last executing test programs: 37.444068677s ago: executing program 3 (id=113): open(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x141d6, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121c, &(0x7f0000003680)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 37.201709175s ago: executing program 3 (id=116): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf8ffffff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 36.937874623s ago: executing program 3 (id=122): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x8, 0x3, 0x28c}) r1 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4084) close_range(r0, 0xffffffffffffffff, 0x0) 36.684064852s ago: executing program 3 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 36.604901424s ago: executing program 3 (id=128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 35.639996075s ago: executing program 3 (id=150): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 35.591936337s ago: executing program 32 (id=150): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23.253616896s ago: executing program 4 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 23.056062153s ago: executing program 4 (id=362): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0x8fffa, [0x1000000, 0x2], 0x2}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 20.822085285s ago: executing program 4 (id=393): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 20.691845479s ago: executing program 5 (id=398): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 20.618007282s ago: executing program 5 (id=401): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x400000000009, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x8}, 0x224, 0x0, 0x43a1bd76, 0x3, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60004841}, 0x20040005) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x12) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 20.567772424s ago: executing program 4 (id=404): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0xfffffffd, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) r3 = dup3(r2, r0, 0x80000) read$eventfd(r3, &(0x7f0000000140), 0x8) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './bus'}, 0x9) 20.511983805s ago: executing program 4 (id=406): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000037) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 20.435564647s ago: executing program 4 (id=411): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000180)={@random="e904a200", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 19.714873041s ago: executing program 5 (id=422): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) 18.780881521s ago: executing program 5 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18.696189654s ago: executing program 5 (id=435): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.458135512s ago: executing program 5 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.u'}, 0xfe78) 18.362820605s ago: executing program 33 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.u'}, 0xfe78) 17.373678817s ago: executing program 0 (id=452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x14, 0x4) connect$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x57, @any, 0xfffa, 0x2}, 0xe) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 17.094213296s ago: executing program 0 (id=456): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 15.919886204s ago: executing program 0 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = eventfd2(0x8, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r1, &(0x7f0000000480)=""/82, 0x52) 14.980764664s ago: executing program 0 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@block_validity}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@debug}, {@data_journal}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.622060666s ago: executing program 0 (id=473): sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000300)={0x7f8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x17}}}}, [@NL80211_ATTR_TESTDATA={0x7d8, 0x45, "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"}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x2000c8d4}, 0x4000084) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be07702bff060000000000000000000000000008aaff020000000000000000000000000001"], 0xfdef) 13.693560106s ago: executing program 0 (id=479): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) 13.642062067s ago: executing program 34 (id=479): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) 5.341480416s ago: executing program 35 (id=411): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000180)={@random="e904a200", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 1.377454245s ago: executing program 8 (id=565): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x8}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 1.21927392s ago: executing program 8 (id=566): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$watch_queue(r1, &(0x7f0000000080)=""/214, 0xfffffd7f) 1.153867512s ago: executing program 7 (id=569): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 1.066796015s ago: executing program 6 (id=571): set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbcd6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x51, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x3}}}]}]}]}}]}, 0x50}}, 0x1d56ce4333ce878e) 804.353943ms ago: executing program 7 (id=573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0x404}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 785.104854ms ago: executing program 6 (id=574): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r0, 0x402, 0x3b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) r2 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(r2, 0x0, r1, 0x0, 0x59, 0x2) 717.978057ms ago: executing program 6 (id=577): open(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x141d6, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121c, &(0x7f0000003680)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 704.137617ms ago: executing program 7 (id=578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9}, {0x7, 0x8, 0x4, 0x2, 0xf, 0x2, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 631.056799ms ago: executing program 1 (id=580): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000100)="d5c0", 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'memory'}]}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 566.443681ms ago: executing program 7 (id=582): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_read_part_table(0x5d9, &(0x7f0000000000)="$eJzs0r9rW1cUB/DzXqsoHYJECKTQpRCTSU2KlhQqUYpRhRcnhLRk6D+QDIUEOngwUpXMaTJ1s/GPgvFiOrSToUONZTAuyJORV4+lg+miobwi67nFNW0H125tPp9B993vu0fnXu4LzrU0fs6yLImIrHiYfZG/iXjy7t9Xf7zc+Gji7Xsf3n8QkcTjiJh85/F3wzdJvuLwX7/J53fz+USx2pvbHN9fLm/d2O6OLaQRhWF+KSLaw/r2Yul4vyTeP/mRuUBW6uulZ8+fNl9M1R/tNKf3Cnn+6s58rfXT9drDdPRNraa/l/zxFBs//Nv9L+f5zJVbhW5vUN3I55XkSFly0r78P6z8mg29mQ3v/4PpvdlrnX5nMHlzqXC7crW/1np5cNPf/1V54Uw3CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXGgr9fXSs+dP04jIXhtFjbe+bHz26s58rfXJ9drDdBSupqfav/liqv5opzm9N9Z77+sfs8sxc+VWoXtpUN3I11WSI2Wt09kNZ+3P9z97rdPvDCZvLn1+u3K1v9Z6mXz1ZLju9f96owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAudH4ZTci7j+ISOLTiBhPy4vDPCtGlHePr79bHI0TxWpvbnN8f7m8dWO7O7ZwL89X04h2vHHw/O3B79RhaWk0FEZDOyLS0z0b/+y3AAAA///EuoFM") 556.417051ms ago: executing program 1 (id=583): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000300)='S', 0x1}], 0x1}, 0x40001) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) sendmsg(r1, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="b583cfff155b", 0x6}], 0x1}, 0x8084) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 542.761852ms ago: executing program 6 (id=585): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x9}]}}}}}}}, 0x0) 465.710085ms ago: executing program 2 (id=586): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 464.271994ms ago: executing program 1 (id=587): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x4, 0x3ff, 0xffffffffffffffff, 0x0, 0x3]}, &(0x7f0000000240)=0x78) 419.496116ms ago: executing program 2 (id=588): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 400.709247ms ago: executing program 1 (id=589): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xb}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 357.183948ms ago: executing program 6 (id=590): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) fcntl$setstatus(r0, 0x4, 0x2c00) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 310.692829ms ago: executing program 2 (id=591): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 276.137811ms ago: executing program 8 (id=592): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000080)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) 271.186641ms ago: executing program 6 (id=593): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 219.317442ms ago: executing program 8 (id=594): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 214.151993ms ago: executing program 1 (id=595): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)}], 0x2}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x81c0200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 149.299975ms ago: executing program 7 (id=596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x90, 0x6, @random="b4741b9e11e8"}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 140.424185ms ago: executing program 2 (id=597): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) capset(0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x30}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}, 0x1400c0c0) 83.191277ms ago: executing program 2 (id=598): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000840)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 37.435248ms ago: executing program 8 (id=599): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 34.401578ms ago: executing program 1 (id=609): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 9.430719ms ago: executing program 7 (id=600): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 1.14064ms ago: executing program 8 (id=601): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000000240)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}, 0x58) 0s ago: executing program 2 (id=602): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000200)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 24.777701][ T28] audit: type=1400 audit(1781098871.222:108): avc: denied { siginh } for pid=3211 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.796734][ T28] audit: type=1400 audit(1781098871.272:109): avc: denied { search } for pid=3212 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.818893][ T28] audit: type=1400 audit(1781098871.272:110): avc: denied { search } for pid=3212 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.842569][ T28] audit: type=1400 audit(1781098871.272:111): avc: denied { search } for pid=3212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.865913][ T28] audit: type=1400 audit(1781098871.272:112): avc: denied { getattr } for pid=3212 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.891228][ T28] audit: type=1400 audit(1781098871.272:113): avc: denied { write } for pid=3212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 34.063014][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 34.063033][ T28] audit: type=1400 audit(1781098880.572:125): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.092295][ T28] audit: type=1400 audit(1781098880.602:126): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.094588][ T3285] cgroup: Unknown subsys name 'net' [ 34.120159][ T28] audit: type=1400 audit(1781098880.632:127): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.257834][ T3285] cgroup: Unknown subsys name 'cpuset' [ 34.264101][ T3285] cgroup: Unknown subsys name 'rlimit' [ 34.395816][ T28] audit: type=1400 audit(1781098880.902:128): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.431056][ T28] audit: type=1400 audit(1781098880.912:129): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.451948][ T28] audit: type=1400 audit(1781098880.912:130): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.472450][ T28] audit: type=1400 audit(1781098880.912:131): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.492904][ T28] audit: type=1400 audit(1781098880.922:132): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.517879][ T28] audit: type=1400 audit(1781098880.932:133): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.538603][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.541306][ T28] audit: type=1400 audit(1781098880.932:134): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.637409][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.940396][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.947675][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.955002][ T3298] bridge_slave_0: entered allmulticast mode [ 35.961731][ T3298] bridge_slave_0: entered promiscuous mode [ 35.990686][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.997832][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.005046][ T3298] bridge_slave_1: entered allmulticast mode [ 36.011565][ T3298] bridge_slave_1: entered promiscuous mode [ 36.037465][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.044573][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.051881][ T3301] bridge_slave_0: entered allmulticast mode [ 36.058321][ T3301] bridge_slave_0: entered promiscuous mode [ 36.080822][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.088037][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.095190][ T3301] bridge_slave_1: entered allmulticast mode [ 36.101622][ T3301] bridge_slave_1: entered promiscuous mode [ 36.116801][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.144927][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.154328][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.161420][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.168607][ T3297] bridge_slave_0: entered allmulticast mode [ 36.175255][ T3297] bridge_slave_0: entered promiscuous mode [ 36.202507][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.209759][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.216930][ T3297] bridge_slave_1: entered allmulticast mode [ 36.223362][ T3297] bridge_slave_1: entered promiscuous mode [ 36.231166][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.242694][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.249828][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.257259][ T3302] bridge_slave_0: entered allmulticast mode [ 36.263571][ T3302] bridge_slave_0: entered promiscuous mode [ 36.270892][ T3298] team0: Port device team_slave_0 added [ 36.282325][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.296062][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.303420][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.310735][ T3302] bridge_slave_1: entered allmulticast mode [ 36.317216][ T3302] bridge_slave_1: entered promiscuous mode [ 36.324416][ T3298] team0: Port device team_slave_1 added [ 36.354432][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.368632][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.375763][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.382989][ T3303] bridge_slave_0: entered allmulticast mode [ 36.389718][ T3303] bridge_slave_0: entered promiscuous mode [ 36.407020][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.417173][ T3301] team0: Port device team_slave_0 added [ 36.422935][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.430133][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.437327][ T3303] bridge_slave_1: entered allmulticast mode [ 36.443845][ T3303] bridge_slave_1: entered promiscuous mode [ 36.451504][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.461029][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.468067][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.494166][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.510718][ T3301] team0: Port device team_slave_1 added [ 36.522269][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.536297][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.543306][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.569257][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.603285][ T3297] team0: Port device team_slave_0 added [ 36.614656][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.625075][ T3302] team0: Port device team_slave_0 added [ 36.631957][ T3302] team0: Port device team_slave_1 added [ 36.638535][ T3297] team0: Port device team_slave_1 added [ 36.644480][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.651491][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.677472][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.689275][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.712113][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.719206][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.745179][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.777658][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.784662][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.810629][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.829025][ T3298] hsr_slave_0: entered promiscuous mode [ 36.835045][ T3298] hsr_slave_1: entered promiscuous mode [ 36.841479][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.848495][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.874510][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.892350][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.899379][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.925494][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.937119][ T3303] team0: Port device team_slave_0 added [ 36.943998][ T3303] team0: Port device team_slave_1 added [ 36.950033][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.956985][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.983012][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.038149][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.045164][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.071223][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.084476][ T3301] hsr_slave_0: entered promiscuous mode [ 37.090672][ T3301] hsr_slave_1: entered promiscuous mode [ 37.096457][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 37.102235][ T3301] Cannot create hsr debugfs directory [ 37.119804][ T3297] hsr_slave_0: entered promiscuous mode [ 37.125876][ T3297] hsr_slave_1: entered promiscuous mode [ 37.131787][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 37.137539][ T3297] Cannot create hsr debugfs directory [ 37.143300][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.150379][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.176352][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.212001][ T3302] hsr_slave_0: entered promiscuous mode [ 37.218098][ T3302] hsr_slave_1: entered promiscuous mode [ 37.223897][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 37.229678][ T3302] Cannot create hsr debugfs directory [ 37.283611][ T3303] hsr_slave_0: entered promiscuous mode [ 37.289698][ T3303] hsr_slave_1: entered promiscuous mode [ 37.295603][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 37.301375][ T3303] Cannot create hsr debugfs directory [ 37.470007][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.478566][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.491086][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.499751][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.513776][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.522548][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.533057][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.542834][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.550423][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.559281][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.567129][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.576009][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.583947][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.593103][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.603528][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.612535][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.642366][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.651132][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.661057][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.669832][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.682113][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.691404][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.706027][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.714855][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.744455][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.753199][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.761146][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.769977][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.778220][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.786998][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.804501][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.813731][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.838748][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.847597][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.855219][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.863971][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.871739][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.880619][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.896509][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.905492][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.934083][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.953597][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.961444][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.972655][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.979827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.995110][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.002207][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.029184][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.053848][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.060994][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.071396][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.087891][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.095002][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.115680][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.135528][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.152628][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.159731][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.170060][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.185788][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.195823][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.202940][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.218553][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.229511][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.236629][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.255518][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.262691][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.271624][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.278715][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.288621][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.295752][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.514433][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.560746][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.640895][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.682077][ T3302] veth0_vlan: entered promiscuous mode [ 38.701052][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.713733][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.729999][ T3302] veth1_vlan: entered promiscuous mode [ 38.746587][ T3298] veth0_vlan: entered promiscuous mode [ 38.774525][ T3298] veth1_vlan: entered promiscuous mode [ 38.800301][ T3302] veth0_macvtap: entered promiscuous mode [ 38.813146][ T3302] veth1_macvtap: entered promiscuous mode [ 38.842694][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.853079][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.874785][ T3298] veth0_macvtap: entered promiscuous mode [ 38.889859][ T3298] veth1_macvtap: entered promiscuous mode [ 38.898816][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.908156][ T114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.921366][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.943688][ T114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.952708][ T114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965638][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.980697][ T3303] veth0_vlan: entered promiscuous mode [ 38.991942][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.000770][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.018419][ T3303] veth1_vlan: entered promiscuous mode [ 39.029491][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.039744][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.062115][ T3297] veth0_vlan: entered promiscuous mode [ 39.078565][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.091867][ T3297] veth1_vlan: entered promiscuous mode [ 39.108200][ T3301] veth0_vlan: entered promiscuous mode [ 39.117621][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 39.117638][ T28] audit: type=1400 audit(1781098885.622:154): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.135508][ T3303] veth0_macvtap: entered promiscuous mode [ 39.162130][ T3303] veth1_macvtap: entered promiscuous mode [ 39.170502][ T28] audit: type=1400 audit(1781098885.632:155): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.197723][ T3301] veth1_vlan: entered promiscuous mode [ 39.213008][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.236592][ T3297] veth0_macvtap: entered promiscuous mode [ 39.238445][ T28] audit: type=1400 audit(1781098885.662:156): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.260079][ T3297] veth1_macvtap: entered promiscuous mode [ 39.275129][ T3301] veth0_macvtap: entered promiscuous mode [ 39.284042][ T3301] veth1_macvtap: entered promiscuous mode [ 39.290688][ T28] audit: type=1400 audit(1781098885.782:157): avc: denied { name_bind } for pid=3506 comm="syz.3.4" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.316599][ T28] audit: type=1400 