last executing test programs: 3.703781624s ago: executing program 2 (id=414): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 3.631078818s ago: executing program 2 (id=415): sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x44041) 3.229483541s ago: executing program 3 (id=418): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x20044084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000060000000000000014000000110001"], 0xa4}}, 0x0) close(r2) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, &(0x7f0000001040)=0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 3.044016912s ago: executing program 1 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.825300545s ago: executing program 1 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000008c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f00000002c0)=""/179, 0xb3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c1) 2.690810593s ago: executing program 2 (id=426): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 2.575361649s ago: executing program 2 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 2.364339532s ago: executing program 3 (id=431): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe800000000000", @ANYRESDEC], 0xffdd) 2.296524656s ago: executing program 3 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.121078066s ago: executing program 3 (id=433): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x2, 0x200000000000006, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.874909221s ago: executing program 1 (id=434): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) 1.87475713s ago: executing program 2 (id=435): gettid() setitimer(0x1, 0x0, 0x0) r0 = syz_socket_connect_nvme_tcp() openat$rtc(0xffffffffffffff9c, 0x0, 0x20001, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae", 0xc}], 0x1}}], 0x1, 0x20008000) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0xa}, {0xf, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4c000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) 1.874634311s ago: executing program 3 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) dup(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.87440044s ago: executing program 4 (id=437): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_pidfd_open(0x0, 0x0) inotify_init() pidfd_send_signal(r1, 0x2, 0x0, 0x0) 1.828145933s ago: executing program 1 (id=438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {0xffe0}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.789360156s ago: executing program 2 (id=439): socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}], 0x1, 0x20000040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mlockall(0x2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) unshare(0x6a000200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="11a8", 0x2}], 0x1}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000540)=0x40) 1.743363698s ago: executing program 1 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) statx(0xffffffffffffff9c, 0x0, 0x100, 0x801, 0x0) add_key$user(&(0x7f0000000240), 0x0, &(0x7f0000000680), 0x0, 0xfffffffffffffff8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) recvmmsg(r3, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x2f, 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) 1.728615009s ago: executing program 4 (id=441): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 1.627746945s ago: executing program 4 (id=442): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b0000000000000000000000000001"], 0x50) socket(0x10, 0x803, 0x6) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000940)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x8}}}}}, 0x0) 1.601258246s ago: executing program 4 (id=443): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x4e4bf788868a65a8, 0x40000000, 0xd, 0x4, 0x200, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00fe5849cec6df9169000000", @ANYRES32=0x0, @ANYBLOB="000000000400000028001280090001007665746800000000180002801400010000", @ANYRES32=0x0, @ANYBLOB="0003020000000000"], 0x48}}, 0x4040004) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$eJzs3c1vFVUbAPBnpp+07/u2kDcqLqSJMZAoLS1giDER9oTgx85VpYUghRJao0USS4IbE+PGhYkrF+J/oSRuXbh14caVISHGsBBD5Jq5nSnT23tLv+69pff3S4aeM8Odc6bw9Jl7es7cADrWSPZHGrE/Iq4mEUOlY92RHxxZ+nv3/7xxLtuSqFTe/iOJG58ki+VzJfnXwfzF/wxF8nMasa9rdbtzC9cvTc7MTF/L62Pzl6+OzS1cP3zx8uSF6QvTVyZenThx/NjxE+NHtnR9aal8+tb7Hw59dubdb79+mIx/9+uZJE7Go7xv2XXVvrZvSy1n37ORqCx5UN6ffV9PbPHcO8VfQ8X/k8eS2h3sWOcjIouwnoh4Noaiq/SvORSfvtnWzgFNVUmiyFFAx0k2Ff/9298RoMWK+4DivX2998GrpU2+KwFa4d6ppQGppdjviYgi/ruXxgajvzo2MHA/WTHOk+TjBluVtfHTj2duZVs0GIcDmmPxZjHKXZv/k2psDkd/tTZwP10R/2lpy/a/tcn2R2rq4h9aZ/FmRDyX5//e2FD8j5Ti/71Nti/+AQAAAAAAYPvcORURr9Sb/5cuz//prTP/ZzAiTm5D+0/+/V96Ny8k29AcUHLvVMTrdef/Ls/xHe7Ka/+tzgfoSc5fnJk+EhH/i4hD0dOX1cdrzlueIXz4831fNWq/PP8v27L2i7mA+ZnudtcsxJ2anJ/c6nUDEfduRjxfnf97IN+zcv5Plv+TOvk/i++r62xj30u3zzY69uT4B5ql8k3Ewbr5//HtdrL28znGqvcDY8VdwWovfPzF943aF//QPln+H1g7/vuS8vN65jZ2/t6IOLrQXWl0fLP3/73JO13F+TMfTc7PXxuP6E1Or94/sbE+w25VxEMRL1n8H3px7fG/5fv/UhzuiYjFdbb5zKPB3xodk/+hfbL4n1o7/w+vzP8bL0zcHv6hUftn15X/j1Vz+qF8j/E/KFv9PI71BmhbugsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT7k0Iv4TSTq6XE7T0dGIwYj4fwykM7Nz8y+fn/3gylR2rPr5/2nxSb9DS/Wk+Pz/4VJ9oqZ+NCL2RsSXXXuq9dFzszNT7b54AAAAAAAAAAAAAAAAAAAA2CEGq2v+K3216/8zv3e1u3dA03XnX8U7dJ7uTb+y0retHQFabvPxDzzt1h//PU3tB9B6jeP/wcNKVUu7A7SQ+3/oXJuMf78ugF1A/odOtc4xvf5m9wNoB/kfAAAAAAB2lb0H7vySRMTia3uqW6Y3P2ayP+xuabs7ALSNObzQubpn290DoF28xweS5dLfdRf7N579nzSnQwAAAAAAAAAAAADAKgf3W/8PnWrt9f/m9sNutsb6/3rB73EBsIs0/ugPuR92O+/xgSdle+v/AQAAAAAAAAAAAGAH6L9+aXJmZvra3MLTV3hjZ3RjY4XFyR3RjW0tPGrOmXsiYmdcYKsLxSM42tiNNv9cAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlv0bAAD//1VjJ6k=") 1.270678936s ago: executing program 4 (id=444): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000600)=[{}], 0x1, 0x1ff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000000c0)=0x1) 1.268018976s ago: executing program 3 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x560f, 0x0) 573.267917ms ago: executing program 1 (id=456): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) mknod$loop(0x0, 0x0, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 571.925757ms ago: executing program 0 (id=457): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 481.872482ms ago: executing program 0 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0xfffffffc, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0xd, 0x40, 0x2de3}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="7a0000800000210e3000cd7a0100", 0xe, 0x20000001, &(0x7f00000001c0)={0x11, 0x9, r5, 0x1, 0xc8, 0x6, @broadcast}, 0x14) 407.984576ms ago: executing program 0 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0xffffffff}, 0x6025, 0x4005, 0xb, 0x6, 0xc2d, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 407.690886ms ago: executing program 0 (id=460): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 407.366746ms ago: executing program 4 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x10, 0x1, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 323.636101ms ago: executing program 0 (id=462): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_pidfd_open(0x0, 0x0) inotify_init() pidfd_send_signal(r1, 0x2, 0x0, 0x0) 0s ago: executing program 0 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xfffffff1, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2, 