last executing test programs: 32.701306199s ago: executing program 2 (id=64): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 30.914525482s ago: executing program 2 (id=135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 30.786097499s ago: executing program 2 (id=139): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) 30.706833503s ago: executing program 2 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x40) 29.845238443s ago: executing program 2 (id=145): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x6, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x800, 0xb1, 0x3, 0xffffff44, 0x6, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x1, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x0, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 28.774832085s ago: executing program 2 (id=158): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x24, 0x65, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ptrace(0x10, 0x1) 16.703463129s ago: executing program 0 (id=455): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x2, &(0x7f0000000940)=ANY=[], 0x4, 0x2f7, &(0x7f0000000980)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f00000010c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 16.702785569s ago: executing program 0 (id=456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r5, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a264", 0x2}], 0x1}, 0x4) 16.604933685s ago: executing program 0 (id=457): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0xf7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 16.604225505s ago: executing program 0 (id=458): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000700000001000000020000060400000004008fc0a4b816be188300fb35f5ffff005f61612e30"], &(0x7f0000000900)=""/18, 0x3b, 0x12, 0x1, 0xfffffff0}, 0x28) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000000)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x10000, 0x1, 0x15}, &(0x7f0000000000), &(0x7f0000000640)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r0, 0x0, 0x0, 0x3f, &(0x7f0000001bc0), &(0x7f0000001c00)=""/63, 0x80000000, 0x0, 0x72, 0x87, &(0x7f0000001c40)="4a23330b6c6872d1b8df5fc0719b438b60864ad492441d5ed437e09c0e01633bb74c2572dabc2315874e2c3fd361148fff272ab16d78b6cef6d8918c6644270f620900316ff392888a163a3c0f9581eb0305d3a3b62335f34432eddebf832dedd2b49a39c34f797fdfe04e64df19b7d0250e", &(0x7f0000001cc0)="ece7ce5285d212151cd1e838c67c92c35ba01c38e31cbae6a61b391dc260c160d4c0595836b24dbb0abeee242898d391f5b824d00a76e7a66b817b5efa77ea3fbf9e3d3ff29b67b3478b63c47faad882f763d1fb65d25e6683a3afdce931e16104d0867420273b4a5b29a615ff8430995d6abbefcf84936e5ca221b4d0ee931d190cc03d100881", 0x2, 0x0, 0x8}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 16.220443716s ago: executing program 0 (id=459): ftruncate(0xffffffffffffffff, 0x80079a0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 16.046994757s ago: executing program 0 (id=464): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) 16.00493071s ago: executing program 32 (id=464): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) 13.626812536s ago: executing program 33 (id=158): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x24, 0x65, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ptrace(0x10, 0x1) 10.160643735s ago: executing program 1 (id=499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000700000001000000020000060400000004008fc0a4b816be188300fb35f5ffff005f61612e30"], &(0x7f0000000900)=""/18, 0x3b, 0x12, 0x1, 0xfffffff0}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r1, 0x0, 0x0, 0x3f, &(0x7f0000001bc0), &(0x7f0000001c00)=""/63, 0x80000000, 0x0, 0x72, 0x87, &(0x7f0000001c40)="4a23330b6c6872d1b8df5fc0719b438b60864ad492441d5ed437e09c0e01633bb74c2572dabc2315874e2c3fd361148fff272ab16d78b6cef6d8918c6644270f620900316ff392888a163a3c0f9581eb0305d3a3b62335f34432eddebf832dedd2b49a39c34f797fdfe04e64df19b7d0250e", &(0x7f0000001cc0)="ece7ce5285d212151cd1e838c67c92c35ba01c38e31cbae6a61b391dc260c160d4c0595836b24dbb0abeee242898d391f5b824d00a76e7a66b817b5efa77ea3fbf9e3d3ff29b67b3478b63c47faad882f763d1fb65d25e6683a3afdce931e16104d0867420273b4a5b29a615ff8430995d6abbefcf84936e5ca221b4d0ee931d190cc03d100881", 0x2, 0x0, 0x8}, 0x50) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 9.594182438s ago: executing program 1 (id=509): close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file2\x00', 0x125042, 0x144) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 9.204125621s ago: executing program 1 (id=522): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x44080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 9.094729877s ago: executing program 1 (id=523): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000700000001000000020000060400000004008fc0a4b816be188300fb35f5ffff005f61612e30"], &(0x7f0000000900)=""/18, 0x3b, 0x12, 0x1, 0xfffffff0}, 0x28) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000000)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x10000, 0x1, 0x15}, &(0x7f0000000000), &(0x7f0000000640)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r0, 0x0, 0x0, 0x3f, &(0x7f0000001bc0), &(0x7f0000001c00)=""/63, 0x80000000, 0x0, 0x72, 0x87, &(0x7f0000001c40)="4a23330b6c6872d1b8df5fc0719b438b60864ad492441d5ed437e09c0e01633bb74c2572dabc2315874e2c3fd361148fff272ab16d78b6cef6d8918c6644270f620900316ff392888a163a3c0f9581eb0305d3a3b62335f34432eddebf832dedd2b49a39c34f797fdfe04e64df19b7d0250e", &(0x7f0000001cc0)="ece7ce5285d212151cd1e838c67c92c35ba01c38e31cbae6a61b391dc260c160d4c0595836b24dbb0abeee242898d391f5b824d00a76e7a66b817b5efa77ea3fbf9e3d3ff29b67b3478b63c47faad882f763d1fb65d25e6683a3afdce931e16104d0867420273b4a5b29a615ff8430995d6abbefcf84936e5ca221b4d0ee931d190cc03d100881", 0x2, 0x0, 0x8}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 7.934314683s ago: executing program 1 (id=528): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) 7.444441542s ago: executing program 1 (id=536): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7fffffff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xfe00, 0xee0, 0x5, 0x3, 0x8, 0xff, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8, 0xa00, 0x40800000000000, 0x7ffffffffffffff}, 0x1, 0x6e6bb4}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d4, 0x3c}, 0x2, @in=@multicast2, 0x3505, 0x0, 0x2, 0xd, 0xf8a, 0xe, 0xfffffff7}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@local, 0x3501, 0x0, 0x3, 0x0, 0x4a07, 0xd480, 0x7}]}]}, 0x13c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@migrate={0xbc, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e22, @in6=@mcast2}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xdb32, 0x13500}, &(0x7f0000000240), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x55d, &(0x7f0000000b40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 7.404210584s ago: executing program 34 (id=536): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7fffffff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xfe00, 0xee0, 0x5, 0x3, 0x8, 0xff, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8, 0xa00, 0x40800000000000, 0x7ffffffffffffff}, 0x1, 0x6e6bb4}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d4, 0x3c}, 0x2, @in=@multicast2, 0x3505, 0x0, 0x2, 0xd, 0xf8a, 0xe, 0xfffffff7}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@local, 0x3501, 