last executing test programs: 26.626424165s ago: executing program 4 (id=172): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001ac0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001a80)=""/24, 0x18, 0x103, 0x4, 0x0, 0x5, 0xc04}}, 0x11c) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) unshare(0x400) readv(r0, 0x0, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 26.338825624s ago: executing program 4 (id=175): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x80, 0x800, 0x5, 0xf8a, 0x75, 0x7fffffff, 0x4, 0x7fffffff, 0x1, 0xfffffffb, 0x4, 0x6, 0x4, 0x8, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0xdb, 0x72f4, 0x6, 0x7, 0xd6, 0x0, 0x7, 0x3, 0x2, 0x5a18, 0x2a, 0x5, 0xa, 0x5, 0x6, 0x6, 0x1, 0x0, 0x5, 0xd, 0x6, 0xe60, 0x3a, 0x14, 0x31, 0xc4e2, 0xbf3, 0xfffffff7, 0x2, 0x8, 0x50, 0xfffffff2, 0x8, 0x8, 0x80000001, 0xfffffff7, 0x671b, 0x0, 0x1, 0x9, 0x36, 0xd, 0x7a, 0x0, 0x9, 0x8, 0x8, 0x4, 0x10, 0x722b, 0x3f38b6fd, 0x7, 0x4, 0xcb8, 0x713e, 0x8, 0x9, 0x5, 0x33b1026, 0xe9de, 0xf6, 0xd, 0xc, 0x7800000, 0xc1, 0x6f, 0x5, 0x8, 0x2, 0x4, 0xace1, 0x4, 0x6, 0x2, 0x4, 0xff, 0x87, 0x99cf, 0xf, 0x306, 0x6505, 0x4, 0x98, 0x3, 0x6, 0x1, 0x5ba, 0x7, 0x0, 0x7ff, 0x7ff, 0x6, 0x7fffffff, 0x8, 0x3c00000, 0x101, 0xf98, 0x5, 0xc46c, 0x8, 0x7, 0x3b, 0x9, 0xffffffff, 0x81, 0x2, 0x5, 0x1, 0x1000, 0x200, 0xc51, 0x6ee2, 0xe81, 0x8901, 0x2, 0x4, 0x3, 0x7, 0x7b9, 0xfa, 0x40, 0xe, 0x6, 0x9, 0x7fffffff, 0x7fffffff, 0x4ff5a575, 0xc6b7, 0x1, 0xffff8001, 0x40, 0xff, 0x7, 0x5, 0x6e7, 0x3, 0x1, 0xa434, 0xffff, 0x6, 0x6, 0x6, 0x9, 0x4, 0xfffffff7, 0x10001, 0xfffffffa, 0x0, 0x3, 0x3, 0xffffffff, 0x5, 0x357a, 0x1, 0x1, 0x4, 0x4, 0x6, 0x7f, 0x7, 0x8, 0x3, 0x10001, 0xcbf, 0x7, 0x5, 0xf6, 0x8, 0x4, 0x9f8, 0x9, 0x6, 0x1, 0x9, 0x8, 0xff, 0x1ff, 0x2b, 0x5, 0x8, 0x9, 0xff, 0x2, 0x2, 0xfffffff8, 0x5, 0xc3, 0x40, 0x7, 0x80000001, 0x4000000, 0x3, 0xffffffff, 0x800, 0x8, 0x4, 0xb, 0x4, 0x8, 0x1, 0x7f, 0x6, 0x1, 0x10000, 0xacd6, 0xfffffff7, 0x200, 0x10001, 0x8, 0xfffffffa, 0x2, 0x2, 0x4, 0x9, 0x6, 0xffff108b, 0xfffffead, 0x0, 0x0, 0x1ff, 0x4, 0x3, 0x8, 0x0, 0xa6d, 0x5c5, 0x2, 0x9, 0x82, 0x3, 0xffffff7d, 0x8001, 0xffffff2d, 0x2, 0x1000, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xc8, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x1, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x2, 0x7f, 0x3, 0x8, 0x5, 0x3, 0x3, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0x80000000, 0x6032, 0xc2, 0x9, 0x1000, 0x6, 0x6f, 0x7c45, 0x0, 0x5, 0x9, 0x9, 0xef, 0x291d, 0x0, 0x8, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0xf08, 0xb, 0x6, 0x0, 0xf96a, 0x8, 0x2, 0xc791, 0x6597121a, 0x9, 0x25dc, 0x40, 0x0, 0x0, 0x6, 0x1571, 0x7, 0x0, 0x7, 0x4, 0xde1, 0x7fffffff, 0xe32, 0x1, 0xfffffff7, 0x9, 0x10000, 0x6ff0, 0x9, 0x0, 0xfffffff9, 0x1, 0x9, 0xb, 0x58000, 0x2bcd, 0x80000001, 0x1, 0x10001, 0x3, 0x19, 0x1, 0xffffffff, 0x8001, 0x1, 0x1, 0x2, 0x9, 0x9, 0x8000, 0x490000, 0xfffffff2, 0xb3f, 0xffffb6fa, 0x4, 0x0, 0x401, 0x5, 0xd, 0x8, 0x401, 0x4, 0x1ff, 0x3, 0x7f, 0x9, 0x5, 0x97, 0x3, 0x3, 0xc, 0xf, 0x3, 0x3ff, 0x4, 0x80000000, 0x10, 0x8, 0x30, 0x0, 0x4, 0x5, 0xb, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x101, 0x1, 0xfffffff7, 0x3, 0x0, 0x6, 0x1, 0x26c0, 0x2, 0x1, 0x5, 0x9, 0x9, 0x2, 0xfffffff8, 0xdc88, 0x8, 0x0, 0x3f, 0x7, 0x6, 0x5, 0x3, 0x0, 0x4, 0x2, 0xd, 0x0, 0xbbb, 0x27e, 0x1, 0x75b, 0x8, 0x2, 0x7, 0x2, 0x3, 0x9, 0xfffffffc, 0x5, 0x3, 0x0, 0x9, 0x6, 0x9, 0x1ff, 0x9, 0xa461, 0x8, 0x7, 0x2, 0x3, 0x0, 0x0, 0x6, 0x9, 0x9, 0x49e88dee, 0x3ff, 0x6, 0x6, 0x0, 0x0, 0x9b85, 0x37, 0x800, 0xfffffffe, 0x6, 0x5, 0x6, 0x3, 0x2, 0xd, 0xffffffb4, 0x8000, 0x5, 0xfffffffa, 0x2, 0x3, 0x4a00000, 0x80000001, 0xe71a, 0x6, 0x9, 0x4, 0x2, 0x4, 0x61, 0x1, 0x2, 0xfffffffc, 0x10001, 0x6, 0x2, 0x2, 0x7, 0x7, 0x6, 0x80000000, 0x2, 0x7fff, 0x5, 0xf, 0x401, 0x400, 0xba, 0x8, 0x1fd, 0x8, 0xb33b, 0x9, 0x7, 0x1, 0x4, 0x8, 0x7, 0x0, 0x2, 0x3, 0x9, 0x0, 0x10, 0xd177, 0x7, 0x6ef, 0x2bd, 0x1, 0x2d, 0xa047, 0xe9e, 0x120000, 0x7, 0x38000]}]}]}}]}, 0x87c}}, 0x20004811) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.274228326s ago: executing program 4 (id=178): setfsgid(0xee01) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='stack\x00') pread64(r2, &(0x7f0000000040)=""/45, 0x2d, 0x3439) 26.13454373s ago: executing program 4 (id=180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e25, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 26.057990003s ago: executing program 4 (id=181): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 25.972234906s ago: executing program 4 (id=185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 10.856916101s ago: executing program 32 (id=185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 2.78264584s ago: executing program 5 (id=532): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x40, 0x0, 0xf79f}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 2.661025654s ago: executing program 5 (id=534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 2.502471339s ago: executing program 2 (id=536): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc0000001900010031bd700000000000ac1e00010000000000000000000000006401010200000000000000000000000000000000000000000a00000000000e99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ffffffff000000000000000000000000000000013c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 2.46198037s ago: executing program 0 (id=537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2}, {0x4, 0x80, 0x2, 0x9}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x800}, {0x0, 0x6, 0x3}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 2.058942253s ago: executing program 1 (id=540): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.54655851s ago: executing program 2 (id=541): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.449451343s ago: executing program 5 (id=542): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) getdents64(r2, 0x0, 0x0) 1.418256744s ago: executing program 0 (id=543): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40002041, 0x0) 1.401566795s ago: executing program 1 (id=544): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.346009166s ago: executing program 5 (id=546): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 1.318008317s ago: executing program 1 (id=547): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.294960148s ago: executing program 0 (id=548): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000000000001c280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8810) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.24552156s ago: executing program 0 (id=550): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x254fe) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/242, 0x40000, 0x20, 0x0, 0x0) 1.218912161s ago: executing program 0 (id=551): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1.179595751s ago: executing program 0 (id=552): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="36000000142000000000000003517765c9614c96c6e3966d2cd258ab4e847eea88fa09fe7f70ad3ef753f8adda53685d2d3ca5ce2a5deca25501d94beeccdb1ab878e4096b574848a31a02c8299d940dcbc4afd1c9060a98a6a6ccac6f5333d1ed2087ff97635a48aa05d27739367089ec611361de75d96b8374aa65957e242d05d4d75107c542da2919", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 950.924179ms ago: executing program 3 (id=557): socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x28, 0xfffffffffffffda8, 0x0, 0x1f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x4e74, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 925.96137ms ago: executing program 3 (id=558): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="38091d000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 670.525008ms ago: executing program 2 (id=559): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @private=0xa010101, @broadcast, @multicast1}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8c, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 432.780076ms ago: executing program 1 (id=560): sched_setaffinity(0x0, 0x0, 0x0) getpgrp(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf250f000000040003800400038044000780080001"], 0x60}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 322.782329ms ago: executing program 5 (id=561): socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 296.7725ms ago: executing program 2 (id=562): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtaction={0xe88, 0x30, 0x48b, 0x0, 0x0, {}, [{0xe74, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xdd4, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x834, 0x5, 0x7, 0x400}, 0x1}}]}, {0xd87, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xe88}, 0x1, 0x0, 0x0, 0x20008000}, 0x8040) 272.613471ms ago: executing program 3 (id=563): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x7) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 231.042592ms ago: executing program 3 (id=564): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2000002}}}, 0x10, 0x0}, 0x0) 207.026063ms ago: executing program 5 (id=565): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8402, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 192.541733ms ago: executing program 1 (id=566): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000380)=ANY=[@ANYBLOB="50004b1415ad291da40b385f00000201010100000000000000000200000a14001980080001000a0100000800020008060000240001800c00028005000100110000001400020000000000000080"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8c4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) rt_sigqueueinfo(0x0, 0x40, &(0x7f00000003c0)={0x34, 0x6, 0x80000fb2}) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 179.824104ms ago: executing program 2 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x4, 0x2, 0x6, 0x4, 0x0, 0x800, 0x8, 0x4, 0x49, 0xd6e, 0x1, 0x4, 0x9, 0x49, 0x40, 0x0, 0x9, 0x4, 0x8000, 0x401, 0x6, 0xfffffffc, 0x2, 0x345c, 0xd3, 0x2, 0x611, 0x7, 0x1ca1, 0x5, 0x400, 0x8, 0x7ff, 0xfffffffc, 0xccf, 0x3, 0x8000, 0x7, 0x6, 0x4, 0x7, 0xadf, 0x50, 0x0, 0xc, 0x904, 0x7, 0xfffffffb, 0x4, 0xfffffff8, 0x7000000, 0x4d, 0x7f, 0x51, 0x8, 0xffff0001, 0x60000, 0xc5, 0x44, 0xefc, 0x818f, 0x6, 0x41cc, 0x1, 0x5, 0x6, 0x6, 0x14, 0x4, 0x79bf, 0x685f579d, 0x80000001, 0x1, 0x4, 0x0, 0xe, 0x5, 0xb96, 0x9, 0x6, 0x4, 0x6, 0x4, 0x8001, 0x10001, 0x2, 0x5, 0x5, 0x7, 0x2a, 0x3, 0xdcf, 0xa, 0x4, 0x8, 0x2, 0x10001, 0xa, 0x0, 0x4, 0x4, 0x9, 0x6, 0x45f6, 0xd, 0x8, 0x1, 0x8, 0x313d, 0x8, 0x40, 0x5, 0xb7a, 0xfffffffc, 0x0, 0xad, 0xfffffffb, 0x9, 0x1, 0x2d700000, 0xf, 0x0, 0xffff, 0x0, 0xffffff63, 0xab6, 0x9, 0x9, 0x9, 0x80000001, 0x8, 0x25, 0x0, 0x1, 0x8, 0x3, 0x200, 0x5, 0x6287, 0x1, 0x1, 0x8, 0x3, 0x40000, 0x8, 0x3, 0x6, 0x1, 0x8001, 0x10001, 0xc, 0x7ff, 0xc10, 0x80, 0x8, 0x5f8e04b9, 0x8, 0x9, 0xc, 0x0, 0xfffffffa, 0x40, 0x7, 0x6, 0x7ce9, 0xe, 0xfff, 0x100, 0x401, 0x8, 0x3, 0x92a4, 0x4, 0x3, 0x10001, 0x1, 0x7fff, 0x3, 0x4, 0x8, 0xfffffffb, 0xfff, 0x2, 0x10000, 0x9, 0xfffffffb, 