0xebd4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) kernel console output (not intermixed with test programs): [ 20.341062][ T29] audit: type=1400 audit(1770380450.202:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.363118][ T29] audit: type=1400 audit(1770380450.202:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.385757][ T29] audit: type=1400 audit(1770380450.202:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.408746][ T29] audit: type=1400 audit(1770380450.202:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.431727][ T29] audit: type=1400 audit(1770380450.202:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 24.502321][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 24.502340][ T29] audit: type=1400 audit(1770380454.362:70): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.531349][ T29] audit: type=1400 audit(1770380454.392:71): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.532020][ T3293] cgroup: Unknown subsys name 'net' [ 24.559186][ T29] audit: type=1400 audit(1770380454.412:72): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.670665][ T3293] cgroup: Unknown subsys name 'cpuset' [ 24.676912][ T3293] cgroup: Unknown subsys name 'rlimit' [ 24.786846][ T29] audit: type=1400 audit(1770380454.642:73): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.819051][ T29] audit: type=1400 audit(1770380454.642:74): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.839537][ T29] audit: type=1400 audit(1770380454.642:75): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.859997][ T29] audit: type=1400 audit(1770380454.642:76): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.880632][ T29] audit: type=1400 audit(1770380454.642:77): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.905460][ T29] audit: type=1400 audit(1770380454.642:78): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.913452][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.928727][ T29] audit: type=1400 audit(1770380454.672:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.976577][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.094481][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.136129][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.180516][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.210442][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.217534][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.224955][ T3309] bridge_slave_0: entered allmulticast mode [ 26.231269][ T3309] bridge_slave_0: entered promiscuous mode [ 26.250947][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.258191][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.265498][ T3309] bridge_slave_1: entered allmulticast mode [ 26.271879][ T3309] bridge_slave_1: entered promiscuous mode [ 26.278234][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.316290][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.323491][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.330641][ T3313] bridge_slave_0: entered allmulticast mode [ 26.337067][ T3313] bridge_slave_0: entered promiscuous mode [ 26.347770][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.354931][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.362092][ T3313] bridge_slave_1: entered allmulticast mode [ 26.368530][ T3313] bridge_slave_1: entered promiscuous mode [ 26.382377][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.395538][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.412211][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.422520][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.443779][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.466228][ T3313] team0: Port device team_slave_0 added [ 26.476421][ T3313] team0: Port device team_slave_1 added [ 26.489426][ T3309] team0: Port device team_slave_0 added [ 26.513343][ T3309] team0: Port device team_slave_1 added [ 26.519039][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.526104][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.533344][ T3310] bridge_slave_0: entered allmulticast mode [ 26.539708][ T3310] bridge_slave_0: entered promiscuous mode [ 26.561770][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.568921][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.576164][ T3310] bridge_slave_1: entered allmulticast mode [ 26.582557][ T3310] bridge_slave_1: entered promiscuous mode [ 26.593354][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.600516][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.627175][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.648521][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.655734][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.662927][ T3312] bridge_slave_0: entered allmulticast mode [ 26.669216][ T3312] bridge_slave_0: entered promiscuous mode [ 26.676001][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.683331][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.709414][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.728993][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.736079][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.762326][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.773546][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.780673][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.787888][ T3312] bridge_slave_1: entered allmulticast mode [ 26.794311][ T3312] bridge_slave_1: entered promiscuous mode [ 26.808372][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.817602][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.824746][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.831878][ T3315] bridge_slave_0: entered allmulticast mode [ 26.838259][ T3315] bridge_slave_0: entered promiscuous mode [ 26.845145][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.852253][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.878149][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.907253][ T3309] hsr_slave_0: entered promiscuous mode [ 26.913300][ T3309] hsr_slave_1: entered promiscuous mode [ 26.920900][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.930101][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.937150][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.944384][ T3315] bridge_slave_1: entered allmulticast mode [ 26.950731][ T3315] bridge_slave_1: entered promiscuous mode [ 26.986703][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.013195][ T3313] hsr_slave_0: entered promiscuous mode [ 27.019213][ T3313] hsr_slave_1: entered promiscuous mode [ 27.025619][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.031391][ T3313] Cannot create hsr debugfs directory [ 27.037819][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.047945][ T3310] team0: Port device team_slave_0 added [ 27.054664][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.064527][ T3310] team0: Port device team_slave_1 added [ 27.088712][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.128713][ T3312] team0: Port device team_slave_0 added [ 27.135247][ T3315] team0: Port device team_slave_0 added [ 27.152300][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.159261][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.185412][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.197445][ T3312] team0: Port device team_slave_1 added [ 27.206718][ T3315] team0: Port device team_slave_1 added [ 