last executing test programs: 12.145276639s ago: executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x20, 0x0, 0xffffffffffffffff, @link_id, r0}, 0x20) 12.13511556s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x200258, &(0x7f00000001c0), 0xfd, 0x467, &(0x7f0000001f80)="$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") 12.106615954s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x3, 0x1800, 0x10000) pread64(r1, &(0x7f0000004180)=""/4096, 0x1000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000001c0)={&(0x7f00000003c0)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000180)="57e6e32083a328c2da3964066135e463f922081ae50887ede09da114c1daa077f9611f8aa81d", 0x26}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f0000000300)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4f3e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d", 0x8d}, {&(0x7f0000000540)="a840c8a67da22f1b2c4e068bb1ad9c499f093b4480b55eb7b9408f5400cc74932ab986ca937640a84378eb6446626516e84b0055936bb61fac109e2624e86903d729b0b10b4f16db7da1fa3aaa808fe333de0c9316c2412cb9ed2d604f8b3fa52416302221487c294ae9dc54783573eb5e7c1027fc39fa60c39afee14fb7cf3e6ef0041470dfd6a4a356a1d7e20a437bcadc7f0b5afa9f9d68bccd88", 0x9c}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ac151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xfec7}, {&(0x7f0000000700)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254a30d1e53084dd7f6b7114fa3825fcbae9443ec15fb31bca97a87824d4bc8b632cf971bfb523a", 0x9a}], 0x6, &(0x7f0000000840)="a6d462c399e20d9d7ab19933a9b3d0e1d617be45eb50440e1e51f20cd773cd1b34e2669a511f6292d81a777376560dc1daae580d2419af271bdd485f32ddaa3679178bcbe6ff6f5d5d758535afbe2a930342eaa16108a32d9d31fbfe8bf4d89784440c3ff3fef2f998aebc9634", 0x6d}, 0x80) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 11.923546113s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mlockall(0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x10) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r2 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pread64(r4, &(0x7f0000000000)=""/217, 0xd9, 0x7fffffffffffffff) pread64(r3, &(0x7f0000000480)=""/165, 0xa5, 0x6312) faccessat(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000", 0x51}, {&(0x7f00000000c0)="530aed8e43f8c8ba2709a2423f0da8c5703353df350da5", 0x17}, {&(0x7f0000000200)}], 0x3) 11.312102016s ago: executing program 4: io_setup(0x9, &(0x7f0000000b80)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c00fc00", @ANYRES16=0x0, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioperm(0x0, 0x9, 0x3) set_mempolicy(0xc000, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4040, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000003180)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000006c0)=@newtaction={0x1ac, 0x30, 0x9, 0x0, 0x0, {}, [{0x198, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}, @m_sample={0x164, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0xfffffffffffffeef}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4}}, @TCA_SAMPLE_PARMS={0x18}]}, {0xfd, 0x6, "434d333c31cc18557330f317dac1a6285bce25df31dd4ed695d21bb1524b21b05fc68fd28acc3d6e00de59d97164069be0b28d1eb03383c3125b7476bfe727eba0be36bd82d8054e2d0d5c50bcb983cded342263b9f51128842b785549a754ec21f9c94317cb8120c80e8fbbb3ffbc4270a570334579d48f66041f055bc1aac13ca7ce5587c5630dee29ecff4f77869f6be4d89a0ec645f3e831d4905d52f728348de413f80695d853af9aa80ad93e6fdb2e0d82fe261c9f8478990d028b699eecc1298f65608dbae0bb34a394ea0533a10af16e1d2a91c5173de7af4570d67c96db37dcecce7d65c944be76865907fa2a0ce1486bec6fdf3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) fcntl$setstatus(r1, 0x4, 0x2000) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = gettid() tkill(r4, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) 11.233533928s ago: executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) fcntl$setstatus(r0, 0x4, 0x400) 11.22253199s ago: executing program 2: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) splice(r2, 0x0, r1, 0x0, 0x7e0c000000000000, 0x0) 11.032952998s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000000000000850000008800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x7, &(0x7f0000000300)=""/192, 0x0, 0x10}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1c}, {0x6}]}, 0x10) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x40000c1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x81, 0x8207, 0x64, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x7800, 0x3c40, 0xa6d, 0xfffffff7}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018180000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000eb51b60c9138a7ec3823006de400000000b7000000000000008500001a0ce6ff00ce00000000000000958000000000a1726bdb0000000000000000000000000200227def3d6d5f03fa"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x50, &(0x7f0000000400)=""/80, 0x40f00, 0x0, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000000540)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x8000, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r3, r4, r4], &(0x7f0000000600)=[{0x2, 0x2, 0x9, 0x2}, {0x3, 0x4, 0x1, 0x5}, {0x3, 0x2, 0x6, 0xb}, {0x1, 0x1, 0x9, 0xc}], 0x10, 0x9d}, 0x90) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendto$packet(r6, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x14}, {0x2d}, {0x6}]}) socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$packet(r3, &(0x7f0000000040), &(0x7f0000000180)=0x14) ioctl$KDADDIO(r4, 0x4b34, 0xfffffffffffffff7) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x2004) 10.179136507s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_lru_activate\x00', r1}, 0x10) io_destroy(r2) 10.085077371s ago: executing program 4: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666df998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 9.996087164s ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) fcntl$setstatus(r0, 0x4, 0x400) 9.95621741s ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r5, 0x381b, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 1.446534887s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000000c0), 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0100001000130100000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x14c}}, 0x0) 1.329403436s ago: executing program 1: r0 = open(&(0x7f0000000080)='./file1\x00', 0x163142, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000480), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.113201469s ago: executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 1.076853444s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97000fc82900fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 913.847279ms ago: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0xac}, {0x6}]}, 0x10) r2 = dup2(r0, r0) write$P9_ROPEN(r2, 0x0, 0x0) 879.663845ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffa7, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf25040000002b00070073797374656d5f753a6f626a6563745f723a7761746368646f675f6465766963655f743a7330000008000400e00000012900070073797374656d5f753a6f626a6563745f723a7574656d707465725f657865635f743a73300000000014000300fc00"/130], 0x88}, 0x1, 0x0, 0x0, 0x1000}, 0x40) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0xfffffffffffffffe) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103}, 0x20) sendmsg$inet6(r7, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000004000000400000000091745a984853d8322951fb7fa9ec6b41a9f8eb132c1df75d995831b25066d2b40f70da5586bdcf3ae79a4baf02543bd0a14693077b4292e6506a556e9ce45ebe2b50aba61388fd9b9ea316e92e966ad0597f7e3f9e35d146380fab803802f13d9c1795f278d2080d8922228"], 0x18}, 0x0) mlockall(0x1) 464.642088ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x2e, 0x4038, 0x0, @prog_id}, 0x20) 405.716278ms ago: executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000580), 0x4) 354.989936ms ago: executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x0, {{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x10000000005}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x376b, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000700210061610000050092000000000034002280040000801c000080080002000800000008000400ffff0000080002009400000004000080040000800400008004"], 0x58}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x1f, 0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="4600030007"], 0xd) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0x0, 0x0, &(0x7f00000000c0)) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 342.088987ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) 304.991553ms ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 285.969116ms ago: executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc02c5341, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc08c5335, &(0x7f0000000180)) tkill(r0, 0x7) 252.664811ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 245.605692ms ago: executing program 0: r0 = io_uring_setup(0x30d3, &(0x7f00000002c0)) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 173.037983ms ago: executing program 1: syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x80) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x800000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x8, 0x4, [@local]}]}}}], 0x18}}], 0x23, 0x0) socket(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) lchown(&(0x7f0000000100)='./file0\x00', r7, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x15) r8 = creat(&(0x7f0000000280)='./file1\x00', 0x0) sendmmsg$unix(r3, &(0x7f0000000340)=[{{&(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000480)="55a5c3adb008a599a69afb189ab163e4bd9496fd180aa2dc4cf7b3c453185a4be105d2c1a27ddf21d4623c924cf1b054c702bfb4fefcb8db626c5b8f086672c8a187612db3fbcff15e080a31fcb7ed0f0b675f0b7dd593e34f8eeda958aef6d29447323d29c1f06ca393eb31dd65b0bb8b35e1400d48fced29d5dd556e3190b6581ebe59c7fc7ab583ac800ec958c12df551dd5c95b07e13003c7a2b101faf4e9c18bbc0de1734bdb6463b81ca70c0f0051e43d36553045e0c2cfc13282acf0b86b106f91c20db6b03b60f1b8a64eaabaf687b5aca", 0xd5}, {&(0x7f0000001740)="c2fe2980bd92a4a54d03e3f776956080ce9107a9d1cc551fe1b5c349a3e47abcb5bf76a395df0bb6307dfe6e13985d5677d4c53cae87e4678c82282abdcc8aaa620ad0cd8394939ec6e1ebbef8357fa282e2d83667f173906273ced44a9bb2868f74a4d98d46dcbd286826ef8348a51d74dd7e59568d708d0844b684024e080244a176ba4af838c88681a9cabb17c92ff514cba262b2867b135042711c064810583e0c40e856d20cb8a3828f164bc9cbcb25dfa3f75c21d776b64c1d079cd007a67062dc48cf945a4098778cc7220653d4e63b7b11aa0099e1ddb87fa7872ec9236330d6d16217a9d0b93a5edda5c98dc5fb5d9863cc4772925c74406bf67d8e3de94fa1fe01a386809742809a5b975ce67fca2e470aea68a0332489e6403ce0b609fa94f288e4fdd27b3303539865e6d363ae6e3af87f3c202bb223a4235661bcd56c2205a7e22470b19cff3b953a7b5378d5e9c7d76c486b9072496fb6a4bb35eb27ea4fb94f0870917340872e557db8d4052e10a99ff5e3ff7b9badf0c74b4e197064572ce21551b6f5bf299cf5a2fe5d3c281d2eb5cd5e8399b46c9863c0e3b968e4fcae938b4ed4f3bf513ddbab4ceb8afef13d1ed5cb6ca17f48f1ae35265a2d4616bffda939a46948ecf9fbd911d76c1ac958dafbba4c164d20aa7194417d3fe972e43f47cb1f06796f142ac1b5544195868ced4c8a11c6825bcbce9f6b1a6a8f281a246631ec2370ba21792a0f4bb2a8632bf7f463dc2df2ffae5cd3d6118feadd95a7032461113bbda4f6831c37d36a55e38e0241a5e08608b2a491e2e68bd93d457e31421948d3ff0f270c70d760d10cb0574aa0cb7c4c2cb0dcfd797cf8937b6b7cba4c4e87e9decf36724d3c94f9b6a5d831bd33da162402eb0b3d2f779a0d1c5fcf72e16d8f340b473f2014551fec3c946f987ae1b28bb44657adce2abfbcb1cd7cae4a4292e9eb3ae5a3bbf0cfd5703ff5ff1ca93e5a03c36a20f1c41845cdfb473df25b24c8ed0f2213a4b384d3864d06eeef286c97f4fb407b8791b7120220617d6316d164e9da66a90d20a19bf85f52980e912380b8248300c2952aec5998a5ef0da0ddce249699c44abe61eb4af19a1c7d092b0d8b28209a7228fb77f786378ddb69f414050230ba118da194dd2e88e0dce0b9c2ec6e1ae64d0ea5cd6c8d5fbb7c04bd2cd23f6a8d3f7fefa584b8118eb75ab3c97c9e65f5c0795ed2b036d7e2e24c17a8c30dc27d43aa3f9d66d41dee70d86e291bb0ec7b47d187829aa2aaacf0372eae89e9be6eec9db1938d5880fa250511b28a6c03158d365ac7ce61052134791c48c62f9ad082b8f19729f9380c2194b1488da770d0cba53f882579af87725c316db0817c3f251fd4c1e4c3df47b98e09158f395d3b84090bb1b69c9fbce3ae52088c97fa9db7afafe5c8cf7fe51618826ac7aabe1f12f21c502f84ae278bcde2605c63716e8ac186670b2e6412918ce9cf7d5abcf4f290d521e8f32a3f86c5f624096439f7078cf25352f34084a328899e869a44aef9fbff85d425faa8e75650cdedae236f27e39531bbb9177082fe5f88fb71aa84f7cea709c9ebe9fdb22715d543a7aeb1a868dc8acaa59ab40fd44bc50497e4d30c2e88d54469f97effac96121f9fcd244fb2266a119de4508c7740e0531bcca5f9c5daf611bf9b9a42f80521da97dddb765e430a1e1801d09d81a5cd24c3a916c915345d13e34687940a73817f00f4ac65c55ce5615636e36189813458bbbeabb6c02cf021b435c1b448c2155ccf5a7291a4f547452535199d9639064fe445c9c8776c60b3447ec927a9016ea4ad4e7910e2c88d8f2483cad0c928e524c7846232a3065463536c566db654d6de9f6e61a777645c6fefe21a67f35ceb1f49e0c188be9ff573b370a49a758c7379ec4451ce9b96f8e527bd08390bd709f171aee60452d0eec961a925115fcd841f9536f54359baf2fa64076606dd35a0fd634120d9a3dfd3110133751e03e951c73552f661aec26604cd4ad55fb96f828039851a33f47f92f7705860544aa4121fbda90c24e86a5fae224d52f5f6c282bf3f8d9e54d431f441f6fbe31db42969dbe641edc108b39b3130d1b65f03338f316b7b3c7dec47f7870b03271b8f380a1d1729aa486753ba49a2af5bc6c6fb4d8260e4e7a8ec6bc3a84a476992badeff35e9b4c781ba0e955aec519f5ed8f18f16147e191f4f6bed063eabf6270237d867a106a9810764eb17439a26e477cbe4103cdbf26bb3281af80facc5c8b9fbe9831ae6987138a467c4f39887bd1ddf541e370c5644ebebc67c934e48d51c6c336c62df39a78abadb1d2d733ab2fa2f4adfdc892986187ba2e525a38e2cfd013e05375a48adcbf632c75285d79da7a26fec0be34cf16134978bfe76322caf865d31a4a9adfec8253b4b0fe0da5fb4d39f84ca42a0daccf2344a971f007a0acb05296df03506315ffb9adbab0ab7697a2d01bfba4d1b49def7052aafd163f615532eff90caeea35658946c5c8f9e5b708b26e9bd2370235d6579e43cf154cce7d6e45f3c5a45ecf689dca91be4eb388802c3df007dddb5172279a073e6a9d15a718f0bc1e3df7c34cc443d220d7fa8368f93254cbc6aaef7869f4d044f6ea78c28b46aae6d9660fb6d402d284a5c02bf4bcdc8e3af10dd9957ac43bdc030bf8c84016cb01c380c787bea005e1f12fe0290fbf1c412dcadde1d2f8984e1f007d10eea4d3e31a0ea74ea92c73f0b8189e92188e5f9e3074dc06ae537f6204c291b1b5c305db1e7885919be4806b03d03b877cedf8aadffceb7ef9cf434f13a2c39f234bac085fa95beec9852fe26ddafaac9686a8ecad8e60570fdcd50c90ea1ba416353b51bfcdeb0e2c54f000e8ad278968db41ac3be6e364ec9edccb0da436e8f48cff5e10cda830c87c73632e8164ea71671fd912f77e03880d88d399914a264e904cdc186905048534a57d3e9dd608bdc0b473fcf2673bcd847643d9db7b354a7bcd09523be6840284ea8ca156af40f88985257590224a4b88797bb043a02f534829064691e73f443fde31b99224ea3998086d06ca3fa7fba96f6852149d66932019b46194199f660c9b06858bcebe14ac63fa9e4c8056df93e8d07c47d736c3c6e7e6a1cacb4855d7ebeb43e2c7e39536987a19dd34ed5ad0d91dcccaa3725daad183237b9a9d41c0f2fe6ec6a7718cfbde4469e7538a4123ce12b24dfeeb001c3b33c