0x26, 0x80000000, 0x8, 0xdecd, 0x800, 0x3ff, 0x7, 0x3, 0xdd9, 0x10, 0x1, 0xffe000, 0x80000001, 0x98, 0x5, 0x80000000, 0x72b, 0x3, 0x7, 0x4, 0x0, 0x3, 0x6, 0x3, 0x100, 0x401, 0x7ff, 0x4, 0xfffffffb, 0x10, 0x5c8, 0x7, 0x8, 0x800, 0x654, 0x5, 0xe64, 0x4, 0x80000001, 0x5, 0x0, 0xfffffffe, 0xd7ea, 0x8, 0x3, 0x7, 0xffff, 0x2, 0xd240, 0x6, 0x590, 0x7, 0xf, 0x7, 0x10, 0x8, 0x6, 0x1000, 0x8, 0x65d0, 0xfffff11a, 0x9e7b, 0x4, 0xf2, 0x8, 0x2, 0xdbff, 0x800, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 163.866735ms ago: executing program 3 (id=568): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/4, 0x1001) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[], 0x5c}}, 0x0) 151.379424ms ago: executing program 1 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) 77.760657ms ago: executing program 2 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=571): fsopen(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) setpgid(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 30.007680][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 30.007696][ T28] audit: type=1400 audit(1780013426.905:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.036838][ T28] audit: type=1400 audit(1780013426.935:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.037512][ T3286] cgroup: Unknown subsys name 'net' [ 30.064584][ T28] audit: type=1400 audit(1780013426.965:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.158754][ T3286] cgroup: Unknown subsys name 'cpuset' [ 30.164850][ T3286] cgroup: Unknown subsys name 'rlimit' [ 30.255192][ T28] audit: type=1400 audit(1780013427.155:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.278920][ T28] audit: type=1400 audit(1780013427.155:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.299990][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.303361][ T28] audit: type=1400 audit(1780013427.155:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.329144][ T28] audit: type=1400 audit(1780013427.155:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.349527][ T28] audit: type=1400 audit(1780013427.165:133): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.353777][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.374501][ T28] audit: type=1400 audit(1780013427.165:134): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.406449][ T28] audit: type=1400 audit(1780013427.185:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.528868][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.536030][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.543556][ T3297] bridge_slave_0: entered allmulticast mode [ 31.549902][ T3297] bridge_slave_0: entered promiscuous mode [ 31.564542][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.571774][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.578969][ T3297] bridge_slave_1: entered allmulticast mode [ 31.585385][ T3297] bridge_slave_1: entered promiscuous mode [ 31.621124][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.650784][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.684367][ T3297] team0: Port device team_slave_0 added [ 31.690810][ T3297] team0: Port device team_slave_1 added [ 31.701365][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.708467][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.715560][ T3300] bridge_slave_0: entered allmulticast mode [ 31.722083][ T3300] bridge_slave_0: entered promiscuous mode [ 31.745242][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.752339][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.759497][ T3300] bridge_slave_1: entered allmulticast mode [ 31.765880][ T3300] bridge_slave_1: entered promiscuous mode [ 31.796861][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.803935][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.830031][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.842824][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.850046][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.857166][ T3307] bridge_slave_0: entered allmulticast mode [ 31.863459][ T3307] bridge_slave_0: entered promiscuous mode [ 31.876291][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.883365][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.909277][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.923479][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.930670][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.937865][ T3307] bridge_slave_1: entered allmulticast mode [ 31.944200][ T3307] bridge_slave_1: entered promiscuous mode [ 31.954181][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.964885][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.015418][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.022523][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.029699][ T3306] bridge_slave_0: entered allmulticast mode [ 32.036162][ T3306] bridge_slave_0: entered promiscuous mode [ 32.043377][ T3300] team0: Port device team_slave_0 added [ 32.052638][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.066277][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.073407][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.080553][ T3306] bridge_slave_1: entered allmulticast mode [ 32.086884][ T3306] bridge_slave_1: entered promiscuous mode [ 32.093647][ T3300] team0: Port device team_slave_1 added [ 32.102260][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.117440][ T3297] hsr_slave_0: entered promiscuous mode [ 32.123507][ T3297] hsr_slave_1: entered promiscuous mode [ 32.144477][ T3307] team0: Port device team_slave_0 added [ 32.167563][ T3307] team0: Port device team_slave_1 added [ 32.179464][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.189019][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.195971][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.221960][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.236908][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.244095][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.251334][ T3299] bridge_slave_0: entered allmulticast mode [ 32.257800][ T3299] bridge_slave_0: entered promiscuous mode [ 32.269275][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.278826][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.285857][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.311756][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.324881][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.332045][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.339163][ T3299] bridge_slave_1: entered allmulticast mode [ 32.345711][ T3299] bridge_slave_1: entered promiscuous mode [ 32.352192][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.359251][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.385295][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.415404][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.422456][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.448512][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.462827][ T3306] team0: Port device team_slave_0 added [ 32.469288][ T3306] team0: Port device team_slave_1 added [ 32.486931][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.512964][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.528876][ T3300] hsr_slave_0: entered promiscuous mode [ 32.534905][ T3300] hsr_slave_1: entered promiscuous mode [ 32.540786][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.546501][ T3300] Cannot create hsr debugfs directory [ 32.562059][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.569055][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.595020][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.617124][ T3299] team0: Port device team_slave_0 added [ 32.622980][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.629959][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.655919][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.673072][ T3307] hsr_slave_0: entered promiscuous mode [ 32.679164][ T3307] hsr_slave_1: entered promiscuous mode [ 32.684996][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 32.690758][ T3307] Cannot create hsr debugfs directory [ 32.699597][ T3299] team0: Port device team_slave_1 added [ 32.756459][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.763539][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.789532][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.802138][ T3306] hsr_slave_0: entered promiscuous mode [ 32.808052][ T3306] hsr_slave_1: entered promiscuous mode [ 32.813863][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 32.819662][ T3306] Cannot create hsr debugfs directory [ 32.832577][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.839567][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.865504][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.946318][ T3299] hsr_slave_0: entered promiscuous mode [ 32.952297][ T3299] hsr_slave_1: entered promiscuous mode [ 32.958300][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 32.964031][ T3299] Cannot create hsr debugfs directory [ 33.025881][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.034673][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.042172][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.050574][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.058219][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.066722][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.083919][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.092492][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.131370][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.140028][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.153441][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.162158][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.169910][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.178410][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.186096][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.194868][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.223492][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.232371][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.240939][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.249819][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.261787][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.270308][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.286547][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.294929][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.307795][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.316292][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.324620][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.333015][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.340618][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.349271][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