27.215906][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.222970][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.249154][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.280017][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.286985][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.313198][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.328966][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.335951][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.362048][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.377876][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.384893][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.410898][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.431131][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.438204][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.464162][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.496413][ T3310] hsr_slave_0: entered promiscuous mode [ 27.502427][ T3310] hsr_slave_1: entered promiscuous mode [ 27.508325][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.514085][ T3310] Cannot create hsr debugfs directory [ 27.537753][ T3312] hsr_slave_0: entered promiscuous mode [ 27.544073][ T3312] hsr_slave_1: entered promiscuous mode [ 27.549945][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.555667][ T3312] Cannot create hsr debugfs directory [ 27.573405][ T3315] hsr_slave_0: entered promiscuous mode [ 27.579472][ T3315] hsr_slave_1: entered promiscuous mode [ 27.585505][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.591352][ T3315] Cannot create hsr debugfs directory [ 27.677554][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.688875][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.716287][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.741598][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.790796][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.805671][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.820569][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.831745][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.841644][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.855885][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.864594][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.879176][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.901204][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.911062][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.919918][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.928611][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.966982][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.976209][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.990675][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.001664][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.021210][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.058252][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.075962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.083153][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.096809][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.104034][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.119734][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.131210][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.144634][ T2456] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.151700][ T2456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.162325][ T2456] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.169425][ T2456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.183016][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.191691][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.221650][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.231507][ T2456] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.238658][ T2456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.252309][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.271228][ T2456] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.278298][ T2456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.295718][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.302919][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.320934][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.331401][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.355634][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.362811][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.376325][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.394577][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.413642][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.429493][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.436584][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.456241][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.466749][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.480794][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.487862][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.512448][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.522863][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.554751][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.659758][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.684517][ T3309] veth0_vlan: entered promiscuous mode [ 28.704688][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.720655][ T3309] veth1_vlan: entered promiscuous mode [ 28.736398][ T3315] veth0_vlan: entered promiscuous mode [ 28.750855][ T3315] veth1_vlan: entered promiscuous mode [ 28.778618][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.790116][ T3315] veth0_macvtap: entered promiscuous mode [ 28.798759][ T3309] veth0_macvtap: entered promiscuous mode [ 28.812369][ T3315] veth1_macvtap: entered promiscuous mode [ 28.827526][ T3309] veth1_macvtap: entered promiscuous mode [ 28.845147][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.864243][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.897290][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.913775][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.929065][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.938930][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.946702][ T3313] veth0_vlan: entered promiscuous mode [ 28.958263][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.973405][ T3310] veth0_vlan: entered promiscuous mode [ 28.979345][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.992558][ T3310] veth1_vlan: entered promiscuous mode [ 29.005248][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.027583][ T3313] veth1_vlan: entered promiscuous mode [ 29.036005][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.045092][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.054243][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.063902][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.125305][ T3310] veth0_macvtap: entered promiscuous mode [ 29.147314][ T3313] veth0_macvtap: entered promiscuous mode [ 29.153898][ C1] hrtimer: interrupt took 45113 ns [ 29.167808][ T3313] veth1_macvtap: entered promiscuous mode [ 29.182205][ T3312] veth0_vlan: entered promiscuous mode [ 29.191011][ T3312] veth1_vlan: entered promiscuous mode [ 29.205900][ T3310] veth1_macvtap: entered promiscuous mode [ 29.220403][ T3485] loop1: detected capacity