last executing test programs: 25.664821969s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xc}, @alu={0x7, 0x0, 0xc}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 25.59950822s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 25.561369146s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x70, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 25.519230232s ago: executing program 1: socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000001c0)='\x00\x10\x00\x00\x00\x00T\xab_HV/xe\xb0\x8dcz\x0f\xf6u\xc6\xdd\xfbD\xc6\xc8\'|K\x94\xdeT\x04d%\xc9\xaf|6\xa0\x80\xf5t\xb25Q\x1e\x85FN\xe3{\x83\xb9\xdb\xeb~\"?\xaf\xa6F\xa1\x878r\xcf\xdaGE\x7f\x89\x9a\xec\x88\xc3\xe3\xa3B\xf2\x11\xdf\x9f\xd8\xaf=\xb2\xd8\x83k%\xcb\n\xb0\x01c\x86\xe2\xe8\x835\xf4\xc1\x8d\xab\xf4%\xc7\xe5\xd6\xa8gKPT\xae\xb0\x16$\xe1\xd9\xb0r\xe9S\b<3\xbef\x1c\x04\\\xc6\xf9r0\xa88\xbc\xe5G\x9b\xf1/\xde\xaa\x8elp\xec\xd7\x93rm\x13\xad\x18\xad\xf2\xad7\x8a$k\xee:c\x94FIOh\x8e\xf3*\xfc\rh\x9f\xf7}\x06\x8e\xa0\x1e^\xa0\x9d\x02\x1b') pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100)=0x3f, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0xfffffffffffffffc, &(0x7f0000000040)=0xfffffffffffffec4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 25.234278346s ago: executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x68, &(0x7f0000000340)={@local, @remote, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2a, 0x2f, 0x0, @private1, @loopback, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"36534d8da0a96c26b0f4c8b829a4376b09af98216fda"}}}}}}}, 0x0) 25.158684957s ago: executing program 1: socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) unshare(0x8000400) fsopen(&(0x7f0000000000)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000000c0)=':', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ptrace(0x10, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000180)={0x0, 0xf, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000580)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x0, &(0x7f00000001c0)=0x3, &(0x7f00000002c0)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) 11.959950119s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = fsopen(&(0x7f0000000180)='sockfs\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) ioperm(0x0, 0x6, 0x400) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x2, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000000), 0xffe000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x43451) r7 = io_uring_setup(0x511f, &(0x7f0000000180)={0x0, 0x0, 0x2}) unshare(0x22000600) io_uring_setup(0x75e8, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r7}) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000000}, 0x10) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000002060300e7f70000fffff00000000000050004000000000020000500020000000900020073797a3200000000050001000700001f259513c52f216853bad49fdf000d0003bb57"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 11.11148254s ago: executing program 2: socket$inet6(0xa, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000100100000100000070"], 0x18}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r0) 11.074633996s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x4) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='dots,dots,dots,dots,nfs,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,nodots,umask=000000000000000000042eck=strict,allow_utime=00000000000000000000001,dots,dots,umask=00000000000000000077777,nodots,dots,tz=UTC,nodots,dots,showexec,nodots,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.058589288s ago: executing program 2: r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_io_uring_setup(0x2593, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioprio_set$pid(0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 11.039061961s ago: executing program 2: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0x8, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) 11.026203873s ago: executing program 2: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r1, 0x0, r2, 0x0, 0xffffffe1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) 7.562958586s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x24}}, 0x0) 7.545001069s ago: executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8990, &(0x7f0000000080)) 7.525565072s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080), 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000407, &(0x7f0000000140)={[{@grpjquota}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5d9, &(0x7f0000000180)="$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") r2 = socket$tipc(0x1e, 0x2, 0x0) iopl(0x3) rmdir(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x288) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40383d0c, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) 6.676884523s ago: executing program 0: socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getpid() timer_settime(0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) 6.607041084s ago: executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 6.596482335s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15}, {0x20}, {0x6, 0x9, 0x0, 0x1}]}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x20}, 0x18) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x41c21c49b1a76e92}) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x7ff, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) fallocate(r5, 0x20, 0x0, 0x1000f4) splice(r5, 0x0, r4, 0x0, 0x7e0c000000000000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) timer_settime(0x0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) 1.190188277s ago: executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(0x0, 0x1668c0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000ec0)={@loopback, @private2, @private0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x210308, r5}) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000ec0)={@loopback, @private2, @private0, 0x3, 0x0, 0x2}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000ec0)={@loopback={0x2}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000ec0)={@loopback, @private2, @private0, 0x0, 0x6, 0x4, 0x0, 0x3, 0x210308}) 1.123178747s ago: executing program 3: mkdir(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000020"], 0x188}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.025288832s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x3, 0x2, 0x23, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0xe740, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180)}, 0x20) 542.383417ms ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x4d}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 495.706974ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000007b000000350000000004000085000000080000009500000000000000a607925b9b0129b6e010fe8711541dafc172a3e837ce614b33369b2c3c7377020300000000000000c8aee3214f2c489ffe68643929af3ef1f1f9cb1b9f8ef0b3de54ffffffa3e8ff37b6a83f18e711841b9e2a68deab968b62ae9f699f88e98beb128e1b0b98310be994f9e1d175a23831fed7046bcfe439db5220f8a2220d6ffa0769c29a7a28d0c87d409c04247e73a3e53443734446cd2e61c6ef0d3924a25773fd1c47c9c1e8d8e4cd0366c414bdce966c456ff9925af7b4133c4b2af5e49ed3f47ea0f887810a16bfbc650ed876b2968c"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000600)=""/158, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffeb}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="6100000000010000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 459.70102ms ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='sys_enter\x00', r1}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xea60}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x67) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@updsa={0xf0, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@broadcast, 0x4e20, 0x2, 0x4e24, 0x6, 0x2, 0x120, 0x20, 0x87}, {@in6=@private0, 0x4d4}, @in=@remote, {0x8001, 0x1000, 0x522d5c4c, 0x9, 0x9, 0xa00000000000000, 0xffffffffffffffe0, 0x3}, {0xd8, 0x0, 0x100000000, 0x6c}, {0xff, 0x80}, 0x70bd25, 0x3507, 0x2, 0x6, 0x7, 0x24}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000082}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r5}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000340)=0x3e3, 0x39, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 399.607269ms ago: executing program 3: readlink(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") open(0x0, 0x14927e, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x0, 0x0) 353.391776ms ago: executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000003c0), 0x4) r1 = socket$inet(0x2, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) memfd_create(0x0, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = memfd_create(&(0x7f00000001c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x8009, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000980)={0x0, 0x0}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f0000000440)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0xcc19, 0x4, 0x1, 0x1d39, 0xffffffffffffffff, 0x2d9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000018c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) 317.021622ms ago: executing program 4: ioperm(0x0, 0x3, 0x8) prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) 298.776074ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1}}], 0x1, 0x0) 284.703116ms ago: executing program 4: open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80400c0}, 0x4044090) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x44}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x4d55a000) pipe(0x0) setreuid(0x0, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a700000000000000000008fffffc08000300", @ANYRES32=r9, @ANYBLOB], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="9d3528bd7000fddbdf251b00000008000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="10002e800c0004000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x44005) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff}}}}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r12 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x49) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0xf0, 0x0) kernel console output (not intermixed with test programs): [ 20.496508][ T29] audit: type=1400 audit(1719046315.055:81): avc: denied { read } for pid=2766 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. 