.356976][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.365770][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.399061][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.425617][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.437273][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.446065][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.453828][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.462456][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.472060][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.480669][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.488329][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.496940][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.514361][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.521500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.534181][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.541286][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.571173][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.592059][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.601599][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.618622][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.626794][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.644688][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.655625][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.665030][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.672123][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.686970][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.694150][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.703302][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.710362][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.721749][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.728840][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.743863][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.750968][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.763569][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.770710][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.833853][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.866266][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.891565][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.902851][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.909965][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.924609][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.931765][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.089573][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.110551][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.122150][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.140004][ T3297] veth0_vlan: entered promiscuous mode [ 34.161897][ T3297] veth1_vlan: entered promiscuous mode [ 34.192959][ T3297] veth0_macvtap: entered promiscuous mode [ 34.207268][ T3297] veth1_macvtap: entered promiscuous mode [ 34.228673][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.241815][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.265410][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.288366][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.297199][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.306183][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.323926][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.349385][ T3307] veth0_vlan: entered promiscuous mode [ 34.369653][ T3306] veth0_vlan: entered promiscuous mode [ 34.381427][ T3306] veth1_vlan: entered promiscuous mode [ 34.387610][ T3307] veth1_vlan: entered promiscuous mode [ 34.418786][ T3306] veth0_macvtap: entered promiscuous mode [ 34.427372][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.433854][ T3307] veth0_macvtap: entered promiscuous mode [ 34.451493][ T3307] veth1_macvtap: entered promiscuous mode [ 34.460100][ T3306] veth1_macvtap: entered promiscuous mode [ 34.493502][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.503045][ T3300] veth0_vlan: entered promiscuous mode [ 34.510383][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.522593][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.536645][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.551826][ T3300] veth1_vlan: entered promiscuous mode [ 34.559770][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.569033][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.578340][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.587220][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.600665][ T3299] veth0_vlan: entered promiscuous mode [ 34.624924][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.634055][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.651520][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.660564][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.670396][ T3299] veth1_vlan: entered promiscuous mode [ 34.694347][ T3300] veth0_macvtap: entered promiscuous mode [ 34.709118][ T3300] veth1_macvtap: entered promiscuous mode [ 34.725143][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.749042][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.750932][ T3511] process 'syz.2.3' launched '/dev/fd/5' with NULL argv: empty string added [ 34.782948][ T3299] veth0_macvtap: entered promiscuous mode [ 34.808364][ T362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.828267][ T362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.849530][ T3299] veth1_macvtap: entered promiscuous mode [ 34.862632][ T362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.871688][ T362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.783423][ T3513] syz.3.4 (3513) used greatest stack depth: 10544 bytes left [ 37.825106][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.886760][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.913415][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 37.913433][ T28] audit: type=1400 audit(1780013434.815:182): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.959444][ T3523] SELinux: unknown common  [ 37.968372][ T134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.985464][ T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.996689][ T3523] SELinux: failed to load policy [ 38.020646][ T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.052955][ T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.055634][ T28] audit: type=1400 audit(1780013434.825:183): avc: denied { create } for pid=3527 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.145785][ T28] audit: type=1400 audit(1780013434.825:184): avc: denied { setopt } for pid=3527 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.178870][ T28] audit: type=1400 audit(1780013434.825:185): avc: denied { bind } for pid=3527 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.203087][ T28] audit: type=1400 audit(1780013434.825:186): avc: denied { name_bind } for pid=3527 comm="syz.3.13" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.231642][ T28] audit: type=1400 audit(1780013434.825:187): avc: denied { node_bind } for pid=3527 comm="syz.3.13" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 38.254276][ T28] audit: type=1400 audit(1780013434.825:188): avc: denied { write } for pid=3527 comm="syz.3.13" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.275523][ T28] audit: type=1400 audit(1780013434.825:189): avc: denied { connect } for pid=3527 comm="syz.3.13" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.279338][ T3538] batadv_slave_1: entered promiscuous mode [ 38.296131][ T28] audit: type=1400 audit(1780013434.825:190): avc: denied { name_connect } for pid=3527 comm="syz.3.13" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.323939][ T28] audit: type=1400 audit(1780013434.865:191): avc: denied { load_policy } for pid=3522 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.400434][ T3537] batadv_slave_1: left promiscuous mode [ 38.630780][ T3567] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 38.772241][ T3575] loop2: detected capacity change from 0 to 512 [ 38.773550][ T3572] loop1: detected capacity change from 0 to 1024 [ 38.795305][ T3575] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.813871][ T3572] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 38.825876][ T3575] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 38.836271][ T3575] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.24: Corrupt directory, running e2fsck is recommended [ 38.852256][ T3575] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 38.862386][ T3583] sctp: [Deprecated]: syz.0.32 (pid 3583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 38.862386][ T3583] Use struct sctp_sack_info instead [ 38.866915][ T3575] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.24: corrupted in-inode xattr: e_name out of bounds [ 38.892879][ T3575] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.893119][ T3575] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.24: couldn't read orphan inode 15 (err -117) [ 38.902393][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 38.902413][ C1] EXT4-fs (loop2): initial error at time 1780013435: ext4_iget_extra_inode:5128: inode 15 [ 38.902441][ C1] EXT4-fs (loop2): last error at time 1780013435: ext4_iget_extra_inode:5128: inode 15 [ 38.920855][ T3583] loop0: detected capacity change from 0 to 2048 [ 38.948362][ T3572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.962311][ T3575] loop2: lost filesystem error report for type 5 error -117 [ 38.962780][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.000504][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.012301][ T3583] loop0: p3 < > p4 < > [ 39.027994][ T3583] loop0: partition table partially beyond EOD, truncated [ 39.047429][ T3583] loop0: p3 start 4284289 is beyond EOD, truncated [ 39.108935][ T3595] capability: warning: `syz.1.35' uses 32-bit capabilities (legacy support in use) [ 39.179699][ T3604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3604 comm=syz.0.39 [ 39.193337][ T3604] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 39.280243][ T3612] bridge0: port 3(vlan2) entered blocking state [ 39.286989][ T3612] bridge0: port 3(vlan2) entered disabled state [ 39.294016][ T3612] vlan2: entered allmulticast mode [ 39.300206][ T3612] geneve0: entered allmulticast mode [ 39.306177][ T3612] vlan2: entered promiscuous mode [ 39.311688][ T3612] geneve0: entered promiscuous mode [ 39.472119][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.665232][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 39.686354][ T3582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.687258][ T3640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 39.704430][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 39.732051][ T3640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 