change from 0 to 128 [ 29.227614][ T3312] veth0_macvtap: entered promiscuous mode [ 29.230919][ T3484] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 29.247994][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.258057][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.262357][ T3485] syz.1.2: attempt to access beyond end of device [ 29.262357][ T3485] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 29.282555][ T3485] syz.1.2: attempt to access beyond end of device [ 29.282555][ T3485] loop1: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 29.298109][ T3485] syz.1.2: attempt to access beyond end of device [ 29.298109][ T3485] loop1: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 29.311628][ T3485] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 29.325692][ T3312] veth1_macvtap: entered promiscuous mode [ 29.334583][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.350584][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.354661][ T3485] syz.1.2: attempt to access beyond end of device [ 29.354661][ T3485] loop1: rw=8912896, sector=138, nr_sectors = 16 limit=128 [ 29.363020][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.378623][ T3485] syz.1.2: attempt to access beyond end of device [ 29.378623][ T3485] loop1: rw=8912896, sector=170, nr_sectors = 8 limit=128 [ 29.392266][ T3485] syz.1.2: attempt to access beyond end of device [ 29.392266][ T3485] loop1: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 29.395533][ T2456] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.410655][ T3485] syz.1.2: attempt to access beyond end of device [ 29.410655][ T3485] loop1: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 29.438241][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.446237][ T2456] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.470779][ T2456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.490890][ T2456] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.507876][ T2456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.528898][ T2456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.542332][ T2456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.551493][ T2456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.569917][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 29.569954][ T29] audit: type=1400 audit(1770380459.422:113): avc: denied { create } for pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.590794][ T2456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.595614][ T29] audit: type=1400 audit(1770380459.422:114): avc: denied { lock } for pid=3490 comm="syz.3.4" path="socket:[4560]" dev="sockfs" ino=4560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.610050][ T2456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.669187][ T2456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.679339][ T2456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.689459][ T29] audit: type=1400 audit(1770380459.462:115): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.708094][ T3500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.709505][ T29] audit: type=1400 audit(1770380459.522:116): avc: denied { create } for pid=3495 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.737822][ T29] audit: type=1400 audit(1770380459.522:117): avc: denied { setopt } for pid=3495 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.757456][ T29] audit: type=1400 audit(1770380459.522:118): avc: denied { setopt } for pid=3495 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.777547][ T29] audit: type=1400 audit(1770380459.522:119): avc: denied { ioctl } for pid=3495 comm="syz.1.6" path="socket:[4572]" dev="sockfs" ino=4572 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.804467][ T29] audit: type=1400 audit(1770380459.652:120): avc: denied { write } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.852871][ T3505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 29.926261][ T3511] gretap0: entered promiscuous mode [ 29.931583][ T3511] gretap0: entered allmulticast mode [ 30.075341][ T29] audit: type=1400 audit(1770380459.932:121): avc: denied { create } for pid=3512 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.208594][ T3515] loop3: detected capacity change from 0 to 4096 [ 30.216946][ T29] audit: type=1400 audit(1770380459.952:122): avc: denied { write } for pid=3512 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.242805][ T3519] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 30.250134][ T3515] EXT4-fs: Ignoring removed bh option [ 30.255966][ T3515] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.265449][ T3519] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 30.320964][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.501480][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.935227][ T3534] lo speed is unknown, defaulting to 1000 [ 30.949881][ T3534] lo speed is unknown, defaulting to 1000 [ 30.966633][ T3534] lo speed is unknown, defaulting to 1000 [ 31.062863][ T3534] infiniband syz1: set active [ 31.067640][ T3534] infiniband syz1: added lo [ 31.072329][ T23] lo speed is unknown, defaulting to 1000 [ 31.100150][ T3534] RDS/IB: syz1: added [ 31.132689][ T3534] smc: adding ib device syz1 with port count 1 [ 31.154355][ T3534] smc: ib device syz1 port 1 has no pnetid [ 31.160683][ T23] lo speed is unknown, defaulting to 1000 [ 31.186130][ T3534] lo speed is unknown, defaulting to 1000 [ 31.302278][ T3534] lo speed is unknown, defaulting to 1000 [ 31.431077][ T3534] lo speed is unknown, defaulting to 1000 [ 31.502866][ T3534] lo speed is unknown, defaulting to 1000 [ 31.551194][ T3534] lo speed is unknown, defaulting to 1000 [ 31.706536][ T3556] lo speed is unknown, defaulting to 1000 [ 32.099752][ T3569] loop0: detected capacity change from 0 to 512 [ 32.136802][ T3569] ======================================================= [ 32.136802][ T3569] WARNING: The mand mount option has been deprecated and [ 32.136802][ T3569] and is ignored by this kernel. Remove the mand [ 32.136802][ T3569] option from the mount to silence this warning. [ 32.136802][ T3569] ======================================================= [ 32.473467][ T3569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.494995][ T3569] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.499470][ T3517] syz.4.11 (3517) used greatest stack depth: 9800 bytes left [ 32.567789][ T3514] syz.4.11 (3514) used greatest stack depth: 7400 bytes left [ 32.669931][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.686254][ T3581] loop2: detected capacity change from 0 to 1024 [ 32.695275][ T3581] EXT4-fs: Ignoring removed bh option [ 32.758503][ T3581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 32.840386][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 32.871060][ T3594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.38'. [ 32.895857][ T3596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 33.027124][ T3596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 33.046770][ T3596] Zero length message leads to an empty skb [ 33.128726][ T3617] netlink: 'syz.3.49': attribute type 10 has an invalid length. [ 33.138420][ T3617] syz_tun: entered promiscuous mode [ 33.150680][ T3621] loop1: detected capacity change from 0 to 1024 [ 33.154015][ T3617] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 33.157445][ T3621] EXT4-fs: Ignoring removed bh option [ 