audit(1781098885.782:158): avc: denied { node_bind } for pid=3506 comm="syz.3.4" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 39.327839][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.340678][ T28] audit: type=1400 audit(1781098885.792:159): avc: denied { open } for pid=3504 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.376591][ T28] audit: type=1400 audit(1781098885.792:160): avc: denied { perfmon } for pid=3504 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.403530][ T28] audit: type=1400 audit(1781098885.792:161): avc: denied { kernel } for pid=3504 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.424755][ T404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.433655][ T404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.460079][ T404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.468904][ T404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.488112][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.496904][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.514497][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.526795][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.539666][ T3460] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.548990][ T3460] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.562544][ T3460] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575842][ T3460] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.598365][ T404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.614762][ T404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.625912][ T404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.637448][ T404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.801451][ T28] audit: type=1400 audit(1781098886.312:162): avc: denied { prog_load } for pid=3519 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.846770][ T28] audit: type=1400 audit(1781098886.312:163): avc: denied { bpf } for pid=3519 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.114308][ T3532] syz.1.13 (3532) used greatest stack depth: 10808 bytes left [ 40.182890][ T3543] loop2: detected capacity change from 0 to 7 [ 40.244766][ T3545] loop4: detected capacity change from 0 to 2048 [ 40.279452][ T3545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.410096][ T3555] xt_hashlimit: size too large, truncated to 1048576 [ 40.484356][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.520095][ T3556] bridge_slave_0 (unregistering): left allmulticast mode [ 40.532411][ T3545] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.549160][ T3545] EXT4-fs (loop4): Remounting filesystem read-only [ 40.557981][ T3556] bridge_slave_0 (unregistering): left promiscuous mode [ 40.602512][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.614444][ T3545] syz.4.19 (3545) used greatest stack depth: 9424 bytes left [ 40.634613][ T3564] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 40.663458][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.805549][ T3573] loop0: detected capacity change from 0 to 128 [ 40.919075][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 41.128321][ T3604] loop4: detected capacity change from 0 to 512 [ 41.174881][ T3604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec19c, mo2=0002] [ 41.187309][ T3604] System zones: 1-12 [ 41.196715][ T3604] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.40: corrupted in-inode xattr: e_value size too large [ 41.261519][ T3604] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.261773][ T3604] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.40: couldn't read orphan inode 15 (err -117) [ 41.271118][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 41.271147][ C1] EXT4-fs (loop4): initial error at time 1781098887: ext4_iget_extra_inode:5128: inode 15 [ 41.271186][ C1] EXT4-fs (loop4): last error at time 1781098887: ext4_iget_extra_inode:5128: inode 15 [ 41.323683][ T3604] loop4: lost filesystem error report for type 5 error -117 [ 41.324391][ T3604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.635315][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.078472][ T3686] loop1: detected capacity change from 0 to 8192 [ 43.159434][ T3686] loop1: p1 p2 p3 p4 [ 43.163537][ T3686] loop1: p1 start 16777216 is beyond EOD, truncated [ 43.170618][ T3686] loop1: p2 start 268435456 is beyond EOD, truncated [ 43.192116][ T3686] loop1: p4 size 33554432 extends beyond EOD, truncated [ 43.379404][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 43.379485][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 43.468052][ T3342] IPVS: starting estimator thread 0... [ 43.557187][ T3714] IPVS: using max 2256 ests per chain, 112800 per kthread [ 43.597511][ T3727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 43.632709][ T3727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 43.642173][ T404] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.657841][ T404] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.677368][ T3727] Zero length message leads to an empty skb [ 43.693680][ T404] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.723795][ T404] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.871157][ T3746] capability: warning: `syz.1.95' uses 32-bit capabilities (legacy support in use) [ 44.140874][ T3760] loop2: detected capacity change from 0 to 2048 [ 44.184764][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 44.184783][ T28] audit: type=1400 audit(1781098890.692:287): avc: denied { watch_reads } for pid=3765 comm="syz.0.103" path="/18" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.239632][ T28] audit: type=1400 audit(1781098890.702:288): avc: denied { create } for pid=3745 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.280824][ T28] audit: type=1400 audit(1781098890.712:289): avc: denied { setopt } for pid=3745 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.365665][ T28] audit: type=1326 audit(1781098890.812:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.4.82" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80eb7ce59 code=0x7fc00000 [ 44.431101][ T28] audit: type=1400 audit(1781098890.842:291): avc: denied { cpu } for pid=3767 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.545162][ T28] audit: type=1400 audit(1781098891.052:292): avc: denied { shutdown } for pid=3777 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.613853][ T28] audit: type=1400 audit(1781098891.052:293): avc: denied { getopt } for pid=3777 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.634063][ T28] audit: type=1400 audit(1781098891.092:294): avc: denied { write } for pid=3777 comm="syz.4.108" laddr=fe80::10 lport=35872 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 44.817034][ T3792] netlink: 7 bytes leftover after parsing attributes in process `syz.4.114'. [ 44.914826][ T3793] loop3: detected capacity change from 0 to 8192 [ 44.962310][ T3793] ======================================================= [ 44.962310][ T3793] WARNING: The mand mount option has been deprecated and [ 44.962310][ T3793] and is ignored by this kernel. Remove the mand [ 44.962310][ T3793] option from the mount to silence this warning. [ 44.962310][ T3793] ======================================================= [ 45.284819][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 45.297373][ T3806] loop1: detected capacity change from 0 to 2048 [ 45.343442][ T3806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.379455][ T28] audit: type=1400 audit(1781098891.892:295): avc: denied { write } for pid=3804 comm="syz.1.120" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.515143][ T3814] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.537379][ T3814] EXT4-fs (loop1): Remounting filesystem read-only [ 45.563874][ T3812] loop4: detected capacity change from 0 to 8192 [ 45.630482][ T3812] loop4: p1 p2 p3 p4 [ 45.642372][ T3812] loop4: p1 start 16777216 is beyond EOD, truncated [ 45.664127][ T3812] loop4: p2 start 268435456 is beyond EOD, truncated [ 45.675946][ T3812] loop4: p4 size 33554432 extends beyond EOD, truncated [ 45.686355][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.735024][ T3830] loop2: detected capacity change from 0 to 128 [ 45.759487][ T3830] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.786511][ T3830] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.833117][ T28] audit: type=1400 audit(1781098892.332:296): avc: denied { ioctl } for pid=3829 comm="syz.2.130" path="socket:[6289]" dev="sockfs" ino=6289 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.873015][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 45.889046][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 45.922917][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.023214][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 46.040866][ T3845] loop4: detected capacity change from 0 to 128 [ 46.048072][ T3845] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.069166][ T3845] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.104334][ T68] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.345879][ T3864] netlink: 32 bytes leftover after parsing attributes in process `syz.4.143'. [ 46.386004][ T3860] loop2: detected capacity change from 0 to 8192 [ 46.392783][ T3862] loop0: detected capacity change from 0 to 2048 [ 46.440676][ T3860] loop2: p1 p2 p3 p4 [ 46.448832][ T3860] loop2: p1 start 16777216 is beyond EOD, truncated [ 46.452916][ T3862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.467877][ T3860] loop2: p2 start 268435456 is beyond EOD, truncated [ 46.475344][ T3860] loop2: p4 size 33554432 extends beyond EOD, truncated [ 46.523165][ T3872] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 46.605870][ T3876] loop4: detected capacity change from 0 to 128 [ 46.656051][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 46.693022][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 46.709823][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 46.744470][ T3883] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.759875][ T3883] EXT4-fs (loop0): Remounting filesystem read-only [ 46.901123][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.051301][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.058507][ T3885] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.065723][ T3885] bridge_slave_0: entered allmulticast mode [ 47.072475][ T3885] bridge_slave_0: entered promiscuous mode [ 47.079458][ T3885] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.086668][ T3885] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.093999][ T3885] bridge_slave_1: entered allmulticast mode [ 47.112801][ T3885] bridge_slave_1: entered promiscuous mode [ 47.136151][ T3885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.147000][ T3885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.168142][ T3885] team0: Port device team_slave_0 added [ 47.174916][ T3885] team0: Port device team_slave_1 added [ 47.205996][ T3885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.213027][ T3885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.239181][ T3885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.250625][ T3885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.257852][ T3885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.290411][ T3885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.363145][ T3885] hsr_slave_0: entered promiscuous mode [ 47.388657][ T3885] hsr_slave_1: entered promiscuous mode [ 47.397498][ T3885] debugfs: 'hsr0' already exists in 'hsr' [ 47.407220][ T3885] Cannot create hsr debugfs directory [ 47.423327][ T3915] loop0: detected capacity change from 0 to 8192 [ 47.468355][ T3915] loop0: p1 p2 p3 p4 [ 47.472505][ T3915] loop0: p1 start 16777216 is beyond EOD, truncated [ 47.480513][ T3915] loop0: p2 start 268435456 is beyond EOD, truncated [ 47.508163][ T3915] loop0: p4 size 33554432 extends beyond EOD, truncated [ 47.532352][ T3921] loop4: detected capacity change from 0 to 512 [ 47.580477][ T3885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.589731][ T3921] EXT4-fs (loop4): 1 truncate cleaned up [ 47.596137][ T3923] loop2: detected capacity change from 0 to 2048 [ 47.605496][ T3885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.614439][ T3885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.618212][ T3921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.639678][ T3885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.652031][ T3885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.673726][ T3885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.677363][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.699605][ T3885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.725723][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 47.730328][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 47.736454][ T3926] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 47.749112][ T3885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.771748][ T3926] EXT4-fs (loop4): Remounting filesystem read-only [ 47.784461][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.828597][ T3945] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.846076][ T3945] EXT4-fs (loop2): Remounting filesystem read-only [ 47.875405][ T3885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.889854][ T3885] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.900522][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.907735][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.921684][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.928981][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.945062][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.016475][ T3962] EXT4-fs: Ignoring removed bh option [ 48.023541][ T3962] EXT4-fs: inline encryption not supported [ 48.031637][ T3962] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.048728][ T3962] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 48.063488][ T3962] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.171: bg 0: block 248: padding at end of block bitmap is not set [ 48.077999][ T3962] loop0: lost filesystem error report for type 5 error -117 [ 48.078293][ T3962] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.171: Failed to acquire dquot type 1 [ 48.087109][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 48.097842][ T3962] loop0: lost filesystem error report for type 5 error -28 [ 48.103238][ C0] EXT4-fs (loop0): last error at time 1781098894: ext4_validate_block_bitmap:441 [ 48.104864][ T3962] EXT4-fs (loop0): 1 truncate cleaned up [ 48.110506][ C0] [ 48.128207][ T3962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 48.195762][ T3885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.328405][ T3885] veth0_vlan: entered promiscuous mode [ 48.334992][ T3962] syz.0.171 (3962) used greatest stack depth: 9128 bytes left [ 48.340148][ T3885] veth1_vlan: entered promiscuous mode [ 48.349749][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 48.359338][ T68] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 48.371087][ T68] loop0: lost filesystem error report for type 5 error -117 [ 48.373007][ T3885] veth0_macvtap: entered promiscuous mode [ 48.389145][ T3885] veth1_macvtap: entered promiscuous mode [ 48.401630][ T3885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.415382][ T3885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.429481][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.438783][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.448268][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.458887][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.601948][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.651210][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.697740][ T4002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13588 sclass=netlink_route_socket pid=4002 comm=syz.1.176 [ 48.717402][ T4002] netlink: 7 bytes leftover after parsing attributes in process `syz.1.176'. [ 48.747929][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.815483][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.910912][ T4011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.997459][ T36] bridge_slave_1: left allmulticast mode [ 49.003313][ T36] bridge_slave_1: left promiscuous mode [ 49.010695][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.021407][ T36] bridge_slave_0: left allmulticast mode [ 49.027336][ T36] bridge_slave_0: left promiscuous mode [ 49.033094][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.081857][ T4011] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.097606][ T4011] EXT4-fs (loop5): Remounting filesystem read-only [ 49.121208][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.131162][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.140903][ T36] bond0 (unregistering): Released all slaves [ 49.163766][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.190129][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 49.190148][ T28] audit: type=1400 audit(1781098895.702:324): avc: denied { append } for pid=4030 comm="syz.5.183" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.223932][ T36] hsr_slave_0: left promiscuous mode [ 49.229783][ T36] hsr_slave_1: left promiscuous mode [ 49.235538][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.244611][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.277359][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.284968][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.300342][ T36] veth1_macvtap: left promiscuous mode [ 49.305965][ T36] veth0_macvtap: left promiscuous mode [ 49.315820][ T36] veth1_vlan: left promiscuous mode [ 49.321168][ T36] veth0_vlan: left promiscuous mode [ 49.403992][ T36] team0 (unregistering): Port device team_slave_1 removed [ 49.416711][ T36] team0 (unregistering): Port device team_slave_0 removed [ 49.630653][ T36] IPVS: stop unused estimator thread 0... [ 49.846379][ T28] audit: type=1400 audit(1781098896.352:325): avc: denied { bind } for pid=4038 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.870704][ T28] audit: type=1400 audit(1781098896.352:326): avc: denied { listen } for pid=4038 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.942014][ T28] audit: type=1400 audit(1781098896.452:327): avc: denied { create } for pid=4040 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.127590][ T4045] netlink: 5 bytes leftover after parsing attributes in process `syz.2.190'. [ 50.137928][ T4045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 50.295904][ T4062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.321250][ T28] audit: type=1400 audit(1781098896.832:328): avc: denied { write } for pid=4068 comm="syz.5.196" name="anycast6" dev="proc" ino=4026533423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.362441][ T28] audit: type=1400 audit(1781098896.832:329): avc: denied { write } for pid=4061 comm="syz.2.195" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.424991][ T4062] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.440248][ T4062] EXT4-fs (loop2): Remounting filesystem read-only [ 50.494047][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.522306][ T4075] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 50.539039][ T4075] bond1: entered promiscuous mode [ 50.544403][ T4075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.559848][ T4075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.567583][ T4075] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 50.578158][ T4075] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 50.592070][ T4075] bond1: (slave ip6gre1): making interface the new active one [ 50.599890][ T4075] ip6gre1: entered promiscuous mode [ 50.607840][ T4075] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 50.852856][ T3947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.969207][ T28] audit: type=1400 audit(1781098897.482:330): avc: denied { create } for pid=4089 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.371702][ T28] audit: type=1400 audit(1781098897.532:331): avc: denied { connect } for pid=4089 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.415747][ T28] audit: type=1400 audit(1781098897.792:332): avc: denied { bind } for pid=4102 comm="syz.5.208" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.497407][ T28] audit: type=1400 audit(1781098897.792:333): avc: denied { name_bind } for pid=4102 comm="syz.5.208" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 51.677892][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 51.739051][ T4137] tls_set_device_offload_rx: netdev not found [ 52.537508][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 52.621314][ T4189] process 'syz.1.233' launched './file0' with NULL argv: empty string added [ 52.742952][ T4198] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.234'. [ 52.775023][ T4201] set_capacity_and_notify: 3 callbacks suppressed [ 52.775045][ T4201] loop5: detected capacity change from 0 to 256 [ 52.810415][ T4204] syzkaller1: entered promiscuous mode [ 52.841653][ T4204] syzkaller1: entered allmulticast mode [ 52.854632][ T4201] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.891963][ T4211] netlink: 'syz.2.237': attribute type 12 has an invalid length. [ 52.906193][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 52.964509][ T4213] ip6erspan0: entered promiscuous mode [ 52.980087][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 53.355932][ T4251] bridge_slave_0: left allmulticast mode [ 53.375677][ T4251] bridge_slave_0: left promiscuous mode [ 53.390156][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.430697][ T4251] bridge_slave_1: left allmulticast mode [ 53.454195][ T4251] bridge_slave_1: left promiscuous mode [ 53.473811][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.518380][ T4251] bond0: (slave bond_slave_0): Releasing backup interface [ 53.575613][ T4251] bond0: (slave bond_slave_1): Releasing backup interface [ 53.601901][ T4251] team0: Port device team_slave_0 removed [ 53.624147][ T4251] team0: Port device team_slave_1 removed [ 53.639748][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.653599][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.684328][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.692111][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.713088][ T4251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.748110][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.781225][ T4254] team0: Mode changed to "loadbalance" [ 53.870856][ T4274] loop2: detected capacity change from 0 to 1024 [ 53.908059][ T4274] EXT4-fs: Ignoring removed nobh option [ 53.965814][ T4274] EXT4-fs: Ignoring removed i_version option [ 54.042501][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.212034][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 54.212054][ T28] audit: type=1400 audit(1781098900.722:375): avc: denied { map } for pid=4273 comm="syz.2.252" path="/51/file1/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.281692][ T4274] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 54.284427][ T28] audit: type=1400 audit(1781098900.722:376): avc: denied { write } for pid=4273 comm="syz.2.252" path="/51/file1/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.368103][ T4274] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 376 with error 28 [ 54.438134][ T4274] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.438134][ T4274] [ 54.489165][ T4274] EXT4-fs (loop2): Total free blocks count 0 [ 54.499650][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 54.534481][ T4274] EXT4-fs (loop2): Free/Dirty block details [ 54.571145][ T4274] EXT4-fs (loop2): free_blocks=20480 [ 54.572728][ T4303] loop5: detected capacity change from 0 to 512 [ 54.603759][ T4274] EXT4-fs (loop2): dirty_blocks=384 [ 54.629138][ T4303] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.651530][ T4274] EXT4-fs (loop2): Block reservation details [ 54.700335][ T4274] EXT4-fs (loop2): i_reserved_data_blocks=24 [ 54.703871][ T4303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.825101][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.877001][ T3302] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 54.905246][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.976026][ T4320] tipc: Started in network mode [ 54.985961][ T4320] tipc: Node identity ac14140f, cluster identity 4711 [ 55.011138][ T4320] tipc: New replicast peer: 172.30.0.2 [ 55.029927][ T4320] tipc: Enabled bearer , priority 10 [ 55.047389][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 55.093843][ T4326] tipc: Disabling bearer [ 55.199492][ T4340] loop5: detected capacity change from 0 to 512 [ 55.238093][ T4340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.272113][ T4340] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.315816][ T4346] loop0: detected capacity change from 0 to 256 [ 55.334280][ T28] audit: type=1400 audit(1781098901.842:377): avc: denied { write } for pid=4335 comm="syz.5.275" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.541602][ T3885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.710944][ T28] audit: type=1400 audit(1781098902.222:378): avc: denied { read write } for pid=4357 comm="syz.2.284" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.787112][ T28] audit: type=1400 audit(1781098902.222:379): avc: denied { open } for pid=4357 comm="syz.2.284" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.855876][ T28] audit: type=1400 audit(1781098902.322:380): avc: denied { write } for pid=4361 comm="syz.5.