last executing test programs: 35.642697828s ago: executing program 4 (id=192): setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 35.614694889s ago: executing program 4 (id=193): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 35.368723587s ago: executing program 4 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 35.207606352s ago: executing program 4 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020600) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 35.109742265s ago: executing program 4 (id=208): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) 34.531810584s ago: executing program 4 (id=214): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') syz_usb_disconnect(0xffffffffffffffff) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1) 34.524486424s ago: executing program 32 (id=214): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') syz_usb_disconnect(0xffffffffffffffff) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1) 3.131640901s ago: executing program 5 (id=939): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@private0, 0x11}) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f}}}}, 0x0) 2.83138423s ago: executing program 5 (id=932): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sendmmsg$unix(r1, &(0x7f0000009040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10}}], 0x10, 0x4000800}}], 0x1, 0x4) 1.633009058s ago: executing program 5 (id=949): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f731", 0x9}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.443357014s ago: executing program 5 (id=950): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0x6, @empty, 0xc00001}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 1.442460754s ago: executing program 3 (id=952): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 1.407159925s ago: executing program 5 (id=954): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.322975568s ago: executing program 5 (id=957): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 951.54629ms ago: executing program 0 (id=966): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x80, 0x4) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 840.189383ms ago: executing program 0 (id=967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[], 0x0) 654.504409ms ago: executing program 2 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 653.551749ms ago: executing program 0 (id=969): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x20004000) 631.6164ms ago: executing program 2 (id=970): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) chroot(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 596.178861ms ago: executing program 1 (id=973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 587.557431ms ago: executing program 3 (id=974): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x8000002e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 535.447463ms ago: executing program 2 (id=976): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioprio_set$pid(0x1, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") 534.943543ms ago: executing program 1 (id=977): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x840, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 534.511593ms ago: executing program 3 (id=978): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xfffffff5}]}}]}, 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 469.289925ms ago: executing program 0 (id=979): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000840000000001000001000000", @ANYRESHEX=0x0], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x200040d1}, 0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 444.355836ms ago: executing program 2 (id=981): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0x6, @empty, 0xc00001}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 416.156277ms ago: executing program 0 (id=983): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0xce20, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x5}}}}}, 0x36) 384.790608ms ago: executing program 3 (id=984): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) 365.844728ms ago: executing program 2 (id=985): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 306.69692ms ago: executing program 0 (id=986): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) 148.653815ms ago: executing program 2 (id=987): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="696123d309dbce07031d4d58dabffde4e9857acc0cc8f2c98907e19155d1a4d07db0b07b1a367af0077a149470be505c3667827b2a85ff9bce79b7c4aa16c12eaff6d2465b", 0x45}], 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 141.819715ms ago: executing program 1 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 101.518967ms ago: executing program 3 (id=989): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 32.341629ms ago: executing program 1 (id=990): unshare(0x22020400) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x9) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) 24.668809ms ago: executing program 3 (id=991): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) uname(&(0x7f0000000080)=""/161) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x4) 21.357929ms ago: executing program 1 (id=992): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0x24, 0x0, 0xfff2, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 1 (id=993): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 31.368214][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 31.368230][ T28] audit: type=1400 audit(1781144155.759:125): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.397469][ T28] audit: type=1400 audit(1781144155.789:126): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.399478][ T3286] cgroup: Unknown subsys name 'net' [ 31.425253][ T28] audit: type=1400 audit(1781144155.819:127): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.525941][ T3286] cgroup: Unknown subsys name 'cpuset' [ 31.532056][ T3286] cgroup: Unknown subsys name 'rlimit' [ 31.642652][ T28] audit: type=1400 audit(1781144156.029:128): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.671136][ T28] audit: type=1400 audit(1781144156.029:129): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.699377][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.705221][ T28] audit: type=1400 audit(1781144156.029:130): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.728496][ T28] audit: type=1400 audit(1781144156.029:131): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.748970][ T28] audit: type=1400 audit(1781144156.029:132): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.773899][ T28] audit: type=1400 audit(1781144156.029:133): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.797335][ T28] audit: type=1400 audit(1781144156.059:134): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.826522][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.780393][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.787607][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.794728][ T3298] bridge_slave_0: entered allmulticast mode [ 33.801300][ T3298] bridge_slave_0: entered promiscuous mode [ 33.823900][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.831117][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.838304][ T3298] bridge_slave_1: entered allmulticast mode [ 33.844864][ T3298] bridge_slave_1: entered promiscuous mode [ 33.881880][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.888989][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.896440][ T3299] bridge_slave_0: entered allmulticast mode [ 33.902956][ T3299] bridge_slave_0: entered promiscuous mode [ 33.919476][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.931396][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.938508][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.945684][ T3299] bridge_slave_1: entered allmulticast mode [ 33.952173][ T3299] bridge_slave_1: entered promiscuous mode [ 33.970139][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.015336][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.022417][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.029623][ T3304] bridge_slave_0: entered allmulticast mode [ 34.036091][ T3304] bridge_slave_0: entered promiscuous mode [ 34.043184][ T3298] team0: Port device team_slave_0 added [ 34.052323][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.071179][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.078306][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.085565][ T3304] bridge_slave_1: entered allmulticast mode [ 34.092065][ T3304] bridge_slave_1: entered promiscuous mode [ 34.099260][ T3298] team0: Port device team_slave_1 added [ 34.108480][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.137074][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.144177][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.151406][ T3305] bridge_slave_0: entered allmulticast mode [ 34.158011][ T3305] bridge_slave_0: entered promiscuous mode [ 34.181949][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.189141][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.196257][ T3305] bridge_slave_1: entered allmulticast mode [ 34.202612][ T3305] bridge_slave_1: entered promiscuous mode [ 34.210085][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.219457][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.226466][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.252413][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.268408][ T3299] team0: Port device team_slave_0 added [ 34.279469][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.288815][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.295831][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.321775][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.332527][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.339622][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.346776][ T3303] bridge_slave_0: entered allmulticast mode [ 34.353149][ T3303] bridge_slave_0: entered promiscuous mode [ 34.360181][ T3299] team0: Port device team_slave_1 added [ 34.377921][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.385046][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.392453][ T3303] bridge_slave_1: entered allmulticast mode [ 34.398933][ T3303] bridge_slave_1: entered promiscuous mode [ 34.410931][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.425506][ T3304] team0: Port device team_slave_0 added [ 34.441471][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.459533][ T3304] team0: Port device team_slave_1 added [ 34.470179][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.477226][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.503153][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.527746][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.537276][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.544335][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.570304][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.581716][ T3305] team0: Port device team_slave_0 added [ 34.589462][ T3298] hsr_slave_0: entered promiscuous mode [ 34.595462][ T3298] hsr_slave_1: entered promiscuous mode [ 34.606930][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.619147][ T3305] team0: Port device team_slave_1 added [ 34.633861][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.640833][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.666807][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.688826][ T3303] team0: Port device team_slave_0 added [ 34.694645][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.701608][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.727623][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.745330][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.752345][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.778275][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.797163][ T3303] team0: Port device team_slave_1 added [ 34.808167][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.815234][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.841243][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.864378][ T3299] hsr_slave_0: entered promiscuous mode [ 34.870544][ T3299] hsr_slave_1: entered promiscuous mode [ 34.876343][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.882069][ T3299] Cannot create hsr debugfs directory [ 34.899812][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.906858][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.932789][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.944558][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.951531][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.977509][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.011081][ T3304] hsr_slave_0: entered promiscuous mode [ 35.017168][ T3304] hsr_slave_1: entered promiscuous mode [ 35.023005][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 35.028773][ T3304] Cannot create hsr debugfs directory [ 35.058079][ T3303] hsr_slave_0: entered promiscuous mode [ 35.064128][ T3303] hsr_slave_1: entered promiscuous mode [ 35.069931][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 35.075708][ T3303] Cannot create hsr debugfs directory [ 35.115045][ T3305] hsr_slave_0: entered promiscuous mode [ 35.121099][ T3305] hsr_slave_1: entered promiscuous mode [ 35.127021][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 35.132731][ T3305] Cannot create hsr debugfs directory [ 35.292509][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.301163][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.308811][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.317340][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.330038][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.338632][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.346220][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.354761][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.377545][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.385934][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.394232][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.402862][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.413416][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.422376][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.430029][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.438581][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.465551][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.474027][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.481813][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.490280][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.498062][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.506639][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.514153][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.523103][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.548975][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.557226][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.573351][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.582024][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.589885][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.599042][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.613336][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.622364][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.649534][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.658226][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.670878][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.679733][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.688561][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.696957][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.705774][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.714118][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.722773][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.748673][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.758192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.765293][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.780632][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.787717][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.816065][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.830128][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.853768][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.864602][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.871696][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.887044][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.901590][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.910235][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.917303][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.926442][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.933548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.952798][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.959931][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.985660][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.999390][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.016447][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.023485][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.032358][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.039405][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.073211][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.094505][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.101627][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.114206][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.121298][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.194725][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.356223][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.369442][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.397345][ T3298] veth0_vlan: entered promiscuous mode [ 36.415603][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.424211][ T3298] veth1_vlan: entered promiscuous mode [ 36.436164][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.475616][ T3298] veth0_macvtap: entered promiscuous mode [ 36.492274][ T3298] veth1_macvtap: entered promiscuous mode [ 36.512790][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.533812][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.558775][ T3304] veth0_vlan: entered promiscuous mode [ 36.577926][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.587590][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.608087][ T3304] veth1_vlan: entered promiscuous mode [ 36.614385][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.623729][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.652953][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 36.652966][ T28] audit: type=1400 audit(1781144161.039:147): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.tfoGYw/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.690339][ T28] audit: type=1400 audit(1781144161.079:148): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.697409][ T3304] veth0_macvtap: entered promiscuous mode [ 36.715986][ T28] audit: type=1400 audit(1781144161.079:149): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.tfoGYw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.743780][ T28] audit: type=1400 audit(1781144161.079:150): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.768354][ T28] audit: type=1400 audit(1781144161.079:151): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.tfoGYw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.772174][ T3305] veth0_vlan: entered promiscuous mode [ 36.802199][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.806447][ T3304] veth1_macvtap: entered promiscuous mode [ 36.822727][ T28] audit: type=1400 audit(1781144161.079:152): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.tfoGYw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.826574][ T3303] veth0_vlan: entered promiscuous mode [ 36.870212][ T3299] veth0_vlan: entered promiscuous mode [ 36.877730][ T3305] veth1_vlan: entered promiscuous mode [ 36.885669][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.899412][ T28] audit: type=1400 audit(1781144161.079:153): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.906680][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.933262][ T3299] veth1_vlan: entered promiscuous mode [ 36.944508][ T3303] veth1_vlan: entered promiscuous mode [ 36.953989][ T28] audit: type=1400 audit(1781144161.099:154): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.959417][ T3305] veth0_macvtap: entered promiscuous mode [ 36.979324][ T28] audit: type=1400 audit(1781144161.099:155): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="gadgetfs" ino=4634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.000567][ T3305] veth1_macvtap: entered promiscuous mode [ 37.010802][ T28] audit: type=1400 audit(1781144161.249:156): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.041453][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.050962][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.060144][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.069004][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.090016][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.109659][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.122658][ T3299] veth0_macvtap: entered promiscuous mode [ 37.131962][ T3303] veth0_macvtap: entered promiscuous mode [ 37.141601][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.153819][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.166242][ T3299] veth1_macvtap: entered promiscuous mode [ 37.173628][ T3303] veth1_macvtap: entered promiscuous mode [ 37.183579][ T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.193451][ T310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.221655][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.230773][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.253323][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.263061][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.278815][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.292154][ T3514] loop0: detected capacity change from 0 to 512 [ 37.316086][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.325051][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.331553][ T3514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.348474][ T3514] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.369555][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.400683][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.412528][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.427790][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.443730][ T3514] syz.0.8 (3514) used greatest stack depth: 9912 bytes left [ 37.451398][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.461292][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.901645][ T3544] loop2: detected capacity change from 0 to 512 [ 37.933388][ T3544] EXT4-fs (loop2): 1 truncate cleaned up [ 37.940579][ T3544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.964520][ T3550] netlink: 'syz.4.17': attribute type 83 has an invalid length. [ 37.996676][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.314120][ T3571] loop4: detected capacity change from 0 to 512 [ 38.321263][ T3571] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.330662][ T3571] EXT4-fs (loop4): invalid journal inode [ 38.336489][ T3571] EXT4-fs (loop4): can't get journal size [ 38.342822][ T3571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 38.351669][ T3571] System zones: 1-12, 13-13 [ 38.357508][ T3571] EXT4-fs (loop4): 1 truncate cleaned up [ 38.363621][ T3571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.379354][ T3571] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 38.386980][ T3571] netlink: 'syz.4.24': attribute type 4 has an invalid length. [ 38.394513][ T3571] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.24'. [ 38.413492][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.544442][ T3580] loop4: detected capacity change from 0 to 128 [ 38.561225][ T3588] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 38.870862][ T3603] netlink: 'syz.2.39': attribute type 4 has an invalid length. [ 38.900896][ T3603] netlink: 'syz.2.39': attribute type 4 has an invalid length. [ 38.998379][ T3613] netlink: 168 bytes leftover after parsing attributes in process `syz.3.43'. [ 39.202330][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.202330][ T30] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 39.219308][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.219308][ T30] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 39.236066][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.236066][ T30] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 39.249837][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.249837][ T30] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 39.264328][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.264328][ T30] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 39.278189][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.278189][ T30] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 39.291852][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.291852][ T30] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 39.306468][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.306468][ T30] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 39.320114][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.320114][ T30] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 39.334110][ T30] kworker/u8:1: attempt to access beyond end of device [ 39.334110][ T30] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 39.542355][ T3634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.53'. [ 39.920141][ T3654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 39.973661][ T3656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 40.000139][ T3656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 40.021083][ T3656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 40.034947][ T3656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 40.055324][ T3656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 40.077053][ T3656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 