0x0, 0x3, 0x0, 0x4a07, 0xd480, 0x7}]}]}, 0x13c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@migrate={0xbc, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e22, @in6=@mcast2}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xdb32, 0x13500}, &(0x7f0000000240), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x55d, &(0x7f0000000b40)="$eJzs3d9rW1UcAPDvTdv96nQdjKEiUtiDk7l0bf0xwYf5KDoc6PsM7V0ZTZfRpGOtA7cH9+KLDEHEgfiu7z4O/wH/ioEOhoyiD75UbnrTZWvSpl22ZObzgbudk3uTc7+593t6bs4NCWBgjWf/FCJejohvkohDEZHk64YjXzm+vt3qg2sz2ZLE2tqnfyX17bJ647UazxvNKy9FxG9fRZwobG63urwyXyqX08W8PlFbuDxRXV45eXGhNJfOpZempqdPvz099d6773Qt1jfO/fP9J3c+PP31sdXvfrl3+FYSZ+Jgvq45jidwvbkyHuP5ezISZx7bcLILjfWDPfn/SY/3g90ZyvN8JLI+4FAM5VkP/P99GRFrwIBK5D8MqMY4oHFt36Xr4OfG/Q/WL4A2xz+8/tlI7KtfGx1YTR65Msqud8e60H7Wxq9/3r6VLdG9zyEAtnX9RkScGh7e3P8lef+3e6c62ObxNvR/8OzcycY/b7Ya/xQ2xj/RYvwz2iJ3d2P7/C/c60IzbWXjv/dbjn83Jq3GhvLaC/Ux30hy4WI5zfq2FyPieIzszepbzeecXr271m5d8/gvW7L2G2PBfD/uDe999DmzpVrpSWJudv9GxCstx7/JxvFPWhz/7P0412EbR9Pbr7Vbt338T9faTxGvtzz+D2e0kq3nJyfq58NE46zY7O+bR39v136v48+O/4Gt4x9Lmudrqztv48d9/6bt1j0Sf3R+/u9JPquXG/OPV0u12uJkxJ7k482PTz18bqPe2D6L//ixrfu/Vuf//oj4vMP4bx75+dWO4u/R8Z/d0fHfeeHuR1/80K79zvq/t+ql4/kjnfR/ne7gk7x3AAAAAAAA0G8KEXEwkkJxo1woFIvr93cciQOFcqVaO3GhsnRpNurflR2LkUJjpvtQ0/0Qk/n9sI361GP16Yg4HBHfDu2v14szlfJsr4MHAAAAAAAAAAAAAAAAAACAPjHa5vv/mT+Ger13wFPnJ79hcG2b/934pSegL/n7D4NL/sPgkv8wuOQ/DC75D4NL/sPgkv8wuOQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNW5s2ezZW31wbWZrD57ZXlpvnLl5GxanS8uLM0UZyqLl4tzlcpcOS3OVBa2e71ypXJ5ciqWrk7U0mptorq8cn6hsnSpdv7iQmkuPZ+OPJOoAAAAAAAAAAAAAAAAAAAA4PlSXV6ZL5XL6aKCwq4Kw/2xGzsojPbHbvR5odc9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA89F8AAAD//89jN08=") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 3.910553035s ago: executing program 3 (id=643): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x1}, 0x100, 0xa88, 0x8406, 0x3, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x4}, r1, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0) write$binfmt_script(r8, &(0x7f00000000c0), 0xb) flock(r3, 0x1) flock(r3, 0x2) 3.024245296s ago: executing program 3 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x3, 0x2, {0x0, 0x1}, {0x3, 0xf0, 0x2}, 0x1, 0xff}, {0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x1}, 0xfe}, {0x1, 0x1, {0x2, 0xff}, {0x2, 0xfe, 0x4}}, {0x1, 0x1, {0x1, 0xf0, 0x4}, {0x1, 0xff, 0x3}, 0xff, 0xfe}, {0x2, 0x2, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x4}, 0x1}], 0xa0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2.986704998s ago: executing program 3 (id=661): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4a041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7) 2.95392906s ago: executing program 3 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x3, 0x2, {0x0, 0x1}, {0x3, 0xf0, 0x2}, 0x1, 0xff}, {0x1, 0x1, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x1}, 0xfe}, {0x1, 0x1, {0x2, 0xff}, {0x2, 0xfe, 0x4}}, {0x1, 0x1, {0x1, 0xf0, 0x4}, {0x1, 0xff, 0x3}, 0xff, 0xfe}, {0x2, 0x2, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x4}, 0x1}], 0xa0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2.914137353s ago: executing program 3 (id=663): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe3523, 0x6, 0xefcb, 0x7fff, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x4}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffffffffffff) 2.846424606s ago: executing program 3 (id=664): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10f, 0x0, 0x0, 0x4) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff, 0xc, 0x1, {0x22, 0xdb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x31, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x2, 0x40}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x40, 0x4, 0x1, 0xff, 0xfe}, 0x90, &(0x7f0000000580)={0x5, 0xf, 0x90, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x81, 0xf, 0x5, [0x3f00, 0xffff0f, 0x3f00, 0xff0000, 0xf]}, @generic={0x6b, 0x10, 0x2, "b030a4a85a8046848e96d23f96975f6e8b6c4f1f759acedb65485830f002bccc8426fcb058dccafe72221987c414aed00282742ada6f419099099e2a11dda79b29f36b7d71c10e5f32372dcb46ce013c8beede7fa32e75cfb205f5fa260a2cf8401def109d1dbb5f"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1409}}, {0xa9, &(0x7f0000000640)=@string={0xa9, 0x3, "503ce1baa0fca550633661a0121b246d4cd7b8bb7b1670628db9daa9886febdcd7749bbdcbdaf8635ace039d86f70a4ea776b2093bcb4c6e9106cf0821a02d8c13c37e0f9a7e76b9c1e89ba5757afc3f8352c49de3afb264dcee5bb91630729216fbde6a34a60439065b1a088d61039ea39a259e4f1eb92469e80f4765788e72595ec5c8adb15b4d9070d625482c1294c6a07d773c380addbc49694f4cec9624b1c6c055026efe"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) eventfd(0x1ff) lseek(r0, 0x5, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) close(0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000", @ANYRES32=r6, @ANYBLOB="0c0001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000080)=0x40000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) file_getattr(r8, 0x0, &(0x7f0000000040), 0x64, 0x1000) 1.556893491s ago: executing program 5 (id=707): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)=ANY=[], 0x0) 1.55590716s ago: executing program 5 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.442646747s ago: executing program 5 (id=710): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xee00, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r7, 0xc, 0x3}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0) 1.330489883s ago: executing program 4 (id=716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x1dd, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) 1.201527681s ago: executing program 4 (id=721): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r5, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a264", 0x2}], 0x1}, 0x4) 1.119151215s ago: executing program 4 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000002000000310a000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000900), 0x207, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f0000000fc0), 0x0}, 0x20) 996.472072ms ago: executing program 4 (id=727): r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404889d}, 0xc0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1}, 0xc0) 952.125046ms ago: executing program 4 (id=729): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 668.495481ms ago: executing program 5 (id=740): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7) 598.888445ms ago: executing program 5 (id=742): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 552.276828ms ago: executing program 5 (id=744): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 388.801487ms ago: executing program 7 (id=749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x37e, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) 383.178388ms ago: executing program 6 (id=750): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 322.996961ms ago: executing program 6 (id=751): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404889d}, 0xc0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1}, 0xc0) 300.903112ms ago: executing program 7 (id=752): clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{}, {r0, r1+10000000}}, &(0x7f0000000600)) 210.911187ms ago: executing program 7 (id=753): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7) 