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.007590][ T28] audit: type=1400 audit(1781098902.522:381): avc: denied { read } for pid=4376 comm="syz.0.294" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.047586][ T28] audit: type=1400 audit(1781098902.522:382): avc: denied { open } for pid=4376 comm="syz.0.294" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.098493][ T28] audit: type=1400 audit(1781098902.552:383): avc: denied { ioctl } for pid=4376 comm="syz.0.294" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.166217][ T28] audit: type=1400 audit(1781098902.592:384): avc: denied { create } for pid=4378 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.401187][ T4393] loop0: detected capacity change from 0 to 512 [ 56.424946][ T4393] EXT4-fs: Ignoring removed bh option [ 56.440429][ T4393] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 56.457568][ T4393] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.299: corrupted in-inode xattr: e_value size too large [ 56.483045][ T4393] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.483285][ T4393] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.299: couldn't read orphan inode 15 (err -117) [ 56.492947][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 56.492971][ C1] EXT4-fs (loop0): initial error at time 1781098902: ext4_iget_extra_inode:5128: inode 15 [ 56.492997][ C1] EXT4-fs (loop0): last error at time 1781098902: ext4_iget_extra_inode:5128: inode 15 [ 56.530974][ T4393] loop0: lost filesystem error report for type 5 error -117 [ 56.531734][ T4393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.600091][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.660069][ T4399] loop2: detected capacity change from 0 to 512 [ 56.693622][ T4399] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 56.719855][ T4399] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 56.733434][ T4399] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.301: Corrupt directory, running e2fsck is recommended [ 56.757726][ T4399] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 56.768504][ T4399] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.301: corrupted in-inode xattr: e_name out of bounds [ 56.806528][ T4399] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.807090][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 56.822751][ C1] EXT4-fs (loop2): initial error at time 1781098903: ext4_iget_extra_inode:5128: inode 15 [ 56.832723][ C1] EXT4-fs (loop2): last error at time 1781098903: ext4_iget_extra_inode:5128: inode 15 [ 56.842496][ T4399] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.301: couldn't read orphan inode 15 (err -117) [ 56.854418][ T4399] loop2: lost filesystem error report for type 5 error -117 [ 56.855291][ T4399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.911958][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.006074][ T4425] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 57.064316][ T4425] gretap1: entered allmulticast mode [ 57.082762][ T4425] bond1: (slave gretap1): making interface the new active one [ 57.091056][ T4425] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 57.112992][ T4438] Illegal XDP return value 4294967294 on prog (id 32) dev syz_tun, expect packet loss! [ 57.199315][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 57.386879][ T4470] xt_hashlimit: size too large, truncated to 1048576 [ 57.473790][ T4478] loop4: detected capacity change from 0 to 128 [ 57.493279][ T4478] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.516455][ T4478] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.652013][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.012882][ T4495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 58.598902][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 58.612833][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 58.622081][ T114] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.630899][ T114] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.646421][ T114] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.670139][ T114] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.935287][ T4525] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 58.941731][ T4525] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 59.250973][ T4550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.361'. [ 59.426385][ T4523] loop0: detected capacity change from 0 to 32768 [ 59.464689][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 59.464711][ T28] audit: type=1400 audit(1781098905.972:430): avc: denied { map } for pid=4537 comm="syz.1.358" path="socket:[8684]" dev="sockfs" ino=8684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.494167][ T28] audit: type=1400 audit(1781098905.982:431): avc: denied { write } for pid=4537 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.519146][ T4523] loop0: p1 p3 < > [ 59.756887][ T4565] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 59.764987][ T4565] netlink: 'syz.0.368': attribute type 4 has an invalid length. [ 59.773769][ T4565] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.368'. [ 60.119394][ T4574] loop0: detected capacity change from 0 to 512 [ 60.145694][ T28] audit: type=1400 audit(1781098906.652:432): avc: denied { name_bind } for pid=4580 comm="syz.2.375" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 60.177988][ T4574] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 60.253980][ T4574] EXT4-fs (loop0): 1 truncate cleaned up [ 60.289060][ T4574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.361311][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.395275][ T4592] loop0: detected capacity change from 0 to 512 [ 60.419582][ T4592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.432457][ T4592] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.450066][ T28] audit: type=1400 audit(1781098906.962:433): avc: denied { write } for pid=4591 comm="syz.0.379" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.474766][ T28] audit: type=1400 audit(1781098906.982:434): avc: denied { bind } for pid=4595 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.502425][ T28] audit: type=1400 audit(1781098907.012:435): avc: denied { write } for pid=4591 comm="syz.0.379" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.544057][ T28] audit: type=1400 audit(1781098907.052:436): avc: denied { sqpoll } for pid=4597 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.564005][ T28] audit: type=1400 audit(1781098907.052:437): avc: denied { map } for pid=4597 comm="syz.2.381" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.591304][ T28] audit: type=1400 audit(1781098907.052:438): avc: denied { read write } for pid=4597 comm="syz.2.381" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.641941][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.680027][ T4605] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 60.812180][ T28] audit: type=1400 audit(1781098907.322:439): avc: denied { mount } for pid=4617 comm="syz.5.385" name="/" dev="configfs" ino=2016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 61.070528][ T4624] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 61.087009][ T4626] loop5: detected capacity change from 0 to 256 [ 61.094566][ T4626] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.123529][ T4626] FAT-fs (loop5): Directory bread(block 64) failed [ 61.130753][ T4626] FAT-fs (loop5): Directory bread(block 65) failed [ 61.140535][ T4626] FAT-fs (loop5): Directory bread(block 66) failed [ 61.148444][ T4626] FAT-fs (loop5): Directory bread(block 67) failed [ 61.155929][ T4626] FAT-fs (loop5): Directory bread(block 68) failed [ 61.163254][ T4626] FAT-fs (loop5): Directory bread(block 69) failed [ 61.170275][ T4626] FAT-fs (loop5): Directory bread(block 70) failed [ 61.177991][ T4626] FAT-fs (loop5): Directory bread(block 71) failed [ 61.184671][ T4626] FAT-fs (loop5): Directory bread(block 72) failed [ 61.191636][ T4626] FAT-fs (loop5): Directory bread(block 73) failed [ 61.243096][ T4634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 61.257798][ T3641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.872157][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 62.212431][ T4681] loop0: detected capacity change from 0 to 32768 [ 62.223939][ T4688] loop1: detected capacity change from 0 to 256 [ 62.246192][ T4688] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.269630][ T4681] loop0: p1 p3 < > [ 62.426446][ T4694] syzkaller0: entered promiscuous mode [ 62.452962][ T4694] syzkaller0: entered allmulticast mode [ 62.484131][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 62.484149][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 62.656903][ T4704] loop0: detected capacity change from 0 to 512 [ 62.670101][ T4704] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 62.685494][ T4706] loop2: detected capacity change from 0 to 512 [ 62.696103][ T4704] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.715794][ T4704] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.423: invalid block [ 62.720159][ T4706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.727495][ T4704] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.737086][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 62.752713][ C1] EXT4-fs (loop0): initial error at time 1781098909: __ext4_iget:5481: inode 11: block 1 [ 62.762631][ C1] EXT4-fs (loop0): last error at time 1781098909: __ext4_iget:5481: inode 11: block 1 [ 62.772665][ T4704] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.423: couldn't read orphan inode 11 (err -117) [ 62.784723][ T4704] loop0: lost filesystem error report for type 5 error -117 [ 62.785442][ T4704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 62.798112][ T4706] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.424: iget: bad i_size value: 38620345925642 [ 62.840692][ T4706] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.841252][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.850470][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 62.850497][ C1] EXT4-fs (loop2): initial error at time 1781098909: ext4_orphan_get:1397: inode 15 [ 62.850531][ C1] EXT4-fs (loop2): last error at time 1781098909: ext4_orphan_get:1397: inode 15 [ 62.895441][ T4706] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.424: couldn't read orphan inode 15 (err -117) [ 62.919132][ T4706] loop2: lost filesystem error report for type 5 error -117 [ 62.920036][ T4706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.097930][ T4716] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 63.151519][ T4706] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.424: bg 0: block 5: invalid block bitmap [ 63.179100][ T4706] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1108 with error 28 [ 63.192252][ T4706] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.192252][ T4706] [ 63.202502][ T4706] EXT4-fs (loop2): Total free blocks count 0 [ 63.217155][ T4706] EXT4-fs (loop2): Free/Dirty block details [ 63.226612][ T4706] EXT4-fs (loop2): free_blocks=0 [ 63.236295][ T4706] EXT4-fs (loop2): dirty_blocks=1108 [ 63.243010][ T4706] EXT4-fs (loop2): Block reservation details [ 63.263191][ T4706] EXT4-fs (loop2): i_reserved_data_blocks=1108 [ 63.312441][ T4719] loop1: detected capacity change from 0 to 8192 [ 63.332789][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.426897][ T4733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.432'. [ 63.454161][ T4719] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 63.509972][ T4719] FAT-fs (loop1): Filesystem has been set read-only [ 63.611999][ T4751] loop2: detected capacity change from 0 to 512 [ 63.676838][ T4751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.700092][ T4751] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.790164][ T4757] syz.0.439 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.834149][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.844277][ T114] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.941263][ T114] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.053050][ T114] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.087024][ T4776] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 64.113233][ T114] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.402596][ T114] bond0 (unregistering): Released all slaves [ 64.481656][ T114] hsr_slave_0: left promiscuous mode [ 64.487924][ T114] hsr_slave_1: left promiscuous mode [ 64.504145][ T114] veth1_macvtap: left promiscuous mode [ 64.519508][ T114] veth0_macvtap: left promiscuous mode [ 64.535565][ T114] veth1_vlan: left promiscuous mode [ 64.555511][ T114] veth0_vlan: left promiscuous mode [ 64.595913][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 64.595931][ T28] audit: type=1400 audit(1781098911.102:485): avc: denied { write } for pid=4795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.679843][ T28] audit: type=1400 audit(1781098911.192:486): avc: denied { write } for pid=4809 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.962106][ T28] audit: type=1400 audit(1781098911.462:487): avc: denied { connect } for pid=4823 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.998141][ T4825] loop0: detected capacity change from 0 to 512 [ 65.059742][ T4825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.080808][ T28] audit: type=1400 audit(1781098911.542:488): avc: denied { write } for pid=4821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.104997][ T4825] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.109604][ T28] audit: type=1400 audit(1781098911.562:489): avc: denied { write } for pid=4838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.140302][ T4843] loop1: detected capacity change from 0 to 512 [ 65.149445][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 65.165621][ T4843] EXT4-fs: Ignoring removed bh option [ 65.175353][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.213695][ T4843] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.455: corrupted in-inode xattr: e_value size too large [ 65.228187][ T4843] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.237099][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 65.252731][ C1] EXT4-fs (loop1): initial error at time 1781098911: ext4_iget_extra_inode:5128: inode 15 [ 65.262695][ C1] EXT4-fs (loop1): last error at time 1781098911: ext4_iget_extra_inode:5128: inode 15 [ 65.266493][ T4843] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.455: couldn't read orphan inode 15 (err -117) [ 65.293324][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.316927][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.319904][ T4843] loop1: lost filesystem error report for type 5 error -117 [ 65.330862][ T28] audit: type=1400 audit(1781098911.832:490): avc: denied { create } for pid=4850 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.348762][ T4843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.370206][ T4851] xt_hashlimit: size too large, truncated to 1048576 [ 65.372061][ T4768] bridge_slave_0: entered allmulticast mode [ 65.406704][ T4768] bridge_slave_0: entered promiscuous mode [ 65.428506][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.445712][ T28] audit: type=1400 audit(1781098911.842:491): avc: denied { setopt } for pid=4850 comm="syz.0.456" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.467224][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.474827][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.489867][ T4768] bridge_slave_1: entered allmulticast mode [ 65.505450][ T4768] bridge_slave_1: entered promiscuous mode [ 65.520518][ T28] audit: type=1400 audit(1781098911.932:492): avc: denied { watch } for pid=4842 comm="syz.1.455" path="/99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.563993][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.572866][ T4855] loop2: detected capacity change from 0 to 8192 [ 65.623566][ T4859] bridge_slave_0 (unregistering): left allmulticast mode [ 65.670674][ T28] audit: type=1400 audit(1781098912.112:493): avc: denied { append } for pid=4862 comm="syz.1.459" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.690584][ T4859] bridge_slave_0 (unregistering): left promiscuous mode [ 65.760365][ T28] audit: type=1400 audit(1781098912.112:494): avc: denied { ioctl } for pid=4862 comm="syz.1.459" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.779161][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.918389][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 65.961441][ T4873] bridge0: port 1(vlan2) entered blocking state [ 65.968002][ T4873] bridge0: port 1(vlan2) entered disabled state [ 65.977304][ T4873] vlan2: entered allmulticast mode [ 65.993824][ T4873] geneve0: entered allmulticast mode [ 66.017934][ T4873] vlan2: entered promiscuous mode [ 66.024632][ T4873] geneve0: entered promiscuous mode [ 66.055842][ T4768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.112071][ T4768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.172373][ T4887] loop1: detected capacity change from 0 to 512 [ 66.189186][ T4768] team0: Port device team_slave_0 added [ 66.213229][ T4768] team0: Port device team_slave_1 added [ 66.278708][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.305042][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.368750][ T4768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.402819][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.410443][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.446670][ T4768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.527312][ T4768] hsr_slave_0: entered promiscuous mode [ 66.534956][ T4768] hsr_slave_1: entered promiscuous mode [ 66.772306][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 66.791228][ T4768] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 66.812430][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.823093][ T4768] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 66.846018][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.861229][ T4768] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 66.880462][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.897772][ T4768] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 66.915259][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.008889][ T4768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.028263][ T4768] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.052422][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.059553][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.084407][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.091538][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.227923][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 67.302837][ T4956] loop0: detected capacity change from 0 to 512 [ 67.373246][ T4956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.419934][ T4956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.444553][ T4956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 67.457493][ T4956] System zones: 1-12 [ 67.470407][ T4768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.478470][ T4956] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.533958][ T4956] EXT4-fs (loop0): 1 truncate cleaned up [ 67.550118][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.648156][ T3303] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 67.680563][ T3303] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 67.730271][ T3303] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 67.765217][ T4768] veth0_vlan: entered promiscuous mode [ 67.797700][ T4768] veth1_vlan: entered promiscuous mode [ 67.832382][ T4768] veth0_macvtap: entered promiscuous mode [ 67.850346][ T4768] veth1_macvtap: entered promiscuous mode [ 67.868135][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.891754][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.907165][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.927487][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.943205][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.958586][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.003306][ T114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.072633][ T114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.193498][ T114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.306104][ T114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.487324][ T114] bridge_slave_1: left allmulticast mode [ 68.493124][ T114] bridge_slave_1: left promiscuous mode [ 68.514129][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.555042][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.713211][ T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.752185][ T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.778146][ T114] bond0 (unregistering): Released all slaves [ 68.839125][ T114] hsr_slave_0: left promiscuous mode [ 68.862801][ T114] hsr_slave_1: left promiscuous mode [ 68.880852][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.917179][ T114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.929044][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.942774][ T114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.974963][ T114] veth1_macvtap: left promiscuous mode [ 68.982093][ T114] veth0_macvtap: left promiscuous mode [ 68.999476][ T114] veth1_vlan: left promiscuous mode [ 69.015227][ T114] veth0_vlan: left promiscuous mode [ 69.183489][ T114] team0 (unregistering): Port device team_slave_1 removed [ 69.205003][ T114] team0 (unregistering): Port device team_slave_0 removed [ 69.269724][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 69.596301][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 69.661707][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.669308][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.676677][ T5000] bridge_slave_0: entered allmulticast mode [ 69.683733][ T5000] bridge_slave_0: entered promiscuous mode [ 69.691150][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.698428][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.705760][ T5000] bridge_slave_1: entered allmulticast mode [ 69.712556][ T5000] bridge_slave_1: entered promiscuous mode [ 69.746103][ T5000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.790529][ T5000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.841448][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 69.841519][ T28] audit: type=1400 audit(1781098916.352:520): avc: denied { write } for pid=5047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.890322][ T5000] team0: Port device team_slave_0 added [ 69.893800][ T28] audit: type=1400 audit(1781098916.402:521): avc: denied { write } for pid=5058 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.921356][ T5000] team0: Port device team_slave_1 added [ 69.939624][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 69.979463][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.997061][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.035964][ T5000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.047561][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.054578][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.094602][ T5000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.123628][ T5000] hsr_slave_0: entered promiscuous mode [ 70.129952][ T5000] hsr_slave_1: entered promiscuous mode [ 70.135903][ T5000] debugfs: 'hsr0' already exists in 'hsr' [ 70.177066][ T5000] Cannot create hsr debugfs directory [ 70.214485][ T28] audit: type=1400 audit(1781098916.722:522): avc: denied { write } for pid=5061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.308952][ T28] audit: type=1400 audit(1781098916.822:523): avc: denied { write } for pid=5073 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.393552][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 70.480182][ T5000] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 70.510797][ T5000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.520569][ T5000] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 70.542587][ T5000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.553644][ T5000] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 70.572122][ T5000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.589301][ T5000] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 70.601319][ T5000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.701508][ T5000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.725197][ T5000] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.751182][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.758341][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.791495][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.798699][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.027877][ T5000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.266453][ T5000] veth0_vlan: entered promiscuous mode [ 71.277611][ T5000] veth1_vlan: entered promiscuous mode [ 71.301157][ T5000] veth0_macvtap: entered promiscuous mode [ 71.321139][ T5000] veth1_macvtap: entered promiscuous mode [ 71.345854][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.368460][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.387092][ T114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.395998][ T114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.406013][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.420479][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.492025][ T5127] mmap: syz.2.484 (5127) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.091241][ T5135] loop2: detected capacity change from 0 to 512 [ 73.129751][ T5135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 73.170718][ T5135] System zones: 1-12 [ 73.207371][ T5135] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.487: error while reading EA inode 32 err=-116 [ 73.261969][ T5135] loop2: lost filesystem error report for type 5 error -117 [ 73.262286][ T5135] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.487: error while reading EA inode 32 err=-116 [ 73.269688][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 73.269705][ C0] EXT4-fs (loop2): initial error at time 1781098919: ext4_xattr_inode_iget:446 [ 73.269729][ C0] EXT4-fs (loop2): last error at time 1781098919: ext4_xattr_inode_iget:446 [ 73.327390][ T5135] loop2: lost filesystem error report for type 5 error -117 [ 73.327696][ T5135] EXT4-fs (loop2): 1 orphan inode deleted [ 73.358283][ T5135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.382790][ T5142] netlink: 132 bytes leftover after parsing attributes in process `syz.6.488'. [ 73.428268][ T5133] loop7: detected capacity change from 0 to 4096 [ 73.462957][ T5133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.536748][ T28] audit: type=1400 audit(1781098920.042:524): avc: denied { write } for pid=5132 comm="syz.7.486" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.635625][ T5147] loop6: detected capacity change from 0 to 8192 [ 73.673887][ T5147] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.699677][ T28] audit: type=1400 audit(1781098920.212:525): avc: denied { remount } for pid=5146 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 73.747132][ T5000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.881261][ T5155] loop7: detected capacity change from 0 to 512 [ 73.913858][ T28] audit: type=1400 audit(1781098920.422:526): avc: denied { watch watch_reads } for pid=5156 comm="syz.6.495" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 73.937705][ T5155] EXT4-fs: Ignoring removed i_version option [ 73.989365][ T5155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.007677][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.028901][ T5155] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.494: invalid block [ 74.069331][ T5155] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.069725][ T5155] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.494: invalid indirect mapped block 4294967295 (level 1) [ 74.078935][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 74.078961][ C1] EXT4-fs (loop7): initial error at time 1781098920: ext4_get_branch:178: inode 11: block 4294967295 [ 74.078995][ C1] EXT4-fs (loop7): last error at time 1781098920: ext4_get_branch:178: inode 11: block 4294967295 [ 74.150026][ T5155] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.150329][ T5155] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.494: invalid indirect mapped block 4294967295 (level 1) [ 74.204764][ T5155] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.205124][ T5155] EXT4-fs (loop7): 2 truncates cleaned up [ 74.238310][ T5155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.284501][ T28] audit: type=1400 audit(1781098920.792:527): avc: denied { write } for pid=5154 comm="syz.7.494" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.319619][ T5000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.268679][ T28] audit: type=1400 audit(1781098921.772:528): avc: denied { firmware_load } for pid=5198 comm="syz.1.504" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 75.426299][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.443349][ T5176] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.476461][ T5176] bridge_slave_0: entered allmulticast mode [ 75.504203][ T5176] bridge_slave_0: entered promiscuous mode [ 75.526174][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.549999][ T5176] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.572054][ T5176] bridge_slave_1: entered allmulticast mode [ 75.595593][ T5176] bridge_slave_1: entered promiscuous mode [ 75.641774][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.507'. [ 75.659424][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.507'. [ 75.660359][ T5176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.706113][ T5176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.759864][ T5176] team0: Port device team_slave_0 added [ 75.765923][ T5176] team0: Port device team_slave_1 added [ 75.807310][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.822576][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.879425][ T5176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.902956][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.919586][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.976208][ T5176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.041552][ T5176] hsr_slave_0: entered promiscuous mode [ 76.055741][ T5176] hsr_slave_1: entered promiscuous mode [ 76.070833][ T5176] debugfs: 'hsr0' already exists in 'hsr' [ 76.082940][ T5176] Cannot create hsr debugfs directory [ 76.112160][ T5221] netlink: 56 bytes leftover after parsing attributes in process `syz.6.513'. [ 76.255584][ T5176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.268435][ T5176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.560388][ T5176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.595950][ T5176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.691196][ T5232] raw_sendmsg: syz.1.518 forgot to set AF_INET. Fix it! [ 76.695384][ T28] audit: type=1400 audit(1781098923.202:529): avc: denied { write } for pid=5231 comm="syz.1.518" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.723038][ T5176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.751993][ T5176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.815604][ T5176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.827603][ T28] audit: type=1400 audit(1781098923.322:530): avc: denied { create } for pid=5238 comm="syz.6.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.857362][ T5176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.878378][ T28] audit: type=1400 audit(1781098923.322:531): avc: denied { write } for pid=5238 comm="syz.6.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.930444][ T5242] loop6: detected capacity change from 0 to 128 [ 76.971037][ T5242] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.988873][ T5242] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.050034][ T28] audit: type=1400 audit(1781098923.562:532): avc: denied { write } for pid=5240 comm="syz.6.521" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.132445][ T5176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.153176][ T5176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.169185][ T5176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.196310][ T5176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.206172][ T5176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.214806][ T4768] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.242535][ T5176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.265677][ T5176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.277333][ T5176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.449948][ T5176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.487504][ T5176] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.499209][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.506350][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.558563][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.565715][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.665480][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.672993][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.680414][ T5246] bridge_slave_0: entered allmulticast mode [ 77.687015][ T5246] bridge_slave_0: entered promiscuous mode [ 77.694247][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.701389][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.708754][ T5246] bridge_slave_1: entered allmulticast mode [ 77.715386][ T5246] bridge_slave_1: entered promiscuous mode [ 77.749983][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.771927][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.816843][ T5246] team0: Port device team_slave_0 added [ 77.829103][ T5246] team0: Port device team_slave_1 added [ 77.850498][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.858095][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.884979][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.909167][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.916231][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.942730][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.986660][ T5246] hsr_slave_0: entered promiscuous mode [ 78.004712][ T5246] hsr_slave_1: entered promiscuous mode [ 78.017261][ T5246] debugfs: 'hsr0' already exists in 'hsr' [ 78.029129][ T5246] Cannot create hsr debugfs directory [ 78.172093][ T5176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.257784][ T5246] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.270489][ T28] audit: type=1400 audit(1781098924.782:533): avc: denied { write } for pid=5292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.271883][ T5308] loop1: detected capacity change from 0 to 256 [ 78.312190][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.331351][ T5246] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.349157][ T5308] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.379882][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.380792][ T28] audit: type=1400 audit(1781098924.892:534): avc: denied { write } for pid=5315 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.408669][ T5246] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.419963][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.450504][ T5308] FAT-fs (loop1): Directory bread(block 64) failed [ 78.457663][ T5246] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.466120][ T5308] FAT-fs (loop1): Directory bread(block 65) failed [ 78.489674][ T5308] FAT-fs (loop1): Directory bread(block 66) failed [ 78.497311][ T5246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.510388][ T5308] FAT-fs (loop1): Directory bread(block 67) failed [ 78.535085][ T5308] FAT-fs (loop1): Directory bread(block 68) failed [ 78.543167][ T5176] veth0_vlan: entered promiscuous mode [ 78.559467][ T5308] FAT-fs (loop1): Directory bread(block 69) failed [ 78.582116][ T5176] veth1_vlan: entered promiscuous mode [ 78.587700][ T5308] FAT-fs (loop1): Directory bread(block 70) failed [ 78.594353][ T5308] FAT-fs (loop1): Directory bread(block 71) failed [ 78.602222][ T5308] FAT-fs (loop1): Directory bread(block 72) failed [ 78.616238][ T5308] FAT-fs (loop1): Directory bread(block 73) failed [ 78.633255][ T5176] veth0_macvtap: entered promiscuous mode [ 78.660642][ T5176] veth1_macvtap: entered promiscuous mode [ 78.696399][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.728486][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.736284][ T5330] loop7: detected capacity change from 0 to 128 [ 78.746825][ T114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.766680][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.781236][ T114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.796998][ T5330] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.798873][ T114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.818823][ T5330] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.860186][ T114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.885001][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.898657][ T28] audit: type=1400 audit(1781098925.402:535): avc: denied { write } for pid=5329 comm="syz.7.534" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.932735][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.939859][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.985236][ T28] audit: type=1400 audit(1781098925.492:536): avc: denied { write } for pid=5342 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.014753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.021894][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.071630][ T5000] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.096656][ T5246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.231394][ T28] audit: type=1400 audit(1781098925.742:537): avc: denied { write } for pid=5338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.280511][ T5367] loop2: detected capacity change from 0 to 512 [ 79.316825][ T5367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec19c, mo2=0002] [ 79.328721][ T5367] System zones: 1-12 [ 79.337573][ T5367] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.542: corrupted in-inode xattr: e_value size too large [ 79.358406][ T5367] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.358766][ T5367] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.542: couldn't read orphan inode 15 (err -117) [ 79.368149][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 79.368174][ C0] EXT4-fs (loop2): initial error at time 1781098925: ext4_iget_extra_inode:5128: inode 15 [ 79.368235][ C0] EXT4-fs (loop2): last error at time 1781098925: ext4_iget_extra_inode:5128: inode 15 [ 79.406493][ T5367] loop2: lost filesystem error report for type 5 error -117 [ 79.421255][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.426861][ T5377] loop6: detected capacity change from 0 to 512 [ 79.493362][ T5176] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.518472][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.526417][ T5377] EXT4-fs: Ignoring removed bh option [ 79.566857][ T5377] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 79.596107][ T5377] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.544: corrupted in-inode xattr: e_value size too large [ 79.631812][ T5377] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.633201][ T5377] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.544: couldn't read orphan inode 15 (err -117) [ 79.642509][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 79.642534][ C1] EXT4-fs (loop6): initial error at time 1781098926: ext4_iget_extra_inode:5128: inode 15 [ 79.642572][ C1] EXT4-fs (loop6): last error at time 1781098926: ext4_iget_extra_inode:5128: inode 15 [ 79.684442][ T5377] loop6: lost filesystem error report for type 5 error -117 [ 79.685201][ T5377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.761810][ T4768] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.800099][ T5409] loop1: detected capacity change from 0 to 128 [ 80.014343][ T5246] veth0_vlan: entered promiscuous mode [ 80.024430][ T5246] veth1_vlan: entered promiscuous mode [ 80.085047][ T5246] veth0_macvtap: entered promiscuous mode [ 80.100063][ T5246] veth1_macvtap: entered promiscuous mode [ 80.124891][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.150418][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.180267][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.200141][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.222228][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.250278][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.295054][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 80.295072][ T28] audit: type=1400 audit(1781098926.802:544): avc: denied { write } for pid=5448 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.384285][ T28] audit: type=1400 audit(1781098926.842:545): avc: denied { mounton } for pid=5246 comm="syz-executor" path="/root/syzkaller.DQt1iv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 80.415838][ T5456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13588 sclass=netlink_route_socket pid=5456 comm=syz.2.567 [ 80.462965][ T5456] netlink: 7 bytes leftover after parsing attributes in process `syz.2.567'. [ 80.482885][ T5460] loop8: detected capacity change from 0 to 512 [ 80.511884][ T5460] EXT4-fs: Ignoring removed i_version option [ 80.552850][ T5460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.569314][ T5460] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.640176][ T5246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.841397][ T28] audit: type=1400 audit(1781098927.352:546): avc: denied { execute } for pid=5469 comm="syz.8.563" path="/2/file1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.182851][ T5485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.570'. [ 81.243364][ T28] audit: type=1326 audit(1781098927.752:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.1.572" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d5bece59 code=0x7ffc0000 [ 81.275630][ T28] audit: type=1326 audit(1781098927.752:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.1.572" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d5bece59 code=0x7ffc0000 [ 81.307075][ T28] audit: type=1326 audit(1781098927.752:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.1.572" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d5bece59 code=0x7ffc0000 [ 81.332638][ T28] audit: type=1326 audit(1781098927.752:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.1.572" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd0d5bece59 code=0x7ffc0000 [ 81.358161][ T28] audit: type=1326 audit(1781098927.752:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.1.572" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d5bece59 code=0x7ffc0000 [ 81.385301][ T28] audit: type=1326 audit(1781098927.752:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.1.572" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d5bece59 code=0x7ffc0000 [ 81.414154][ T28] audit: type=1326 audit(1781098927.752:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5488 comm="syz.1.572" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd0d5bece59 code=0x7ffc0000 [ 81.651668][ T5506] loop6: detected capacity change from 0 to 8192 [ 81.858203][ T5519] loop7: detected capacity change from 0 to 2048 [ 81.882527][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 81.939679][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 81.962245][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.979034][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.008257][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.029949][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.292860][ T2981] ================================================================== [ 82.301011][ T2981] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 82.309073][ T2981] [ 82.311426][ T2981] write to 0xffff888107c003f0 of 8 bytes by task 3288 on cpu 0: [ 82.319087][ T2981] dentry_unlink_inode+0x6a/0x290 [ 82.324163][ T2981] d_delete+0xc8/0xe0 [ 82.328170][ T2981] d_delete_notify+0x32/0x100 [ 82.332878][ T2981] vfs_unlink+0x289/0x490 [ 82.337235][ T2981] filename_unlinkat+0x1e2/0x410 [ 82.342211][ T2981] __se_sys_unlink+0x2b/0xe0 [ 82.346834][ T2981] __x64_sys_unlink+0x1f/0x30 [ 82.351544][ T2981] x64_sys_call+0x2eb6/0x3020 [ 82.356258][ T2981] do_syscall_64+0x12c/0x3b0 [ 82.360906][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.366822][ T2981] [ 82.369162][ T2981] read to 0xffff888107c003f0 of 8 bytes by task 2981 on cpu 1: [ 82.376718][ T2981] step_into_slowpath+0x12c/0x4c0 [ 82.381848][ T2981] path_lookupat+0x330/0x500 [ 82.386464][ T2981] filename_lookup+0x190/0x390 [ 82.391249][ T2981] do_readlinkat+0x74/0x2f0 [ 82.395773][ T2981] __x64_sys_readlink+0x47/0x60 [ 82.400641][ T2981] x64_sys_call+0x2b51/0x3020 [ 82.405342][ T2981] do_syscall_64+0x12c/0x3b0 [ 82.409961][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.415881][ T2981] [ 82.418218][ T2981] value changed: 0xffff88810525b388 -> 0x0000000000000000 [ 82.425331][ T2981] [ 82.427662][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 82.433836][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 82.442707][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 82.452776][ T2981] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 82.818267][ T68] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.909507][ T68] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.990225][ T68] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.050949][ T68] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.158496][ T68] bridge_slave_1: left allmulticast mode [ 83.164166][ T68] bridge_slave_1: left promiscuous mode [ 83.169954][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.178155][ T68] bridge_slave_0: left allmulticast mode [ 83.183835][ T68] bridge_slave_0: left promiscuous mode [ 83.189691][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.279563][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.289964][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.300219][ T68] bond0 (unregistering): Released all slaves [ 83.352480][ T68] hsr_slave_0: left promiscuous mode [ 83.360370][ T68] hsr_slave_1: left promiscuous mode [ 83.366272][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.373768][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.381850][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.389739][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.401208][ T68] veth1_macvtap: left promiscuous mode [ 83.406818][ T68] veth0_macvtap: left promiscuous mode [ 83.412733][ T68] veth1_vlan: left promiscuous mode [ 83.418319][ T68] veth0_vlan: left promiscuous mode [ 83.497184][ T68] team0 (unregistering): Port device team_slave_1 removed [ 83.507897][ T68] team0 (unregistering): Port device team_slave_0 removed [ 83.542714][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 83.654633][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 83.765657][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 83.790265][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.800666][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.850273][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.860734][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.912268][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.922674][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.934783][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 83.950093][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.960517][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.032758][ T68] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.070879][ T68] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.130440][ T68] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.165975][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 84.180424][ T68] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.268082][ T68] vlan2: left allmulticast mode [ 84.273007][ T68] geneve0: left allmulticast mode [ 84.278214][ T68] vlan2: left promiscuous mode [ 84.283009][ T68] geneve0: left promiscuous mode [ 84.288354][ T68] bridge0: port 1(vlan2) entered disabled state [ 84.295661][ T68] bridge_slave_1: left allmulticast mode [ 84.301567][ T68] bridge_slave_1: left promiscuous mode [ 84.308371][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.317630][ T68] bridge_slave_1: left allmulticast mode [ 84.323412][ T68] bridge_slave_1: left promiscuous mode [ 84.329374][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.337431][ T68] bridge_slave_0: left allmulticast mode [ 84.343121][ T68] bridge_slave_0: left promiscuous mode [ 84.349256][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.489272][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.499278][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.508799][ T68] bond0 (unregistering): Released all slaves [ 84.581307][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.591586][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.601347][ T68] bond0 (unregistering): Released all slaves [ 84.609066][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 84.640293][ T68] tipc: Left network mode [ 84.648615][ T68] hsr_slave_0: left promiscuous mode [ 84.654336][ T68] hsr_slave_1: left promiscuous mode [ 84.660086][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.667583][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.675069][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.682784][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.693769][ T68] hsr_slave_0: left promiscuous mode [ 84.700687][ T68] hsr_slave_1: left promiscuous mode [ 84.706303][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.713937][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.721631][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.729214][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.743224][ T68] veth1_macvtap: left promiscuous mode [ 84.748872][ T68] veth0_macvtap: left promiscuous mode [ 84.754438][ T68] veth1_vlan: left promiscuous mode [ 84.759999][ T68] veth0_vlan: left promiscuous mode [ 84.766018][ T68] veth1_macvtap: left promiscuous mode [ 84.771721][ T68] veth0_macvtap: left promiscuous mode [ 84.778061][ T68] veth1_vlan: left promiscuous mode [ 84.783354][ T68] veth0_vlan: left promiscuous mode [ 84.896577][ T68] team0 (unregistering): Port device team_slave_1 removed [ 84.910457][ T68] team0 (unregistering): Port device team_slave_0 removed [ 84.967727][ T68] team0 (unregistering): Port device team_slave_1 removed [ 84.978515][ T68] team0 (unregistering): Port device team_slave_0 removed [ 85.014223][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 85.129875][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 85.240852][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 85.322930][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 85.322947][ T28] audit: type=1400 audit(1781098931.832:585): avc: denied { write } for pid=5754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.359697][ T28] audit: type=1400 audit(1781098931.872:586): avc: denied { write } for pid=5765 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.387578][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 85.466976][ T28] audit: type=1400 audit(1781098931.972:587): avc: denied { write } for pid=5768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.500775][ T28] audit: type=1400 audit(1781098932.012:588): avc: denied { write } for pid=5779 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.535651][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 85.590637][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.624785][ T28] audit: type=1400 audit(1781098932.132:589): avc: denied { write } for pid=5782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.656978][ T28] audit: type=1400 audit(1781098932.162:590): avc: denied { write } for pid=5793 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.682084][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.698251][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 85.740653][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.809781][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.898757][ T68] bridge_slave_1: left allmulticast mode [ 85.904472][ T68] bridge_slave_1: left promiscuous mode [ 85.910175][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.918227][ T68] bridge_slave_0: left allmulticast mode [ 85.923883][ T68] bridge_slave_0: left promiscuous mode [ 85.929673][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.030571][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.042215][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.051826][ T68] bond0 (unregistering): Released all slaves [ 86.101505][ T68] hsr_slave_0: left promiscuous mode [ 86.107507][ T68] hsr_slave_1: left promiscuous mode [ 86.113203][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.121016][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.128832][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.136281][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.151082][ T68] veth1_macvtap: left promiscuous mode [ 86.156619][ T68] veth0_macvtap: left promiscuous mode [ 86.162384][ T68] veth1_vlan: left promiscuous mode [ 86.167680][ T68] veth0_vlan: left promiscuous mode [ 86.181241][ T28] audit: type=1400 audit(1781098932.692:591): avc: denied { write } for pid=5805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.224582][ T28] audit: type=1400 audit(1781098932.732:592): avc: denied { write } for pid=5816 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.278793][ T68] team0 (unregistering): Port device team_slave_1 removed [ 86.288981][ T68] team0 (unregistering): Port device team_slave_0 removed [ 86.323433][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 86.424612][ T28] audit: type=1400 audit(1781098932.932:593): avc: denied { write } for pid=5823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.456495][ T28] audit: type=1400 audit(1781098932.962:594): avc: denied { write } for pid=5834 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.490313][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26 [ 86.603478][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27 [ 86.714027][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28