39.735301][ T362] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.761266][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 39.771499][ T362] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.792727][ T362] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.861391][ T23] IPVS: starting estimator thread 0... [ 39.911766][ T3640] Zero length message leads to an empty skb [ 39.913181][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.935508][ T3662] xt_hashlimit: max too large, truncated to 1048576 [ 39.948048][ T3655] IPVS: using max 2784 ests per chain, 139200 per kthread [ 40.149393][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 40.611604][ T3699] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 40.668067][ T3703] loop3: detected capacity change from 0 to 512 [ 40.679773][ T3703] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.721600][ T3703] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.730078][ T3705] xt_CT: No such helper "snmp_trap" [ 40.752204][ T3703] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.796806][ T3703] EXT4-fs (loop3): 1 truncate cleaned up [ 40.815993][ T3703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.006217][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.075008][ T3728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 41.089450][ T3724] loop3: detected capacity change from 0 to 2048 [ 41.102941][ T3728] netlink: 212 bytes leftover after parsing attributes in process `syz.0.86'. [ 41.130908][ T3724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.186272][ T3724] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.201705][ T3724] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 41.214218][ T3724] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.214218][ T3724] [ 41.223947][ T3724] EXT4-fs (loop3): Total free blocks count 0 [ 41.230195][ T3724] EXT4-fs (loop3): Free/Dirty block details [ 41.236144][ T3724] EXT4-fs (loop3): free_blocks=2415919104 [ 41.243845][ T3724] EXT4-fs (loop3): dirty_blocks=64 [ 41.244100][ T3739] loop0: detected capacity change from 0 to 512 [ 41.249016][ T3724] EXT4-fs (loop3): Block reservation details [ 41.249032][ T3724] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 41.284936][ T3724] syz.3.85 (3724) used greatest stack depth: 9728 bytes left [ 41.307296][ T3744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 41.321313][ T3739] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.88: corrupted inode contents [ 41.343904][ T3426] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.379959][ T3306] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 41.391374][ T3739] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.391930][ T3744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 41.401119][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 41.401138][ C1] EXT4-fs (loop0): initial error at time 1780013694: ext4_do_update_inode:5690: inode 15 [ 41.401189][ C1] EXT4-fs (loop0): last error at time 1780013694: ext4_do_update_inode:5690: inode 15 [ 41.436031][ T3739] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 41.456579][ T3739] loop0: lost filesystem error report for type 5 error -117 [ 41.458923][ T3739] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.88: corrupted inode contents [ 41.520633][ T3739] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.522682][ T3739] EXT4-fs error (device loop0): ext4_evict_inode:315: inode #15: comm syz.0.88: mark_inode_dirty error [ 41.587491][ T3739] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.587725][ T3739] EXT4-fs (loop0): 1 orphan inode deleted [ 41.641968][ T3739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.755696][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.136811][ T3776] loop0: detected capacity change from 0 to 1024 [ 42.163535][ T3776] EXT4-fs: Ignoring removed orlov option [ 42.181090][ T3776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.307246][ T3781] capability: warning: `syz.2.104' uses deprecated v2 capabilities in a way that may be insecure [ 42.396251][ T3785] loop2: detected capacity change from 0 to 128 [ 42.429123][ T3785] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.468033][ T3785] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.523496][ T3426] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.546379][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.981303][ T3806] netlink: 'syz.0.114': attribute type 11 has an invalid length. [ 43.004303][ T3426] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.020955][ T3426] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.048709][ T3426] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.090488][ T3426] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.329189][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 43.329258][ T28] audit: type=1400 audit(1780013696.294:271): avc: denied { name_bind } for pid=3815 comm="syz.3.118" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.378483][ T3818] netlink: 'syz.0.119': attribute type 4 has an invalid length. [ 43.397902][ T28] audit: type=1400 audit(1780013696.294:272): avc: denied { node_bind } for pid=3815 comm="syz.3.118" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.429535][ T3818] netlink: 'syz.0.119': attribute type 4 has an invalid length. [ 43.537307][ T3823] loop4: detected capacity change from 0 to 1024 [ 43.549241][ T28] audit: type=1400 audit(1780013696.514:273): avc: denied { write } for pid=3827 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.570959][ T3830] loop0: detected capacity change from 0 to 512 [ 43.582761][ T3823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.603441][ T3823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.634374][ T3830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.663002][ T28] audit: type=1400 audit(1780013696.514:274): avc: denied { nlmsg_write } for pid=3827 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.764162][ T28] audit: type=1400 audit(1780013696.704:275): avc: denied { write } for pid=3829 comm="syz.0.125" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.829548][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.839291][ T28] audit: type=1400 audit(1780013696.704:276): avc: denied { create } for pid=3829 comm="syz.0.125" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.895821][ T28] audit: type=1400 audit(1780013696.704:277): avc: denied { write } for pid=3829 comm="syz.0.125" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.944968][ T28] audit: type=1400 audit(1780013696.704:278): avc: denied { add_name } for pid=3829 comm="syz.0.125" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 44.049482][ T28] audit: type=1400 audit(1780013696.714:279): avc: denied { write } for pid=3829 comm="syz.0.125" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 44.115330][ T28] audit: type=1400 audit(1780013696.714:280): avc: denied { create } for pid=3829 comm="syz.0.125" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 44.650956][ T3880] sctp: [Deprecated]: syz.0.145 (pid 3880) Use of int in max_burst socket option. [ 44.650956][ T3880] Use struct sctp_assoc_value instead [ 44.719445][ T3882] __nla_validate_parse: 2 callbacks suppressed [ 44.719462][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 44.741542][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 45.003638][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 45.010388][ T3899] loop0: detected capacity change from 0 to 164 [ 45.054048][ T3902] netlink: 7 bytes leftover after parsing attributes in process `syz.4.152'. [ 45.134595][ T3908] ======================================================= [ 45.134595][ T3908] WARNING: The mand mount option has been deprecated and [ 45.134595][ T3908] and is ignored by this kernel. Remove the mand [ 45.134595][ T3908] option from the mount to silence this warning. [ 45.134595][ T3908] ======================================================= [ 45.770171][ T3930] loop0: detected capacity change from 0 to 512 [ 45.781897][ T3930] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.166: corrupted in-inode xattr: invalid ea_ino [ 45.816177][ T3930] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.817871][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 45.833519][ C0] EXT4-fs (loop0): initial error at time 1780013698: ext4_iget_extra_inode:5128: inode 15 [ 45.843475][ C0] EXT4-fs (loop0): last error at time 1780013698: ext4_iget_extra_inode:5128: inode 15 [ 45.845015][ T3930] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.166: couldn't read orphan inode 15 (err -117) [ 45.897108][ T3930] loop0: lost filesystem error report for type 5 error -117 [ 45.897758][ T3930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.922497][ T3934] loop1: detected capacity change from 0 to 4096 [ 45.958262][ T3934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.021174][ T3941] loop3: detected capacity change from 0 to 512 [ 46.041320][ T3941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.068349][ T3941] EXT4-fs (loop3): 1 truncate cleaned up [ 46.079929][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.094360][ T3941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.113686][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.123950][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.155565][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.183584][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.192714][ T3948] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 46.207536][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.225486][ T3948] netlink: 'syz.0.171': attribute type 4 has an invalid length. [ 46.235086][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.250574][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.259747][ T3948] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.171'. [ 46.275752][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.289463][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.307042][ T3405] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 46.340886][ T3405] hid-generic 0103:0004:0000.