40.150853][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.158324][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.248205][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.262274][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.381981][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.398534][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.421425][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.502286][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.557884][ T3414] kernel read not supported for file /vcs (pid: 3414 comm: kworker/0:6) [ 40.666165][ T3696] netlink: 'syz.3.75': attribute type 39 has an invalid length. [ 41.336465][ T3387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.348207][ T3387] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.613273][ T3733] loop1: detected capacity change from 0 to 128 [ 41.626860][ T3733] ======================================================= [ 41.626860][ T3733] WARNING: The mand mount option has been deprecated and [ 41.626860][ T3733] and is ignored by this kernel. Remove the mand [ 41.626860][ T3733] option from the mount to silence this warning. [ 41.626860][ T3733] ======================================================= [ 41.676989][ T3733] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 41.693111][ T3733] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.746476][ T28] kauditd_printk_skb: 575 callbacks suppressed [ 41.746557][ T28] audit: type=1400 audit(1781144166.119:732): avc: denied { write } for pid=3732 comm="syz.1.90" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.794171][ T3745] netlink: 'syz.3.95': attribute type 83 has an invalid length. [ 41.822343][ T28] audit: type=1400 audit(1781144166.119:733): avc: denied { create } for pid=3732 comm="syz.1.90" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.864976][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.899086][ T28] audit: type=1400 audit(1781144166.129:734): avc: denied { write } for pid=3732 comm="syz.1.90" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.922309][ T28] audit: type=1400 audit(1781144166.129:735): avc: denied { write } for pid=3732 comm="syz.1.90" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.944032][ T28] audit: type=1400 audit(1781144166.129:736): avc: denied { write } for pid=3732 comm="syz.1.90" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.003608][ T3749] loop3: detected capacity change from 0 to 2048 [ 42.010609][ T28] audit: type=1400 audit(1781144166.129:737): avc: denied { write } for pid=3732 comm="syz.1.90" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.078128][ T3749] loop3: p1 p2 p3 [ 42.090434][ T28] audit: type=1400 audit(1781144166.129:738): avc: denied { rename } for pid=3732 comm="syz.1.90" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.100173][ T3749] loop3: p1 size 16777216 extends beyond EOD, [ 42.193159][ T28] audit: type=1400 audit(1781144166.129:739): avc: denied { write } for pid=3732 comm="syz.1.90" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.201179][ T3749] truncated [ 42.229991][ T28] audit: type=1400 audit(1781144166.459:740): avc: denied { write } for pid=3762 comm="syz.1.100" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.255334][ T3779] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 42.270837][ T3749] loop3: p2 size 458752 extends beyond EOD, truncated [ 42.273251][ T28] audit: type=1400 audit(1781144166.459:741): avc: denied { open } for pid=3762 comm="syz.1.100" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.305719][ T3749] loop3: p3 start 3036741376 is beyond EOD, truncated [ 42.511785][ T3802] loop1: detected capacity change from 0 to 256 [ 42.518708][ T3802] FAT-fs (loop1): Directory bread(block 1285) failed [ 42.535169][ T3802] FAT-fs (loop1): Directory bread(block 1286) failed [ 42.548021][ T3802] FAT-fs (loop1): Directory bread(block 1287) failed [ 42.559280][ T3802] FAT-fs (loop1): Directory bread(block 1288) failed [ 42.573777][ T3802] FAT-fs (loop1): Directory bread(block 1285) failed [ 42.586086][ T3802] FAT-fs (loop1): Directory bread(block 1286) failed [ 42.601478][ T3802] FAT-fs (loop1): Directory bread(block 1287) failed [ 42.613804][ T3802] FAT-fs (loop1): Directory bread(block 1288) failed [ 42.626340][ T3802] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 42.639089][ T3804] FAT-fs (loop1): Directory bread(block 1285) failed [ 42.780471][ T3808] syzkaller0: entered promiscuous mode [ 42.786892][ T3808] syzkaller0: entered allmulticast mode [ 42.799538][ T3814] loop2: detected capacity change from 0 to 512 [ 42.823591][ T3814] EXT4-fs: Ignoring removed nobh option [ 42.848456][ T3814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.866068][ T3814] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.959852][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.045761][ T3828] ref_ctr increment failed for inode: 0xb0 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100069b00 [ 43.134277][ T3827] uprobe: syz.2.127:3827 failed to unregister, leaking uprobe [ 43.386184][ T3848] loop4: detected capacity change from 0 to 4096 [ 43.402388][ T3848] EXT4-fs: test_dummy_encryption option not supported [ 43.449497][ T3848] xt_hashlimit: size too large, truncated to 1048576 [ 43.723579][ T3824] syz.1.126 (3824) used greatest stack depth: 9808 bytes left [ 43.771911][ T3866] __nla_validate_parse: 140 callbacks suppressed [ 43.771936][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 43.824130][ T3868] loop3: detected capacity change from 0 to 512 [ 43.882520][ T3874] sock: sock_set_timeout: `syz.1.147' (pid 3874) tries to set negative timeout [ 43.928913][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 43.938095][ T3880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 43.948969][ T3880] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 44.300741][ T3892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.154'. [ 44.429164][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.437160][ T3900] Bluetooth: hci0: unexpected event 0x18 length: 0 < 23 [ 44.893708][ T3928] loop1: detected capacity change from 0 to 4096 [ 44.920222][ T3928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.997277][ T3936] capability: warning: `syz.4.172' uses deprecated v2 capabilities in a way that may be insecure [ 45.037508][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.152608][ T3947] netlink: 'syz.3.175': attribute type 11 has an invalid length. [ 45.168914][ T3947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.175'. [ 45.280264][ T3958] loop1: detected capacity change from 0 to 512 [ 45.301477][ T3962] process 'syz.4.183' launched './file0' with NULL argv: empty string added [ 45.306973][ T3958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.323393][ T3958] ext4 filesystem being mounted at /45/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.337399][ T3958] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.181: Failed to acquire dquot type 0 [ 45.357312][ T3958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.700957][ T3995] tipc: Started in network mode [ 45.713830][ T3995] tipc: Node identity 2007ff, cluster identity 4711 [ 45.723402][ T3995] tipc: Node number set to 2099199 [ 45.759949][ T30] tipc: Subscription rejected, illegal request [ 45.837952][ T4007] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 45.848337][ T4008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.202'. [ 45.882115][ T4008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 45.899928][ T4007] bond1: (slave veth3): Enslaving as an active interface with a down link [ 45.939198][ T4007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.204635][ T310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.270705][ T310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.338289][ T310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.431581][ T310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.505171][ T3643] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.505476][ T3900] Bluetooth: hci0: command 0x1003 tx timeout [ 46.535636][ T310] bridge_slave_1: left allmulticast mode [ 46.550382][ T310] bridge_slave_1: left promiscuous mode [ 46.572363][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.625759][ T310] bridge_slave_0: left allmulticast mode [ 46.631598][ T310] bridge_slave_0: left promiscuous mode [ 46.637837][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.841269][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 46.841283][ T28] audit: type=1400 audit(1781144171.229:857): avc: denied { read } for pid=4128 comm="syz.2.216" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.934632][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.960618][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.963892][ T4141] loop2: detected capacity change from 0 to 512 [ 46.979993][ T310] bond0 (unregistering): Released all slaves [ 47.017659][ T4141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.064837][ T310] hsr_slave_0: left promiscuous mode [ 47.070833][ T4141] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.081350][ T310] hsr_slave_1: left promiscuous mode [ 47.087286][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.094860][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.115513][ T28] audit: type=1400 audit(1781144171.509:858): avc: denied { write } for pid=4140 comm="syz.2.220" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.137482][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.156777][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.168842][ T28] audit: type=1400 audit(1781144171.509:859): avc: denied { create } for pid=4152 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 47.190598][ T310] veth1_macvtap: left promiscuous mode [ 47.201774][ T310] veth0_macvtap: left promiscuous mode [ 47.209138][ T310] veth1_vlan: left promiscuous mode [ 47.214377][ T28] audit: type=1400 audit(1781144171.509:860): avc: denied { read write } for pid=4140 comm="syz.2.220" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.237018][ T310] veth0_vlan: left promiscuous mode [ 47.279023][ T28] audit: type=1400 audit(1781144171.509:861): avc: denied { open } for pid=4140 comm="syz.2.220" path="/43/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.328391][ T28] audit: type=1400 audit(1781144171.539:862): avc: denied { getattr } for pid=4160 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.390734][ T28] audit: type=1400 audit(1781144171.589:863): avc: denied { read } for pid=4162 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.419205][ T28] audit: type=1400 audit(1781144171.589:864): avc: denied { open } for pid=4162 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.444470][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.461738][ T28] audit: type=1400 audit(1781144171.669:865): avc: denied { name_bind } for pid=4168 comm="syz.0.224" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.509885][ T28] audit: type=1400 audit(1781144171.759:866): avc: denied { write } for pid=4155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.554994][ T310] team0 (unregistering): Port device team_slave_1 removed [ 47.580566][ T4066] syz.1.211 (4066) used greatest stack depth: 9656 bytes left [ 47.597087][ T310] team0 (unregistering): Port device team_slave_0 removed [ 47.690243][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 48.051118][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 48.089591][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.103399][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.116459][ T4131] bridge_slave_0: entered allmulticast mode [ 48.156919][ T4131] bridge_slave_0: entered promiscuous mode [ 48.179569][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.200226][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.217224][ T4131] bridge_slave_1: entered allmulticast mode [ 48.229580][ T4131] bridge_slave_1: entered promiscuous mode [ 48.271441][ T4131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.291622][ T4131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.333604][ T4131] team0: Port device team_slave_0 added [ 48.340758][ T4131] team0: Port device team_slave_1 added [ 48.356907][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.364058][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.391491][ T4131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.404444][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.411505][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.438336][ T4131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.450110][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 48.510069][ T4131] hsr_slave_0: entered promiscuous mode [ 48.524958][ T4131] hsr_slave_1: entered promiscuous mode [ 48.535478][ T4131] debugfs: 'hsr0' already exists in 'hsr' [ 48.541253][ T4131] Cannot create hsr debugfs directory [ 48.691314][ T4131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.707492][ T4131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.724650][ T4131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.736816][ T4273] option changes via remount are deprecated (pid=4272 comm=syz.3.238) [ 48.747181][ T4131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.754936][ T4131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.767142][ T4131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.779834][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 48.798167][ T4131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.800541][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 48.815839][ T4131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.842274][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.849360][ T4131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.856798][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.863928][ T4131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.891179][ T4287] netlink: 'syz.2.241': attribute type 5 has an invalid length. [ 48.900804][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.920101][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.979240][ T4131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.003318][ T4131] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.048033][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.055125][ T4190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.092788][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.099872][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.130879][ T4131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.287514][ T4316] netlink: 56 bytes leftover after parsing attributes in process `syz.0.250'. [ 49.319370][ T4131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.503203][ T4131] veth0_vlan: entered promiscuous mode [ 49.513190][ T4131] veth1_vlan: entered promiscuous mode [ 49.540271][ T4131] veth0_macvtap: entered promiscuous mode [ 49.548902][ T4131] veth1_macvtap: entered promiscuous mode [ 49.563334][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.575702][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.587952][ T310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.596902][ T310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.610625][ T310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.619788][ T310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.672539][ T4348] loop3: detected capacity change from 0 to 512 [ 49.711331][ T4348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.729744][ T4348] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.758174][ T4348] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.255: Failed to acquire dquot type 0 [ 49.789168][ T4348] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.989086][ T4375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.263'. [ 50.114799][ T4384] ref_ctr increment failed for inode: 0x1c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810523ec00 [ 50.126505][ T4388] netlink: 'syz.1.270': attribute type 83 has an invalid length. [ 50.139900][ T4383] uprobe: syz.5.267:4383 failed to unregister, leaking uprobe [ 50.154576][ T4390] sock: sock_set_timeout: `syz.3.271' (pid 4390) tries to set negative timeout [ 50.195448][ T4394] loop2: detected capacity change from 0 to 512 [ 50.232791][ T4394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.245554][ T4394] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.262759][ T4394] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.272: Failed to acquire dquot type 0 [ 50.353604][ T4394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 50.455187][ T4409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.280'. [ 50.481644][ T4413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 50.545420][ T4415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.281'. [ 50.566173][ T4415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.281'. [ 50.579609][ T4415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.281'. [ 50.608746][ T4415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.281'. [ 50.627263][ T4415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.281'. [ 50.792657][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.800308][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.905046][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.921178][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.026611][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.047915][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.074167][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.109486][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.444984][ T4460] tipc: Started in network mode [ 51.471593][ T4460] tipc: Node identity 2007ff, cluster identity 4711 [ 51.489815][ T4460] tipc: Node number set to 2099199 [ 51.502676][ T4127] tipc: Subscription rejected, illegal request [ 51.580882][ T4464] xt_hashlimit: size too large, truncated to 1048576 [ 