95cf18ccc283a4ed71b110a74d469fa67c30753be03b822dbd102faa3a3661188be4a9815da9c72c65ade2f25a8b70d0aefe0fcda4a6c7b03cb41b771406a704c28e727b132be345a21342a323a452e80b64885573021cbac9ff318e8a6dd536e2257f082934d703990d42da3e64e041b98123e2256440fd97fd40d96fc5f39743508c014ed36c82f48d3dc6d435ff6d1a8141ec94b7e38decf393deae5a63654ca1703ebcdca4752e58d9698f7ebd05f410c7384364191f0fe5e49f4cf933d609e036459b2288e90a84c840351f1e8e48b50361c91a3eef73cbb180a50486bfae154f39d50b2ca4dace3a32169ec0f5e016d7d95ea0f020edbd7861650def85301260ca6c514762b50d017695faa6bb895639fe04b9a3f1178ccd6dd7abf8872ed64a3484e7ebc0317688fe89c5e361e643d34576919b02589fa017ad1a106a666ceaa820a3cda560e77d84e1a3d17feac7ff6f4864f4f1e65d55a5f7d9bf4fc7bc464da57311a68d4195be42a53094a5197448f5f6e5b146079d8baa3446ec1c3c8eaaa95b972913e5a4564a6d56230e24880cd9db0c059796f227cba2f786fe6bc99437ec8acd6a4c7f70e9f699328cbf5e48862119412ce2ac81266014e1c35d51ef87ec2f2f8904f56d389e508cd82e84eecd33de8d240c79fdc2c58487adbba9475eac35d711c16e4a002bd4f363a99409d0cc914eeeb0376c34b1e5d936790c38a20e0949dcd99ec227a5b6d44e35805a08f9590ce0287a3ee51364c2673edc977dc26de21e96c520d65e4d955b7dacf74116c4b76a689b62aca2f81b1b9017ef55a678886cd0b770d59260aee09e11fde401cff1854f977e4795e0674f0394c1f2ed5265a3f704a3ec977f3c7f3df8278828a1cfb7bdebd0f4a4bdbc794e9bd1f2bc224b5f29faf7161a05f4ea2b0a3251710cd3dd2f5cb95df27118b2819f9c37bc20af19da3a15cb1d8a03ea86c13d9753a753cc9bdb0addbf2d7c580bc8877d5d24b34f6ebcebe507a1cd63e7407654c7e9c62ccadd64322c3694dc642fd2c239b6d21b62d24e33c2339f08eea83eff423922cba49f1da563912094d4e851e57441c0a6c81ac6ebf1b7daeafdb2509dbc2d182fc179ebbc5a7bc0b4847b1c7d91e36390a869af5d03a2ad786b9fa5b2bbb1e0adcf166a245c1efbababb682036eba9e85a59bb2016c97d831f369769045c66545e4321d7dc41791c141687d4e2c6484ff87c62c79ee506abd8902987b96de6af27064db4ee41fae13c9717c0f74e8d24540bb7595d806a4ff4c9411638ebf7bea0040a71227856b61d5d32ad61f176cba5bb43e5c2e715ce0b1f0e8002cae060c6e7f32ee8b6d52bf31d467b1a9fa3595625a1daf0e53d296cc54bd7d620f6bbaecfa661f2cf3bd0af191ead2ebf0fdabd02128d1894f45b9647008adcf3e4d690d8a9df02a48310ad283e02a8910a36f4a1589143f951de0f31d6e72ffb66da25349412700d37b383cec393ccdebb71c242fb2890ce754ee3873484f5b1e08700aa62c74e28b4f6921b3fe51e893c3a21c1a1696f94f82a540b4864e95bca84fbd12cf63e645ce513e2b0c84998fa33fe4a75ac2339865c7429b7177a83844ac79c5ac40deb1b7a89a207f5be878fd00b7913b3a9b7a7b2bbfc1b392d32b533ae1a367188df32134173ce9b8db162b4ba170153973d5650972d2b82ca5109dbc51dafcd33d96c15f7473e3d6529251fd10126cc96ec8ec8fb7595c8f5278b2f281324ec26ccacd20319e467aa0ae6e94b5e411812421dee91424e35bdebece2c08897e1a42a101c65900a8c5cd7e5828a42255bb7b2e33b8cc101b33d2dcdc3f4a54f24841bcee28a87b9acc97b205dc5f3f2f48c8ce366278b3410026931781fa8862debfa1c3b81d0b3581052d396b4259d9eea881943d115fb2418a0b5e674239c079271ae4568d919afa8f5563706a84fec11bc12fcc048ec8c8b2b2be65b8cf63b43df34ce9435e18025b0bc9ed152823b0e38b2a22483fd33a0dc926cc1622b69858972526e241c4214d71b1f9d693a4d3b06625149e8dcd2f7e415b107dbeedd9510597a671ef21e490290f24827e53eb24a7534a610dee79b4bc84c262eb6050e81ddbb6013468d17824bdf3adf6c827c810ca19b54301d5391b986fd55df638069082b3bc3ffb02734b7929e146e6ad8c9f82b2b74101d573d48ac7a8d611e128cded648c33c1c42e07723e996803019c1352ba7c65f9fddb026df2d6c65e5b3c86d828f362852cf1233fe7a22259eb2e045a282926b904c0539747f5e04a0437d98b66c1f18a3b512e7aa87dcb4d000f44fad873fb0399b1fcf8b7baacabfe9496f96bb93dca95b369cfe3956a58709c91e1855d8bad7320637cd394419d053b32f44bd64790bcced06b43e72db9afe8db3c65da688f59ddf6c16f0ba5f78b187eb86340aa1266bf22813fb7d7812172b6ccd942e267c91dd5d689ea2ebf319ddb50ed6be168d7f2b1bd3c539d26fccb63489a77b4c73bfdcc5f9e96150e561bea45e2569ffbddeb65663ae0ea97690d6c", 0x1000}], 0x2, &(0x7f0000000300), 0x0, 0x8030}}], 0x1, 0x10) write$eventfd(r8, &(0x7f0000000080), 0xfffffe5e) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder-control\x00', 0x2, 0x0) 170.882684ms ago: executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='+', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)='4', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="b2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, &(0x7f0000001c80)=ANY=[], 0xc0}}], 0x6, 0x400c404) sendto$inet6(r4, &(0x7f0000000000)="0f", 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$isdn(0x22, 0x2, 0x22) r7 = socket$isdn(0x22, 0x2, 0x25) dup3(r7, r6, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000180)="ee45d7b46ea9826dd1781f9a18bf40f9f200554157f7d6e3451407aaaa79505949c8c71d2c43a8126ae5e4621d665987110f9bb0a3633d8aea9022a4d3623e1756206eaabe79", 0x46) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',:\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000018000000100030800c000180087a5a76b300000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 99.699015ms ago: executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x4c, r1, 0x303, 0x0, 0x0, {0xa, 0x6}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4, 0x2}]}, 0x4c}}, 0x0) 0s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x2e, 0x4038, 0x0, @prog_id}, 0x20) kernel console output (not intermixed with test programs): lave_0): Enslaving as an active interface with an up link [ 27.360482][ T3100] hsr_slave_0: entered promiscuous mode [ 27.366558][ T3100] hsr_slave_1: entered promiscuous mode [ 27.378270][ T3112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.388116][ T3101] team0: Port device team_slave_0 added [ 27.407706][ T3101] team0: Port device team_slave_1 added [ 27.439382][ T3112] team0: Port device team_slave_0 added [ 27.449456][ T3111] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.456594][ T3111] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.463801][ T3111] bridge_slave_0: entered allmulticast mode [ 27.470275][ T3111] bridge_slave_0: entered promiscuous mode [ 27.481192][ T3101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.488159][ T3101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.514120][ T3101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.529311][ T3112] team0: Port device team_slave_1 added [ 27.539285][ T3111] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.546526][ T3111] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.553764][ T3111] bridge_slave_1: entered allmulticast mode [ 27.560306][ T3111] bridge_slave_1: entered promiscuous mode [ 27.577657][ T3101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.584598][ T3101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.610556][ T3101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.627840][ T3118] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.634872][ T3118] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.641988][ T3118] bridge_slave_0: entered allmulticast mode [ 27.648434][ T3118] bridge_slave_0: entered promiscuous mode [ 27.657035][ T3118] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.664174][ T3118] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.671398][ T3118] bridge_slave_1: entered allmulticast mode [ 27.677855][ T3118] bridge_slave_1: entered promiscuous mode [ 27.684958][ T3111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.701486][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.708436][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.734315][ T3112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.750353][ T3111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.765651][ T3118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.789628][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.796599][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.822726][ T3112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.850082][ T3118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.867673][ T3111] team0: Port device team_slave_0 added [ 27.879008][ T3101] hsr_slave_0: entered promiscuous mode [ 27.884921][ T3101] hsr_slave_1: entered promiscuous mode [ 27.890994][ T3101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.899339][ T3101] Cannot create hsr debugfs directory [ 27.910094][ T3111] team0: Port device team_slave_1 added [ 27.945293][ T3118] team0: Port device team_slave_0 added [ 27.952931][ T3112] hsr_slave_0: entered promiscuous mode [ 27.959108][ T3112] hsr_slave_1: entered promiscuous mode [ 27.964848][ T3112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.972434][ T3112] Cannot create hsr debugfs directory [ 27.978819][ T3111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.985750][ T3111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.011868][ T3111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.023188][ T3118] team0: Port device team_slave_1 added [ 28.038799][ T3111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.045785][ T3111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.071889][ T3111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.090408][ T3118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.097402][ T3118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.123335][ T3118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.147937][ T3118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.154945][ T3118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.180899][ T3118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.216764][ T3111] hsr_slave_0: entered promiscuous mode [ 28.222920][ T3111] hsr_slave_1: entered promiscuous mode [ 28.228843][ T3111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.236434][ T3111] Cannot create hsr debugfs directory [ 28.250623][ T3100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.258862][ T3100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.269577][ T3100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.278715][ T3100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.329020][ T3118] hsr_slave_0: entered promiscuous mode [ 28.334971][ T3118] hsr_slave_1: entered promiscuous mode [ 28.340964][ T3118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.348645][ T3118] Cannot create hsr debugfs directory [ 28.415541][ T3101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.423888][ T3101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.443895][ T3101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.466837][ T3101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.501810][ T3112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.510113][ T3112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.522889][ T3112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.533572][ T3112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.557172][ T3100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.571090][ T3111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.579993][ T3111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.588730][ T3111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.597782][ T3111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.623204][ T3118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.637260][ T3118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.651555][ T3100] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.659327][ T3118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.668086][ T3118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.689070][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.696271][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.726255][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.733470][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.767009][ T3112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.784122][ T3111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.801046][ T3100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.811456][ T3100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.832849][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.851738][ T3111] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.860223][ T3112] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.871818][ T3101] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.886030][ T908] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.893100][ T908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.902920][ T908] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.910064][ T908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.929974][ T908] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.937124][ T908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.947686][ T908] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.954718][ T908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.970014][ T908] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.977247][ T908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.985680][ T908] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.992853][ T908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.005097][ T3118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.028987][ T3100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.043942][ T3111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.054556][ T3111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.076444][ T3118] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.111984][ T3101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.127366][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.134446][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.150932][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.158027][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.189782][ T3111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.246018][ T3101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.275432][ T3112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.291890][ T3118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.330126][ T3100] veth0_vlan: entered promiscuous mode [ 29.352022][ T3100] veth1_vlan: entered promiscuous mode [ 29.394372][ T3100] veth0_macvtap: entered promiscuous mode [ 29.420226][ T3100] veth1_macvtap: entered promiscuous mode [ 29.430105][ T3118] veth0_vlan: entered promiscuous mode [ 29.447266][ T3111] veth0_vlan: entered promiscuous mode [ 29.459120][ T3100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.477180][ T3118] veth1_vlan: entered promiscuous mode [ 29.485289][ T3100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.502337][ T3100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.511091][ T3100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.519894][ T3100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.528671][ T3100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.539351][ T3111] veth1_vlan: entered promiscuous mode [ 29.561627][ T3112] veth0_vlan: entered promiscuous mode [ 29.579761][ T3111] veth0_macvtap: entered