194.762759ms ago: executing program 6 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, 0x0, 0x24000044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 156.531231ms ago: executing program 7 (id=755): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 98.811714ms ago: executing program 7 (id=756): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x1f, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 98.245804ms ago: executing program 6 (id=757): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = syz_io_uring_setup(0x739c, &(0x7f00000007c0)={0x0, 0x79af, 0x80, 0x8000, 0x40024e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x8, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) pwritev(r0, &(0x7f0000000c00)=[{&(0x7f0000000840)="5fe0", 0x2}], 0x1, 0x8003, 0x80000008) 97.581524ms ago: executing program 4 (id=758): r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$cont(0x1f, r0, 0x6, 0xf) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x400) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000100)=""/215) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000380)=""/237) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 53.786807ms ago: executing program 7 (id=759): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/22, 0x16}], 0x1}, 0x10001}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) 695.14µs ago: executing program 6 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=761): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) clock_gettime(0x0, &(0x7f0000002240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/25, 0x19}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/172, 0xac}, 0x4}], 0x2, 0x10, &(0x7f0000002280)={r4, r5+60000000}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r3, @ANYBLOB="242400002019000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) kernel console output (not intermixed with test programs): [ 19.889524][ T29] audit: type=1400 audit(1770433369.618:62): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.911863][ T29] audit: type=1400 audit(1770433369.618:63): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.934720][ T29] audit: type=1400 audit(1770433369.618:64): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.957917][ T29] audit: type=1400 audit(1770433369.618:65): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.981021][ T29] audit: type=1400 audit(1770433369.618:66): avc: denied { read open } for pid=3196 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 26.250364][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.250381][ T29] audit: type=1400 audit(1770433375.978:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.279591][ T29] audit: type=1400 audit(1770433376.008:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.280275][ T3301] cgroup: Unknown subsys name 'net' [ 26.307837][ T29] audit: type=1400 audit(1770433376.038:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.436300][ T3301] cgroup: Unknown subsys name 'cpuset' [ 26.442457][ T3301] cgroup: Unknown subsys name 'rlimit' [ 26.572132][ T29] audit: type=1400 audit(1770433376.298:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.604398][ T29] audit: type=1400 audit(1770433376.298:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.624937][ T29] audit: type=1400 audit(1770433376.298:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.635265][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.645670][ T29] audit: type=1400 audit(1770433376.298:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.675010][ T29] audit: type=1400 audit(1770433376.308:77): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.675244][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.699892][ T29] audit: type=1400 audit(1770433376.308:78): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.732671][ T29] audit: type=1400 audit(1770433376.328:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.598032][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.623787][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.654892][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.704382][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.711728][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.719152][ T3313] bridge_slave_0: entered allmulticast mode [ 28.725773][ T3313] bridge_slave_0: entered promiscuous mode [ 28.734219][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.741437][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.748565][ T3313] bridge_slave_1: entered allmulticast mode [ 28.755187][ T3313] bridge_slave_1: entered promiscuous mode [ 28.785989][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.793098][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.800325][ T3318] bridge_slave_0: entered allmulticast mode [ 28.806898][ T3318] bridge_slave_0: entered promiscuous mode [ 28.824515][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.834138][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.842220][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.849595][ T3318] bridge_slave_1: entered allmulticast mode [ 28.856270][ T3318] bridge_slave_1: entered promiscuous mode [ 28.867930][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.875378][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.882652][ T3314] bridge_slave_0: entered allmulticast mode [ 28.889093][ T3314] bridge_slave_0: entered promiscuous mode [ 28.896744][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.906309][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.913601][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.921768][ T3314] bridge_slave_1: entered allmulticast mode [ 28.928510][ T3314] bridge_slave_1: entered promiscuous mode [ 28.948822][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.976410][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.987468][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.004360][ T3313] team0: Port device team_slave_0 added [ 29.013225][ T3313] team0: Port device team_slave_1 added [ 29.020357][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.037733][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.047372][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.065436][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.072758][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.099931][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.118680][ T3318] team0: Port device team_slave_0 added [ 29.132394][ T3318] team0: Port device team_slave_1 added [ 29.138362][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.145622][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.172094][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.201170][ T3314] team0: Port device team_slave_0 added [ 29.220923][ T3314] team0: Port device team_slave_1 added [ 29.227064][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.234022][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.260658][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.284643][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.292076][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.318914][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.360345][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.367344][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.393900][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.404819][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.412090][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.419428][ T3315] bridge_slave_0: entered allmulticast mode [ 29.426013][ T3315] bridge_slave_0: entered promiscuous mode [ 29.439191][ T3313] hsr_slave_0: entered promiscuous mode [ 29.445277][ T3313] hsr_slave_1: entered promiscuous mode [ 29.455694][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.463071][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.489590][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.503255][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.510442][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.518010][ T3315] bridge_slave_1: entered allmulticast mode [ 29.524520][ T3315] bridge_slave_1: entered promiscuous mode [ 29.547963][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.558802][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.574051][ T3318] hsr_slave_0: entered promiscuous mode [ 29.580190][ T3318] hsr_slave_1: entered promiscuous mode [ 29.586166][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 29.591923][ T3318] Cannot create hsr debugfs directory [ 29.601929][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.609173][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.616486][ T3319] bridge_slave_0: entered allmulticast mode [ 29.622947][ T3319] bridge_slave_0: entered promiscuous mode [ 29.630324][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.637427][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.644739][ T3319] bridge_slave_1: entered allmulticast mode [ 29.651092][ T3319] bridge_slave_1: entered promiscuous mode [ 29.685252][ T3315] team0: Port device team_slave_0 added [ 29.696987][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.707645][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.720088][ T3315] team0: Port device team_slave_1 added [ 29.741425][ T3314] hsr_slave_0: entered promiscuous mode [ 29.747902][ T3314] hsr_slave_1: entered promiscuous mode [ 29.753788][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.759587][ T3314] Cannot create hsr debugfs directory [ 29.795412][ T3319] team0: Port device team_slave_0 added [ 29.801975][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.809183][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.835640][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.850015][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.857105][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.883717][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.897972][ T3319] team0: Port device team_slave_1 added [ 29.941381][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.948590][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.975324][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.997859][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.004847][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.031129][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.098032][ T3315] hsr_slave_0: entered promiscuous mode [ 30.104101][ T3315] hsr_slave_1: entered promiscuous mode [ 30.110126][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.116301][ T3315] Cannot create hsr debugfs directory [ 30.146695][ T3319] hsr_slave_0: entered promiscuous mode [ 30.152836][ T3319] hsr_slave_1: entered promiscuous mode [ 30.158769][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 30.164671][ T3319] Cannot create hsr debugfs directory [ 30.170407][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.184309][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.222072][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.231435][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.284631][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.296701][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.305885][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.325567][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.364740][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.373405][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.382820][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.391756][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.443028][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.450406][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.473772][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.482631][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.491464][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.501084][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.520225][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.527405][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.538044][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.545108][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.564340][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.579172][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.591863][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.602455][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.623769][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.642554][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.656836][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.682833][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.699276][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.706707][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.715178][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.722344][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.742820][ T1751] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.750036][ T1751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.762343][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.770917][ T1751] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.778201][ T1751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.816403][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.832002][ T1751] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.839194][ T1751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.848410][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.861804][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.881134][ T1751] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.888351][ T1751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.902836][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.914594][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.929354][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.936683][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.945726][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.952974][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.017993][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.056364][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.089584][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.117329][ T3313] veth0_vlan: entered promiscuous mode [ 31.126299][ T3313] veth1_vlan: entered promiscuous mode [ 31.150659][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.194725][ T3313] veth0_macvtap: entered promiscuous mode [ 31.213990][ T3313] veth1_macvtap: entered promiscuous mode [ 