2024/06/22 08:51:59 fuzzer started 2024/06/22 08:51:59 dialing manager at 10.128.0.163:30030 [ 25.220262][ T29] audit: type=1400 audit(1719046319.775:82): avc: denied { node_bind } for pid=3074 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.240850][ T29] audit: type=1400 audit(1719046319.785:83): avc: denied { name_bind } for pid=3074 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.303604][ T29] audit: type=1400 audit(1719046319.865:84): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.328689][ T3083] cgroup: Unknown subsys name 'net' [ 25.343267][ T29] audit: type=1400 audit(1719046319.865:85): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.368130][ T29] audit: type=1400 audit(1719046319.865:86): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.391567][ T29] audit: type=1400 audit(1719046319.875:87): avc: denied { create } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.400928][ T3088] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.412022][ T29] audit: type=1400 audit(1719046319.875:88): avc: denied { write } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.441029][ T29] audit: type=1400 audit(1719046319.885:89): avc: denied { read } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.461334][ T29] audit: type=1400 audit(1719046319.885:90): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.485342][ T29] audit: type=1400 audit(1719046319.905:91): avc: denied { unmount } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.511534][ T3087] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.603757][ T3083] cgroup: Unknown subsys name 'rlimit' 2024/06/22 08:52:00 suppressing KCSAN reports in functions: 'process_scheduled_works' '__xa_clear_mark' 'ext4_free_inodes_count' 'ext4_fill_raw_inode' 'do_select' '__xa_set_mark' 'do_sys_poll' 'pcpu_alloc_noprof' 'jbd2_journal_dirty_metadata' 'exit_mm' '__mark_inode_dirty' 'kick_pool' 'jbd2_journal_stop' 'xas_clear_mark' 2024/06/22 08:52:00 starting 5 executor processes [ 26.386275][ T3104] chnl_net:caif_netlink_parms(): no params data found [ 26.462030][ T3101] chnl_net:caif_netlink_parms(): no params data found [ 26.471045][ T3104] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.478216][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.485458][ T3104] bridge_slave_0: entered allmulticast mode [ 26.492088][ T3104] bridge_slave_0: entered promiscuous mode [ 26.499591][ T3104] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.506724][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.513961][ T3104] bridge_slave_1: entered allmulticast mode [ 26.520589][ T3104] bridge_slave_1: entered promiscuous mode [ 26.552959][ T3104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.566011][ T3104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.620647][ T3104] team0: Port device team_slave_0 added [ 26.642208][ T3104] team0: Port device team_slave_1 added [ 26.660673][ T3102] chnl_net:caif_netlink_parms(): no params data found [ 26.669835][ T3101] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.677028][ T3101] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.684392][ T3101] bridge_slave_0: entered allmulticast mode [ 26.690970][ T3101] bridge_slave_0: entered promiscuous mode [ 26.715198][ T3101] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.722470][ T3101] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.730101][ T3101] bridge_slave_1: entered allmulticast mode [ 26.736598][ T3101] bridge_slave_1: entered promiscuous mode [ 26.742990][ T3104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.749917][ T3104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.776005][ T3104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.786883][ T3118] chnl_net:caif_netlink_parms(): no params data found [ 26.809770][ T3104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.816828][ T3104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.842745][ T3104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.859450][ T3135] chnl_net:caif_netlink_parms(): no params data found [ 26.882972][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.905547][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.914748][ T3102] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.921969][ T3102] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.929235][ T3102] bridge_slave_0: entered allmulticast mode [ 26.935880][ T3102] bridge_slave_0: entered promiscuous mode [ 26.956353][ T3104] hsr_slave_0: entered promiscuous mode [ 26.962699][ T3104] hsr_slave_1: entered promiscuous mode [ 26.973595][ T3102] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.980690][ T3102] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.987797][ T3102] bridge_slave_1: entered allmulticast mode [ 26.994461][ T3102] bridge_slave_1: entered promiscuous mode [ 27.025898][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.039913][ T3101] team0: Port device team_slave_0 added [ 27.046692][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.056517][ T3101] team0: Port device team_slave_1 added [ 27.112200][ T3118] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.119370][ T3118] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.126708][ T3118] bridge_slave_0: entered allmulticast mode [ 27.133162][ T3118] bridge_slave_0: entered promiscuous mode [ 27.144657][ T3135] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.151746][ T3135] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.158832][ T3135] bridge_slave_0: entered allmulticast mode [ 27.165267][ T3135] bridge_slave_0: entered promiscuous mode [ 27.172001][ T3101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.178948][ T3101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.205085][ T3101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.216450][ T3102] team0: Port device team_slave_0 added [ 27.223191][ T3102] team0: Port device team_slave_1 added [ 27.228910][ T3118] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.236077][ T3118] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.243279][ T3118] bridge_slave_1: entered allmulticast mode [ 27.249945][ T3118] bridge_slave_1: entered promiscuous mode [ 27.264141][ T3135] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.271217][ T3135] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.278837][ T3135] bridge_slave_1: entered allmulticast mode [ 27.285304][ T3135] bridge_slave_1: entered promiscuous mode [ 27.291606][ T3101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.298551][ T3101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.324584][ T3101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.367798][ T3102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.374828][ T3102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.400775][ T3102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.413381][ T3118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.422695][ T3102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.429639][ T3102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.455780][ T3102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.474318][ T3135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.484650][ T3135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.496774][ T3118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.546948][ T3101] hsr_slave_0: entered promiscuous mode [ 27.553120][ T3101] hsr_slave_1: entered promiscuous mode [ 27.559023][ T3101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.566622][ T3101] Cannot create hsr debugfs directory [ 27.577864][ T3135] team0: Port device team_slave_0 added [ 27.584437][ T3135] team0: Port device team_slave_1 added [ 27.600113][ T3118] team0: Port device team_slave_0 added [ 27.606874][ T3118] team0: Port device team_slave_1 added [ 27.635317][ T3102] hsr_slave_0: entered promiscuous mode [ 27.641385][ T3102] hsr_slave_1: entered promiscuous mode [ 27.647249][ T3102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.654827][ T3102] Cannot create hsr debugfs directory [ 27.672904][ T3118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.679857][ T3118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.705970][ T3118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.717134][ T3135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.724212][ T3135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.750194][ T3135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.761601][ T3135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.768549][ T3135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.794562][ T3135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.811661][ T3118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.818632][ T3118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.844933][ T3118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.899242][ T3118] hsr_slave_0: entered promiscuous mode [ 27.905387][ T3118] hsr_slave_1: entered promiscuous mode [ 27.911389][ T3118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.918942][ T3118] Cannot create hsr debugfs directory [ 27.952318][ T3135] hsr_slave_0: entered promiscuous mode [ 27.958495][ T3135] hsr_slave_1: entered promiscuous mode [ 27.964458][ T3135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.972054][ T3135] Cannot create hsr debugfs directory [ 28.030673][ T3104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.051599][ T3104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.060667][ T3104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.086983][ T3104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.131892][ T3101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.142967][ T3101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.165868][ T3101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.176576][ T3101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.196176][ T3102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.218812][ T3102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.228041][ T3102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.239269][ T3102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.258936][ T3135] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.267562][ T3135] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.276757][ T3135] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.285779][ T3135] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.316297][ T3118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.325137][ T3118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.334364][ T3118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.344054][ T3118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.392365][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.419333][ T3101] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.449738][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.456888][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.466356][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.473515][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.494073][ T3104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.518333][ T3118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.527510][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.543993][ T3104] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.558812][ T3102] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.577143][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.584408][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.603850][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.610935][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.619729][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.626890][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.635945][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.643193][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.672137][ T3118] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.683203][ T3102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.697088][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.704655][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.723945][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.731076][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.765775][ T3104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.776196][ T3104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.805485][ T3135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.829459][ T3102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.852011][ T3101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.860216][ T3135] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.869410][ T3118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.933058][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.940284][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.950537][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.957650][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.985035][ T3104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.037376][ T3118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.100501][ T3102] veth0_vlan: entered promiscuous mode [ 29.111964][ T3135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.132094][ T3102] veth1_vlan: entered promiscuous mode [ 29.183145][ T3102] veth0_macvtap: entered promiscuous mode [ 29.196059][ T3102] veth1_macvtap: entered promiscuous mode [ 29.207443][ T3102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.233146][ T3118] veth0_vlan: entered promiscuous mode [ 29.240095][ T3104] veth0_vlan: entered promiscuous mode [ 29.253750][ T3101] veth0_vlan: entered promiscuous mode [ 29.261585][ T3102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.273532][ T3101] veth1_vlan: entered promiscuous mode [ 29.288775][ T3104] veth1_vlan: entered promiscuous mode [ 29.302006][ T3118] veth1_vlan: entered promiscuous mode [ 29.311962][ T3102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.320791][ T3102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.329472][ T3102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.338290][ T3102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.368840][ T3135] veth0_vlan: entered promiscuous mode [ 29.388485][ T3104] veth0_macvtap: entered promiscuous mode [ 29.396582][ T3118] veth0_macvtap: entered promiscuous mode [ 29.404673][ T3118] veth1_macvtap: entered promiscuous mode [ 29.417357][ T3104] veth1_macvtap: entered promiscuous mode [ 29.432932][ T3101] veth0_macvtap: entered promiscuous mode [ 29.444140][ T3135] veth1_vlan: entered promiscuous mode [ 29.451965][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.462485][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.474637][ T3118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.483779][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.494376][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.505278][ T3118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.519152][ T3118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.528154][ T3118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.537042][ T3118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.545888][ T3118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.562730][ T3101] veth1_macvtap: entered promiscuous mode [ 29.578034][ T3104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.588563][ T3104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.591193][ T3244] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 29.598394][ T3104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.616408][ T3104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.627380][ T3104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.644940][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.655504][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.665402][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.675956][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.685798][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.696528][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.707235][ T3101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.715891][ T3135] veth0_macvtap: entered promiscuous mode [ 29.719120][ T3246] loop1: detected capacity change from 0 to 512 [ 29.723546][ T3104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.738619][ T3104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.748452][ T3104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.758977][ T3104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.769975][ T3246] EXT4-fs (loop1): unsupported inode size: 264 [ 29.776400][ T3246] EXT4-fs (loop1): blocksize: 1024 [ 29.783351][ T3104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.796606][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.807133][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.817131][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.827723][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.837670][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.848232][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.858968][ T3101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.867022][ T3135] veth1_macvtap: entered promiscuous mode [ 29.884549][ T3135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.895077][ T3135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.895281][ T3244] process 'syz-executor.1' launched './file0' with NULL argv: empty string added [ 29.905006][ T3135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.924831][ T3135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.934752][ T3135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.945351][ T3135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.955300][ T3135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.965928][ T3135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.980011][ T3135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.993723][ T3101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.002553][ T3101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.011308][ T3101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.020249][ T3101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.032541][ T3104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.041417][ T3104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.050125][ T3104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.058947][ T3104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.075161][ T3135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.085777][ T3135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.095783][ T3135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.106240][ T3135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.112485][ T3252] sctp: [Deprecated]: syz-executor.0 (pid 3252) Use of int in maxseg socket option. [ 30.112485][ T3252] Use struct sctp_assoc_value instead [ 30.116259][ T3135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.141317][ T3135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.151402][ T3135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.161936][ T3135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.175867][ T3135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.185276][ T3135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.194068][ T3135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.202945][ T3135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.211694][ T3135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.297048][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 30.297065][ T29] audit: type=1400 audit(1719046324.855:130): avc: denied { perfmon } for pid=3263 comm="syz-executor.