promiscuous mode [ 29.588541][ T3112] veth1_vlan: entered promiscuous mode [ 29.599804][ T3118] veth0_macvtap: entered promiscuous mode [ 29.609566][ T3101] veth0_vlan: entered promiscuous mode [ 29.622609][ T3111] veth1_macvtap: entered promiscuous mode [ 29.630852][ T3118] veth1_macvtap: entered promiscuous mode [ 29.647182][ T3101] veth1_vlan: entered promiscuous mode [ 29.653458][ T3111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.664202][ T3111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.675478][ T3111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.685294][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.695763][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.705760][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.716288][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.732421][ T3118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.744759][ T3111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.755221][ T3111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.766216][ T3111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.789607][ T3112] veth0_macvtap: entered promiscuous mode [ 29.800592][ T3111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.809400][ T3111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.818233][ T3111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.826949][ T3111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.840859][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.851378][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.861328][ T3118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.871767][ T3118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.882337][ T3118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.891921][ T3112] veth1_macvtap: entered promiscuous mode [ 29.904675][ T3118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.913560][ T3118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.922309][ T3118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.931033][ T3118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.945157][ T3249] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.952475][ T3249] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.967995][ T3101] veth0_macvtap: entered promiscuous mode [ 29.978893][ T3252] bridge_slave_1: left allmulticast mode [ 29.984553][ T3252] bridge_slave_1: left promiscuous mode [ 29.990343][ T3252] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.998645][ T3252] bridge_slave_0: left allmulticast mode [ 30.004302][ T3252] bridge_slave_0: left promiscuous mode [ 30.009990][ T3252] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.023140][ T3249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 30.071575][ T3101] veth1_macvtap: entered promiscuous mode [ 30.073125][ T3249] loop1: detected capacity change from 0 to 256 [ 30.080649][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.094220][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.104057][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.114509][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.124410][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.134870][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.145655][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.161591][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.172088][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.181921][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.192391][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.202310][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.212897][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.222736][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.233243][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.244979][ T3101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.246088][ T3071] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.253871][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.272368][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.282285][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.292721][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.302570][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.313111][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.323705][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.343635][ T3112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.352393][ T3112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.361123][ T3112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.370204][ T3112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.385789][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.388658][ T3259] loop0: detected capacity change from 0 to 256 [ 30.396477][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.407954][ T3259] ======================================================= [ 30.407954][ T3259] WARNING: The mand mount option has been deprecated and [ 30.407954][ T3259] and is ignored by this kernel. Remove the mand [ 30.407954][ T3259] option from the mount to silence this warning. [ 30.407954][ T3259] ======================================================= [ 30.412510][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.457874][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.467823][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.478262][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.488162][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.492364][ T3259] FAT-fs (loop0): Directory bread(block 64) failed [ 30.498575][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.502165][ T3101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.506416][ T3259] FAT-fs (loop0): Directory bread(block 65) failed [ 30.533844][ T3259] FAT-fs (loop0): Directory bread(block 66) failed [ 30.545103][ T3101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.553923][ T3101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.557184][ T3259] FAT-fs (loop0): Directory bread(block 67) failed [ 30.562837][ T3101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.569595][ T3259] FAT-fs (loop0): Directory bread(block 68) failed [ 30.578151][ T3101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.586097][ T3259] FAT-fs (loop0): Directory bread(block 69) failed [ 30.607563][ T3259] FAT-fs (loop0): Directory bread(block 70) failed [ 30.614885][ T3259] FAT-fs (loop0): Directory bread(block 71) failed [ 30.622648][ T3259] FAT-fs (loop0): Directory bread(block 72) failed [ 30.639201][ T3259] FAT-fs (loop0): Directory bread(block 73) failed [ 30.663282][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 30.663296][ T29] audit: type=1400 audit(1718449607.447:136): avc: denied { mount } for pid=3258 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.719926][ T29] audit: type=1400 audit(1718449607.507:137): avc: denied { create } for pid=3267 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.774920][ T29] audit: type=1400 audit(1718449607.507:138): avc: denied { getopt } for pid=3267 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.794904][ T29] audit: type=1400 audit(1718449607.537:139): avc: denied { unmount } for pid=3111 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.897947][ T3278] syz-executor.3 (3278) used greatest stack depth: 11392 bytes left [ 30.920313][ T29] audit: type=1400 audit(1718449607.697:140): avc: denied { write } for pid=3280 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.966682][ T29] audit: type=1400 audit(1718449607.747:141): avc: denied { create } for pid=3282 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.010513][ T29] audit: type=1400 audit(1718449607.757:142): avc: denied { ioctl } for pid=3282 comm="syz-executor.3" path="socket:[3913]" dev="sockfs" ino=3913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.098873][ T29] audit: type=1400 audit(1718449607.877:143): avc: denied { cpu } for pid=3288 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.166104][ T29] audit: type=1400 audit(1718449607.947:144): avc: denied { setopt } for pid=3291 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.185950][ T29] audit: type=1400 audit(1718449607.947:145): avc: denied { connect } for pid=3291 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.789652][ T3318] syz-executor.4 (3318) used greatest stack depth: 10344 bytes left [ 31.889508][ T3341] loop4: detected capacity change from 0 to 256 [ 31.909901][ T3341] FAT-fs (loop4): Directory bread(block 64) failed [ 31.916564][ T3341] FAT-fs (loop4): Directory bread(block 65) failed [ 31.923133][ T3341] FAT-fs (loop4): Directory bread(block 66) failed [ 31.930353][ T3341] FAT-fs (loop4): Directory bread(block 67) failed [ 31.937885][ T3341] FAT-fs (loop4): Directory bread(block 68) failed [ 31.944409][ T3341] FAT-fs (loop4): Directory bread(block 69) failed [ 31.951391][ T3341] FAT-fs (loop4): Directory bread(block 70) failed [ 31.957994][ T3341] FAT-fs (loop4): Directory bread(block 71) failed [ 31.962020][ T3346] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.2'. [ 31.964502][ T3341] FAT-fs (loop4): Directory bread(block 72) failed [ 31.981007][ T3341] FAT-fs (loop4): Directory bread(block 73) failed [ 31.989503][ T3292] syz-executor.0 (3292) used greatest stack depth: 10096 bytes left [ 32.206887][ T3379] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.2'. [ 32.583826][ T3419] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 32.595772][ T3419] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 33.028395][ T3377] syz-executor.3 (3377) used greatest stack depth: 9832 bytes left [ 33.120183][ T3435] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 33.130068][ T3435] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.146232][ T3435] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 33.185288][ T3441] loop4: detected capacity change from 0 to 512 [ 33.192867][ T3441] EXT4-fs: Ignoring removed bh option [ 33.203339][ T3441] EXT4-fs (loop4): 1 truncate cleaned up [ 33.207640][ T3442] loop3: detected capacity change from 0 to 2048 [ 33.216500][ T3441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.267169][ T3442] Alternate GPT is invalid, using primary GPT. [ 33.273423][ T3442] loop3: p1 p2 p3 [ 33.289523][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.289653][ T2782] Alternate GPT is invalid, using primary GPT. [ 33.304707][ T2782] loop3: p1 p2 p3 [ 33.454648][ T3474] loop0: detected capacity change from 0 to 512 [ 33.462389][ T3474] EXT4-fs: Ignoring removed bh option [ 33.470305][ T3474] EXT4-fs (loop0): 1 truncate cleaned up [ 33.476286][ T3474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.543849][ T3111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.975300][ T3502] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 33.983555][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 34.290805][ T3525] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 34.450144][ T3532] loop4: detected capacity change from 0 to 764 [ 34.458766][ T3532] iso9660: Unknown parameter '' [ 34.852414][ T3562] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 34.860924][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 35.747791][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 35.747838][ T29] audit: type=1400 audit(1718449612.537:215): avc: denied { write } for pid=3619 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.748110][ T3622] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 35.788765][ T3618] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 35.797871][ T3623] SELinux: Context Ž is not valid (left unmapped). [ 35.864141][ T3632] netlink: 703 bytes leftover after parsing attributes in process `syz-executor.4'. [ 36.781128][ T3660] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 36.830677][ T29] audit: type=1400 audit(1718449613.617:216): avc: denied { create } for pid=3663 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.851662][ T29] audit: type=1400 audit(1718449613.617:217): avc: denied { write } for pid=3663 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.895902][ T29] audit: type=1400 audit(1718449613.677:218): avc: denied { read } for pid=3665 comm="syz-executor.2" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.918863][ T29] audit: type=1400 audit(1718449613.677:219): avc: denied { open } for pid=3665 comm="syz-executor.2" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 36.943665][ T29] audit: type=1400 audit(1718449613.687:220): avc: denied { mount } for pid=3666 comm="syz-executor.4" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.966019][ T29] audit: type=1400 audit(1718449613.687:221): avc: denied { setattr } for pid=3666 comm="syz-executor.4" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.987997][ T29] audit: type=1400 audit(1718449613.707:222): avc: denied { unmount } for pid=3101 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.010162][ T29] audit: type=1400 audit(1718449613.777:223): avc: denied { mount } for pid=3665 comm="syz-executor.2" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 37.032125][ T29] audit: type=1400 audit(1718449613.777:224): avc: denied { remount } for pid=3665 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 37.098832][ T3678] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 37.105385][ T3678] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 37.114790][ T3678] hsr_slave_0: left promiscuous mode [ 37.121490][ T3678] hsr_slave_1: left promiscuous mode [ 37.346943][ T3692] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 37.355051][ T3692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 37.385061][ T3697] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 38.342877][ T3722] loop1: detected capacity change from 0 to 764 [ 38.356081][ T3722] Symlink component flag not implemented [ 38.363968][ T3722] Symlink component flag not implemented (101) [ 38.575516][ T3741] loop4: detected capacity change from 0 to 128 [ 38.589571][ T3740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.619381][ T3741] xt_connbytes: Forcing CT accounting to be enabled [ 38.631352][ T3741] Cannot find add_set index 0 as target [ 38.720824][ T3753] loop4: detected capacity change from 0 to 764 [ 38.731660][ T3752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 38.757703][ T3753] Symlink component flag not implemented [ 38.775624][ T3753] Symlink component flag not implemented (101) [ 38.818304][ T3761] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 38.842192][ T3761] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 38.850316][ T3761] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 