31.259756][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.269798][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.290762][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.314382][ T1751] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.323562][ T3314] veth0_vlan: entered promiscuous mode [ 31.332544][ T3314] veth1_vlan: entered promiscuous mode [ 31.341092][ T1751] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.353372][ T3318] veth0_vlan: entered promiscuous mode [ 31.364999][ T1751] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.377440][ T3318] veth1_vlan: entered promiscuous mode [ 31.391445][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 31.391503][ T29] audit: type=1400 audit(1770433381.118:91): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.fjaIFY/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.404258][ T3318] veth0_macvtap: entered promiscuous mode [ 31.429037][ T29] audit: type=1400 audit(1770433381.158:92): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.435785][ T1751] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.451508][ T29] audit: type=1400 audit(1770433381.158:93): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.fjaIFY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.461851][ T3318] veth1_macvtap: entered promiscuous mode [ 31.486472][ T29] audit: type=1400 audit(1770433381.158:94): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.498613][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.514216][ T29] audit: type=1400 audit(1770433381.158:95): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.fjaIFY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.523767][ T3315] veth0_vlan: entered promiscuous mode [ 31.548622][ T29] audit: type=1400 audit(1770433381.158:96): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.fjaIFY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.574076][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.582151][ T29] audit: type=1400 audit(1770433381.158:97): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.608696][ T3314] veth0_macvtap: entered promiscuous mode [ 31.611134][ T29] audit: type=1400 audit(1770433381.338:98): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.626580][ T374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.637649][ T29] audit: type=1400 audit(1770433381.338:99): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.674986][ T3314] veth1_macvtap: entered promiscuous mode [ 31.684471][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.690703][ T3319] veth0_vlan: entered promiscuous mode [ 31.706842][ T374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.716055][ T374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.734678][ T29] audit: type=1400 audit(1770433381.458:100): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.735985][ T3315] veth1_vlan: entered promiscuous mode [ 31.769249][ T3319] veth1_vlan: entered promiscuous mode [ 31.783958][ T374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.786653][ T3481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.810127][ T3319] veth0_macvtap: entered promiscuous mode [ 31.823887][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.833721][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.854320][ T3484] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.855286][ T3319] veth1_macvtap: entered promiscuous mode [ 31.895849][ T3315] veth0_macvtap: entered promiscuous mode [ 31.908611][ T3315] veth1_macvtap: entered promiscuous mode [ 31.945738][ T3490] loop1: detected capacity change from 0 to 512 [ 31.955041][ T3490] EXT4-fs: Ignoring removed oldalloc option [ 31.977790][ T3490] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.990991][ T3490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.002426][ T374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.013680][ T374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.028476][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.038249][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.040537][ T3490] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #11: comm syz.1.8: corrupted in-inode xattr: invalid ea_ino [ 32.069667][ T3490] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8: couldn't read orphan inode 11 (err -117) [ 32.069721][ T374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.082741][ T3490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.090608][ T374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.180136][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.192897][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.236432][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.256476][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.321668][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.356749][ T3500] loop4: detected capacity change from 0 to 128 [ 32.418651][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.507609][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.517047][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.526099][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.535032][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.572501][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.582033][ T3506] loop3: detected capacity change from 0 to 512 [ 32.597724][ T3506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.612096][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.621161][ T3510] bridge: RTM_NEWNEIGH with invalid ether address [ 33.134294][ T3506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 33.155444][ T3506] System zones: 1-12 [ 33.155770][ T3506] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4: invalid indirect mapped block 8 (level 2) [ 33.162113][ T3506] EXT4-fs (loop3): 1 truncate cleaned up [ 33.162739][ T3506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.298988][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.332969][ T3525] loop3: detected capacity change from 0 to 512 [ 33.339796][ T3521] capability: warning: `syz.0.11' uses deprecated v2 capabilities in a way that may be insecure [ 33.369785][ T3525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.380151][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'. [ 33.393291][ T3525] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.413763][ T3525] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 3381 (only 1 groups) [ 33.500466][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.560356][ T3541] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.569554][ T3541] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.628950][ T3548] loop4: detected capacity change from 0 to 1024 [ 33.634403][ T3550] loop1: detected capacity change from 0 to 512 [ 33.640074][ T3548] EXT4-fs: Ignoring removed orlov option [ 33.652275][ T3548] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 33.662620][ T3550] EXT4-fs: Ignoring removed oldalloc option [ 33.675835][ T3550] EXT4-fs (loop1): 1 truncate cleaned up [ 33.685945][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.686878][ T3550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.746378][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.801370][ T3557] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 33.831697][ T374] team0: Port device