] fifo_open+0x462/0x5d0 [ 121.756949][ T5773] do_dentry_open+0x4be/0xa90 [ 121.761647][ T5773] vfs_open+0x37/0x1e0 [ 121.765736][ T5773] path_openat+0x1b70/0x2050 [ 121.770351][ T5773] do_file_open+0x16c/0x290 [ 121.774881][ T5773] do_sys_openat2+0x94/0x130 [ 121.779496][ T5773] __x64_sys_openat+0xf2/0x120 [ 121.784288][ T5773] x64_sys_call+0x1e39/0x3020 [ 121.788989][ T5773] do_syscall_64+0x12c/0x3b0 [ 121.793610][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.799525][ T5773] [ 121.801859][ T5773] value changed: 0x00000001 -> 0x00000002 [ 121.807586][ T5773] [ 121.809922][ T5773] Reported by Kernel Concurrency Sanitizer on: [ 121.816092][ T5773] CPU: 1 UID: 0 PID: 5773 Comm: syz.4.728 Not tainted syzkaller #0 PREEMPT(full) [ 121.825315][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.835389][ T5773] ==================================================================