38.864143][ T3131] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 38.864436][ T3761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.904653][ T3761] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 38.913732][ T3761] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 38.930357][ T3761] bond1 (unregistering): Released all slaves [ 39.320249][ T3787] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 [ 39.649264][ T3131] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 39.687934][ T3802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 39.842040][ T3807] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 39.861879][ T3807] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 39.869903][ T3807] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 39.883275][ T50] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 39.883591][ T3807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.914983][ T3807] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 39.923620][ T3807] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 39.933414][ T3805] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 39.938196][ T3807] bond1 (unregistering): Released all slaves [ 40.105547][ T3822] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 40.145817][ C1] hrtimer: interrupt took 31896 ns [ 40.201635][ T3829] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.214514][ T3829] loop1: detected capacity change from 0 to 256 [ 40.238470][ T50] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 40.267431][ T3449] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 40.332724][ T3851] mmap: syz-executor.4 (3851): VmData 45768704 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 40.360175][ T3853] loop0: detected capacity change from 0 to 128 [ 40.427601][ T3848] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 40.554295][ T3214] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 40.660250][ T3903] IPVS: set_ctl: invalid protocol: 103 172.20.20.57:20003 [ 41.101533][ T3937] loop2: detected capacity change from 0 to 764 [ 41.108931][ T3937] iso9660: Unknown parameter '' [ 41.124321][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 41.124334][ T29] audit: type=1326 audit(1718449617.907:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e59c15ea9 code=0x0 [ 41.176827][ T3942] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.198214][ T3944] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.225381][ T3946] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 41.233632][ T3946] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 41.241837][ T3946] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.523109][ T3955] cgroup: subsys name conflicts with all [ 41.545679][ T29] audit: type=1400 audit(1718449618.327:263): avc: denied { read } for pid=3959 comm="syz-executor.0" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.569169][ T29] audit: type=1400 audit(1718449618.327:264): avc: denied { open } for pid=3959 comm="syz-executor.0" path="/dev/rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.600328][ T29] audit: type=1400 audit(1718449618.337:265): avc: denied { ioctl } for pid=3959 comm="syz-executor.0" path="/dev/rtc0" dev="devtmpfs" ino=219 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.625747][ T29] audit: type=1400 audit(1718449618.337:266): avc: denied { ioctl } for pid=3959 comm="syz-executor.0" path="socket:[5946]" dev="sockfs" ino=5946 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.324573][ T29] audit: type=1400 audit(1718449619.107:267): avc: denied { setattr } for pid=3996 comm="syz-executor.1" name="001" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.389750][ T29] audit: type=1400 audit(1718449619.177:268): avc: denied { create } for pid=4000 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 42.407672][ T4003] loop2: detected capacity change from 0 to 512 [ 42.414061][ T29] audit: type=1400 audit(1718449619.197:269): avc: denied { setopt } for pid=4000 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 42.443597][ T29] audit: type=1400 audit(1718449619.227:270): avc: denied { map } for pid=4004 comm="syz-executor.1" path="socket:[5073]" dev="sockfs" ino=5073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.466960][ T29] audit: type=1400 audit(1718449619.227:271): avc: denied { read } for pid=4004 comm="syz-executor.1" path="socket:[5073]" dev="sockfs" ino=5073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.497308][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.516001][ T4003] ext4 filesystem being mounted at /root/syzkaller-testdir3951946529/syzkaller.6mbkNC/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.555214][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.636810][ T4026] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 42.680490][ T4030] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 42.713694][ T4033] cgroup: subsys name conflicts with all [ 42.729243][ T4041] loop2: detected capacity change from 0 to 512 [ 42.739420][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 42.763048][ T4030] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 42.767377][ T4041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.775867][ T4030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.784376][ T3214] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 42.802592][ T4041] ext4 filesystem being mounted at /root/syzkaller-testdir3951946529/syzkaller.6mbkNC/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.827242][ T4030] bond1 (unregistering): (slave batadv2): Removing an active aggregator [ 42.837098][ T4030] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 42.849686][ T4030] bond1 (unregistering): Released all slaves [ 42.868348][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.942023][ T4061] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 42.957648][ T4063] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 42.965797][ T4063] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 42.973906][ T4063] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.2'. [ 43.001323][ T4070] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 43.024025][ T4072] loop2: detected capacity change from 0 to 512 [ 43.033837][ T4072] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.046955][ T4072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.050937][ T4076] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (254) [ 43.059788][ T4072] EXT4-fs (loop2): 1 orphan inode deleted [ 43.071663][ T4072] EXT4-fs (loop2): 1 truncate cleaned up [ 43.078247][ T4072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.101755][ T4080] loop4: detected capacity change from 0 to 512 [ 43.117340][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.128827][ T4080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.141533][ T4080] ext4 filesystem being mounted at /root/syzkaller-testdir3123418080/syzkaller.I2wyUr/95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.163097][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.195974][ T4086] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 43.214875][ T4086] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 43.224546][ T4086] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 43.243177][ T50] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 43.254352][ T4086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.282699][ T4086] bond1 (unregistering): (slave batadv2): Removing an active aggregator [ 43.291532][ T4086] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 43.302310][ T4086] bond1 (unregistering): Released all slaves [ 43.312904][ T4095] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 43.395308][ T4105] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (254) [ 43.617697][ T4117] IPVS: set_ctl: invalid protocol: 103 172.20.20.57:20003 [ 43.641976][ T4121] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 43.767301][ T4131] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (254) [ 43.794584][ T4133] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 43.875467][ T4145] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 43.956599][ T4157] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 44.008955][ T4164] loop0: detected capacity change from 0 to 256 [ 44.020132][ T4164] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 44.030518][ T4164] tipc: Failed to obtain node identity [ 44.036049][ T4164] tipc: Enabling of bearer rejected, failed to enable media [ 44.559435][ T4196] loop2: detected capacity change from 0 to 512 [ 44.574066][ T4196] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 44.619468][ T3449] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 44.769702][ T4201] 9pnet_fd: Insufficient options for proto=fd [ 45.194983][ T4193] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 45.206358][ T4193] CPU: 0 PID: 4193 Comm: syz-executor.2 Not tainted 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 [ 45.216770][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.226855][ T4193] Call Trace: [ 45.230132][ T4193] [ 45.231968][ T4226] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 45.233392][ T4193] dump_stack_lvl+0xf2/0x150 [ 45.242687][ T4226] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 45.247217][ T4193] dump_stack+0x15/0x20 [ 45.247237][ T4193] dump_header+0x83/0x2d0 [ 45.257221][ T4226] Zero length message leads to an empty skb [ 45.260606][ T4193] oom_kill_process+0x33e/0x4c0 [ 45.275839][ T4193] out_of_memory+0x9af/0xbe0 [ 45.280512][ T4193] mem_cgroup_out_of_memory+0x13e/0x190 [ 45.286172][ T4193] try_charge_memcg+0x745/0xcd0 [ 45.291075][ T4193] ? _raw_spin_unlock+0x26/0x50 [ 45.295989][ T4193] ? radix_tree_lookup+0xf9/0x150 [ 45.301038][ T4193] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 45.307871][ T4193] __read_swap_cache_async+0x2b9/0x520 [ 45.313354][ T4193] swap_cluster_readahead+0x276/0x3f0 [ 45.318813][ T4193] swapin_readahead+0xe2/0x7a0 [ 45.323643][ T4193] ? __filemap_get_folio+0x420/0x5b0 [ 45.328989][ T4193] ? swap_cache_get_folio+0x6e/0x210 [ 45.334369][ T4193] do_swap_page+0x3bc/0x1840 [ 45.339005][ T4193] ? cgroup_rstat_updated+0x99/0x550 [ 45.344306][ T4193] ? __rcu_read_lock+0x36/0x50 [ 45.349067][ T4193] handle_mm_fault+0x809/0x2a80 [ 45.354057][ T4193] ? mas_walk+0x204/0x320 [ 45.358392][ T4193] exc_page_fault+0x3b9/0x650 [ 45.363065][ T4193] asm_exc_page_fault+0x26/0x30 [ 45.367980][ T4193] RIP: 0033:0x7f4e59c41263 [ 45.372400][ T4193] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 8e fc 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 45.392179][ T4193] RSP: 002b:00007fffdbdaa588 EFLAGS: 00010293 [ 45.398309][ T4193] RAX: 00000000fffffffa RBX: 00007f4e59d4cf80 RCX: 0000000000000000 [ 45.406264][ T4193] RDX: 00007fffdbdaa5a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.414267][ T4193] RBP: 00007f4e59d4e980 R08: 000000000a3c5246 R09: 7fffffffffffffff [ 45.422225][ T4193] R10: 0000000000000000 R11: 00007f4e59d23080 R12: 000000000000b0fc [ 45.430218][ T4193] R13: 00007f4e59d4d05c R14: 0000000000000fd2 R15: 00007f4e59d4e980 [ 45.438220][ T4193] [ 45.441331][ T4193] memory: usage 307200kB, limit 307200kB, failcnt 128 [ 45.448399][ T4193] memory+swap: usage 307680kB, limit 9007199254740988kB, failcnt 0 [ 45.456315][ T4193] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 45.463774][ T4193] Memory cgroup stats for /syz2: [ 45.464055][ T4193] cache 32768 [ 45.472286][ T4193] rss 0 [ 45.475265][ T4193] shmem 0 [ 45.478213][ T4193] mapped_file 0 [ 45.481713][ T4193] dirty 24576 [ 45.484986][ T4193] writeback 8192 [ 45.488545][ T4193] workingset_refault_anon 44 [ 45.493132][ T4193] workingset_refault_file 0 [ 45.497719][ T4193] swap 491520 [ 45.501160][ T4193] swapcached 24576 [ 45.504868][ T4193] pgpgin 3825 [ 45.508168][ T4193] pgpgout 3811 [ 45.511683][ T4193] pgfault 8528 [ 45.515049][ T4193] pgmajfault 8 [ 45.518434][ T4193] inactive_anon 16384 [ 45.522410][ T4193] active_anon 0 [ 45.524161][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 45.525882][ T4193] inactive_file 0 [ 45.525891][ T4193] active_file 32768 [ 45.525898][ T4193] unevictable 0 [ 45.525904][ T4193] hierarchical_memory_limit 314572800 [ 45.539236][ T4234] dummy0: entered promiscuous mode [ 45.542543][ T4193] hierarchical_memsw_limit 9223372036854771712 [ 45.562800][ T4193] total_cache 32768 [ 45.566901][ T4193] total_rss 0 [ 45.570302][ T4193] total_shmem 0 [ 45.573885][ T4193] total_mapped_file 0 [ 45.577932][ T4193] total_dirty 24576 [ 45.581782][ T4193] total_writeback 8192 [ 45.586090][ T4193] total_workingset_refault_anon 44 [ 45.591305][ T4193] total_workingset_refault_file 0 [ 45.596337][ T4193] total_swap 491520 [ 45.600284][ T4193] total_swapcached 24576 [ 45.604698][ T4193] total_pgpgin 3825 [ 45.608601][ T4193] total_pgpgout 3811 [ 45.612486][ T4193] total_pgfault 8528 [ 45.616424][ T4193] total_pgmajfault 8 [ 45.620315][ T4193] total_inactive_anon 16384 [ 45.624806][ T4193] total_active_anon 0 [ 45.628801][ T4193] total_inactive_file 0 [ 45.632942][ T4193] total_active_file 32768 [ 45.637278][ T4193] total_unevictable 0 [ 45.641245][ T4193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=4193,uid=0 [ 45.656504][ T4193] Memory cgroup out of memory: Killed process 4193 (syz-executor.2) total-vm:46572kB, anon-rss:548kB, file-rss:8976kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 45.949211][ T4194] syz-executor.2 (4194) used greatest stack depth: 7344 bytes left [ 46.183357][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 46.183369][ T29] audit: type=1400 audit(1718449622.967:305): avc: denied { listen } for pid=4305 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.237476][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 46.323403][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 46.335360][ T4325] dummy0: entered promiscuous mode [ 46.387595][ T4326] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 [ 46.719639][ T29] audit: type=1400 audit(1718449623.507:306): avc: denied { view } for pid=4337 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 46.768030][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 46.778767][ T29] audit: type=1400 audit(1718449623.567:307): avc: denied { read } for pid=4341 comm="syz-executor.0" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.785992][ T4342] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 46.810552][ T4342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.918907][ T29] audit: type=1400 audit(1718449623.707:308): avc: denied { accept } for pid=4347 comm="iou-wrk-4348" lport=36655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 