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 46.416194][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.441244][ T3957] fido_id[3957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.707476][ T3977] loop1: detected capacity change from 0 to 512 [ 46.740141][ T3977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.771327][ T3977] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.182: bad orphan inode 131083 [ 46.786005][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.786065][ T3977] loop1: lost filesystem error report for type 5 error -117 [ 46.796637][ T3979] loop2: detected capacity change from 0 to 4096 [ 46.797850][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 46.818230][ T3977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.821151][ C1] EXT4-fs (loop1): initial error at time 1780013699: ext4_orphan_get:1423 [ 46.835496][ T3979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.843440][ C1] EXT4-fs (loop1): last error at time 1780013699: ext4_orphan_get:1423 [ 46.954022][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.991773][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.325335][ T3981] loop0: detected capacity change from 0 to 128 [ 47.425032][ T4000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 47.456833][ T4000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.528237][ T4000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 47.547986][ T4003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 47.554407][ T4000] bond1: (slave bond2): Enslaving as an active interface with an up link [ 47.574468][ T4003] bond1 (unregistering): (slave bond2): Releasing backup interface [ 47.588400][ T4003] bond1 (unregistering): Released all slaves [ 47.783155][ T4009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 47.813113][ T4009] bond1: entered promiscuous mode [ 47.836658][ T4009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.931212][ T4009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.946733][ T4009] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 47.996669][ T4009] bond1: (slave sit1): Error -95 calling set_mac_address [ 48.100253][ T4025] syzkaller0: entered promiscuous mode [ 48.107538][ T4025] syzkaller0: entered allmulticast mode [ 48.179272][ T4031] loop2: detected capacity change from 0 to 2048 [ 48.186714][ T4031] EXT4-fs: Ignoring removed nobh option [ 48.210106][ T4031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.654972][ T28] kauditd_printk_skb: 342 callbacks suppressed [ 48.654990][ T28] audit: type=1400 audit(1780013701.614:623): avc: denied { create } for pid=4042 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.688246][ T28] audit: type=1400 audit(1780013701.644:624): avc: denied { ioctl } for pid=4042 comm="syz.0.207" path="socket:[6884]" dev="sockfs" ino=6884 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.723716][ T28] audit: type=1400 audit(1780013701.644:625): avc: denied { write } for pid=4042 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.992117][ T28] audit: type=1400 audit(1780013701.954:626): avc: denied { read write } for pid=4054 comm="syz.1.214" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.040851][ T28] audit: type=1400 audit(1780013701.954:627): avc: denied { open } for pid=4054 comm="syz.1.214" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.097881][ T28] audit: type=1400 audit(1780013702.034:628): avc: denied { connect } for pid=4056 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.138069][ T28] audit: type=1400 audit(1780013702.034:629): avc: denied { read } for pid=4056 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.171572][ T28] audit: type=1400 audit(1780013702.094:630): avc: denied { ioctl } for pid=4056 comm="syz.1.215" path="socket:[5755]" dev="sockfs" ino=5755 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.380846][ T4034] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 50.943907][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.085737][ T4068] loop0: detected capacity change from 0 to 512 [ 51.110509][ T4068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.110583][ T4068] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.117175][ T28] audit: type=1400 audit(1780013704.074:631): avc: denied { write } for pid=4066 comm="syz.0.218" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.121816][ T4068] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 51.175535][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.323320][ T28] audit: type=1400 audit(1780013704.284:632): avc: denied { mount } for pid=4080 comm="syz.3.223" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 51.839467][ T4096] loop0: detected capacity change from 0 to 512 [ 51.869068][ T4096] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.229: iget: bad i_size value: 38620345925642 [ 51.912307][ T4096] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.912591][ T4096] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.229: couldn't read orphan inode 15 (err -117) [ 51.921805][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 51.921827][ C0] EXT4-fs (loop0): initial error at time 1780013704: ext4_orphan_get:1397: inode 15 [ 51.921859][ C0] EXT4-fs (loop0): last error at time 1780013704: ext4_orphan_get:1397: inode 15 [ 52.049726][ T4096] loop0: lost filesystem error report for type 5 error -117 [ 52.051272][ T4096] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.100875][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 52.198954][ T4112] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 52.345752][ T4123] loop0: detected capacity change from 0 to 128 [ 52.373279][ T4123] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 52.394953][ T4123] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.414483][ T4123] ext2 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.498755][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.907143][ T4152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.253'. [ 52.961995][ T4158] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 53.004144][ T4158] team0: Port device dummy0 added [ 53.055747][ T4158] syz.3.256 (4158) used greatest stack depth: 9664 bytes left [ 53.187410][ T4171] loop3: detected capacity change from 0 to 4096 [ 53.203568][ T4171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.290567][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.395671][ T4180] loop1: detected capacity change from 0 to 4096 [ 53.430736][ T4180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.467655][ T4185] loop3: detected capacity change from 0 to 512 [ 53.538582][ T4185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0400-000000000000 r/w without journal. Quota mode: writeback. [ 53.538841][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.572402][ T4185] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.676297][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0400-000000000000. [ 53.694388][ T4196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.706493][ T4196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.742663][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 53.742680][ T28] audit: type=1400 audit(1780013706.704:695): avc: denied { create } for pid=4197 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.780521][ T28] audit: type=1400 audit(1780013706.734:696): avc: denied { getopt } for pid=4197 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.830388][ T28] audit: type=1400 audit(1780013706.734:697): avc: denied { ioctl } for pid=4197 comm="syz.3.271" path="socket:[5963]" dev="sockfs" ino=5963 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.940418][ T28] audit: type=1400 audit(1780013706.904:698): avc: denied { write } for pid=4203 comm="syz.1.275" lport=45937 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 54.125723][ T4206] loop1: detected capacity change from 0 to 1024 [ 54.137626][ T4206] EXT4-fs: Ignoring removed nobh option [ 54.144218][ T4206] EXT4-fs: Ignoring removed bh option [ 54.151844][ T4206] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 54.176067][ T4206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.196090][ T28] audit: type=1400 audit(1780013707.154:699): avc: denied { write } for pid=4205 comm="syz.1.276" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.301753][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.361753][ T4213] loop1: detected capacity change from 0 to 512 [ 54.393590][ T4213] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.421285][ T4213] EXT4-fs (loop1): 1 truncate cleaned up [ 54.441291][ T4213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.443847][ T4222] pimreg: entered allmulticast mode [ 54.464911][ T28] audit: type=1326 audit(1780013707.424:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.3.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643a5ce59 code=0x7ffc0000 [ 54.508688][ T28] audit: type=1326 audit(1780013707.424:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.3.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643a5ce59 code=0x7ffc0000 [ 54.517010][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.534103][ T28] audit: type=1326 audit(1780013707.424:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.3.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643a5ce59 code=0x7ffc0000 [ 54.568776][ T28] audit: type=1326 audit(1780013707.424:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.3.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3643a5ce59 code=0x7ffc0000 [ 54.638034][ T28] audit: type=1326 audit(1780013707.424:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.3.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3643a5ce59 code=0x7ffc0000 [ 54.822382][ T4242] loop1: detected capacity change from 0 to 128 [ 54.841217][ T4242] syz.1.290: attempt to access beyond end of device [ 54.841217][ T4242] loop1: rw=2049, sector=171, nr_sectors = 1 limit=128 [ 54.854621][ T4242] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 54.873829][ T12] kworker/u8:0: attempt to access beyond end of device [ 54.873829][ T12] loop1: rw=1, sector=171, nr_sectors = 1 limit=128 [ 54.887738][ T12] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 55.222320][ T4249] netlink: 88 bytes leftover after parsing attributes in process `syz.2.293'. [ 55.231325][ T4249] netlink: 88 bytes leftover after parsing attributes in process `syz.2.293'. [ 55.513566][ T4268] sctp: [Deprecated]: syz.3.303 (pid 4268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.513566][ T4268] Use struct sctp_sack_info instead [ 56.302312][ T35] IPVS: starting estimator thread 0... [ 56.397916][ T4299] IPVS: using max 2544 ests per chain, 127200 per kthread [ 56.426716][ T4305] netlink: 'syz.2.318': attribute type 13 has an invalid length. [ 56.471292][ T4294] loop0: detected capacity change from 0 to 512 [ 56.580513][ T4294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.631406][ T4294] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.656770][ T4320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 56.666001][ T4320] netlink: 'syz.3.322': attribute type 7 has an invalid length. [ 56.673753][ T4320] netlink: 'syz.3.322': attribute type 8 has an invalid length. [ 56.681592][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 56.759126][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.870882][ T4330] loop2: detected capacity change from 0 to 512 [ 56.893407][ T4330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.924868][ T4330] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.326: corrupted xattr entries [ 56.947800][ T4330] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.950017][ T4330] EXT4-fs (loop2): Remounting filesystem read-only [ 56.959205][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 56.959225][ C0] EXT4-fs (loop2): initial error at time 1780013709: xattr_find_entry:337: inode 15 [ 56.959276][ C0] EXT4-fs (loop2): last error at time 1780013709: xattr_find_entry:337: inode 15 [ 56.991509][ T4330] EXT4-fs (loop2): 1 truncate cleaned up [ 56.999324][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.064347][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.126133][ T4336] lo: Caught tx_queue_len zero misconfig [ 57.281152][ T4341] loop2: detected capacity change from 0 to 512 [ 57.310354][ T4341] EXT4-fs: Ignoring removed bh option [ 57.333043][ T4341] EXT4-fs: inline encryption not supported [ 57.363897][ T4341] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.411339][ T4341] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 57.449468][ T4341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.330: bg 0: block 248: padding at end of block bitmap is not set [ 57.474688][ T4341] loop2: lost filesystem error report for type 5 error -117 [ 57.477861][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 57.491696][ C1] EXT4-fs (loop2): last error at time 1780013710: ext4_validate_block_bitmap:441 [ 57.507911][ T4341] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.330: Failed to acquire dquot type 1 [ 57.519265][ T4341] loop2: lost filesystem error report for type 5 error -28 [ 57.522277][ T4341] EXT4-fs (loop2): 1 truncate cleaned up [ 57.537175][ T4341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 57.685780][ T4341] syz.2.330 (4341) used greatest stack depth: 9128 bytes left [ 58.271064][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 58.449174][ T4361] loop2: detected capacity change from 0 to 512 [ 58.460323][ T4362] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 58.479475][ T4361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.504492][ T4361] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.338: iget: bad i_size value: 38620345925642 [ 58.519537][ T4361] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.520389][ T4361] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.338: couldn't read orphan inode 15 (err -117) [ 58.529661][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 58.529729][ C1] EXT4-fs (loop2): initial error at time 1780013711: ext4_orphan_get:1397: inode 15 [ 58.529755][ C1] EXT4-fs (loop2): last error at time 1780013711: ext4_orphan_get:1397: inode 15 [ 58.566732][ T4361] loop2: lost filesystem error report for type 5 error -117 [ 58.567051][ T4362] bond1: (slave geneve2): making interface the new active one [ 58.576203][ T4361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.601188][ T4362] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 58.613046][ T3426] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 58.628169][ T3426] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 58.650654][ T3426] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 58.666141][ T4360] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.338: bg 0: block 5: invalid block bitmap [ 58.678437][ T3426] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 58.709353][ T4371] netlink: 7 bytes leftover after parsing attributes in process `syz.1.341'. [ 58.713997][ T4361] EXT4-fs (loop2): shut down requested (0) [ 58.751850][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 58.751867][ T28] audit: type=1400 audit(1780013711.714:781): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 58.782533][ T4353] syz.3.333 (4353) used greatest stack depth: 8744 bytes left [ 58.829660][ T28] audit: type=1400 audit(1780013711.714:782): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.861185][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.873912][ T28] audit: type=1400 audit(1780013711.714:783): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.947384][ T28] audit: type=1400 audit(1780013711.714:784): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.013169][ T28] audit: type=1400 audit(1780013711.714:785): avc: denied { create } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.083436][ T28] audit: type=1400 audit(1780013711.714:786): avc: denied { append open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.133428][ T4395] ref_ctr increment failed for inode: 0x1de offset: 0x7 ref_ctr_offset: 0x80002 of mm: 0xffff8881050d06c0 [ 59.169200][ T28] audit: type=1400 audit(1780013711.714:787): avc: denied { getattr } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.245455][ T28] audit: type=1400 audit(1780013711.874:788): avc: denied { module_request } for pid=4379 comm="syz.0.346" kmod="crypto-rfc7539(chacha20,poly1305)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 59.252019][ T4398] loop0: detected capacity change from 0 to 512 [ 59.313121][ T4398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.331624][ T4398] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.439956][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.505891][ T28] audit: type=1400 audit(1780013712.424:789): avc: denied { write } for pid=4401 comm="syz.3.352" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.569272][ T4409] loop1: detected capacity change from 0 to 512 [ 59.575699][ T28] audit: type=1400 audit(1780013712.514:790): avc: denied { open } for pid=4401 comm="syz.3.352" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.583902][ T4402] random: crng reseeded on system resumption [ 59.603222][ T4403] loop3: detected capacity change from 0 to 1024 [ 59.645921][ T4409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.663833][ T4413] loop0: detected capacity change from 0 to 512 [ 59.673906][ T4409] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.703079][ T4413] EXT4-fs: Ignoring removed bh option [ 59.726497][ T4413] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 59.737118][ T4413] EXT4-fs (loop0): 1 truncate cleaned up [ 59.737999][ T4403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.743287][ T4413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.758452][ T4409] EXT4-fs (loop1): shut down requested (1) [ 59.846875][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 59.875661][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 59.901929][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 59.925531][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.937534][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 59.950786][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 59.961699][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 59.965976][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.972879][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 59.989344][ T4409] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 60.550099][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.589055][ T4441] Illegal XDP return value 4294967274 on prog (id 63) dev syz_tun, expect packet loss! [ 60.839922][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 60.873566][ T4453] team1: entered promiscuous mode [ 60.887740][ T4453] team1: entered allmulticast mode [ 60.898380][ T4453] 8021q: adding VLAN 0 to HW filter on device team1 [ 61.966535][ T4492] netlink: 'syz.3.385': attribute type 27 has an invalid length. [ 61.974930][ T4492] netlink: 'syz.3.385': attribute type 3 has an invalid length. [ 61.990139][ T4492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.385'. [ 62.166831][ T362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.244266][ T362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.293305][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.305858][ T4479] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.318372][ T4479] bridge_slave_0: entered allmulticast mode [ 62.332274][ T4479] bridge_slave_0: entered promiscuous mode [ 62.344939][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.354353][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.361812][ T4479] bridge_slave_1: entered allmulticast mode [ 62.368556][ T4479] bridge_slave_1: entered promiscuous mode [ 62.390385][ T362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.429758][ T4479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.449085][ T4479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.469081][ T362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.480415][ T4522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.490435][ T4522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.533273][ T4479] team0: Port device team_slave_0 added [ 62.540648][ T4479] team0: Port device team_slave_1 added [ 62.573458][ T4535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'. [ 62.605545][ T4479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.620979][ T4479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.647357][ T4479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.659942][ T362] bridge_slave_1: left allmulticast mode [ 62.665701][ T362] bridge_slave_1: left promiscuous mode [ 62.671959][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.683291][ T362] bridge_slave_0: left allmulticast mode [ 62.691484][ T362] bridge_slave_0: left promiscuous mode [ 62.708734][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.884904][ T362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.894892][ T362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.905124][ T362] bond0 (unregistering): Released all slaves [ 62.913527][ T4479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.920714][ T4479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.947074][ T4479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.966885][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 62.995728][ T362] hsr_slave_0: left promiscuous mode [ 63.001464][ T362] hsr_slave_1: left promiscuous mode [ 63.007001][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.014450][ T362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.022048][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.029557][ T362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.043236][ T362] veth1_macvtap: left promiscuous mode [ 63.049005][ T362] veth0_macvtap: left promiscuous mode [ 63.054954][ T362] veth1_vlan: left promiscuous mode [ 63.061054][ T362] veth0_vlan: left promiscuous mode [ 63.294244][ T362] team0 (unregistering): Port device team_slave_1 removed [ 63.306719][ T362] team0 (unregistering): Port device team_slave_0 removed [ 63.334116][ T4574] netlink: 'syz.3.408': attribute type 4 has an invalid length. [ 63.375316][ T4479] hsr_slave_0: entered promiscuous mode [ 63.381755][ T4479] hsr_slave_1: entered promiscuous mode [ 63.388265][ T4575] netlink: 'syz.3.408': attribute type 4 has an invalid length. [ 63.388959][ T4479] debugfs: 'hsr0' already exists in 'hsr' [ 63.402320][ T4479] Cannot create hsr debugfs directory [ 63.628512][ T4479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.648547][ T4479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.678411][ T4479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.694971][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'. [ 63.711091][ T4479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.741008][ T4479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.750547][ T4479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.758457][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 63.758472][ T28] audit: type=1400 audit(1780013716.724:846): avc: denied { write } for pid=4608 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.789857][ T4479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.810248][ T4479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.828637][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.884214][ T4479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.897029][ T4479] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.907215][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.914321][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.930015][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.937165][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.957699][ T4479] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.969218][ T4479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.034640][ T28] audit: type=1400 audit(1780013716.994:847): avc: denied { write } for pid=4622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.102504][ T28] audit: type=1400 audit(1780013717.064:848): avc: denied { write } for pid=4643 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.124035][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.185775][ T4479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.295237][ T28] audit: type=1400 audit(1780013717.254:849): avc: denied { write } for pid=4652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.332078][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 64.363411][ T28] audit: type=1400 audit(1780013717.274:850): avc: denied { write } for pid=4671 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.461622][ T4683] loop0: detected capacity change from 0 to 512 [ 64.478281][ T4683] EXT4-fs: Ignoring removed nobh option [ 64.489910][ T4479] veth0_vlan: entered promiscuous mode [ 64.514063][ T4683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.515224][ T4479] veth1_vlan: entered promiscuous mode [ 64.539123][ T4683] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.552437][ T28] audit: type=1400 audit(1780013717.514:851): avc: denied { write } for pid=4682 comm="syz.0.423" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.575287][ T4479] veth0_macvtap: entered promiscuous mode [ 64.585915][ T4479] veth1_macvtap: entered promiscuous mode [ 64.596543][ T4479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.609293][ T4479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.622746][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.633750][ T4683] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.423: iget: bad i_size value: 2533274857506816 [ 64.644704][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.704449][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.724412][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.742445][ T4683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.785993][ T28] audit: type=1400 audit(1780013717.744:852): avc: denied { mount } for pid=4701 comm="syz.0.428" name="/" dev="ramfs" ino=9120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 64.899950][ T28] audit: type=1400 audit(1780013717.864:853): avc: denied { mounton } for pid=4479 comm="syz-executor" path="/root/syzkaller.yLBbXq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.995315][ T4715] loop5: detected capacity change from 0 to 512 [ 65.015256][ T4716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.034628][ T4715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.054611][ T4715] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.062410][ T4716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.098541][ T4479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.286667][ T28] audit: type=1400 audit(1780013718.244:854): avc: denied { relabelfrom } for pid=4737 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 65.340187][ T28] audit: type=1400 audit(1780013718.244:855): avc: denied { relabelto } for pid=4737 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 66.290909][ T23] hid_parser_main: 14 callbacks suppressed [ 66.290930][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.305229][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.652568][ T4804] loop5: detected capacity change from 0 to 512 [ 66.694113][ T4804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.769243][ T4804] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.960425][ T4804] geneve2: entered promiscuous mode [ 66.967158][ T4804] geneve2: entered allmulticast mode [ 67.111324][ T4479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.339472][ T4821] loop5: detected capacity change from 0 to 1024 [ 67.377209][ T4827] netlink: 'syz.0.472': attribute type 39 has an invalid length. [ 67.400873][ T4821] EXT4-fs (loop5): shut down requested (0) [ 67.801095][ T4830] loop3: detected capacity change from 0 to 512 [ 67.878906][ T4830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.891129][ T4834] loop0: detected capacity change from 0 to 1024 [ 67.974959][ T4843] loop5: detected capacity change from 0 to 256 [ 68.056187][ T4830] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.266117][ T4852] SELinux: failed to load policy [ 68.528057][ T4880] netlink: 116 bytes leftover after parsing attributes in process `syz.3.492'. [ 68.819825][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 68.838080][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'. [ 68.899219][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 69.148366][ T4919] sctp: [Deprecated]: syz.2.508 (pid 4919) Use of int in max_burst socket option. [ 69.148366][ T4919] Use struct sctp_assoc_value instead [ 69.226911][ T4925] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 69.249245][ T4925] gretap1: entered allmulticast mode [ 69.257022][ T4925] bond2: (slave gretap1): making interface the new active one [ 69.265355][ T4925] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 69.283043][ T4919] loop2: detected capacity change from 0 to 128 [ 69.295137][ T4928] netlink: 'syz.3.512': attribute type 2 has an invalid length. [ 69.305164][ T4928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.512'. [ 69.315283][ T4930] tmpfs: Too few inodes for current use [ 69.329048][ T4919] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 69.341505][ T4919] System zones: 1-3, 19-19, 35-36 [ 69.374643][ T4919] EXT4-fs mount: 4 callbacks suppressed [ 69.374702][ T4919] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.404453][ T4919] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.429578][ T4919] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 69.453237][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.464282][ T4943] loop3: detected capacity change from 0 to 8192 [ 69.521100][ T4943] loop3: p1 p2 p3 p4 [ 69.528822][ T4943] loop3: p1 start 16777216 is beyond EOD, truncated [ 69.535625][ T4943] loop3: p2 start 268435456 is beyond EOD, truncated [ 69.543366][ T4943] loop3: p4 size 33554432 extends beyond EOD, truncated [ 69.609422][ T4948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 69.695263][ T4955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'. [ 69.744469][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 69.744695][ T28] audit: type=1400 audit(1780013722.704:871): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.853476][ T4969] loop3: detected capacity change from 0 to 512 [ 69.877540][ T4969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.920320][ T4969] EXT4-fs (loop3): 1 truncate cleaned up [ 69.927661][ T4969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.930487][ T28] audit: type=1400 audit(1780013722.884:872): avc: denied { bind } for pid=4975 comm="syz.5.532" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.987446][ T28] audit: type=1400 audit(1780013722.884:873): avc: denied { name_bind } for pid=4975 comm="syz.5.532" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 70.010007][ T28] audit: type=1400 audit(1780013722.884:874): avc: denied { setopt } for pid=4975 comm="syz.5.532" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.032254][ T28] audit: type=1400 audit(1780013722.884:875): avc: denied { write } for pid=4975 comm="syz.5.532" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.054148][ T28] audit: type=1400 audit(1780013722.904:876): avc: denied { write } for pid=4963 comm="syz.3.528" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.102434][ T28] audit: type=1400 audit(1780013722.994:877): avc: denied { wake_alarm } for pid=4979 comm="syz.2.533" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.141504][ T4985] tipc: Started in network mode [ 70.153709][ T4985] tipc: Node identity 56e7ae6999df, cluster identity 4711 [ 70.167899][ T4985] tipc: Enabled bearer , priority 0 [ 70.194505][ T4985] syzkaller0: MTU too low for tipc bearer [ 70.203241][ T4985] tipc: Disabling bearer [ 70.662857][ T5033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5033 comm=syz.1.540 [ 70.684117][ T5033] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 71.166596][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.200278][ T5044] bond3: (slave geneve3): making interface the new active one [ 71.221989][ T5044] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 71.243305][ T5124] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.541'. [ 71.253265][ T68] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 71.262284][ T68] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 71.272607][ T68] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 71.283151][ T68] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 71.295701][ T28] audit: type=1400 audit(1780013724.254:878): avc: denied { mount } for pid=5127 comm="syz.5.542" name="/" dev="configfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 71.327758][ T28] audit: type=1400 audit(1780013724.254:879): avc: denied { search } for pid=5127 comm="syz.5.542" name="/" dev="configfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.358396][ T28] audit: type=1400 audit(1780013724.254:880): avc: denied { search } for pid=5127 comm="syz.5.542" name="/" dev="configfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.414970][ T5142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 71.431369][ T5142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 71.783106][ T5162] netlink: 'syz.3.558': attribute type 4 has an invalid length. [ 71.800990][ T5162] netlink: 'syz.3.558': attribute type 4 has an invalid length. [ 