33.195866][ T3621] EXT4-fs: inline encryption not supported [ 33.204139][ T3621] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.216159][ T3621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 33.228424][ T3621] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.45: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.243483][ T3621] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.45: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.259932][ T3621] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.45: Failed to acquire dquot type 0 [ 33.272363][ T3621] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 33.284393][ T3621] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.45: mark_inode_dirty error [ 33.301773][ T3621] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 33.317855][ T3629] serio: Serial port ttyS3 [ 33.328366][ T3627] loop2: detected capacity change from 0 to 1024 [ 33.335034][ T3621] EXT4-fs (loop1): 1 orphan inode deleted [ 33.353181][ T3621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.353482][ T39] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.382294][ T39] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 33.388458][ T3627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.452879][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.496653][ T3309] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 33.533545][ T3309] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 33.599859][ T3309] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 33.651263][ T3653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 33.660193][ T3653] netlink: 'syz.1.56': attribute type 11 has an invalid length. [ 33.673600][ T3653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 33.682659][ T3653] netlink: 'syz.1.56': attribute type 11 has an invalid length. [ 33.700312][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.709446][ T39] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.729675][ T39] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.738480][ T39] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.791150][ T3658] SELinux: failed to load policy [ 33.804910][ T3662] syzkaller0: entered promiscuous mode [ 33.810610][ T3662] syzkaller0: entered allmulticast mode [ 33.911742][ T3667] syzkaller0: left promiscuous mode [ 33.917202][ T3667] syzkaller0: left allmulticast mode [ 33.992612][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.001913][ T3674] loop1: detected capacity change from 0 to 512 [ 34.022168][ T3674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.040367][ T3674] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.108215][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.407269][ T3699] loop4: detected capacity change from 0 to 4096 [ 34.458991][ T3699] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.484334][ T3699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.625043][ T3699] EXT4-fs (loop4): shut down requested (0) [ 34.630961][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 34.630978][ T29] audit: type=1400 audit(1770380464.482:211): avc: denied { ioctl } for pid=3698 comm="syz.4.78" path="/13/file0/blkio.bfq.idle_time" dev="loop4" ino=19 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.703934][ T29] audit: type=1400 audit(1770380464.522:212): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.726042][ T29] audit: type=1400 audit(1770380464.522:213): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.748129][ T29] audit: type=1400 audit(1770380464.522:214): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.770603][ T29] audit: type=1400 audit(1770380464.522:215): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.791668][ T29] audit: type=1400 audit(1770380464.522:216): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.812399][ T29] audit: type=1400 audit(1770380464.522:217): avc: denied { append open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.835776][ T29] audit: type=1400 audit(1770380464.522:218): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.862575][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.893794][ T3713] loop3: detected capacity change from 0 to 256 [ 34.943607][ T3713] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.989127][ T29] audit: type=1400 audit(1770380464.842:219): avc: denied { create } for pid=3714 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.108557][ T3393] IPVS: starting estimator thread 0... [ 35.137749][ T3721] lo speed is unknown, defaulting to 1000 [ 35.199696][ T3723] IPVS: using max 2496 ests per chain, 124800 per kthread [ 35.418472][ T3729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'. [ 35.657182][ T3736] IPVS: fo: FWM 3 0x00000003 - no destination available [ 35.664301][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 36.079953][ T3738] can0: slcan on ttyS3. [ 36.140132][ T3738] can0 (unregistered): slcan off ttyS3. [ 36.155223][ T3742] can0: slcan on ttyS3. [ 36.183054][ T29] audit: type=1400 audit(1770380466.042:220): avc: denied { allowed } for pid=3737 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.293537][ T3742] lo speed is unknown, defaulting to 1000 [ 36.302774][ T3751] loop3: detected capacity change from 0 to 512 [ 36.358626][ T3751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.433519][ T3751] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.804229][ T3762] can0 (unregistered): slcan off ttyS3. [ 36.837290][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 36.845714][ T3786] 7B’ç÷ï: renamed from syzkaller0 [ 36.863367][ T3789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 37.041094][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.098767][ T3804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.149298][ T3807] loop2: detected capacity change from 0 to 512 [ 37.155804][ T3804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.169416][ T3807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.224384][ T3807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.302665][ T3805] loop4: detected capacity change from 0 to 512 [ 37.321353][ T3805] EXT4-fs: inline encryption not supported [ 37.331161][ T3805] /dev/loop4: Can't open blockdev [ 37.356155][ T3809] netlink: 'syz.1.107': attribute type 12 has an invalid length. [ 37.388579][ T3807] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.400576][ T3809] loop1: detected capacity change from 0 to 512 [ 37.547515][ T3809] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.107: missing EA_INODE flag [ 37.610664][ T3809] EXT4-fs (loop1): Remounting filesystem read-only [ 37.617230][ T3809] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.630274][ T3809] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 37.643347][ T3809] EXT4-fs (loop1): 1 orphan inode deleted [ 37.649580][ T3809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.690211][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.730331][ T3823] syz.1.110 uses obsolete (PF_INET,SOCK_PACKET) [ 37.741663][ T3825] netlink: 'syz.3.111': attribute type 4 has an invalid length. [ 37.943723][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.019520][ T3833] loop2: detected capacity change from 0 to 1024 [ 38.050145][ T3833] EXT4-fs: Ignoring removed orlov option [ 38.063808][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 38.083053][ T3833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.171271][ T3842] SELinux: failed to load policy [ 38.223353][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.522446][ T3855] syzkaller0: entered promiscuous mode [ 38.527991][ T3855] syzkaller0: entered allmulticast mode [ 38.658310][ T3857] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.682355][ T3857] bridge_slave_1: left allmulticast mode [ 38.688103][ T3857] bridge_slave_1: left promiscuous mode [ 38.693858][ T3857] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.723410][ T3857] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 38.978407][ T3873] lo speed is unknown, defaulting to 1000 [ 39.020124][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 39.300588][ T3888] netlink: 1300 bytes leftover after parsing attributes in process `syz.3.134'. [ 39.411138][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.427841][ T3891] bridge_slave_1: left allmulticast mode [ 39.433610][ T3891] bridge_slave_1: left promiscuous mode [ 39.439427][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.573260][ T3896] loop1: detected capacity change from 0 to 512 [ 39.698122][ T3896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.719904][ T3896] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.933644][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 39.933660][ T29] audit: type=1400 audit(1770380725.792:244): avc: denied { map } for pid=3903 comm="syz.0.137" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.964052][ T29] audit: type=1400 audit(1770380725.792:245): avc: denied { read write } for pid=3903 comm="syz.0.137" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.051338][ T3904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 40.060474][ T3904] netlink: 196 bytes leftover after parsing attributes in process `syz.0.137'. [ 40.078113][ T3904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 40.099861][ T3904] netlink: 196 bytes leftover after parsing attributes in process `syz.0.137'. [ 40.126098][ T29] audit: type=1400 audit(1770380725.982:246): avc: denied { module_request } for pid=3907 comm="syz.3.139" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 40.527209][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.739206][ T3945] syz_tun: left promiscuous mode [ 40.750719][ T3945] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.923484][ T3945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.935951][ T3945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.977399][ T3335] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.041534][ T3335] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.050677][ T3335] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.059753][ T3335] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.159019][ T29] audit: type=1400 audit(1770380727.012:247): avc: denied { name_bind } for pid=3963 comm="syz.0.155" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.186841][ T3964] geneve2: entered promiscuous mode [ 41.192292][ T3964] geneve2: entered allmulticast mode [ 41.329015][ T3967] loop0: detected capacity change from 0 to 512 [ 41.350623][ T3967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.424500][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.455511][ T3971] loop0: detected capacity change from 0 to 512 [ 41.492661][ T3973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.158'. [ 41.546543][ T29] audit: type=1400 audit(1770380727.402:248): avc: denied { bind } for pid=3975 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.566476][ T3976] ipvlan1: entered allmulticast mode [ 41.571858][ T3976] veth0_vlan: entered allmulticast mode [ 41.753598][ T23] IPVS: starting estimator thread 0... [ 41.786405][ T3995] geneve2: entered promiscuous mode [ 41.791894][ T3995] geneve2: entered allmulticast mode [ 41.799182][ T3991] lo speed is unknown, defaulting to 1000 [ 41.849804][ T3992] IPVS: using max 2448 ests per chain, 122400 per kthread [ 41.888197][ T3998] SELinux: failed to load policy [ 41.923073][ T4000] loop2: detected capacity change from 0 to 512 [ 41.945446][ T4000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.004285][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.054702][ T4009] loop1: detected capacity change from 0 to 2048 [ 42.061285][ T29] audit: type=1400 audit(1770380727.902:249): avc: denied { mounton } for pid=4007 comm="syz.1.173" path="/proc/106/task" dev="proc" ino=6040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 42.173002][ T4014] lo speed is unknown, defaulting to 1000 [ 42.246844][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 42.383130][ T4027] ipvlan1: entered allmulticast mode [ 42.388492][ T4027] veth0_vlan: entered allmulticast mode [ 43.113240][ T4050] loop1: detected capacity change from 0 to 512 [ 43.129962][ T4050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.166126][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.204831][ T4054] can0: slcan on ttyS3. [ 43.225209][ T4056] loop2: detected capacity change from 0 to 2048 [ 43.259955][ T4054] can0 (unregistered): slcan off ttyS3. [ 43.262420][ T4062] loop2: detected capacity change from 0 to 512 [ 43.272695][ T4054] can0: slcan on ttyS3. [ 43.403545][ T4078] lo speed is unknown, defaulting to 1000 [ 43.437744][ T4086] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.188'. [ 43.700317][ T4092] can0 (unregistered): slcan off ttyS3. [ 43.964963][ T4142] lo speed is unknown, defaulting to 1000 [ 44.009062][ T4144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 44.218185][ T4152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 44.227200][ T4152] netlink: 196 bytes leftover after parsing attributes in process `syz.2.193'. [ 44.236613][ T4152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 44.245814][ T4152] netlink: 196 bytes leftover after parsing attributes in process `syz.2.193'. [ 45.282164][ T4190] lo speed is unknown, defaulting to 1000 [ 45.320483][ T4192] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.208'. [ 45.323486][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 45.694489][ T4215] netlink: 'syz.3.217': attribute type 12 has an invalid length. [ 46.083590][ T4238] lo speed is unknown, defaulting to 1000 [ 46.143395][ T4240] geneve2: entered promiscuous mode [ 46.318564][ T4249] netlink: 'syz.3.236': attribute type 39 has an invalid length. [ 46.727290][ T4262] loop1: detected capacity change from 0 to 512 [ 46.765277][ T4262] EXT4-fs: inline encryption not supported [ 46.794627][ T4262] /dev/loop1: Can't open blockdev [ 46.876472][ T4281] __nla_validate_parse: 5 callbacks suppressed [ 46.876569][ T4281] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.235'. [ 46.958617][ T29] audit: type=1326 audit(1770380732.812:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 46.982093][ T29] audit: type=1326 audit(1770380732.812:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 47.005464][ T29] audit: type=1326 audit(1770380732.812:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 47.028730][ T29] audit: type=1326 audit(1770380732.812:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 47.052140][ T29] audit: type=1326 audit(1770380732.812:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 47.252159][ T4298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 47.263649][ T4298] geneve2: entered promiscuous mode [ 47.441111][ T1079] lo speed is unknown, defaulting to 1000 [ 47.535582][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 