47.162901][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.170136][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.184320][ T4366] bridge_slave_1: left allmulticast mode [ 47.190130][ T4366] bridge_slave_1: left promiscuous mode [ 47.195977][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.204740][ T4366] bridge_slave_0: left allmulticast mode [ 47.210457][ T4366] bridge_slave_0: left promiscuous mode [ 47.216217][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.263582][ T29] audit: type=1400 audit(1718449624.047:309): avc: denied { setopt } for pid=4374 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.288411][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 47.319810][ T29] audit: type=1400 audit(1718449624.107:310): avc: denied { mount } for pid=4382 comm="syz-executor.2" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 47.346871][ T4367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 47.362538][ T4379] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 47.371895][ T4379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.390134][ T4372] loop0: detected capacity change from 0 to 256 [ 47.446756][ T3449] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 47.461668][ T29] audit: type=1400 audit(1718449624.237:311): avc: denied { write } for pid=4395 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.481044][ T29] audit: type=1400 audit(1718449624.247:312): avc: denied { listen } for pid=4396 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.524782][ T29] audit: type=1400 audit(1718449624.307:313): avc: denied { write } for pid=4396 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 47.538974][ T24] kernel write not supported for file task/4404/attr/prev (pid: 24 comm: kworker/1:0) [ 47.545468][ T29] audit: type=1400 audit(1718449624.307:314): avc: denied { nlmsg_read } for pid=4396 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 48.217336][ T24] kernel write not supported for file task/4441/attr/prev (pid: 24 comm: kworker/1:0) [ 48.530893][ T4456] GUP no longer grows the stack in syz-executor.1 (4456): 20004000-2000a000 (20002000) [ 48.540635][ T4456] CPU: 0 PID: 4456 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 [ 48.551059][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 48.561118][ T4456] Call Trace: [ 48.564473][ T4456] [ 48.567407][ T4456] dump_stack_lvl+0xf2/0x150 [ 48.572088][ T4456] dump_stack+0x15/0x20 [ 48.576297][ T4456] __get_user_pages+0xb97/0xf10 [ 48.581178][ T4456] get_user_pages_remote+0x1df/0x790 [ 48.586588][ T4456] __access_remote_vm+0x15b/0x580 [ 48.591689][ T4456] access_remote_vm+0x34/0x50 [ 48.596446][ T4456] proc_pid_cmdline_read+0x3e9/0x670 [ 48.601784][ T4456] vfs_readv+0x3f5/0x660 [ 48.606155][ T4456] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 48.612014][ T4456] __x64_sys_preadv+0x100/0x1c0 [ 48.616931][ T4456] x64_sys_call+0x1d82/0x2d70 [ 48.621672][ T4456] do_syscall_64+0xc9/0x1c0 [ 48.626260][ T4456] ? clear_bhb_loop+0x55/0xb0 [ 48.630961][ T4456] ? clear_bhb_loop+0x55/0xb0 [ 48.635663][ T4456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.641655][ T4456] RIP: 0033:0x7faecc92cea9 [ 48.646064][ T4456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.665708][ T4456] RSP: 002b:00007faecbca70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 48.674175][ T4456] RAX: ffffffffffffffda RBX: 00007faecca63f80 RCX: 00007faecc92cea9 [ 48.682422][ T4456] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000009 [ 48.690555][ T4456] RBP: 00007faecc99bff4 R08: 0000000000000000 R09: 0000000000000000 [ 48.698515][ T4456] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 48.706483][ T4456] R13: 000000000000000b R14: 00007faecca63f80 R15: 00007ffeb2ff1458 [ 48.714532][ T4456] [ 48.786386][ T4464] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 48.822118][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 48.853037][ T4467] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 48.862414][ T4467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 49.094400][ T4488] loop1: detected capacity change from 0 to 128 [ 49.241352][ T4509] netlink: 26724 bytes leftover after parsing attributes in process `syz-executor.0'. [ 49.721619][ T4520] loop4: detected capacity change from 0 to 512 [ 49.728939][ T4520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.740516][ T4520] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.753712][ T4520] EXT4-fs (loop4): 1 truncate cleaned up [ 49.759727][ T4520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.777066][ T4520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.884520][ T4542] mmap: syz-executor.2 (4542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.923259][ T4548] loop4: detected capacity change from 0 to 512 [ 49.930817][ T4548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.942106][ T4548] EXT4-fs (loop4): 1 truncate cleaned up [ 49.948060][ T4548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.965203][ T4548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.059284][ T4552] team0: Port device team_slave_0 removed [ 50.069063][ T4552] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 50.129878][ T4560] loop1: detected capacity change from 0 to 128 [ 50.138370][ T4560] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.157897][ T4560] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.848189][ T4607] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 51.052489][ T4617] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 51.070416][ T4617] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 51.081865][ T4617] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 51.090892][ T4617] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 51.101761][ T4617] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 51.111081][ T4617] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 51.128289][ T4617] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 51.149597][ T4626] loop4: detected capacity change from 0 to 512 [ 51.169638][ T4626] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 51.183307][ T4626] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 51.205222][ T4626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.259662][ T4649] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 51.267050][ T29] kauditd_printk_skb: 4309 callbacks suppressed [ 51.267063][ T29] audit: type=1400 audit(1718449628.047:4624): avc: denied { create } for pid=4648 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 51.267895][ T4649] __nla_validate_parse: 3 callbacks suppressed [ 51.267952][ T4649] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 51.314882][ T29] audit: type=1400 audit(1718449628.087:4625): avc: denied { write } for pid=4648 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 51.344188][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.368028][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 51.388332][ T29] audit: type=1400 audit(1718449628.177:4626): avc: denied { create } for pid=4657 comm="syz-executor.1" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 51.394289][ T4658] loop1: detected capacity change from 0 to 128 [ 51.418427][ T29] audit: type=1400 audit(1718449628.177:4627): avc: denied { read write open } for pid=4657 comm="syz-executor.1" path="/root/syzkaller-testdir346366030/syzkaller.Jy9s4h/123/file1" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 51.447852][ T29] audit: type=1400 audit(1718449628.177:4628): avc: denied { mounton } for pid=4657 comm="syz-executor.1" path="/root/syzkaller-testdir346366030/syzkaller.Jy9s4h/123/file0" dev="sda1" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 51.476514][ T29] audit: type=1400 audit(1718449628.177:4629): avc: denied { lock } for pid=4657 comm="syz-executor.1" path="/root/syzkaller-testdir346366030/syzkaller.Jy9s4h/123/file1" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 51.504768][ T29] audit: type=1400 audit(1718449628.177:4630): avc: denied { setattr } for pid=4657 comm="syz-executor.1" name="file1" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 51.570141][ T29] audit: type=1400 audit(1718449628.347:4631): avc: denied { unlink } for pid=3100 comm="syz-executor.1" name="file0" dev="sda1" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 51.652710][ T4662] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 51.777788][ T4691] loop4: detected capacity change from 0 to 128 [ 51.853984][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 51.882945][ T4704] loop4: detected capacity change from 0 to 512 [ 51.893036][ T4704] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 51.908185][ T4704] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 51.921219][ T4704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.934723][ T29] audit: type=1400 audit(1718449628.727:4632): avc: denied { write } for pid=4703 comm="syz-executor.4" path="/root/syzkaller-testdir3123418080/syzkaller.I2wyUr/153/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.014202][ T4709] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 52.053055][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.120248][ T29] audit: type=1400 audit(1718449628.907:4633): avc: denied { read write } for pid=4723 comm="syz-executor.2" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.121572][ T3179] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.151621][ T3179] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.159900][ T3179] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 52.174698][ T4729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 52.210146][ T4731] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 52.265478][ T4740] loop2: detected capacity change from 0 to 512 [ 52.274416][ T4740] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 52.287742][ T4740] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 52.300477][ T4740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.391327][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.474135][ T3181] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.481713][ T3181] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.489626][ T3181] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 52.715755][ T4773] loop2: detected capacity change from 0 to 8192 [ 53.418541][ T4793] loop4: detected capacity change from 0 to 512 [ 53.427134][ T4793] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_name out of bounds [ 53.443757][ T4793] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 53.469098][ T4793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.471370][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.488667][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.502161][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 53.529524][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.038784][ T4824] loop4: detected capacity change from 0 to 2048 [ 54.048949][ T4824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.129682][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.373776][ T4846] Invalid ELF header magic: != ELF [ 54.670505][ T4898] loop1: detected capacity change from 0 to 512 [ 54.687376][ T4898] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_name out of bounds [ 54.702045][ T4898] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 54.714977][ T4898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.758513][ T3100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.839570][ T4904] loop1: detected capacity change from 0 to 128 [ 54.850514][ T4904] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 54.862750][ T4904] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 54.882334][ T4904] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 54.898655][ T4904] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 54.930485][ T4904] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 54.946260][ T4904] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 54.963170][ T4904] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 54.978948][ T4904] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 55.008141][ T4904] xt_hashlimit: invalid rate [ 55.033489][ T3100] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.200858][ T4919] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.560051][ T4970] loop2: detected capacity change from 0 to 512 [ 55.570485][ T4970] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_name out of bounds [ 55.579567][ T4971] Invalid ELF header magic: != ELF [ 55.585680][ T4970] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 55.605243][ T4970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.666735][ T4965] loop0: detected capacity change from 0 to 2048 [ 55.681218][ T4965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.682057][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.967536][ T4992] loop2: detected capacity change from 0 to 512 [ 55.979013][ T4992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.991697][ T4992] ext4 filesystem being mounted at /root/syzkaller-testdir3951946529/syzkaller.6mbkNC/178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.017304][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.355117][ T3111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.410561][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 56.410627][ T29] audit: type=1400 audit(1718449633.197:4661): avc: denied { setopt } for pid=5001 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.650952][ T5004] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 56.831971][ T5033] tap0: tun_chr_ioctl cmd 1074025677 [ 56.850008][ T5033] tap0: linktype set to 823 [ 56.858812][ T5034] loop1: detected capacity change from 0 to 512 [ 56.877256][ T5034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.889902][ T5034] ext4 filesystem being mounted at /root/syzkaller-testdir346366030/syzkaller.Jy9s4h/154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.923525][ T5038] loop4: detected capacity change from 0 to 1024 [ 56.937028][ T5038] EXT4-fs: Ignoring removed orlov option [ 56.942818][ T5038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.965635][ T3100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.978453][ T5038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.993001][ T29] audit: type=1400 audit(1718449633.777:4662): avc: denied { write } for pid=5037 comm="syz-executor.4" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.016987][ T29] audit: type=1400 audit(1718449633.777:4663): avc: denied { open } for pid=5037 