71.955264][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.962519][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.054740][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.073719][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.316785][ T5103] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.326200][ T5103] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.342100][ T5103] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.367614][ T5103] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.734828][ T5103] ================================================================== [ 72.742974][ T5103] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 72.750222][ T5103] [ 72.752649][ T5103] read-write to 0xffff888108193fd0 of 8 bytes by task 3286 on cpu 0: [ 72.760725][ T5103] __xa_set_mark+0xd2/0x1a0 [ 72.765245][ T5103] __folio_mark_dirty+0x3b7/0x4b0 [ 72.770277][ T5103] mark_buffer_dirty+0x120/0x1f0 [ 72.775222][ T5103] block_page_mkwrite+0x261/0x300 [ 72.780259][ T5103] ext4_page_mkwrite+0x835/0xad0 [ 72.785203][ T5103] do_wp_page+0xc65/0x2040 [ 72.789639][ T5103] handle_mm_fault+0x8bb/0x2e70 [ 72.794505][ T5103] do_user_addr_fault+0x62f/0x1050 [ 72.799628][ T5103] exc_page_fault+0x62/0xa0 [ 72.804140][ T5103] asm_exc_page_fault+0x26/0x30 [ 72.809176][ T5103] [ 72.811783][ T5103] read to 0xffff888108193fd0 of 8 bytes by task 5103 on cpu 1: [ 72.819345][ T5103] xas_find_marked+0x213/0x620 [ 72.824135][ T5103] filemap_get_folios_tag+0xfa/0x430 [ 72.829437][ T5103] mpage_prepare_extent_to_map+0x328/0xc50 [ 72.835257][ T5103] ext4_do_writepages+0x6fe/0x2770 [ 72.840397][ T5103] ext4_writepages+0x18f/0x320 [ 72.845174][ T5103] do_writepages+0x1c6/0x310 [ 72.849785][ T5103] __writeback_single_inode+0x7f/0x650 [ 72.855271][ T5103] writeback_sb_inodes+0x4dd/0xaa0 [ 72.860403][ T5103] __writeback_inodes_wb+0x94/0x1a0 [ 72.865627][ T5103] wb_writeback+0x261/0x560 [ 72.870163][ T5103] wb_workfn+0x4d1/0x930 [ 72.874430][ T5103] process_scheduled_works+0x4f0/0x9c0 [ 72.879927][ T5103] worker_thread+0x58a/0x780 [ 72.884529][ T5103] kthread+0x22a/0x280 [ 72.888604][ T5103] ret_from_fork+0x146/0x330 [ 72.893206][ T5103] ret_from_fork_asm+0x1a/0x30 [ 72.898004][ T5103] [ 72.900334][ T5103] value changed: 0x0100880405000020 -> 0x1300984405000020 [ 72.907462][ T5103] [ 72.909806][ T5103] Reported by Kernel Concurrency Sanitizer on: [ 72.915961][ T5103] CPU: 1 UID: 0 PID: 5103 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.925526][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 72.935597][ T5103] Workqueue: writeback wb_workfn (flush-8:0) [ 72.941686][ T5103] ================================================================== [ 73.629004][ T30] bridge_slave_1: left allmulticast mode [ 73.634699][ T30] bridge_slave_1: left promiscuous mode [ 73.640559][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.648335][ T30] bridge_slave_0: left allmulticast mode [ 73.653995][ T30] bridge_slave_0: left promiscuous mode [ 73.659751][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.770124][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.779648][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.788750][ T30] bond0 (unregistering): Released all slaves [ 73.796173][ T30] bond2 (unregistering): Released all slaves [ 73.842067][ T30] hsr_slave_0: left promiscuous mode [ 73.847751][ T30] hsr_slave_1: left promiscuous mode [ 73.853440][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.861367][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.902200][ T30] team0 (unregistering): Port device team_slave_1 removed [ 73.912450][ T30] team0 (unregistering): Port device team_slave_0 removed [ 73.941397][ T30] team0 (unregistering): Port device dummy0 removed [ 73.952536][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.051725][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 74.150618][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 74.231159][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.241647][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.252708][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 74.263266][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 74.275084][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 74.310595][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.320981][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.331331][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 74.341816][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 74.392568][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.404086][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.414895][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 74.425531][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 74.460354][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.470688][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.481008][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 74.491414][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 74.546855][ T30] bridge_slave_1: left allmulticast mode [ 74.552723][ T30] bridge_slave_1: left promiscuous mode [ 74.558482][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.566251][ T30] bridge_slave_0: left allmulticast mode [ 74.571986][ T30] bridge_slave_0: left promiscuous mode [ 74.577688][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.619485][ T30] bond2 (unregistering): (slave gretap1): Releasing active interface [ 74.632627][ T30] bond3 (unregistering): (slave geneve3): Releasing active interface [ 74.643536][ T30] bond1 (unregistering): (slave geneve2): Releasing active interface [ 74.789735][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.799415][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.809139][ T30] bond0 (unregistering): Released all slaves [ 74.816885][ T30] bond1 (unregistering): Released all slaves [ 74.825332][ T30] bond2 (unregistering): Released all slaves [ 74.833666][ T30] bond3 (unregistering): Released all slaves [ 74.892766][ T30] hsr_slave_0: left promiscuous mode [ 74.898594][ T30] hsr_slave_1: left promiscuous mode [ 74.904296][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.911283][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 74.911298][ T28] audit: type=1400 audit(1780013727.874:896): avc: denied { write } for pid=5271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.912135][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.936533][ T28] audit: type=1400 audit(1780013727.894:897): avc: denied { write } for pid=5282 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.970892][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.978388][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.988656][ T30] veth1_macvtap: left promiscuous mode [ 74.994243][ T30] veth0_macvtap: left promiscuous mode [ 75.000058][ T30] veth1_vlan: left promiscuous mode [ 75.005271][ T30] veth0_vlan: left promiscuous mode [ 75.067464][ T30] team0 (unregistering): Port device team_slave_1 removed [ 75.077511][ T30] team0 (unregistering): Port device team_slave_0 removed [ 75.108533][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 75.177537][ T28] audit: type=1400 audit(1780013728.134:898): avc: denied { write } for pid=5286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.200908][ T28] audit: type=1400 audit(1780013728.154:899): avc: denied { write } for pid=5297 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.276304][ T28] audit: type=1400 audit(1780013728.234:900): avc: denied { write } for pid=5301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.300231][ T28] audit: type=1400 audit(1780013728.254:901): avc: denied { write } for pid=5312 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.308990][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 75.392318][ T28] audit: type=1400 audit(1780013728.354:902): avc: denied { write } for pid=5315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.415426][ T28] audit: type=1400 audit(1780013728.354:903): avc: denied { write } for pid=5326 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.426265][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 75.495096][ T28] audit: type=1400 audit(1780013728.454:904): avc: denied { write } for pid=5328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.518953][ T28] audit: type=1400 audit(1780013728.474:905): avc: denied { write } for pid=5339 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.635232][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 76.660742][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.671382][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.730088][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.741105][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.800410][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.810759][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.870862][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.881263][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.936119][ T30] vlan2: left allmulticast mode [ 76.941053][ T30] geneve0: left allmulticast mode [ 76.946082][ T30] vlan2: left promiscuous mode [ 76.950922][ T30] geneve0: left promiscuous mode [ 76.956033][ T30] bridge0: port 3(vlan2) entered disabled state [ 76.962943][ T30] bridge_slave_1: left allmulticast mode [ 76.968667][ T30] bridge_slave_1: left promiscuous mode [ 76.974355][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.982153][ T30] bridge_slave_0: left allmulticast mode [ 76.988002][ T30] bridge_slave_0: left promiscuous mode [ 76.993683][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.002505][ T30] pimreg: left allmulticast mode [ 77.130313][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.140178][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.149807][ T30] bond0 (unregistering): Released all slaves [ 77.191885][ T30] hsr_slave_0: left promiscuous mode [ 77.197732][ T30] hsr_slave_1: left promiscuous mode [ 77.203843][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.211446][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.219444][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.226876][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.237910][ T30] veth1_macvtap: left promiscuous mode [ 77.243431][ T30] veth0_macvtap: left promiscuous mode [ 77.249170][ T30] veth1_vlan: left promiscuous mode [ 77.254517][ T30] veth0_vlan: left promiscuous mode [ 77.314286][ T30] team0 (unregistering): Port device team_slave_1 removed [ 77.323804][ T30] team0 (unregistering): Port device team_slave_0 removed [ 77.353855][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 77.453953][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 77.521065][ T30] IPVS: stop unused estimator thread 0... [ 77.556976][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 77.655077][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16