47.544605][ T4321] tc_dump_action: action bad kind [ 47.556954][ T29] audit: type=1400 audit(1770380733.412:255): avc: denied { write } for pid=4319 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.903847][ T29] audit: type=1326 audit(1770380733.642:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0b9faeb9 code=0x7ffc0000 [ 47.927401][ T29] audit: type=1326 audit(1770380733.642:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0b9faeb9 code=0x7ffc0000 [ 47.950760][ T29] audit: type=1326 audit(1770380733.642:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef0b9faeb9 code=0x7ffc0000 [ 47.974198][ T29] audit: type=1326 audit(1770380733.642:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0b9faeb9 code=0x7ffc0000 [ 48.267891][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.278356][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.301460][ T4353] netlink: 'syz.0.256': attribute type 16 has an invalid length. [ 48.309280][ T4353] netlink: 'syz.0.256': attribute type 17 has an invalid length. [ 48.548791][ T4353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.207179][ T4384] rdma_rxe: rxe_newlink: failed to add lo [ 49.767074][ T4400] netlink: 'syz.4.272': attribute type 10 has an invalid length. [ 49.885265][ T4400] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 50.029761][ T4356] syz.1.259 (4356) used greatest stack depth: 6296 bytes left [ 50.113847][ T4409] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 50.121710][ T4409] netlink: 2 bytes leftover after parsing attributes in process `syz.4.276'. [ 50.250855][ T4409] bond0: entered promiscuous mode [ 50.256126][ T4409] bond_slave_0: entered promiscuous mode [ 50.262088][ T4409] bond_slave_1: entered promiscuous mode [ 50.288302][ T4409] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 50.329806][ T4409] bridge0: port 3(bond0) entered blocking state [ 50.336150][ T4409] bridge0: port 3(bond0) entered disabled state [ 50.535873][ T4409] bond0: entered allmulticast mode [ 50.541145][ T4409] bond_slave_0: entered allmulticast mode [ 50.547073][ T4409] bond_slave_1: entered allmulticast mode [ 50.594417][ T4409] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 50.695370][ T4409] bridge0: port 3(bond0) entered blocking state [ 50.701789][ T4409] bridge0: port 3(bond0) entered forwarding state [ 51.384862][ T4440] netlink: 'syz.0.285': attribute type 10 has an invalid length. [ 51.405814][ T4440] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 51.545406][ T4447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 51.554452][ T4447] tc_dump_action: action bad kind [ 51.911712][ T3419] kernel write not supported for file bpf-prog (pid: 3419 comm: kworker/0:6) [ 52.101186][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 52.101203][ T29] audit: type=1400 audit(1770381249.958:309): avc: denied { mount } for pid=4467 comm="syz.2.295" name="/" dev="autofs" ino=7486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 52.332276][ T4488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 52.341312][ T4488] tc_dump_action: action bad kind [ 52.357093][ T29] audit: type=1400 audit(1770381250.188:310): avc: denied { mount } for pid=4485 comm="syz.0.309" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.573799][ T4493] mmap: syz.4.303 (4493) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.634657][ T29] audit: type=1400 audit(1770381250.488:311): avc: denied { create } for pid=4492 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.674247][ T29] audit: type=1400 audit(1770381250.488:312): avc: denied { setopt } for pid=4492 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.991294][ T29] audit: type=1326 audit(1770381250.848:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 53.014706][ T29] audit: type=1326 audit(1770381250.848:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 53.041589][ T29] audit: type=1326 audit(1770381250.848:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 53.065084][ T29] audit: type=1326 audit(1770381250.848:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 53.088499][ T29] audit: type=1326 audit(1770381250.848:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 53.112386][ T29] audit: type=1326 audit(1770381250.918:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa124aeaeb9 code=0x7ffc0000 [ 54.222714][ T4542] tipc: Failed to remove unknown binding: 66,0,0/0:2835646084/2835646085 [ 54.254406][ T4542] tipc: Failed to remove unknown binding: 66,0,0/0:2835646084/2835646085 [ 54.470120][ T4550] netlink: 'syz.0.320': attribute type 10 has an invalid length. [ 54.477911][ T4550] netlink: 2 bytes leftover after parsing attributes in process `syz.0.320'. [ 54.521052][ T4550] bond0: entered promiscuous mode [ 54.526162][ T4550] bond_slave_0: entered promiscuous mode [ 54.532056][ T4550] bond_slave_1: entered promiscuous mode [ 54.541953][ T4550] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 54.549732][ T4550] bridge0: port 3(bond0) entered blocking state [ 54.556364][ T4550] bridge0: port 3(bond0) entered disabled state [ 54.563281][ T4550] bond0: entered allmulticast mode [ 54.568425][ T4550] bond_slave_0: entered allmulticast mode [ 54.574307][ T4550] bond_slave_1: entered allmulticast mode [ 54.580604][ T4550] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 54.609770][ T4550] bridge0: port 3(bond0) entered blocking state [ 54.616226][ T4550] bridge0: port 3(bond0) entered forwarding state [ 54.687575][ T4568] syz_tun: entered allmulticast mode [ 54.710911][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 54.730157][ T4568] syz_tun (unregistering): left allmulticast mode [ 54.750360][ T4568] bond0: (slave syz_tun): Releasing backup interface [ 54.781639][ T4572] ªªªªªª: renamed from vlan0 (while UP) [ 55.630984][ T4606] syzkaller0: entered promiscuous mode [ 55.636548][ T4606] syzkaller0: entered allmulticast mode [ 55.701019][ T4606] tipc: Started in network mode [ 55.706009][ T4606] tipc: Node identity ca2f7620bc05, cluster identity 4711 [ 55.713340][ T4606] tipc: Enabled bearer , priority 0 [ 55.734569][ T4605] tipc: Resetting bearer [ 55.743361][ T4605] tipc: Disabling bearer [ 55.841083][ T4625] syzkaller0: entered promiscuous mode [ 55.846865][ T4625] syzkaller0: entered allmulticast mode [ 55.855117][ T39] syzkaller0: tun_net_xmit 48 [ 55.877558][ T4625] syzkaller0: tun_net_xmit 1280 [ 55.882531][ T4625] syzkaller0: create flow: hash 2100575334 index 1 [ 55.892208][ T4624] syzkaller0: delete flow: hash 2100575334 index 1 [ 56.635134][ T4648] batadv_slave_1: entered promiscuous mode [ 56.641598][ T4647] batadv_slave_1: left promiscuous mode [ 56.829734][ T4669] syz_tun: entered allmulticast mode [ 56.841176][ T4671] netlink: 'syz.4.363': attribute type 13 has an invalid length. [ 56.853105][ T4671] gretap0: left promiscuous mode [ 56.858236][ T4671] gretap0: left allmulticast mode [ 56.864299][ T4671] gretap0: refused to change device tx_queue_len [ 56.873389][ T4671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 56.900117][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 56.901222][ T4671] syz.4.363 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 56.923055][ T4669] syz_tun (unregistering): left allmulticast mode [ 57.365548][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 58.046091][ T4742] syz_tun: entered allmulticast mode [ 58.061146][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 