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.385017][ T29] audit: type=1400 audit(1719046324.875:131): avc: denied { prog_run } for pid=3263 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.404395][ T29] audit: type=1326 audit(1719046324.895:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 30.428275][ T29] audit: type=1326 audit(1719046324.895:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 30.452230][ T29] audit: type=1326 audit(1719046324.895:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 30.476478][ T29] audit: type=1326 audit(1719046324.895:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 30.500664][ T29] audit: type=1326 audit(1719046324.895:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 30.524875][ T29] audit: type=1326 audit(1719046324.895:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 30.548863][ T29] audit: type=1326 audit(1719046324.895:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 30.572707][ T29] audit: type=1326 audit(1719046324.895:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 30.686505][ T3292] loop3: detected capacity change from 0 to 512 [ 30.704982][ T3286] syz-executor.4 (3286) used greatest stack depth: 11320 bytes left [ 30.738119][ T3292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.752267][ T3296] loop0: detected capacity change from 0 to 512 [ 30.782237][ T3292] ext4 filesystem being mounted at /root/syzkaller-testdir776845179/syzkaller.RwfPT9/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.805134][ T3296] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 30.813115][ T3296] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 30.846104][ T3292] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 30.863453][ T3296] System zones: 0-1, 15-15, 18-18, 34-34 [ 30.876525][ T3296] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.886928][ T3296] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 30.888871][ T3135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.901605][ T3296] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 30.944720][ T3296] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 30.959383][ T3318] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.979505][ T3320] tipc: Started in network mode [ 30.984554][ T3320] tipc: Node identity 6f66663a20313132, cluster identity 4711 [ 30.992078][ T3320] tipc: Enabling of bearer rejected, failed to enable media [ 31.005789][ T3296] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 31.008830][ T3320] loop3: detected capacity change from 0 to 128 [ 31.021565][ T3296] EXT4-fs (loop0): 1 truncate cleaned up [ 31.033316][ T3296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.061254][ T3320] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.074130][ T3320] ext4 filesystem being mounted at /root/syzkaller-testdir776845179/syzkaller.RwfPT9/3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.095272][ T3328] loop1: detected capacity change from 0 to 512 [ 31.132676][ T3296] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 31.140679][ T3296] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 31.150109][ T3328] EXT4-fs (loop1): unsupported inode size: 264 [ 31.156341][ T3328] EXT4-fs (loop1): blocksize: 1024 [ 31.174754][ T3332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 31.217738][ T3135] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.231896][ T3296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 31.248967][ T3338] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.271501][ T3296] sctp: [Deprecated]: syz-executor.0 (pid 3296) Use of int in max_burst socket option. [ 31.271501][ T3296] Use struct sctp_assoc_value instead [ 31.353954][ T3118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.421157][ T3332] loop4: detected capacity change from 0 to 2048 [ 31.460887][ T3332] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 31.487793][ T3332] EXT4-fs (loop4): get root inode failed [ 31.493605][ T3332] EXT4-fs (loop4): mount failed [ 31.594778][ T3375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 31.863721][ T3405] sctp: [Deprecated]: syz-executor.3 (pid 3405) Use of int in max_burst socket option. [ 31.863721][ T3405] Use struct sctp_assoc_value instead [ 31.974266][ T3460] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 32.046217][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 32.077150][ T3428] delete_channel: no stack [ 32.107611][ T3460] syz-executor.0 (3460) used greatest stack depth: 11176 bytes left [ 32.238725][ T3514] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 32.289082][ T3514] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 32.312151][ T3526] loop0: detected capacity change from 0 to 128 [ 32.329874][ T3514] team0: Failed to send options change via netlink (err -105) [ 32.337478][ T3514] team0: Port device netdevsim1 added [ 32.376568][ C0] hrtimer: interrupt took 24426 ns [ 32.661828][ T3549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 32.787327][ T3551] loop1: detected capacity change from 0 to 128 [ 32.800492][ T3551] ext2: Unknown parameter 'noacl' [ 32.837716][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 32.847023][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 32.860686][ T3526] geneve2: entered promiscuous mode [ 32.866089][ T3526] geneve2: entered allmulticast mode [ 32.874360][ T3544] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 33.047221][ T3566] tipc: Started in network mode [ 33.052194][ T3566] tipc: Node identity 6f66663a20313132, cluster identity 4711 [ 33.059692][ T3566] tipc: Enabling of bearer rejected, failed to enable media [ 33.534680][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 33.559411][ T3600] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 33.616893][ T3600] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 33.642889][ T3547] syz-executor.1 (3547) used greatest stack depth: 8208 bytes left [ 33.727390][ T3613] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.762884][ T3587] geneve2: entered promiscuous mode [ 33.768145][ T3587] geneve2: entered allmulticast mode [ 33.775029][ T3595] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 33.794931][ T3606] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 33.814146][ T3606] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 33.823566][ T3606] team0: Failed to send options change via netlink (err -105) [ 33.831171][ T3606] team0: Port device netdevsim1 added [ 33.837953][ T3185] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 33.903154][ T3628] : renamed from bond_slave_1 (while UP) [ 35.059748][ T3778] : renamed from bond_slave_1 (while UP) [ 35.083304][ T3773] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 35.284888][ T3808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.345278][ T3808] Cannot find add_set index 0 as target [ 35.347581][ T3816] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 35.376565][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 35.376584][ T29] audit: type=1400 audit(1719046329.939:360): avc: denied { getopt } for pid=3807 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.468716][ T3831] 0XD: renamed from gretap0 (while UP) [ 35.481235][ T3831] 0XD: entered allmulticast mode [ 35.515279][ T3831] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 35.569088][ T29] audit: type=1400 audit(1719046330.127:361): avc: denied { bind } for pid=3844 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.589015][ T29] audit: type=1400 audit(1719046330.127:362): avc: denied { write } for pid=3844 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.652512][ T29] audit: type=1400 audit(1719046330.157:363): avc: denied { write } for pid=3848 comm="syz-executor.0" path="socket:[5334]" dev="sockfs" ino=5334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.676068][ T29] audit: type=1400 audit(1719046330.187:364): avc: denied { setopt } for pid=3852 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.677228][ T3858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.716412][ T29] audit: type=1400 audit(1719046330.277:365): avc: denied { create } for pid=3853 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 35.776610][ T29] audit: type=1400 audit(1719046330.337:366): avc: denied { write } for pid=3853 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 35.798374][ T3858] Cannot find add_set index 0 as target [ 35.815854][ T3865] Zero length message leads to an empty skb [ 35.834065][ T29] audit: type=1400 audit(1719046330.397:367): avc: denied { read } for pid=3864 comm="syz-executor.1" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 35.858313][ T29] audit: type=1400 audit(1719046330.397:368): avc: denied { open } for pid=3864 comm="syz-executor.1" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 35.886351][ T3865] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.953624][ T2784] udevd[2784]: worker [3283] terminated by signal 33 (Unknown signal 33) [ 35.970093][ T29] audit: type=1400 audit(1719046330.527:369): avc: denied { create } for pid=3879 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.368827][ T4049] __nla_validate_parse: 11 callbacks suppressed [ 36.368846][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 36.384598][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 36.418409][ T4049] geneve2: entered promiscuous mode [ 36.423767][ T4049] geneve2: entered allmulticast mode [ 36.456568][ T4075] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 36.503960][ T4079] loop0: detected capacity change from 0 to 256 [ 36.543773][ T4079] FAT-fs (loop0): Directory bread(block 64) failed [ 36.552562][ T4079] FAT-fs (loop0): Directory bread(block 65) failed [ 36.559141][ T4079] FAT-fs (loop0): Directory bread(block 66) failed [ 36.566045][ T4079] FAT-fs (loop0): Directory bread(block 67) failed [ 36.573850][ T4079] FAT-fs (loop0): Directory bread(block 68) failed [ 36.580657][ T4079] FAT-fs (loop0): Directory bread(block 69) failed [ 36.604621][ T4079] FAT-fs (loop0): Directory bread(block 70) failed [ 36.614826][ T4079] FAT-fs (loop0): Directory bread(block 71) failed [ 36.636197][ T4079] FAT-fs (loop0): Directory bread(block 72) failed [ 36.644549][ T4079] FAT-fs (loop0): Directory bread(block 73) failed [ 37.090021][ T4124] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 37.222978][ T3493] kworker/u8:18: attempt to access beyond end of device [ 37.222978][ T3493] loop0: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 37.243023][ T3493] kworker/u8:18: attempt to access beyond end of device [ 37.243023][ T3493] loop0: rw=1, sector=1864, nr_sectors = 2400 limit=256 [ 37.265787][ T3493] kworker/u8:18: attempt to access beyond end of device [ 37.265787][ T3493] loop0: rw=1, sector=4264, nr_sectors = 2048 limit=256 [ 37.293573][ T3493] kworker/u8:18: attempt to access beyond end of device [ 37.293573][ T3493] loop0: rw=1, sector=6312, nr_sectors = 2264 limit=256 [ 37.315882][ T3493] kworker/u8:18: attempt to access beyond end of device [ 37.315882][ T3493] loop0: rw=1, sector=8576, nr_sectors = 2056 limit=256 [ 37.347870][ T3493] kworker/u8:18: attempt to access beyond end of device [ 37.347870][ T3493] loop0: rw=1, sector=10632, nr_sectors = 2352 limit=256 [ 37.371194][ T3493] kworker/u8:18: attempt to access beyond end of device [ 37.371194][ T3493] loop0: rw=1, sector=12984, nr_sectors = 4432 limit=256 [ 37.411559][ T3493] kworker/u8:18: attempt to access beyond end of device [ 37.411559][ T3493] loop0: rw=1, sector=17416, nr_sectors = 16384 limit=256 [ 37.664421][ T4185] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 37.868383][ T4211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 37.909088][ T4211] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 38.097965][ T4257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 38.153709][ T4262] loop1: detected capacity change from 0 to 2048 [ 38.287399][ T4285] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 38.289476][ T4262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 38.340595][ T4262] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 38.399228][ T4304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 38.499691][ T4321] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 38.516128][ T4325] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 38.527785][ T4325] 0XD: renamed from gretap0 (while UP) [ 38.537856][ T4325] 0XD: entered allmulticast mode [ 38.545096][ T4325] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 39.517011][ T3179] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.549314][ T3179] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 39.905977][ T4436] 1XD: renamed from 30XD (while UP) [ 39.921161][ T4436] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 40.472685][ T29] kauditd_printk_skb: 1269 callbacks suppressed [ 40.472715][ T29] audit: type=1400 audit(1719046335.042:1639): avc: denied { mount } for pid=4524 comm="syz-executor.2" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.501998][ T29] audit: type=1400 audit(1719046335.042:1640): avc: denied { unmount } for pid=3104 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.870639][ T29] audit: type=1400 audit(1719046335.432:1641): avc: denied { listen } for pid=4553 comm="syz-executor.4" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.891687][ T29] audit: type=1400 audit(1719046335.432:1642): avc: denied { connect } for pid=4553 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.911625][ T29] audit: type=1400 audit(1719046335.432:1643): avc: denied { name_connect } for pid=4553 comm="syz-executor.4" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 40.933456][ T29] audit: type=1400 audit(1719046335.432:1644): avc: denied { write } for pid=4553 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.992843][ T29] audit: type=1400 audit(1719046335.522:1645): avc: denied { read write } for pid=4559 comm="syz-executor.1" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.001694][ T4550] loop0: detected capacity change from 0 to 512 [ 41.016479][ T29] audit: type=1400 audit(1719046335.522:1646): avc: denied { open } for pid=4559 comm="syz-executor.1" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.053472][ T29] audit: type=1400 audit(1719046335.622:1647): avc: denied { mounton } for pid=4549 comm="syz-executor.0" path="/root/syzkaller-testdir2977530856/syzkaller.HtzXbS/66/file0" dev="configfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.105295][ T4550] EXT4-fs error (device loop0): ext4_quota_enable:7030: comm syz-executor.0: Bad quota inum: 5, type: 0 [ 41.117195][ T4550] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 41.118834][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 41.132052][ T4550] EXT4-fs (loop0): mount failed [ 41.362424][ T4596] Illegal XDP return value 4294966772 on prog (id 96) dev syz_tun, expect packet loss! [ 41.464683][ T4600] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 41.480106][ T29] audit: type=1400 audit(1719046336.042:1648): avc: denied { bind } for pid=4598 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.481215][ T4600] Y4`Ҙ: renamed from lo (while UP) [ 41.594115][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 41.614765][ T4609] SET target dimension over the limit! [ 41.622770][ T4609] __nla_validate_parse: 8 callbacks suppressed [ 41.622785][ T4609] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.688341][ T4610] vlan2: entered allmulticast mode [ 41.693572][ T4610] team0: entered allmulticast mode [ 41.698852][ T4610] team_slave_0: entered allmulticast mode [ 41.704624][ T4610] team_slave_1: entered allmulticast mode [ 41.714459][ T4612] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 41.724546][ T4612] CPU: 0 PID: 4612 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 41.734973][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 41.745173][ T4612] Call Trace: [ 41.748459][ T4612] [ 41.751395][ T4612] dump_stack_lvl+0xf2/0x150 [ 41.756011][ T4612] dump_stack+0x15/0x20 [ 41.760245][ T4612] dump_header+0x83/0x2d0 [ 41.764621][ T4612] oom_kill_process+0x33e/0x4c0 [ 41.769568][ T4612] out_of_memory+0x9af/0xbe0 [ 41.774179][ T4612] mem_cgroup_out_of_memory+0x13e/0x190 [ 41.779752][ T4612] try_charge_memcg+0x745/0xcd0 [ 41.784615][ T4612] ? __alloc_pages_noprof+0x194/0x360 [ 41.789998][ T4612] ? __rcu_read_unlock+0x4e/0x70 [ 41.794957][ T4612] __mem_cgroup_charge+0x63/0x100 [ 41.800027][ T4612] shmem_get_folio_gfp+0x480/0xb70 [ 41.805165][ T4612] shmem_fault+0x100/0x260 [ 41.809729][ T4612] __do_fault+0xb6/0x200 [ 41.814026][ T4612] handle_mm_fault+0xdeb/0x2a80 [ 41.818998][ T4612] __get_user_pages+0x49d/0xf10 [ 41.823876][ T4612] __mm_populate+0x25b/0x3b0 [ 41.828500][ T4612] __se_sys_mlockall+0x2c5/0x370 [ 41.833444][ T4612] __x64_sys_mlockall+0x1f/0x30 [ 41.838383][ T4612] x64_sys_call+0x2a79/0x2d70 [ 41.843094][ T4612] do_syscall_64+0xc9/0x1c0 [ 41.847631][ T4612] ? clear_bhb_loop+0x55/0xb0 [ 41.852444][ T4612] ? clear_bhb_loop+0x55/0xb0 [ 41.857209][ T4612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.863193][ T4612] RIP: 0033:0x7feb2e04b0a9 [ 41.867697][ T4612] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.887327][ T4612] RSP: 002b:00007feb2d3830c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 41.895770][ T4612] RAX: ffffffffffffffda RBX: 00007feb2e182120 RCX: 00007feb2e04b0a9 [ 41.903744][ T4612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 41.911718][ T4612] RBP: 00007feb2e0ba074 R08: 0000000000000000 R09: 0000000000000000 [ 41.919690][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.927761][ T4612] R13: 000000000000006e R14: 00007feb2e182120 R15: 00007fff1a426768 [ 41.935761][ T4612] [ 41.940522][ T4612] memory: usage 307200kB, limit 307200kB, failcnt 912 [ 41.947310][ T4612] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0 [ 41.956347][ T4612] kmem: usage 305508kB, limit 9007199254740988kB, failcnt 0 [ 41.963771][ T4612] Memory cgroup stats for /syz4: [ 41.964002][ T4612] cache 1675264 [ 41.972478][ T4612] rss 57344 [ 41.975600][ T4612] shmem 1675264 [ 41.979140][ T4612] mapped_file 1675264 [ 41.983172][ T4612] dirty 0 [ 41.986116][ T4612] writeback 0 [ 41.989416][ T4612] workingset_refault_anon 125 [ 41.994252][ T4612] workingset_refault_file 2 [ 41.998800][ T4612] swap 319488 [ 42.002354][ T4612] swapcached 32768 [ 42.006095][ T4612] pgpgin 9705 [ 42.009395][ T4612] pgpgout 9282 [ 42.012902][ T4612] pgfault 18076 [ 42.016378][ T4612] pgmajfault 46 [ 42.019856][ T4612] inactive_anon 0 [ 42.023527][ T4612] active_anon 0 [ 42.026992][ T4612] inactive_file 0 [ 42.030695][ T4612] active_file 0 [ 42.034165][ T4612] unevictable 1732608 [ 42.038201][ T4612] hierarchical_memory_limit 314572800 [ 42.043634][ T4612] hierarchical_memsw_limit 9223372036854771712 [ 42.049801][ T4612] total_cache 1675264 [ 42.053862][ T4612] total_rss 57344 [ 42.057501][ T4612] total_shmem 1675264 [ 42.061596][ T4612] total_mapped_file 1675264 [ 42.066354][ T4612] total_dirty 0 [ 42.069824][ T4612] total_writeback 0 [ 42.073758][ T4612] total_workingset_refault_anon 125 [ 42.078997][ T4612] total_workingset_refault_file 2 [ 42.084158][ T4612] total_swap 319488 [ 42.087965][ T4612] total_swapcached 32768 [ 42.092249][ T4612] total_pgpgin 9705 [ 42.096142][ T4612] total_pgpgout 9282 [ 42.100040][ T4612] total_pgfault 18076 [ 42.104128][ T4612] total_pgmajfault 46 [ 42.108302][ T4612] total_inactive_anon 0 [ 42.112537][ T4612] total_active_anon 0 [ 42.116525][ T4612] total_inactive_file 0 [ 42.120728][ T4612] total_active_file 0 [ 42.124733][ T4612] total_unevictable 1732608 [ 42.129460][ T4612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=4585,uid=0 [ 42.144779][ T4612] Memory cgroup out of memory: Killed process 4585 (syz-executor.4) total-vm:46704kB, anon-rss:420kB, file-rss:8888kB, shmem-rss:1664kB, UID:0 pgtables:100kB oom_score_adj:0 [ 42.163699][ T4610] team0: left allmulticast mode [ 42.168669][ T4610] team_slave_0: left allmulticast mode [ 42.174242][ T4610] team_slave_1: left allmulticast mode [ 42.220393][ T4627] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.496968][ T4638] Y4`Ҙ: renamed from lo (while UP) [ 42.550680][ T4643] SET target dimension over the limit! [ 42.569293][ T4643] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 42.785835][ T4665] team_slave_0: entered promiscuous mode [ 42.791554][ T4665] team_slave_1: entered promiscuous mode [ 42.797528][ T4665] vlan2: entered promiscuous mode [ 42.802692][ T4665] team0: entered promiscuous mode [ 42.807874][ T4665] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 