comm="syz-executor.4" path="/root/syzkaller-testdir3123418080/syzkaller.I2wyUr/188/file1/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.020234][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.045303][ T29] audit: type=1400 audit(1718449633.777:4664): avc: denied { ioctl } for pid=5037 comm="syz-executor.4" path="/root/syzkaller-testdir3123418080/syzkaller.I2wyUr/188/file1/file0/file0" dev="loop4" ino=13 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.805064][ T29] audit: type=1400 audit(1718449634.587:4665): avc: denied { create } for pid=5045 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 57.825470][ T5050] loop0: detected capacity change from 0 to 512 [ 57.832114][ T29] audit: type=1400 audit(1718449634.617:4666): avc: denied { write } for pid=5045 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 57.851940][ T5050] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.868684][ T5050] EXT4-fs (loop0): 1 truncate cleaned up [ 57.868944][ T5055] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 57.874670][ T5050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.904286][ T5059] loop2: detected capacity change from 0 to 512 [ 57.910737][ T29] audit: type=1326 audit(1718449634.687:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faecc92cea9 code=0x0 [ 57.920790][ T5059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.937862][ T5050] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.955453][ T29] audit: type=1400 audit(1718449634.737:4668): avc: denied { read } for pid=5058 comm="syz-executor.2" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.978618][ T29] audit: type=1400 audit(1718449634.737:4669): avc: denied { rename } for pid=5058 comm="syz-executor.2" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.994927][ T5062] loop4: detected capacity change from 0 to 128 [ 58.008914][ T5062] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 58.016628][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.031120][ T5062] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 58.046347][ T5062] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 58.062173][ T5062] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 58.077611][ T5062] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 58.093292][ T5062] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 58.110046][ T5062] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 58.125925][ T5062] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 58.144915][ T5062] xt_hashlimit: invalid rate [ 58.180528][ T3101] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.190150][ T5069] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 58.252559][ T29] audit: type=1400 audit(1718449635.037:4670): avc: denied { map } for pid=5074 comm="syz-executor.4" path="socket:[9896]" dev="sockfs" ino=9896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.415982][ T5105] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.483093][ T5120] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 58.489694][ T5120] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.497489][ T5120] vhci_hcd vhci_hcd.0: Device attached [ 58.511235][ T5122] vhci_hcd: cannot find the pending unlink 0 [ 58.517312][ T5122] vhci_hcd: connection closed [ 58.517464][ T294] vhci_hcd: stop threads [ 58.526419][ T294] vhci_hcd: release socket [ 58.530846][ T294] vhci_hcd: disconnect device [ 58.668020][ T5149] loop2: detected capacity change from 0 to 512 [ 58.675394][ T5149] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.682518][ T5149] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 58.691531][ T5149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 58.699651][ T5149] System zones: 1-12 [ 58.703992][ T5149] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 58.719026][ T5149] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 58.732010][ T5149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.779134][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.809324][ T5163] loop1: detected capacity change from 0 to 512 [ 58.817559][ T5163] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 58.825483][ T5163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 58.833662][ T5163] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.842809][ T5163] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 58.857513][ T5163] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 58.870688][ T5163] EXT4-fs (loop1): 1 truncate cleaned up [ 58.876793][ T5163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.894254][ T5174] loop2: detected capacity change from 0 to 512 [ 58.901904][ T5163] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 65535 != root limit 120 [ 58.914445][ T5163] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 58.930624][ T5174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.943873][ T3100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.975219][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.990950][ T5181] loop0: detected capacity change from 0 to 512 [ 59.002053][ T5181] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.017670][ T5181] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 59.036085][ T5181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 59.048276][ T5181] System zones: 1-12 [ 59.054885][ T5181] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 59.082594][ T5181] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 59.083882][ T5191] loop1: detected capacity change from 0 to 4096 [ 59.097022][ T5181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.125608][ T5191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.145527][ T3100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.173484][ T3111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.225440][ T5211] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 59.231967][ T5211] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.240449][ T5211] vhci_hcd vhci_hcd.0: Device attached [ 59.252241][ T5212] vhci_hcd: cannot find the pending unlink 0 [ 59.258823][ T5212] vhci_hcd: connection closed [ 59.260426][ T294] vhci_hcd: stop threads [ 59.269347][ T294] vhci_hcd: release socket [ 59.273762][ T294] vhci_hcd: disconnect device [ 59.355636][ T5235] loop0: detected capacity change from 0 to 128 [ 59.371323][ T5237] loop2: detected capacity change from 0 to 512 [ 59.378796][ T5237] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.385413][ T5237] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 59.394566][ T5237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 59.402826][ T5237] System zones: 1-12 [ 59.408543][ T5237] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 59.423113][ T5237] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 59.437683][ T5237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.472663][ T5245] Invalid ELF header magic: != ELF [ 59.489205][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.602878][ T5259] tap0: tun_chr_ioctl cmd 1074025677 [ 59.608773][ T5259] tap0: linktype set to 823 [ 59.677419][ T5264] loop2: detected capacity change from 0 to 1024 [ 59.685434][ T5264] ext4: Unknown parameter 'fowner<00000000000000000000' [ 59.700695][ T5267] loop0: detected capacity change from 0 to 128 [ 59.742823][ T5269] loop2: detected capacity change from 0 to 512 [ 59.752723][ T5269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.827071][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.934398][ T5295] loop4: detected capacity change from 0 to 128 [ 60.032935][ T5305] loop0: detected capacity change from 0 to 4096 [ 60.043027][ T5305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.069754][ T3111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.151825][ T5321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.160362][ T5321] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 60.196099][ T5329] loop2: detected capacity change from 0 to 128 [ 60.360059][ T5358] loop0: detected capacity change from 0 to 128 [ 60.373085][ T5353] loop2: detected capacity change from 0 to 8192 [ 60.387997][ T5353] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.393690][ T5361] loop1: detected capacity change from 0 to 512 [ 60.408233][ T5361] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.418135][ T5361] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.424691][ T5361] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.439889][ T5361] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 60.448657][ T5361] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 60.465093][ T5361] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 60.476094][ T5361] EXT4-fs (loop1): 1 truncate cleaned up [ 60.489250][ T5361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.619745][ T3100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.648701][ T5383] loop2: detected capacity change from 0 to 256 [ 60.715238][ T5393] loop1: detected capacity change from 0 to 4096 [ 60.725324][ T5393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.748161][ T3100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.777493][ T5403] loop0: detected capacity change from 0 to 512 [ 60.785718][ T5403] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 60.794033][ T5403] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.801405][ T5403] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.817544][ T5403] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 60.826944][ T5403] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 60.845610][ T5403] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 60.855933][ T5411] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [SP.]L3 index 0 [ 60.875923][ T5403] EXT4-fs (loop0): 1 truncate cleaned up [ 60.885207][ T5403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.954169][ T5421] loop4: detected capacity change from 0 to 256 [ 60.972945][ T5428] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 60.985333][ T5428] block device autoloading is deprecated and will be removed. [ 60.993004][ T5428] syz-executor.1: attempt to access beyond end of device [ 60.993004][ T5428] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 61.045191][ T5436] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [SP.]L3 index 0 [ 61.143209][ T5450] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.154949][ T3111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.213623][ T5452] loop2: detected capacity change from 0 to 256 [ 61.238655][ T5466] loop0: detected capacity change from 0 to 1024 [ 61.315679][ T5472] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 61.363283][ T5476] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.457083][ T5495] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 61.472072][ T5498] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 61.478747][ T5498] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 61.486452][ T5498] vhci_hcd vhci_hcd.0: Device attached [ 61.487729][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.493286][ T5499] vhci_hcd: cannot find the pending unlink 0 [ 61.517811][ T5499] vhci_hcd: connection closed [ 61.519380][ T28] vhci_hcd: stop threads [ 61.528545][ T28] vhci_hcd: release socket [ 61.532945][ T28] vhci_hcd: disconnect device [ 61.563015][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.607915][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.646355][ T5475] chnl_net:caif_netlink_parms(): no params data found [ 61.661507][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.708550][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.715732][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.724862][ T5475] bridge_slave_0: entered allmulticast mode [ 61.731376][ T5475] bridge_slave_0: entered promiscuous mode [ 61.740293][ T5514] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.742071][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.754770][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.762799][ T5475] bridge_slave_1: entered allmulticast mode [ 61.769457][ T5475] bridge_slave_1: entered promiscuous mode [ 61.788362][ T5524] loop4: detected capacity change from 0 to 128 [ 61.803661][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.817368][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.901211][ T5528] loop4: detected capacity change from 0 to 8192 [ 61.919865][ T5530] loop2: detected capacity change from 0 to 1024 [ 61.939564][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.952660][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.970866][ T11] bond0 (unregistering): Released all slaves [ 61.981273][ T5475] team0: Port device team_slave_0 added [ 61.992858][ T5475] team0: Port device team_slave_1 added [ 62.010278][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.017247][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.043265][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.058909][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 62.058923][ T29] audit: type=1400 audit(1718449638.847:4761): avc: denied { ioctl } for pid=5527 comm="syz-executor.4" path="socket:[10835]" dev="sockfs" ino=10835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.094562][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.101554][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.128273][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.161132][ T29] audit: type=1400 audit(1718449638.877:4762): avc: denied { ioctl } for pid=5527 comm="syz-executor.4" path="socket:[10847]" dev="sockfs" ino=10847 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.190485][ T5475] hsr_slave_0: entered promiscuous mode [ 62.206122][ T5475] hsr_slave_1: entered promiscuous mode [ 62.213025][ T5475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.223012][ T5475] Cannot create hsr debugfs directory [ 62.228650][ T5542] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.241070][ T11] hsr_slave_0: left promiscuous mode [ 62.249836][ T11] hsr_slave_1: left promiscuous mode [ 62.262182][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.269679][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.279001][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.286423][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.307029][ T11] dummy0: left promiscuous mode [ 62.311931][ T11] veth1_macvtap: left promiscuous mode [ 62.317468][ T11] veth0_macvtap: left promiscuous mode [ 62.323095][ T11] veth1_vlan: left promiscuous mode [ 62.328444][ T11] veth0_vlan: left promiscuous mode [ 62.425787][ T11] team0 (unregistering): Port device team_slave_1 removed [ 62.438219][ T11] team0 (unregistering): Port device team_slave_0 removed [ 62.512789][ T5552] syzkaller0: entered promiscuous mode [ 62.518337][ T5552] syzkaller0: entered allmulticast mode [ 62.558044][ T29] audit: type=1400 audit(1718449639.347:4763): avc: denied { mount } for pid=5559 comm="syz-executor.0" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.648303][ T5564] loop0: detected capacity change from 0 to 256 [ 62.681917][ T29] audit: type=1400 audit(1718449639.467:4764): avc: denied { connect } for pid=5567 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.711322][ T29] audit: type=1400 audit(1718449639.497:4765): avc: denied { read } for pid=5567 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.778823][ T29] audit: type=1400 audit(1718449639.567:4766): avc: denied { read } for pid=5571 comm="syz-executor.2" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 62.803661][ T29] audit: type=1400 audit(1718449639.567:4767): avc: denied { open } for pid=5571 comm="syz-executor.2" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 62.839680][ T29] audit: type=1400 audit(1718449639.627:4768): avc: denied { execute } for pid=5573 comm="syz-executor.0" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.857935][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 62.868000][ T29] audit: type=1400 audit(1718449639.627:4769): avc: denied { bind } for pid=5575 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.894564][ T29] audit: type=1400 audit(1718449639.627:4770): avc: denied { connect } for pid=5575 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.008937][ T5589] loop2: detected capacity change from 0 to 512 [ 63.019504][ T5589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 35: padding at end of block bitmap is not set [ 63.029918][ T5475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.036177][ T5589] EXT4-fs (loop2): Remounting filesystem read-only [ 63.049828][ T5589] EXT4-fs (loop2): 1 truncate cleaned up [ 63.055276][ T5475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.060313][ T5589] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 63.072715][ T5475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.082925][ T5475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.123567][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.135748][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.152970][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.160069][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.169570][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.176638][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.243000][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.304806][ T5475] veth0_vlan: entered promiscuous mode [ 63.315126][ T5475] veth1_vlan: entered promiscuous mode [ 63.330507][ T5475] veth0_macvtap: entered promiscuous mode [ 63.338520][ T5475] veth1_macvtap: entered promiscuous mode [ 63.349282][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.359794][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.369635][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.380037][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.390101][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.400633][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.410424][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.420853][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.431586][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.442453][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.453007][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.463027][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.473486][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.484013][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.494599][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.504469][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.514896][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.525466][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.536075][ T5475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.544846][ T5475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.553636][ T5475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.562737][ T5475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.740916][ T5622] loop1: detected capacity change from 0 to 8192 [ 63.885332][ T5630] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 63.894130][ T5630] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 63.914629][ T5630] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 64.003306][ T5642] loop2: detected capacity change from 0 to 512 [ 64.015344][ T5642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.034984][ T5642] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.050961][ T5642] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set [ 64.066687][ T5642] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor.2: Failed to acquire dquot type 1 [ 64.080696][ T5642] EXT4-fs (loop2): 1 truncate cleaned up [ 64.152148][ T5652] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 64.163996][ T5657] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 64.171591][ T5642] loop2: detected capacity change from 0 to 512 [ 64.172134][ T5657] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 64.195173][ T5657] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 64.205648][ T5642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.227352][ T5642] EXT4-fs (loop2): 1 orphan inode deleted [ 64.233113][ T5642] EXT4-fs (loop2): 1 truncate cleaned up [ 64.262250][ T5642] EXT4-fs error (device loop2): empty_inline_dir:1829: inode #12: block 7: comm syz-executor.2: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 64.282377][ T5642] EXT4-fs warning (device loop2): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 64.383776][ T5654] chnl_net:caif_netlink_parms(): no params data found [ 64.459157][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.466300][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.476438][ T5654] bridge_slave_0: entered allmulticast mode [ 64.483471][ T5654] bridge_slave_0: entered promiscuous mode [ 64.499224][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.506426][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.513942][ T5654] bridge_slave_1: entered allmulticast mode [ 64.520483][ T5654] bridge_slave_1: entered promiscuous mode [ 64.553211][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.578845][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.610326][ T5654] team0: Port device team_slave_0 added [ 64.629876][ T5654] team0: Port device team_slave_1 added [ 64.658371][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.665427][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.692038][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.705138][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.712202][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.738926][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.768499][ T5654] hsr_slave_0: entered promiscuous mode [ 64.774642][ T5654] hsr_slave_1: entered promiscuous mode [ 64.840386][ T5654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.863075][ T5693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.889956][ T5654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.950948][ T5654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.978036][ T5699] ext4: Unknown parameter 'rootcontextI' [ 64.995200][ T5701] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 65.003369][ T5701] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 65.019216][ T5654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.130551][ T5654] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.139523][ T5654] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.149200][ T5654] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.158803][ T5654] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.222704][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.237198][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.248616][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.255701][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.278856][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.285950][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.306854][ T5719] Illegal XDP return value 65536 on prog (id 206) dev N/A, expect packet loss! [ 65.350158][ T5654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.360533][ T5654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.374166][ T5722] sctp: [Deprecated]: syz-executor.0 (pid 5722) Use of int in maxseg socket option. [ 65.374166][ T5722] Use struct sctp_assoc_value instead [ 65.465584][ T5705] chnl_net:caif_netlink_parms(): no params data found [ 65.501331][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.517503][ T5705] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.524742][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.531900][ T5705] bridge_slave_0: entered allmulticast mode [ 65.538636][ T5705] bridge_slave_0: entered promiscuous mode [ 65.545939][ T5705] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.553069][ T5705] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.560348][ T5705] bridge_slave_1: entered allmulticast mode [ 65.566996][ T5705] bridge_slave_1: entered promiscuous mode [ 65.588178][ T5705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.598645][ T5705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.626093][ T5705] team0: Port device team_slave_0 added [ 65.632975][ T5705] team0: Port device team_slave_1 added [ 65.687705][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.694666][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.720703][ T5705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.732136][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.739145][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.765296][ T5705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.785799][ T5654] veth0_vlan: entered promiscuous mode [ 65.798902][ T5654] veth1_vlan: entered promiscuous mode [ 65.813933][ T5751] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.823368][ T5751] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.835394][ T5751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.850612][ T5744] loop0: detected capacity change from 0 to 256 [ 65.868335][ T5705] hsr_slave_0: entered promiscuous mode [ 65.874375][ T5705] hsr_slave_1: entered promiscuous mode [ 65.881159][ T5705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.889525][ T5705] Cannot create hsr debugfs directory [ 65.911019][ T5654] veth0_macvtap: entered promiscuous mode [ 65.925098][ T5654] veth1_macvtap: entered promiscuous mode [ 65.962283][ T5705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.974413][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.985184][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.995272][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.005776][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.015740][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.026169][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.036040][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.046590][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.056529][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.066968][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.078039][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.090057][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.100597][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.110521][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.121342][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.131150][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.141659][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.151805][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.162211][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.172019][ T5654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.182786][ T5654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.193585][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.204296][ T5654] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.213424][ T5654] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.222377][ T5654] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.231082][ T5654] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.270274][ T5760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.410765][ T5777] loop3: detected capacity change from 0 to 512 [ 66.417982][ T5777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.427499][ T5777] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.434254][ T5777] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 248: padding at end of block bitmap is not set [ 66.450115][ T5777] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 66.462397][ T5777] EXT4-fs (loop3): 1 truncate cleaned up [ 66.601665][ T5777] loop3: detected capacity change from 0 to 512 [ 66.612348][ T5777] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.625678][ T5777] EXT4-fs (loop3): 1 orphan inode deleted [ 66.632058][ T5777] EXT4-fs (loop3): 1 truncate cleaned up [ 66.649885][ T5777] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz-executor.3: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 66.672098][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 66.750928][ T5790] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.786665][ T5789] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 66.860652][ T5799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.120085][ T5813] loop2: detected capacity change from 0 to 512 [ 67.128833][ T5813] EXT4-fs (loop2): 1 truncate cleaned up [ 67.189108][ T5817] loop2: detected capacity change from 0 to 2048 [ 67.211912][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 67.211926][ T29] audit: type=1400 audit(1718449643.997:4784): avc: denied { ioctl } for pid=5816 comm="syz-executor.2" path="/root/syzkaller-testdir3951946529/syzkaller.6mbkNC/275/file1/bus" dev="loop2" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.215456][ T5817] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 6 with error 28 [ 67.259340][ T5817] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.259340][ T5817] [ 67.268992][ T5817] EXT4-fs (loop2): Total free blocks count 0 [ 67.274957][ T5817] EXT4-fs (loop2): Free/Dirty block details [ 67.281231][ T5817] EXT4-fs (loop2): free_blocks=0 [ 67.286160][ T5817] EXT4-fs (loop2): dirty_blocks=0 [ 67.291159][ T5817] EXT4-fs (loop2): Block reservation details [ 67.297165][ T5817] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 67.947996][ T5844] serio: Serial port pts0 [ 68.190799][ T5851] loop0: detected capacity change from 0 to 2048 [ 68.232576][ T5851] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 6 with error 28 [ 68.245637][ T5851] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.245637][ T5851] [ 68.255304][ T5851] EXT4-fs (loop0): Total free blocks count 0 [ 68.261294][ T5851] EXT4-fs (loop0): Free/Dirty block details [ 68.267897][ T5851] EXT4-fs (loop0): free_blocks=0 [ 68.272826][ T5851] EXT4-fs (loop0): dirty_blocks=0 [ 68.277858][ T5851] EXT4-fs (loop0): Block reservation details [ 68.283843][ T5851] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 68.291603][ T5857] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.323279][ T29] audit: type=1326 audit(1718449645.107:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5855 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c882b1ea9 code=0x0 [ 68.767441][ T5868] loop0: detected capacity change from 0 to 8192 [ 69.197719][ T29] audit: type=1400 audit(1718449645.987:4786): avc: denied { write } for pid=5875 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.814021][ T5883] netlink: zone id is out of range [ 69.819277][ T5883] netlink: zone id is out of range [ 69.824388][ T5883] netlink: zone id is out of range [ 69.830202][ T5883] netlink: zone id is out of range [ 69.835358][ T5883] netlink: zone id is out of range [ 69.840499][ T5883] netlink: zone id is out of range [ 69.845745][ T5883] netlink: zone id is out of range [ 69.850891][ T5883] netlink: zone id is out of range [ 69.856663][ T5883] netlink: zone id is out of range [ 69.861776][ T5883] netlink: zone id is out of range [ 69.989778][ T5887] loop3: detected capacity change from 0 to 512 [ 70.028233][ T5887] EXT4-fs (loop3): 1 truncate cleaned up [ 70.191814][ T5900] loop3: detected capacity change from 0 to 256 [ 70.210587][ T5705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.213998][ T5900] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.268092][ T5900] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.280909][ T5705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.348820][ T5705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.371007][ T5907] loop0: detected capacity change from 0 to 512 [ 70.397693][ T5907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.409424][ T11] bridge_slave_1: left allmulticast mode [ 70.415126][ T11] bridge_slave_1: left promiscuous mode [ 70.420941][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.448305][ T5907] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 70.468166][ T5907] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 70.476505][ T11] bridge_slave_0: left allmulticast mode [ 70.482140][ T11] bridge_slave_0: left promiscuous mode [ 70.488522][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.522405][ T5907] EXT4-fs (loop0): 1 truncate cleaned up [ 70.567008][ T5907] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 70.699555][ T29] audit: type=1400 audit(1718449647.487:4787): avc: denied { write } for pid=5912 comm="syz-executor.0" name="event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.760596][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.797754][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.827608][ T11] bond0 (unregistering): Released all slaves [ 70.869305][ T5705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.888949][ T5705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.910956][ T5705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.931469][ T11] hsr_slave_0: left promiscuous mode [ 70.945096][ T11] hsr_slave_1: left promiscuous mode [ 70.958437][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.965903][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.987868][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.995330][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.019963][ T11] veth1_macvtap: left promiscuous mode [ 71.025529][ T11] veth0_macvtap: left promiscuous mode [ 71.031125][ T11] veth1_vlan: left promiscuous mode [ 71.036367][ T11] veth0_vlan: left promiscuous mode [ 71.229165][ T11] team0 (unregistering): Port device team_slave_1 removed [ 71.252978][ T11] team0 (unregistering): Port device team_slave_0 removed [ 71.349280][ T5705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.479297][ T5705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.524319][ T5705] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.566776][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.573832][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.600548][ T5917] vxcan1: tx address claim with dest, not broadcast [ 71.629672][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.636771][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.651320][ T5919] loop3: detected capacity change from 0 to 256 [ 71.664774][ T5705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.675225][ T5705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.793442][ T5705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.818760][ T5925] loop3: detected capacity change from 0 to 512 [ 71.854513][ T5925] EXT4-fs (loop3): 1 truncate cleaned up [ 71.961510][ T5705] veth0_vlan: entered promiscuous mode [ 71.980272][ T5705] veth1_vlan: entered promiscuous mode [ 72.018443][ T5705] veth0_macvtap: entered promiscuous mode [ 72.039112][ T5705] veth1_macvtap: entered promiscuous mode [ 72.049455][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.060273][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.070191][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.080716][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.090555][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.100989][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.110848][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.121270][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.131242][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.142017][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.155950][ T5705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.196653][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.207289][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.217201][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.227650][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.237504][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.248073][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.257955][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.268398][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.278222][ T5705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.288748][ T5705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.303295][ T5705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.312939][ T5705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.321809][ T5705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.330560][ T5705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.339270][ T5705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.586144][ T29] audit: type=1326 audit(1718449649.367:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.610290][ T29] audit: type=1326 audit(1718449649.367:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.634404][ T29] audit: type=1326 audit(1718449649.367:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.658406][ T29] audit: type=1326 audit(1718449649.367:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.682841][ T29] audit: type=1326 audit(1718449649.367:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.706788][ T29] audit: type=1326 audit(1718449649.367:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.731123][ T29] audit: type=1326 audit(1718449649.367:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.755055][ T29] audit: type=1326 audit(1718449649.367:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.779116][ T29] audit: type=1326 audit(1718449649.367:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.802967][ T29] audit: type=1326 audit(1718449649.367:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5959 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3787962ea9 code=0x7ffc0000 [ 72.878644][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.462963][ T6002] loop1: detected capacity change from 0 to 256 [ 73.628394][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.747983][ T6015] vlan2: entered allmulticast mode [ 73.753175][ T6015] team0: entered allmulticast mode [ 73.759084][ T6015] team_slave_0: entered allmulticast mode [ 73.764812][ T6015] team_slave_1: entered allmulticast mode [ 73.790924][ T6015] team0: left allmulticast mode [ 73.795831][ T6015] team_slave_0: left allmulticast mode [ 73.801401][ T6015] team_slave_1: left allmulticast mode [ 73.976462][ T6030] syzkaller1: entered promiscuous mode [ 73.981964][ T6030] syzkaller1: entered allmulticast mode [ 75.167187][ T6065] delete_channel: no stack [ 75.409323][ T50] tipc: Subscription rejected, illegal request [ 75.709056][ T6081] loop3: detected capacity change from 0 to 512 [ 75.842620][ T6061] delete_channel: no stack [ 75.876865][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.023974][ T6088] vlan2: entered allmulticast mode [ 76.029258][ T6088] team0: entered allmulticast mode [ 76.034460][ T6088] team_slave_0: entered allmulticast mode [ 76.040815][ T6088] team_slave_1: entered allmulticast mode [ 76.068072][ T6088] team0: left allmulticast mode [ 76.073028][ T6088] team_slave_0: left allmulticast mode [ 76.078559][ T6088] team_slave_1: left allmulticast mode [ 76.257691][ T6095] validate_nla: 1 callbacks suppressed [ 76.257712][ T6095] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 76.310388][ T6095] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 76.338676][ T6095] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 76.380149][ T6095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.405187][ T6095] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 77.373454][ T6128] loop3: detected capacity change from 0 to 512 [ 77.411992][ T6128] EXT4-fs: Ignoring removed oldalloc option [ 77.436633][ T6128] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 77.510948][ T6128] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 77.528727][ T6128] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.560756][ T6128] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.591485][ T6128] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 77.621310][ T6128] bond0: (slave team0): Releasing backup interface [ 77.644911][ T6128] bridge0: port 3(team0) entered blocking state [ 77.651358][ T6128] bridge0: port 3(team0) entered disabled state [ 77.677697][ T6128] team0: entered allmulticast mode [ 77.682844][ T6128] team_slave_0: entered allmulticast mode [ 77.688784][ T6128] team_slave_1: entered allmulticast mode [ 77.719709][ T6128] team0: entered promiscuous mode [ 77.724752][ T6128] team_slave_0: entered promiscuous mode [ 77.730519][ T6128] team_slave_1: entered promiscuous mode [ 77.826585][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.187913][ T6166] syzkaller1: entered promiscuous mode [ 78.193471][ T6166] syzkaller1: entered allmulticast mode [ 79.013796][ T29] kauditd_printk_skb: 3879 callbacks suppressed [ 79.013810][ T29] audit: type=1400 audit(1718449655.797:8677): avc: denied { listen } for pid=6197 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.071811][ T29] audit: type=1400 audit(1718449655.827:8678): avc: denied { accept } for pid=6197 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.374597][ T6208] ================================================================== [ 79.382688][ T6208] BUG: KCSAN: data-race in ondemand_readahead / ondemand_readahead [ 79.390577][ T6208] [ 79.392891][ T6208] read to 0xffff888121bd1678 of 8 bytes by task 6207 on cpu 1: [ 79.400425][ T6208] ondemand_readahead+0x133/0x6b0 [ 79.405533][ T6208] page_cache_async_ra+0x94/0xa0 [ 79.410467][ T6208] filemap_fault+0x2d3/0xa60 [ 79.415056][ T6208] __do_fault+0xb6/0x200 [ 79.419298][ T6208] handle_mm_fault+0xdeb/0x2a80 [ 79.424146][ T6208] exc_page_fault+0x296/0x650 [ 79.428826][ T6208] asm_exc_page_fault+0x26/0x30 [ 79.433682][ T6208] rep_movs_alternative+0x30/0x70 [ 79.438718][ T6208] _copy_from_user+0x80/0xd0 [ 79.443306][ T6208] copy_msghdr_from_user+0x54/0x2a0 [ 79.448501][ T6208] do_recvmmsg+0x290/0x720 [ 79.452922][ T6208] __x64_sys_recvmmsg+0xe2/0x170 [ 79.457862][ T6208] x64_sys_call+0x271d/0x2d70 [ 79.462541][ T6208] do_syscall_64+0xc9/0x1c0 [ 79.467041][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.472938][ T6208] [ 79.475255][ T6208] write to 0xffff888121bd1678 of 8 bytes by task 6208 on cpu 0: [ 79.482880][ T6208] ondemand_readahead+0x588/0x6b0 [ 79.487911][ T6208] page_cache_async_ra+0x94/0xa0 [ 79.492843][ T6208] filemap_fault+0x2d3/0xa60 [ 79.497439][ T6208] __do_fault+0xb6/0x200 [ 79.501698][ T6208] handle_mm_fault+0xdeb/0x2a80 [ 79.506563][ T6208] exc_page_fault+0x296/0x650 [ 79.511249][ T6208] asm_exc_page_fault+0x26/0x30 [ 79.516112][ T6208] fault_in_readable+0xf8/0x1b0 [ 79.521133][ T6208] fault_in_iov_iter_readable+0x152/0x190 [ 79.526849][ T6208] generic_perform_write+0x106/0x410 [ 79.532138][ T6208] ext4_buffered_write_iter+0x1f6/0x380 [ 79.537716][ T6208] ext4_file_write_iter+0x29f/0xe30 [ 79.542922][ T6208] vfs_write+0x78f/0x900 [ 79.547154][ T6208] ksys_write+0xeb/0x1b0 [ 79.551400][ T6208] __x64_sys_write+0x42/0x50 [ 79.556161][ T6208] x64_sys_call+0x27ef/0x2d70 [ 79.560847][ T6208] do_syscall_64+0xc9/0x1c0 [ 79.565345][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.571237][ T6208] [ 79.573725][ T6208] value changed: 0x000000000000009d -> 0x000000000000016c [ 79.580820][ T6208] [ 79.583137][ T6208] Reported by Kernel Concurrency Sanitizer on: [ 79.589275][ T6208] CPU: 0 PID: 6208 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 [ 79.599726][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 79.609943][ T6208] ================================================================== [ 79.642078][ T29] audit: type=1400 audit(1718449656.417:8679): avc: denied { write } for pid=3074 comm="syz-fuzzer" path="pipe:[649]" dev="pipefs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 79.665397][ T29] audit: type=1326 audit(1718449656.417:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2165894ea9 code=0x7fc00000 2024/06/15 11:07:36 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 79.691000][ T6209] delete_channel: no stack [ 79.761856][ T29] audit: type=1326 audit(1718449656.517:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2165894ea9 code=0x7fc00000