51.719131][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.726664][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.818902][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.830545][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.883343][ T310] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.892323][ T310] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.901796][ T310] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.910801][ T310] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.969685][ T4492] loop5: detected capacity change from 0 to 512 [ 52.007216][ T4492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.029575][ T4492] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.043044][ T4492] __quota_error: 51 callbacks suppressed [ 52.043061][ T4492] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 52.059518][ T4492] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 52.069776][ T4492] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.311: Failed to acquire dquot type 0 [ 52.092097][ T4492] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 52.127882][ T28] audit: type=1400 audit(1781144176.519:914): avc: denied { bind } for pid=4500 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.179680][ T4503] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 52.369313][ T28] audit: type=1400 audit(1781144176.759:915): avc: denied { bind } for pid=4513 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.813140][ T28] audit: type=1400 audit(1781144177.199:916): avc: denied { map } for pid=4535 comm="syz.3.323" path="socket:[8242]" dev="sockfs" ino=8242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 52.874477][ T28] audit: type=1400 audit(1781144177.199:917): avc: denied { accept } for pid=4535 comm="syz.3.323" path="socket:[8242]" dev="sockfs" ino=8242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.544514][ T28] audit: type=1400 audit(1781144177.929:918): avc: denied { write } for pid=4674 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.603118][ T28] audit: type=1400 audit(1781144177.989:919): avc: denied { mounton } for pid=4680 comm="syz.0.339" path=2F36312FE91F7189591E9233614B dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 54.016048][ T4693] netlink: 'syz.2.345': attribute type 4 has an invalid length. [ 54.025336][ T4696] __nla_validate_parse: 282 callbacks suppressed [ 54.025353][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 54.047803][ T4696] erspan1: entered allmulticast mode [ 54.126041][ T28] audit: type=1400 audit(1781144178.519:920): avc: denied { create } for pid=4703 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.160377][ T28] audit: type=1400 audit(1781144178.539:921): avc: denied { listen } for pid=4703 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.300292][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.359'. [ 54.382819][ T4734] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 54.394013][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 54.733148][ T4771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 54.860243][ T4786] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 54.868176][ T4786] netlink: 5 bytes leftover after parsing attributes in process `syz.2.385'. [ 55.053266][ T4810] netlink: 'syz.5.394': attribute type 1 has an invalid length. [ 55.067343][ T4810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.085895][ T4810] macvlan2: entered promiscuous mode [ 55.091387][ T4810] macvlan2: entered allmulticast mode [ 55.098044][ T4810] bond1: entered promiscuous mode [ 55.103428][ T4810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 55.111447][ T4810] bond1: left promiscuous mode [ 55.199467][ T4816] mmap: syz.5.396 (4816) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.254995][ T4821] netlink: 112 bytes leftover after parsing attributes in process `syz.5.398'. [ 55.676113][ T4859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.412'. [ 55.716936][ T4861] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 55.729220][ T4861] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 56.433536][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.440852][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.519671][ T4861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.530923][ T4861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.567429][ T4127] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.576647][ T4127] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.604249][ T4127] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.613680][ T4127] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.731029][ T4894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.778978][ T4894] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.815019][ T4894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.026949][ T4894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.086862][ T4894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.167089][ T4894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.183648][ T4894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.230732][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 57.230789][ T28] audit: type=1400 audit(1781144181.619:941): avc: denied { accept } for pid=4910 comm="syz.0.431" lport=47876 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.301045][ T4894] veth1_vlan: left promiscuous mode [ 57.316248][ T4894] veth0_vlan: left promiscuous mode [ 57.325558][ T4894] veth0_vlan: entered promiscuous mode [ 57.387413][ T4894] veth1_vlan: entered promiscuous mode [ 57.463255][ T4894] veth1_macvtap: left promiscuous mode [ 57.490506][ T4894] veth0_macvtap: left promiscuous mode [ 57.498528][ T4894] veth0_macvtap: entered promiscuous mode [ 57.507818][ T4894] veth1_macvtap: entered promiscuous mode [ 57.535704][ T4894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.569131][ T4894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.650111][ T4894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.685883][ T4894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.769027][ T4894] veth0_to_team: entered promiscuous mode [ 57.814938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.822080][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.844254][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.851362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.974350][ T28] audit: type=1400 audit(1781144182.359:942): avc: denied { execute } for pid=4933 comm="syz.0.437" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 58.015553][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.027745][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.060044][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.082491][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.199117][ T28] audit: type=1400 audit(1781144182.589:943): avc: denied { ioctl } for pid=4950 comm="syz.1.443" path="socket:[9296]" dev="sockfs" ino=9296 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.330953][ T28] audit: type=1400 audit(1781144182.719:944): avc: denied { write } for pid=4960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.365717][ T28] audit: type=1400 audit(1781144182.749:945): avc: denied { write } for pid=4974 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.508887][ T28] audit: type=1400 audit(1781144182.899:946): avc: denied { setopt } for pid=4982 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.581712][ T28] audit: type=1400 audit(1781144182.969:947): avc: denied { write } for pid=4985 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.605491][ T4988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.451'. [ 58.614522][ T4988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'. [ 58.792655][ T28] audit: type=1400 audit(1781144183.179:948): avc: denied { setopt } for pid=5006 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.957591][ T5026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 59.010171][ T28] audit: type=1400 audit(1781144183.399:949): avc: denied { create } for pid=5029 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.037812][ T28] audit: type=1400 audit(1781144183.429:950): avc: denied { write } for pid=5029 comm="syz.0.469" path="socket:[9413]" dev="sockfs" ino=9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.120381][ T3387] IPVS: starting estimator thread 0... [ 59.235184][ T5046] IPVS: using max 2688 ests per chain, 134400 per kthread [ 59.282366][ T5067] __nla_validate_parse: 1 callbacks suppressed [ 59.282382][ T5067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.486'. [ 59.372638][ T5078] netlink: 'syz.1.491': attribute type 2 has an invalid length. [ 59.433379][ T5095] netlink: 'syz.1.491': attribute type 2 has an invalid length. [ 60.887176][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 60.897083][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 61.736406][ T5229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5229 