42.817761][ T4665] team0: Device vlan2 is already an upper device of the team interface [ 42.838033][ T4665] team0: left promiscuous mode [ 42.843028][ T4665] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 42.850334][ T4665] team_slave_0: left promiscuous mode [ 42.855740][ T4665] team_slave_1: left promiscuous mode [ 42.884456][ T4668] Y4`Ҙ: renamed from lo (while UP) [ 42.908868][ T4670] loop0: detected capacity change from 0 to 512 [ 42.916529][ T4670] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.938588][ T4670] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 42.964217][ T4670] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 42.984223][ T4670] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.024020][ T3118] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 43.114529][ T4679] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.1'. [ 43.125758][ T4681] loop0: detected capacity change from 0 to 256 [ 43.134309][ T4681] FAT-fs (loop0): bogus sectors per cluster 223 [ 43.140640][ T4681] FAT-fs (loop0): Can't find a valid FAT filesystem [ 43.187684][ T4681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4681 comm=syz-executor.0 [ 43.333675][ T4707] SELinux: Context system_u:object_r:var_l is not valid (left unmapped). [ 43.409032][ T4716] ebt_among: dst integrity fail: 200 [ 43.417726][ T4715] loop0: detected capacity change from 0 to 256 [ 43.446016][ T4715] FAT-fs (loop0): bogus sectors per cluster 223 [ 43.452372][ T4715] FAT-fs (loop0): Can't find a valid FAT filesystem [ 43.499591][ T4715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=4715 comm=syz-executor.0 [ 43.578153][ T4731] team_slave_0: entered promiscuous mode [ 43.583877][ T4731] team_slave_1: entered promiscuous mode [ 43.616124][ T4731] vlan2: entered promiscuous mode [ 43.621308][ T4731] team0: entered promiscuous mode [ 43.635088][ T4731] team0: Device vlan2 is already an upper device of the team interface [ 43.664724][ T4731] team0: left promiscuous mode [ 43.669756][ T4731] team_slave_0: left promiscuous mode [ 43.675168][ T4731] team_slave_1: left promiscuous mode [ 43.763936][ T4743] ebt_among: dst integrity fail: 200 [ 43.764759][ T4744] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 44.015387][ T4760] vlan2: entered allmulticast mode [ 44.020709][ T4760] team0: entered allmulticast mode [ 44.025897][ T4760] team_slave_0: entered allmulticast mode [ 44.031723][ T4760] team_slave_1: entered allmulticast mode [ 44.037474][ T4760] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 44.055227][ T4760] team0: left allmulticast mode [ 44.060178][ T4760] team_slave_0: left allmulticast mode [ 44.065706][ T4760] team_slave_1: left allmulticast mode [ 44.071210][ T4760] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 44.165309][ T4772] ebt_among: dst integrity fail: 200 [ 44.202837][ T4774] team_slave_0: entered promiscuous mode [ 44.208613][ T4774] team_slave_1: entered promiscuous mode [ 44.214610][ T4774] vlan2: entered promiscuous mode [ 44.219648][ T4774] team0: entered promiscuous mode [ 44.224911][ T4774] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 44.235434][ T4774] team0: Device vlan2 is already an upper device of the team interface [ 44.244610][ T4774] team0: left promiscuous mode [ 44.249507][ T4774] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 44.256726][ T4774] team_slave_0: left promiscuous mode [ 44.262202][ T4774] team_slave_1: left promiscuous mode [ 44.290062][ T4778] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 44.765700][ T4829] loop0: detected capacity change from 0 to 512 [ 44.794335][ T4829] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.814296][ T4829] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 44.841412][ T4829] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 44.864645][ T4829] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.895444][ T3118] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 44.916465][ T4840] ref_ctr_offset mismatch. inode: 0x796 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 45.647601][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 45.647668][ T29] audit: type=1400 audit(1719047364.212:1847): avc: denied { read } for pid=4899 comm="syz-executor.2" path="socket:[6851]" dev="sockfs" ino=6851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.819095][ T4913] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 46.195390][ T29] audit: type=1400 audit(1719047364.762:1848): avc: denied { setopt } for pid=4926 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.337476][ T4939] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 46.393377][ T29] audit: type=1400 audit(1719047364.962:1849): avc: denied { create } for pid=4943 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 46.428091][ T29] audit: type=1400 audit(1719047364.982:1850): avc: denied { bind } for pid=4943 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 47.681698][ T5238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=5238 comm=syz-executor.4 [ 47.839257][ T5311] loop0: detected capacity change from 0 to 1024 [ 47.847778][ T5311] EXT4-fs: Ignoring removed orlov option [ 47.853652][ T5311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.862523][ T5311] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.872396][ T5311] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 47.935960][ T5311] ref_ctr_offset mismatch. inode: 0x7ae offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 48.138169][ T5354] loop0: detected capacity change from 0 to 512 [ 48.147368][ T5354] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 48.167846][ T5354] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 48.181787][ T5354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.195967][ T29] audit: type=1400 audit(1719047366.762:1851): avc: denied { setattr } for pid=5353 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.229203][ T3118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.245177][ T29] audit: type=1400 audit(1719047366.802:1852): avc: denied { read } for pid=5358 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 48.312527][ T5361] ref_ctr_offset mismatch. inode: 0x7a9 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 48.392438][ T5369] syzkaller0: entered promiscuous mode [ 48.398055][ T5369] syzkaller0: entered allmulticast mode [ 48.537014][ T29] audit: type=1400 audit(1719047367.102:1853): avc: denied { audit_read } for pid=5390 comm="syz-executor.4" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.566340][ T5392] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 48.712494][ T5422] tipc: Enabled bearer , priority 10 [ 48.858937][ T29] audit: type=1400 audit(1719047367.422:1854): avc: denied { setopt } for pid=5461 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 48.897608][ T29] audit: type=1400 audit(1719047367.422:1855): avc: denied { write } for pid=5458 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.944585][ T5472] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 48.971420][ T29] audit: type=1400 audit(1719047367.542:1856): avc: denied { getopt } for pid=5475 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.971625][ T5468] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 49.044572][ T5486] dummy0: entered promiscuous mode [ 49.053033][ T5486] dummy0: left promiscuous mode [ 49.304641][ T5519] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 49.382513][ T5529] 9pnet_fd: Insufficient options for proto=fd [ 49.409278][ T5531] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 49.431697][ T5533] bridge_slave_0: default FDB implementation only supports local addresses [ 49.671387][ T5556] Cannot find map_set index 0 as target [ 49.830349][ T3166] tipc: Node number set to 1331123976 [ 50.020570][ T5562] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 50.077566][ T5568] loop0: detected capacity change from 0 to 256 [ 50.086738][ T5568] ======================================================= [ 50.086738][ T5568] WARNING: The mand mount option has been deprecated and [ 50.086738][ T5568] and is ignored by this kernel. Remove the mand [ 50.086738][ T5568] option from the mount to silence this warning. [ 50.086738][ T5568] ======================================================= [ 50.137098][ T5571] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 50.201326][ T5579] dummy0: entered promiscuous mode [ 50.209762][ T5579] dummy0: left promiscuous mode [ 50.281955][ T5583] Process accounting resumed [ 50.478265][ T5595] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 50.556989][ T5600] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 50.709394][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 50.709408][ T29] audit: type=1326 audit(1719047369.272:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5596 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x0 [ 50.844235][ T5616] Cannot find map_set index 0 as target [ 51.136797][ T29] audit: type=1400 audit(1719047369.702:1863): avc: denied { unmount } for pid=3118 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.232219][ T5621] loop0: detected capacity change from 0 to 512 [ 51.240323][ T5621] ext4: Unknown parameter 'pcr' [ 51.500215][ T29] audit: type=1326 audit(1719047370.062:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 51.524531][ T29] audit: type=1326 audit(1719047370.062:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 51.548586][ T29] audit: type=1326 audit(1719047370.062:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 51.572575][ T29] audit: type=1326 audit(1719047370.062:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 51.615727][ T29] audit: type=1326 audit(1719047370.072:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 51.639897][ T29] audit: type=1326 audit(1719047370.092:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f020d0a9 code=0x7ffc0000 [ 51.664129][ T29] audit: type=1326 audit(1719047370.092:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f75f020a827 code=0x7ffc0000 [ 51.688051][ T29] audit: type=1326 audit(1719047370.092:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f75f01d04e9 code=0x7ffc0000 [ 52.093692][ T5666] pimreg: entered allmulticast mode [ 52.099616][ T5666] pimreg: left allmulticast mode [ 52.101423][ T5620] syz-executor.0 (5620) used greatest stack depth: 7112 bytes left [ 52.510316][ T5673] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 52.522195][ T5673] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 53.449442][ T5699] loop0: detected capacity change from 0 to 256 [ 53.570716][ T5704] loop0: detected capacity change from 0 to 128 [ 53.580159][ T5704] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.593927][ T5704] ext4 filesystem being mounted at /root/syzkaller-testdir2977530856/syzkaller.HtzXbS/162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.694732][ T5708] pimreg: entered allmulticast mode [ 53.702108][ T5708] pimreg: left allmulticast mode [ 53.857464][ T5714] team0: Device vlan2 is up. Set it down before adding it as a team port [ 54.088879][ T5723] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 54.856369][ T3118] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.910269][ T5749] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 55.013992][ T5767] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 55.022982][ T5767] veth0_macvtap: left promiscuous mode [ 55.036641][ T5767] veth0_macvtap: entered promiscuous mode [ 55.043983][ T5767] team0: Device macvtap0 failed to register rx_handler [ 55.051959][ T5767] veth0_macvtap: left promiscuous mode [ 55.104848][ T5775] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 55.411376][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 55.475499][ T5831] nftables ruleset with unbound chain [ 55.577940][ T5840] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 55.586140][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 55.737567][ T5854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 55.773836][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 55.773854][ T29] audit: type=1400 audit(1719047374.342:2007): avc: denied { bind } for pid=5855 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.801503][ T29] audit: type=1400 audit(1719047374.362:2008): avc: denied { connect } for pid=5855 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.466614][ T29] audit: type=1400 audit(1719047375.032:2009): avc: denied { mount } for pid=5906 comm="syz-executor.3" name="/" dev="hugetlbfs" ino=8917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 56.491584][ T29] audit: type=1400 audit(1719047375.062:2010): avc: denied { unmount } for pid=3135 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 56.578689][ T5911] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 56.586930][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 56.635151][ T29] audit: type=1400 audit(1719047375.202:2011): avc: denied { name_bind } for pid=5918 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 56.656834][ T29] audit: type=1400 audit(1719047375.202:2012): avc: denied { read } for pid=5918 comm="syz-executor.2" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.679522][ T29] audit: type=1400 audit(1719047375.212:2013): avc: denied { egress } for pid=3074 comm="syz-fuzzer" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 56.703122][ T29] audit: type=1400 audit(1719047375.212:2014): avc: denied { sendto } for pid=3074 comm="syz-fuzzer" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 56.807053][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 56.882622][ T5945] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 56.890943][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 57.011275][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 57.240348][ T6005] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 57.248521][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 57.316457][ T6012] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 57.326390][ T29] audit: type=1400 audit(1719047375.882:2015): avc: denied { bind } for pid=6009 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.200531][ T6051] loop0: detected capacity change from 0 to 512 [ 58.208145][ T6051] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 58.216968][ T6051] EXT4-fs (loop0): invalid journal inode [ 58.591294][ T6085] loop0: detected capacity change from 0 to 2048 [ 58.602050][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.616001][ T29] audit: type=1400 audit(1719047377.182:2016): avc: denied { create } for pid=6084 comm="syz-executor.0" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.641565][ T3118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.712909][ T6099] loop0: detected capacity change from 0 to 512 [ 58.722032][ T6099] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 58.732968][ T6099] EXT4-fs (loop0): group descriptors corrupted! [ 58.847285][ T6117] netlink: 'syz-executor.0': attribute type 22 has an invalid length. [ 58.916126][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 59.020762][ T6136] loop0: detected capacity change from 0 to 512 [ 59.028311][ T6136] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 59.039291][ T6136] EXT4-fs (loop0): group descriptors corrupted! [ 59.354793][ T6163] loop0: detected capacity change from 0 to 512 [ 59.362709][ T6163] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 59.373593][ T6163] EXT4-fs (loop0): group descriptors corrupted! [ 59.587472][ T6196] loop0: detected capacity change from 0 to 512 [ 59.595393][ T6196] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 59.606401][ T6196] EXT4-fs (loop0): group descriptors corrupted! [ 59.669463][ T6199] loop0: detected capacity change from 0 to 1024 [ 59.679884][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.718738][ T3118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.938637][ T6224] loop0: detected capacity change from 0 to 512 [ 59.946660][ T6224] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 59.957505][ T6224] EXT4-fs (loop0): group descriptors corrupted! [ 60.051787][ T6230] loop0: detected capacity change from 0 to 1024 [ 60.061717][ T6230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.084219][ T3118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.137957][ T6233] loop0: detected capacity change from 0 to 256 [ 60.453530][ T6247] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 60.462876][ T6247] team0: Port device netdevsim1 removed [ 60.470812][ T6247] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 60.726559][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 60.732897][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 60.739202][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 60.769949][ T6256] infiniband syz1: set active [ 60.774663][ T6256] infiniband syz1: added vcan0 [ 60.779491][ T3181] vcan0 speed is unknown, defaulting to 1000 [ 60.786738][ T6256] RDS/IB: syz1: added [ 60.790987][ T6256] smc: adding ib device syz1 with port count 1 [ 60.797760][ T6256] smc: ib device syz1 port 1 has pnetid [ 60.803920][ T3181] vcan0 speed is unknown, defaulting to 1000 [ 60.809995][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 60.841142][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 60.873917][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 60.904568][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 60.936424][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 61.040296][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 61.040315][ T29] audit: type=1326 audit(1719047379.612:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e8a40a9 code=0x7ffc0000 [ 61.078707][ T29] audit: type=1326 audit(1719047379.612:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e8a40a9 code=0x7ffc0000 [ 61.102705][ T29] audit: type=1326 audit(1719047379.612:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2d3e8a40a9 code=0x7ffc0000 [ 61.128416][ T29] audit: type=1326 audit(1719047379.612:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e8a40a9 code=0x7ffc0000 [ 61.152373][ T29] audit: type=1326 audit(1719047379.612:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e8a40a9 code=0x7ffc0000 [ 61.176951][ T29] audit: type=1326 audit(1719047379.612:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f2d3e8a40a9 code=0x7ffc0000 [ 61.201046][ T29] audit: type=1326 audit(1719047379.612:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e8a40a9 code=0x7ffc0000 [ 61.226024][ T29] audit: type=1326 audit(1719047379.772:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e8a40a9 code=0x0 [ 61.302250][ T6282] rdma_rxe: rxe_newlink: failed to add vcan0 [ 61.398106][ T29] audit: type=1326 audit(1719047379.962:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c481c0a9 code=0x7ffc0000 [ 61.422138][ T29] audit: type=1326 audit(1719047379.962:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30c481c0a9 code=0x7ffc0000 [ 61.531625][ T6297] loop0: detected capacity change from 0 to 1024 [ 61.539503][ T6297] EXT4-fs: Ignoring removed orlov option [ 61.545198][ T6297] EXT4-fs: Ignoring removed oldalloc option [ 61.553827][ T6297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.562819][ T6297] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.573746][ T6297] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 61.584916][ T6297] EXT4-fs (loop0): invalid journal inode [ 61.591522][ T6297] EXT4-fs (loop0): can't get journal size [ 61.599250][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.670752][ T6305] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 62.094702][ T6314] syz1: rxe_newlink: already configured on vcan0 [ 62.363696][ T3118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.825060][ T6337] rdma_rxe: rxe_newlink: failed to add vcan0 [ 63.139199][ T6357] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 63.147456][ T6357] __nla_validate_parse: 7 callbacks suppressed [ 63.147497][ T6357] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 63.163064][ T6357] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 63.294358][ T3484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.393783][ T3484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.450743][ T3484] bond0: (slave netdevsim1): Releasing backup interface [ 63.469824][ T3484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.524784][ T3484] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.543738][ T6372] vcan0 speed is unknown, defaulting to 1000 [ 63.617721][ T3484] bridge_slave_1: left allmulticast mode [ 63.623498][ T3484] bridge_slave_1: left promiscuous mode [ 63.629142][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.637307][ T3484] bridge_slave_0: left allmulticast mode [ 63.643148][ T3484] bridge_slave_0: left promiscuous mode [ 63.648821][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.753023][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.764019][ T3484] bond0 (unregistering): (slave ): Releasing backup interface [ 63.773958][ T3484] bond0 (unregistering): Released all slaves [ 63.817900][ T6372] chnl_net:caif_netlink_parms(): no params data found [ 63.831946][ T3484] tipc: Left network mode [ 63.862508][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.869625][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.877037][ T6372] bridge_slave_0: entered allmulticast mode [ 63.885276][ T6372] bridge_slave_0: entered promiscuous mode [ 63.892321][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.899397][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.908127][ T6372] bridge_slave_1: entered allmulticast mode [ 63.915313][ T6372] bridge_slave_1: entered promiscuous mode [ 63.936473][ T3484] hsr_slave_0: left promiscuous mode [ 63.943661][ T3484] hsr_slave_1: left promiscuous mode [ 63.949341][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.956844][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.966430][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.973904][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.985644][ T3484] veth1_macvtap: left promiscuous mode [ 63.991184][ T3484] veth0_macvtap: left promiscuous mode [ 63.996701][ T3484] veth1_vlan: left promiscuous mode [ 64.002106][ T3484] veth0_vlan: left promiscuous mode [ 64.111948][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 64.126913][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 64.174864][ T6372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.190944][ T6372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.221563][ T6372] team0: Port device team_slave_0 added [ 64.229667][ T6372] team0: Port device team_slave_1 added [ 64.248950][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.255972][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.281930][ T6372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.293485][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.300496][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.326558][ T6372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.341105][ T6390] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 64.366937][ T6372] hsr_slave_0: entered promiscuous mode [ 64.374461][ T6372] hsr_slave_1: entered promiscuous mode [ 64.380451][ T6372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.388010][ T6372] Cannot create hsr debugfs directory [ 64.667808][ T6372] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.676935][ T6372] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.686710][ T6372] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.695621][ T6372] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.737019][ T6372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.754215][ T6372] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.767192][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.774428][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.787852][ T3178] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.795009][ T3178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.878326][ T6372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.018670][ T6372] veth0_vlan: entered promiscuous mode [ 65.027390][ T6372] veth1_vlan: entered promiscuous mode [ 65.047127][ T6372] veth0_macvtap: entered promiscuous mode [ 65.057005][ T6372] veth1_macvtap: entered promiscuous mode [ 65.069442][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.080084][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.089975][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.100476][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.110336][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.120981][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.130901][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.141477][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.154643][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.165684][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.176161][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.186052][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.196507][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.206433][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.216881][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.226749][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.237246][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.250074][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.259152][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.276937][ T6372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.285768][ T6372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.294680][ T6372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.303533][ T6372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.370642][ T6415] atomic_op ffff88810d825928 conn xmit_atomic 0000000000000000 [ 65.520600][ T6433] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 65.532321][ T6433] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 65.667088][ T6440] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.319615][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 66.319630][ T29] audit: type=1400 audit(1719047384.882:2057): avc: denied { read } for pid=6442 comm="syz-executor.4" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.371118][ T29] audit: type=1400 audit(1719047384.922:2058): avc: denied { open } for pid=6442 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.396231][ T29] audit: type=1400 audit(1719047384.922:2059): avc: denied { setattr } for pid=6442 comm="syz-executor.4" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.611784][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.619145][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.627635][ T6463] bridge0: entered promiscuous mode [ 66.656801][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.664032][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.825729][ T6480] loop4: detected capacity change from 0 to 256 [ 67.020851][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.258049][ T29] audit: type=1400 audit(1719047385.822:2060): avc: denied { getopt } for pid=6506 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.511595][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.741973][ T29] audit: type=1400 audit(1719047386.312:2061): avc: denied { read } for pid=6533 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.850151][ T29] audit: type=1400 audit(1719047386.412:2062): avc: denied { map } for pid=6533 comm="syz-executor.4" path="socket:[11233]" dev="sockfs" ino=11233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.861299][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.933432][ T6545] netlink: 281 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.655842][ T29] audit: type=1400 audit(1719047387.222:2063): avc: denied { read } for pid=6566 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.942557][ T6584] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.108332][ T6587] ================================================================== [ 69.116477][ T6587] BUG: KCSAN: data-race in list_lru_add / list_lru_count_node [ 69.124082][ T6587] [ 69.126425][ T6587] read-write to 0xffff8881028568e0 of 8 bytes by task 3118 on cpu 1: [ 69.134549][ T6587] list_lru_add+0x1f4/0x230 [ 69.139086][ T6587] list_lru_add_obj+0xbb/0xd0 [ 69.143898][ T6587] d_lru_add+0xa8/0xe0 [ 69.148000][ T6587] fast_dput+0x26b/0x2b0 [ 69.152357][ T6587] dput+0x24/0xd0 [ 69.156032][ T6587] path_openat+0x10ec/0x1da0 [ 69.160766][ T6587] do_filp_open+0xf7/0x200 [ 69.165254][ T6587] do_sys_openat2+0xab/0x120 [ 69.169944][ T6587] __x64_sys_openat+0xf3/0x120 [ 69.174733][ T6587] x64_sys_call+0x1057/0x2d70 [ 69.179436][ T6587] do_syscall_64+0xc9/0x1c0 [ 69.184271][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.190243][ T6587] [ 69.192583][ T6587] read to 0xffff8881028568e0 of 8 bytes by task 6587 on cpu 0: [ 69.200144][ T6587] list_lru_count_node+0x2c/0x40 [ 69.205155][ T6587] shrink_dcache_sb+0x1a4/0x280 [ 69.210055][ T6587] reconfigure_super+0x474/0x5b0 [ 69.215015][ T6587] path_mount+0x967/0xb30 [ 69.219369][ T6587] __se_sys_mount+0x27f/0x2d0 [ 69.224065][ T6587] __x64_sys_mount+0x67/0x80 [ 69.228696][ T6587] x64_sys_call+0x25c9/0x2d70 [ 69.233594][ T6587] do_syscall_64+0xc9/0x1c0 [ 69.238122][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.244127][ T6587] [ 69.246454][ T6587] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 69.253567][ T6587] 2024/06/22 09:09:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 69.255898][ T6587] Reported by Kernel Concurrency Sanitizer on: [ 69.262055][ T6587] CPU: 0 PID: 6587 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 69.272565][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.282634][ T6587] ================================================================== [ 69.294260][ T29] audit: type=1400 audit(1719047387.862:2064): avc: denied { write } for pid=3074 comm="syz-fuzzer" path="pipe:[732]" dev="pipefs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 69.322661][ T29] audit: type=1400 audit(1719047387.882:2065): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.163 src=35966 daddr=10.128.0.208 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 69.370029][ T6587] EXT4-fs: error -4 creating inode table initialization thread [ 69.377728][ T6587] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 69.389165][ T3493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0