58.073787][ T4742] syz_tun (unregistering): left allmulticast mode [ 58.201535][ T4747] lo speed is unknown, defaulting to 1000 [ 58.315518][ T4753] tipc: Enabled bearer , priority 0 [ 58.322800][ T4753] syzkaller0: entered promiscuous mode [ 58.328279][ T4753] syzkaller0: entered allmulticast mode [ 58.338019][ T4753] tipc: Resetting bearer [ 58.344735][ T4752] tipc: Resetting bearer [ 58.352292][ T4752] tipc: Disabling bearer [ 59.030036][ T4781] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.334763][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 59.334781][ T29] audit: type=1326 audit(1770381258.186:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c6baeb9 code=0x7ffc0000 [ 59.382681][ T29] audit: type=1326 audit(1770381258.186:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c6baeb9 code=0x7ffc0000 [ 59.406128][ T29] audit: type=1326 audit(1770381258.186:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7a5c6baeb9 code=0x7ffc0000 [ 59.429641][ T29] audit: type=1326 audit(1770381258.186:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c6baeb9 code=0x7ffc0000 [ 59.452934][ T29] audit: type=1326 audit(1770381258.186:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c6baeb9 code=0x7ffc0000 [ 59.476332][ T29] audit: type=1326 audit(1770381258.186:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7a5c6baeb9 code=0x7ffc0000 [ 59.499592][ T29] audit: type=1326 audit(1770381258.186:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c6baeb9 code=0x7ffc0000 [ 59.522991][ T29] audit: type=1326 audit(1770381258.186:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c6baeb9 code=0x7ffc0000 [ 59.604276][ T29] audit: type=1400 audit(1770381258.456:476): avc: denied { create } for pid=4804 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.651760][ T29] audit: type=1400 audit(1770381258.486:477): avc: denied { write } for pid=4804 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.837364][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 60.111149][ T4830] tipc: Enabling of bearer rejected, failed to enable media [ 60.747423][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 60.766443][ T4855] vxlan0: entered promiscuous mode [ 60.780352][ T328] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.789350][ T328] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.803795][ T328] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.820777][ T328] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.948797][ T4858] syzkaller0: entered promiscuous mode [ 60.954567][ T4858] syzkaller0: entered allmulticast mode [ 60.999393][ T3419] IPVS: starting estimator thread 0... [ 61.089683][ T4866] IPVS: using max 2544 ests per chain, 127200 per kthread [ 61.257395][ T4883] process 'syz.2.426' launched './file1' with NULL argv: empty string added [ 61.266721][ T4885] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 61.296349][ T328] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 61.513036][ T4876] lo speed is unknown, defaulting to 1000 [ 61.846951][ T4910] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 61.854974][ T4910] netlink: 55 bytes leftover after parsing attributes in process `syz.3.433'. [ 62.183881][ T4930] lo speed is unknown, defaulting to 1000 [ 62.397544][ T4945] GUP no longer grows the stack in syz.4.443 (4945): 200000006000-200000008000 (200000004000) [ 62.408033][ T4945] CPU: 0 UID: 0 PID: 4945 Comm: syz.4.443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.408066][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 62.408080][ T4945] Call Trace: [ 62.408089][ T4945] [ 62.408099][ T4945] __dump_stack+0x1d/0x30 [ 62.408129][ T4945] dump_stack_lvl+0x95/0xd0 [ 62.408151][ T4945] dump_stack+0x15/0x1b [ 62.408256][ T4945] fixup_user_fault+0x4fb/0x550 [ 62.408292][ T4945] fault_in_user_writeable+0x5c/0xc0 [ 62.408317][ T4945] futex_lock_pi+0x60b/0x7e0 [ 62.408428][ T4945] ? __pfx_futex_wake_mark+0x10/0x10 [ 62.408464][ T4945] do_futex+0x21f/0x380 [ 62.408487][ T4945] __se_sys_futex+0x2f6/0x370 [ 62.408539][ T4945] ? xfd_validate_state+0x45/0xf0 [ 62.408595][ T4945] __x64_sys_futex+0x78/0x90 [ 62.408623][ T4945] x64_sys_call+0x2bc2/0x3000 [ 62.408654][ T4945] do_syscall_64+0xc0/0x2a0 [ 62.408745][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.408771][ T4945] RIP: 0033:0x7f636cbdaeb9 [ 62.408797][ T4945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.408821][ T4945] RSP: 002b:00007f636b62f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 62.408849][ T4945] RAX: ffffffffffffffda RBX: 00007f636ce55fa0 RCX: 00007f636cbdaeb9 [ 62.408867][ T4945] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 62.408884][ T4945] RBP: 00007f636cc48c1f R08: 0000000000000000 R09: 0000000000000000 [ 62.408901][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.408919][ T4945] R13: 00007f636ce56038 R14: 00007f636ce55fa0 R15: 00007ffd74d31a68 [ 62.408943][ T4945] [ 62.875683][ T4960] wireguard0: entered promiscuous mode [ 62.881232][ T4960] wireguard0: entered allmulticast mode [ 62.890737][ T4963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4963 comm=syz.0.450 [ 63.377233][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 64.009749][ T4981] ================================================================== [ 64.017895][ T4981] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 64.026288][ T4981] [ 64.028622][ T4981] write to 0xffff88811ab3af74 of 4 bytes by task 4978 on cpu 1: [ 64.036260][ T4981] inode_update_timestamps+0x147/0x270 [ 64.041748][ T4981] file_update_time_flags+0x269/0x300 [ 64.047158][ T4981] file_update_time+0x17/0x20 [ 64.051883][ T4981] shmem_file_write_iter+0x9c/0xf0 [ 64.057027][ T4981] iter_file_splice_write+0x6bc/0xa80 [ 64.062423][ T4981] direct_splice_actor+0x156/0x2a0 [ 64.067554][ T4981] splice_direct_to_actor+0x311/0x670 [ 64.072957][ T4981] do_splice_direct+0x119/0x1a0 [ 64.077823][ T4981] do_sendfile+0x382/0x650 [ 64.082263][ T4981] __x64_sys_sendfile64+0x105/0x150 [ 64.087488][ T4981] x64_sys_call+0x2db1/0x3000 [ 64.092184][ T4981] do_syscall_64+0xc0/0x2a0 [ 64.096796][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.102711][ T4981] [ 64.105060][ T4981] read to 0xffff88811ab3af74 of 4 bytes by task 4981 on cpu 0: [ 64.112622][ T4981] atime_needs_update+0x2a8/0x3e0 [ 64.117672][ T4981] touch_atime+0x4a/0x340 [ 64.122036][ T4981] shmem_file_read_iter+0x477/0x540 [ 64.127276][ T4981] copy_splice_read+0x471/0x6c0 [ 64.132154][ T4981] splice_direct_to_actor+0x28f/0x670 [ 64.137548][ T4981] do_splice_direct+0x119/0x1a0 [ 64.142429][ T4981] do_sendfile+0x382/0x650 [ 64.146879][ T4981] __x64_sys_sendfile64+0x105/0x150 [ 64.152195][ T4981] x64_sys_call+0x2db1/0x3000 [ 64.156980][ T4981] do_syscall_64+0xc0/0x2a0 [ 64.161536][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.167464][ T4981] [ 64.170149][ T4981] value changed: 0x330c81f7 -> 0x33a51877 [ 64.175867][ T4981] [ 64.178202][ T4981] Reported by Kernel Concurrency Sanitizer on: [ 64.184361][ T4981] CPU: 0 UID: 0 PID: 4981 Comm: syz.1.456 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.194027][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 64.204127][ T4981] ================================================================== [ 64.621121][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 64.621139][ T29] audit: type=1400 audit(1770381263.476:634): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0