comm=syz.2.533 [ 61.755916][ T5229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'. [ 62.238102][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 62.238119][ T28] audit: type=1326 audit(1781144186.629:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f71f520ce59 code=0x7ffc0000 [ 62.477924][ T28] audit: type=1400 audit(1781144186.869:996): avc: denied { create } for pid=5265 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.497973][ T28] audit: type=1400 audit(1781144186.869:997): avc: denied { connect } for pid=5265 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.519021][ T28] audit: type=1400 audit(1781144186.889:998): avc: denied { read } for pid=5265 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.549236][ T28] audit: type=1400 audit(1781144186.939:999): avc: denied { write } for pid=5265 comm="syz.2.547" path="socket:[9660]" dev="sockfs" ino=9660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.598631][ T5269] capability: warning: `syz.3.549' uses 32-bit capabilities (legacy support in use) [ 62.727515][ T5287] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'. [ 62.950921][ T5308] sctp: [Deprecated]: syz.3.566 (pid 5308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.950921][ T5308] Use struct sctp_sack_info instead [ 62.972713][ T5310] veth1_macvtap: left promiscuous mode [ 62.979283][ T5310] macsec0: entered allmulticast mode [ 62.988425][ T5310] veth1_macvtap: entered promiscuous mode [ 62.994238][ T5310] veth1_macvtap: entered allmulticast mode [ 63.000525][ T5310] macsec0: left allmulticast mode [ 63.026605][ T5310] veth1_macvtap: left allmulticast mode [ 63.172188][ T28] audit: type=1400 audit(1781144187.559:1000): avc: denied { listen } for pid=5329 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.196463][ T28] audit: type=1400 audit(1781144187.559:1001): avc: denied { accept } for pid=5329 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.284692][ T28] audit: type=1400 audit(1781144187.669:1002): avc: denied { sqpoll } for pid=5334 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.411980][ T5352] unsupported nlmsg_type 40 [ 63.429585][ T28] audit: type=1400 audit(1781144187.819:1003): avc: denied { write } for pid=5353 comm="syz.0.587" name="unix" dev="proc" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.485026][ T28] audit: type=1400 audit(1781144187.849:1004): avc: denied { setattr } for pid=5353 comm="syz.0.587" name="unix" dev="proc" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.506694][ T5360] netlink: 7 bytes leftover after parsing attributes in process `syz.0.589'. [ 63.572325][ T5366] bond0: (slave vlan2): Opening slave failed [ 64.425736][ T5411] Zero length message leads to an empty skb [ 64.543217][ T5452] SET target dimension over the limit! [ 64.956773][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 64.968565][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 64.978439][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 64.990266][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 64.999955][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 65.010393][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 65.036892][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 65.059617][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 65.076127][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 65.090458][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 66.474666][ T5691] bond0: (slave vlan2): Opening slave failed [ 66.518513][ T5681] syz.2.677 (5681) used greatest stack depth: 9632 bytes left [ 67.227142][ T5755] syzkaller0: entered promiscuous mode [ 67.251177][ T5755] syzkaller0: entered allmulticast mode [ 67.264709][ T5755] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 67.421700][ T5765] SET target dimension over the limit! [ 67.662710][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 67.662725][ T28] audit: type=1400 audit(1781144192.049:1026): avc: denied { append } for pid=5783 comm="syz.0.723" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.782219][ T28] audit: type=1400 audit(1781144192.169:1027): avc: denied { bind } for pid=5785 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.838186][ T28] audit: type=1400 audit(1781144192.169:1028): avc: denied { write } for pid=5785 comm="syz.0.724" path="socket:[11355]" dev="sockfs" ino=11355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.887102][ T310] nci: nci_ntf_packet: unknown ntf opcode 0x921 [ 67.914486][ T28] audit: type=1400 audit(1781144192.219:1029): avc: denied { read write } for pid=5790 comm="syz.0.726" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.938635][ T28] audit: type=1400 audit(1781144192.219:1030): avc: denied { open } for pid=5790 comm="syz.0.726" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.963548][ T28] audit: type=1400 audit(1781144192.229:1031): avc: denied { ioctl } for pid=5790 comm="syz.0.726" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.996324][ T28] audit: type=1400 audit(1781144192.289:1032): avc: denied { write } for pid=5796 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.016163][ T28] audit: type=1400 audit(1781144192.289:1033): avc: denied { setopt } for pid=5796 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.083377][ T5809] SET target dimension over the limit! [ 68.194690][ T28] audit: type=1326 audit(1781144192.579:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.2.735" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd893ce59 code=0x7ffc0000 [ 68.247870][ T28] audit: type=1326 audit(1781144192.609:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.2.735" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd893ce59 code=0x7ffc0000 [ 68.979974][ T3415] IPVS: starting estimator thread 0... [ 69.076627][ T5831] IPVS: using max 2496 ests per chain, 124800 per kthread [ 69.154092][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.161703][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.295991][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.314361][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.366443][ T310] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.375578][ T310] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.388031][ T310] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.397452][ T310] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.536001][ T5854] SET target dimension over the limit! [ 70.827976][ T5791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.905240][ T5890] __nla_validate_parse: 275 callbacks suppressed [ 70.905255][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 70.929351][ T5887] Cannot find add_set index 0 as target [ 71.184593][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'. [ 71.213456][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'. [ 71.358922][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.780'. [ 71.378073][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.780'. [ 71.379229][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.781'. [ 71.390572][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.780'. [ 71.434710][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.780'. [ 71.462993][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.780'. [ 71.474408][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.780'. [ 71.802846][ T5975] batadv_slave_1: entered promiscuous mode [ 71.821461][ T5974] batadv_slave_1: left promiscuous mode [ 72.444202][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.481447][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.513334][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.611458][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.642991][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.667802][ T5996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.694113][ T5996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.738885][ T5996] veth1_macvtap: left promiscuous mode [ 72.758149][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 72.758165][ T28] audit: type=1400 audit(1781144197.149:1057): avc: denied { name_bind } for pid=6016 comm="syz.0.811" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 72.785817][ T5996] veth0_macvtap: left promiscuous mode [ 72.792078][ T6017] xt_hashlimit: size too large, truncated to 1048576 [ 72.806842][ T5996] veth0_macvtap: entered promiscuous mode [ 72.831053][ T5996] veth1_macvtap: entered promiscuous mode [ 72.840652][ T5996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.855868][ T6021] SET target dimension over the limit! [ 72.866266][ T5996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.890232][ T5996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.909836][ T5996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.920589][ T5996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.936331][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.952816][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.959918][ T4189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.974500][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.981610][ T4189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.008057][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016922][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045329][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.058615][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.075704][ T36] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 73.085517][ T36] bond1: (slave veth3): making interface the new active one [ 73.105997][ T36] bond1: active interface up! [ 73.200253][ T6049] netlink: 'syz.0.824': attribute type 3 has an invalid length. [ 73.209110][ T6049] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 73.218466][ T6047] SET target dimension over the limit! [ 73.994412][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.002604][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.012446][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.036012][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.043955][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.054002][ T6126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.064480][ T6126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.076837][ T6126] veth1_vlan: left promiscuous mode [ 74.082658][ T6126] veth0_vlan: left promiscuous mode [ 74.088544][ T6126] veth0_vlan: entered promiscuous mode [ 74.095751][ T6126] veth1_vlan: entered promiscuous mode [ 74.104110][ T6126] veth1_macvtap: left promiscuous mode [ 74.110245][ T6126] veth0_macvtap: left promiscuous mode [ 74.116253][ T6126] veth0_macvtap: entered promiscuous mode [ 74.122798][ T6126] veth1_macvtap: entered promiscuous mode [ 74.131573][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.139940][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.148730][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.157366][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.170538][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.177644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.186686][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.193797][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.226207][ T4127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.240045][ T4127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252244][ T4127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.261719][ T4127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.810946][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.908990][ T28] audit: type=1400 audit(1781144199.299:1058): avc: denied { watch_reads } for pid=6178 comm="syz.3.875" path="/bus" dev="sysfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 75.054270][ T28] audit: type=1400 audit(1781144199.439:1059): avc: denied { setopt } for pid=6134 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.300903][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.308049][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.561212][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.575698][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.594242][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.648692][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.657612][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.668632][ T6206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.681100][ T6206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.714895][ T6206] veth1_vlan: left promiscuous mode [ 75.729711][ T6206] veth0_vlan: left promiscuous mode [ 75.743659][ T6206] veth0_vlan: entered promiscuous mode [ 75.759933][ T6206] veth1_vlan: entered promiscuous mode [ 75.778181][ T6206] veth1_macvtap: left promiscuous mode [ 75.795558][ T6206] veth0_macvtap: left promiscuous mode [ 75.803079][ T6206] veth0_macvtap: entered promiscuous mode [ 75.815866][ T6206] veth1_macvtap: entered promiscuous mode [ 75.838523][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.848347][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.868273][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.877072][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.916771][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.923846][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.948437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.955530][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.020569][ T28] audit: type=1400 audit(1781144200.409:1060): avc: denied { read } for pid=6218 comm="syz.0.891" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.046698][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.055856][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.066971][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.075746][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.096766][ T6222] __nla_validate_parse: 139 callbacks suppressed [ 76.096780][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 76.985141][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 77.242969][ T28] audit: type=1400 audit(1781144201.629:1061): avc: denied { setopt } for pid=6270 comm="syz.5.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.569593][ T6296] netlink: 2024 bytes leftover after parsing attributes in process `syz.2.920'. [ 77.578961][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'. [ 77.860454][ T6294] bridge0: port 3(syz_tun) entered blocking state [ 77.899812][ T6294] bridge0: port 3(syz_tun) entered disabled state [ 77.911307][ T6294] syz_tun: entered allmulticast mode [ 77.917383][ T6294] syz_tun: entered promiscuous mode [ 77.931573][ T6294] bridge0: port 3(syz_tun) entered blocking state [ 77.938050][ T6294] bridge0: port 3(syz_tun) entered forwarding state [ 78.049119][ T6311] netlink: 276 bytes leftover after parsing attributes in process `syz.1.930'. [ 78.065758][ T6311] netlink: 276 bytes leftover after parsing attributes in process `syz.1.930'. [ 79.469339][ T28] audit: type=1400 audit(1781144203.849:1062): avc: denied { read } for pid=6356 comm="syz.2.947" path="socket:[12026]" dev="sockfs" ino=12026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.878864][ T28] audit: type=1400 audit(1781144204.269:1063): avc: denied { read } for pid=6395 comm="syz.0.971" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.582826][ T6426] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 80.904414][ T6453] netlink: 'syz.2.985': attribute type 3 has an invalid length. [ 81.008343][ T6453] netlink: 'syz.2.985': attribute type 7 has an invalid length. [ 81.016553][ T6453] netlink: 198320 bytes leftover after parsing attributes in process `syz.2.985'. [ 81.090521][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 81.131023][ T28] audit: type=1400 audit(1781144205.519:1064): avc: denied { write } for pid=6469 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 81.199185][ T6399] ================================================================== [ 81.207309][ T6399] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 81.214289][ T6399] [ 81.216629][ T6399] read-write to 0xffff88812558c064 of 4 bytes by task 6390 on cpu 1: [ 81.224715][ T6399] fifo_open+0x17f/0x5d0 [ 81.228994][ T6399] do_dentry_open+0x4be/0xa90 [ 81.233695][ T6399] vfs_open+0x37/0x1e0 [ 81.237797][ T6399] path_openat+0x1b70/0x2050 [ 81.242432][ T6399] do_file_open+0x16c/0x290 [ 81.246973][ T6399] do_sys_openat2+0x94/0x130 [ 81.251600][ T6399] __se_sys_openat2+0x193/0x1f0 [ 81.256478][ T6399] __x64_sys_openat2+0x55/0x70 [ 81.261263][ T6399] x64_sys_call+0x2170/0x3020 [ 81.265968][ T6399] do_syscall_64+0x12c/0x3b0 [ 81.270599][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.276510][ T6399] [ 81.278853][ T6399] read to 0xffff88812558c064 of 4 bytes by task 6399 on cpu 0: [ 81.286415][ T6399] wait_for_partner+0x117/0x1e0 [ 81.291308][ T6399] fifo_open+0x462/0x5d0 [ 81.295595][ T6399] do_dentry_open+0x4be/0xa90 [ 81.300307][ T6399] vfs_open+0x37/0x1e0 [ 81.304397][ T6399] path_openat+0x1b70/0x2050 [ 81.309022][ T6399] do_file_open+0x16c/0x290 [ 81.313550][ T6399] do_sys_openat2+0x94/0x130 [ 81.318163][ T6399] __x64_sys_openat+0xf2/0x120 [ 81.322944][ T6399] x64_sys_call+0x1e39/0x3020 [ 81.327641][ T6399] do_syscall_64+0x12c/0x3b0 [ 81.332283][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.338228][ T6399] [ 81.340572][ T6399] value changed: 0x00000002 -> 0x00000001 [ 81.346303][ T6399] [ 81.348655][ T6399] Reported by Kernel Concurrency Sanitizer on: [ 81.354862][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.5.957 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.364083][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.374156][ T6399] ================================================================== [ 84.905130][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!