team_slave_0 removed [ 33.832298][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.903742][ T3565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3565 comm=syz.3.29 [ 33.917994][ T3562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 34.622276][ T3590] loop0: detected capacity change from 0 to 256 [ 35.010731][ T3594] loop4: detected capacity change from 0 to 512 [ 35.085784][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.124613][ T3594] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.279277][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.608582][ T3622] loop0: detected capacity change from 0 to 128 [ 35.618175][ T3622] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.630840][ T3622] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.898108][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.249513][ T3638] syzkaller0: entered promiscuous mode [ 36.255411][ T3638] syzkaller0: entered allmulticast mode [ 36.367238][ T3649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.430632][ T3652] loop3: detected capacity change from 0 to 512 [ 36.450876][ T3652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.464639][ T3652] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.490797][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.508836][ T3657] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.586068][ T3660] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 37.030247][ T3663] set_capacity_and_notify: 1 callbacks suppressed [ 37.030267][ T3663] loop4: detected capacity change from 0 to 8192 [ 37.045819][ T374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.094958][ T374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.346018][ T374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.456949][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 37.456969][ T29] audit: type=1400 audit(1770433387.188:168): avc: denied { read } for pid=3683 comm="syz.1.70" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.788091][ T374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.240431][ T3692] loop4: detected capacity change from 0 to 512 [ 38.340539][ T3692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.365430][ T374] bridge_slave_1: left allmulticast mode [ 38.371384][ T374] bridge_slave_1: left promiscuous mode [ 38.375071][ T3692] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.377197][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.403316][ T374] bridge_slave_0: left allmulticast mode [ 38.409450][ T374] bridge_slave_0: left promiscuous mode [ 38.415417][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.424075][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.473234][ T3701] loop4: detected capacity change from 0 to 256 [ 38.503508][ T3703] loop1: detected capacity change from 0 to 512 [ 38.539475][ T3703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.566503][ T3703] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.588654][ T374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.608114][ T374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.618249][ T374] bond0 (unregistering): Released all slaves [ 38.627303][ T3699] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.73'. [ 38.644679][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.654096][ T3709] loop4: detected capacity change from 0 to 8192 [ 38.665701][ T3695] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.73'. [ 38.694242][ T29] audit: type=1400 audit(1770433388.418:169): avc: denied { create } for pid=3714 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.704229][ T3665] chnl_net:caif_netlink_parms(): no params data found [ 38.716242][ T3715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 38.730099][ T29] audit: type=1400 audit(1770433388.448:170): avc: denied { ioctl } for pid=3714 comm="syz.0.81" path="socket:[6306]" dev="sockfs" ino=6306 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.755066][ T29] audit: type=1400 audit(1770433388.448:171): avc: denied { bind } for pid=3714 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.775276][ T29] audit: type=1400 audit(1770433388.448:172): avc: denied { setopt } for pid=3714 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.795232][ T29] audit: type=1400 audit(1770433388.448:173): avc: denied { write } for pid=3714 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.830873][ T374] hsr_slave_0: left promiscuous mode [ 38.860862][ T374] hsr_slave_1: left promiscuous mode [ 38.965688][ T374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.973217][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811afbfe00: rx timeout, send abort [ 38.982019][ T374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.989265][ T29] audit: type=1400 audit(1770433388.708:174): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.993213][ T3726] loop4: detected capacity change from 0 to 512 [ 39.011732][ T29] audit: type=1400 audit(1770433388.708:175): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.011763][ T29] audit: type=1400 audit(1770433388.708:176): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.047993][ T3726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.063170][ T29] audit: type=1400 audit(1770433388.708:177): avc: denied { add_name } for pid=2984 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.077898][ T3726] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.108407][ T374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.116322][ T374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.124852][ T3720] netlink: 64 bytes leftover after parsing attributes in process `syz.3.82'. [ 39.134217][ T374] veth1_macvtap: left promiscuous mode [ 39.140337][ T374] veth0_macvtap: left promiscuous mode [ 39.141536][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.146084][ T374] veth1_vlan: left promiscuous mode [ 39.161843][ T374] veth0_vlan: left promiscuous mode [ 39.243904][ T374] team0 (unregistering): Port device team_slave_1 removed [ 39.254376][ T374] team0 (unregistering): Port device team_slave_0 removed [ 39.770833][ T3757] loop3: detected capacity change from 0 to 128 [ 39.780958][ T3755] loop1: detected capacity change from 0 to 512 [ 39.791980][ T3757] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.797120][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.811313][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.819030][ T3665] bridge_slave_0: entered allmulticast mode [ 39.824230][ T3755] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 39.825657][ T3665] bridge_slave_0: entered promiscuous mode [ 39.834862][ T3755] FAT-fs (loop1): Filesystem has been set read-only [ 39.841542][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.854537][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.861963][ T3665] bridge_slave_1: entered allmulticast mode [ 39.868769][ T3665] bridge_slave_1: entered promiscuous mode [ 39.880098][ T3757] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.890956][ T3665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.901756][ T3665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.922926][ T3665] team0: Port device team_slave_0 added [ 39.932279][ T3665] team0: Port device team_slave_1 added [ 39.958078][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.965484][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.991804][ T3665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.004082][ T3747] syz.0.86: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 40.010981][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.018890][ T3747] CPU: 0 UID: 0 PID: 3747 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.018927][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 40.018939][ T3747] Call Trace: [ 40.018947][ T3747] [ 40.019004][ T3747] __dump_stack+0x1d/0x30 [ 40.019030][ T3747] dump_stack_lvl+0x95/0xd0 [ 40.019051][ T3747] dump_stack+0x15/0x1b [ 40.019117][ T3747] warn_alloc+0x145/0x1c0 [ 40.019146][ T3747] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 40.019234][ T3747] ? __futex_wait+0x1fd/0x260 [ 40.019261][ T3747] ? __pfx_futex_wake_mark+0x10/0x10 [ 40.019297][ T3747] ? __rcu_read_unlock+0x4e/0x70 [ 40.019334][ T3747] ? avc_has_perm_noaudit+0xab/0x130 [ 40.019365][ T3747] ? should_fail_ex+0x30/0x280 [ 40.019432][ T3747] ? should_failslab+0x8c/0xb0 [ 40.019454][ T3747] vmalloc_user_noprof+0x7d/0xb0 [ 40.019484][ T3747] ? xskq_create+0x80/0xe0 [ 40.019512][ T3747] xskq_create+0x80/0xe0 [ 40.019540][ T3747] xsk_init_queue+0x91/0xe0 [ 40.019566][ T3747] xsk_setsockopt+0x3f5/0x640 [ 40.019650][ T3747] ? __pfx_xsk_setsockopt+0x10/0x10 [ 40.019693][ T3747] __sys_setsockopt+0x184/0x200 [ 40.019724][ T3747] __x64_sys_setsockopt+0x64/0x80 [ 40.019752][ T3747] x64_sys_call+0x21d5/0x3000 [ 40.019838][ T3747] do_syscall_64+0xc0/0x2a0 [ 40.019866][ T3747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.019887][ T3747] RIP: 0033:0x7f701165aeb9 [ 40.019905][ T3747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.019922][ T3747] RSP: 002b:00007f70100b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 40.019966][ T3747] RAX: ffffffffffffffda RBX: 00007f70118d5fa0 RCX: 00007f701165aeb9 [ 40.019980][ T3747] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 40.019993][ T3747] RBP: 00007f70116c8c1f R08: 0000000000000004 R09: 0000000000000000 [ 40.020005][ T3747] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.020043][ T3747] R13: 00007f70118d6038 R14: 00007f70118d5fa0 R15: 00007fff12526e98 [ 40.020060][ T3747] [ 40.020066][ T3747] Mem-Info: [ 40.026032][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.035668][ T3747] active_anon:12771 inactive_anon:0 isolated_anon:0 [ 40.035668][ T3747] active_file:8632 inactive_file:2283 isolated_file:0 [ 40.035668][ T3747] unevictable:0 dirty:1467 writeback:0 [ 40.035668][ T3747] slab_reclaimable:3155 slab_unreclaimable:14419 [ 40.035668][ T3747] mapped:34760 shmem:5961 pagetables:1112 [ 40.035668][ T3747] sec_pagetables:0 bounce:0 [ 40.035668][ T3747] kernel_misc_reclaimable:0 [ 40.035668][ T3747] free:1893048 free_pcp:9070 free_cma:0 [ 40.045899][ T3665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.049166][ T3747] Node 0 active_anon:51084kB inactive_anon:0kB active_file:34528kB inactive_file:9132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139040kB dirty:5868kB writeback:0kB shmem:23844kB kernel_stack:3360kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 40.351592][ T3747] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 40.381874][ T3747] lowmem_reserve[]: 0 2879 7858 7858 [ 40.387745][ T3747] Node 0 DMA32 free:2944740kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948372kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 40.419282][ T3747] lowmem_reserve[]: 0 0 4978 4978 [ 40.424350][ T3747] Node 0 Normal free:4612092kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50620kB inactive_anon:0kB active_file:34528kB inactive_file:9132kB unevictable:0kB writepending:5868kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:32336kB local_pcp:6124kB free_cma:0kB [ 40.457960][ T3747] lowmem_reserve[]: 0 0 0 0 [ 40.462639][ T3747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 40.475655][ T3747] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944740kB [ 40.491840][ T3747] Node 0 Normal: 2*4kB (ME) 61*8kB (U) 2*16kB (UM) 3*32kB (UME) 2*64kB (UE) 2*128kB (U) 2*256kB (UM) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 1124*4096kB (M) = 4612080kB [ 40.509258][ T3747] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 40.518780][ T3747] 16900 total pagecache pages [ 40.523491][ T3747] 0 pages in swap cache [ 40.527707][ T3747] Free swap = 124996kB [ 40.531924][ T3747] Total swap = 124996kB [ 40.536099][ T3747] 2097051 pages RAM [ 40.539913][ T3747] 0 pages HighMem/MovableOnly [ 40.544623][ T3747] 81558 pages reserved [ 40.591669][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.628448][ T3665] hsr_slave_0: entered promiscuous mode [ 40.634634][ T3665] hsr_slave_1: entered promiscuous mode [ 40.644084][ T3782] loop1: detected capacity change from 0 to 512 [ 40.647572][ T3780] loop4: detected capacity change from 0 to 1024 [ 40.657448][ T3665] debugfs: 'hsr0' already exists in 'hsr' [ 40.663229][ T3665] Cannot create hsr debugfs directory [ 40.675877][ T3780] EXT4-fs: Ignoring removed orlov option [ 40.682207][ T3782] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.721486][ T3780] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 40.797098][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.887035][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.227579][ T3813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.323034][ T3665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.358350][ T3813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.380690][ T3665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.401320][ T3665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.431054][ T3665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.594040][ T3665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.607875][ T3665] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.633149][ T3665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.643708][ T3665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.808318][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.815535][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.014572][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.021733][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.151913][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.202519][ T3858] set_capacity_and_notify: 3 callbacks suppressed [ 42.202535][ T3858] loop4: detected capacity change from 0 to 256 [ 42.281754][ T3863] loop1: detected capacity change from 0 to 1024 [ 42.360554][ T3863] EXT4-fs: Ignoring removed orlov option [ 42.388328][ T3665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.425440][ T3863] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 42.452101][ T3866] loop4: detected capacity change from 0 to 128 [ 42.471598][ T3866] EXT4-fs: Ignoring removed nobh option [ 42.484809][ T3866] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.486075][ T3863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.529121][ T3866] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.576456][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 42.576490][ T29] audit: type=1400 audit(1770433392.308:191): avc: denied { setattr } for pid=3865 comm="syz.4.105" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.605254][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.632162][ T3888] loop3: detected capacity change from 0 to 512 [ 42.632909][ T3665] veth0_vlan: entered promiscuous mode [ 42.645993][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.647911][ T3665] veth1_vlan: entered promiscuous mode [ 42.681262][ T3665] veth0_macvtap: entered promiscuous mode [ 42.687258][ T3888] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 42.705527][ T3888] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.769863][ T3665] veth1_macvtap: entered promiscuous mode [ 42.806469][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.820833][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.830307][ T3904] loop0: detected capacity change from 0 to 1024 [ 42.845260][ T29] audit: type=1400 audit(1770433392.568:192): avc: denied { setopt } for pid=3905 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.864845][ T29] audit: type=1400 audit(1770433392.568:193): avc: denied { bind } for pid=3905 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.884011][ T29] audit: type=1400 audit(1770433392.568:194): avc: denied { name_bind } for pid=3905 comm="syz.1.113" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.906700][ T29] audit: type=1400 audit(1770433392.568:195): avc: denied { node_bind } for pid=3905 comm="syz.1.113" saddr=::ffff:127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 42.951979][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.952036][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.952074][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.952110][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.031311][ T3904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.078395][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.138000][ T29] audit: type=1400 audit(1770433392.858:196): avc: denied { bind } for pid=3912 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.138046][ T29] audit: type=1400 audit(1770433392.858:197): avc: denied { bind } for pid=3912 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.138120][ T29] audit: type=1400 audit(1770433392.868:198): avc: denied { name_bind } for pid=3912 comm="syz.1.115" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 43.138139][ T29] audit: type=1400 audit(1770433392.868:199): avc: denied { node_bind } for pid=3912 comm="syz.1.115" saddr=fc01:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.138163][ T29] audit: type=1400 audit(1770433392.868:200): avc: denied { connect } for pid=3912 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.580245][ T3943] loop0: detected capacity change from 0 to 1024 [ 43.596481][ T3943] EXT4-fs: Ignoring removed orlov option [ 43.613971][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 43.626451][ T3943] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 43.654414][ T3943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.734688][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.899453][ T3974] netlink: 'syz.4.120': attribute type 12 has an invalid length. [ 43.907253][ T3974] netlink: 'syz.4.120': attribute type 29 has an invalid length. [ 43.915118][ T3974] netlink: 148 bytes leftover after parsing attributes in process `syz.4.120'. [ 43.924646][ T3974] Zero length message leads to an empty skb [ 44.080386][ T3980] loop1: detected capacity change from 0 to 512 [ 44.207985][ T3980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.257392][ T3980] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.281657][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.306623][ T3995] loop1: detected capacity change from 0 to 1024 [ 44.314156][ T3995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.326318][ T3995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.287235][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.305040][ T4003] loop4: detected capacity change from 0 to 1024 [ 45.312531][ T4003] EXT4-fs: Ignoring removed orlov option [ 45.335385][ T4003] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 45.400092][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:0) [ 45.410439][ T4009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 45.426546][ T4003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.472438][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.674694][ T4026] netlink: 7 bytes leftover after parsing attributes in process `syz.4.138'. [ 46.240747][ T4029] loop4: detected capacity change from 0 to 4096 [ 46.260241][ T4029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.950745][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.024154][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.031815][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.158278][ T4050] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.180044][ T4050] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.268134][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.327017][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 47.530512][ T4066] syzkaller0: entered promiscuous mode [ 47.536380][ T4066] syzkaller0: entered allmulticast mode [ 47.542089][ T4070] set_capacity_and_notify: 1 callbacks suppressed [ 47.542106][ T4070] loop3: detected capacity change from 0 to 512 [ 47.558791][ T4070] EXT4-fs: Ignoring removed oldalloc option [ 47.609090][ T4070] EXT4-fs (loop3): 1 truncate cleaned up [ 47.619467][ T4070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.661103][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.683691][ T4085] loop1: detected capacity change from 0 to 512 [ 47.702131][ T4085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.715500][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 47.715566][ T29] audit: type=1400 audit(1770433397.438:217): avc: denied { mount } for pid=4086 comm="syz.3.165" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.744337][ T4085] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.762222][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 47.772289][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.846298][ T4102] loop4: detected capacity change from 0 to 256 [ 47.946642][ T4117] loop4: detected capacity change from 0 to 512 [ 47.962467][ T4117] EXT4-fs: Ignoring removed orlov option [ 47.988015][ T4117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.004546][ T4117] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.024196][ T29] audit: type=1400 audit(1770433397.748:218): avc: denied { read append open } for pid=4116 comm="syz.4.178" path="/43/bus/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.035463][ T4129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.183'. [ 48.061407][ T29] audit: type=1400 audit(1770433397.788:219): avc: denied { write } for pid=4116 comm="syz.4.178" name="cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.084706][ T29] audit: type=1400 audit(1770433397.808:220): avc: denied { ioctl } for pid=4116 comm="syz.4.178" path="/43/bus/cpuset.effective_mems" dev="loop4" ino=19 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.115872][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.151231][ T4133] loop1: detected capacity change from 0 to 256 [ 49.198118][ T4158] loop0: detected capacity change from 0 to 256 [ 49.227351][ T4164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 49.312615][ T4172] loop0: detected capacity change from 0 to 512 [ 49.319156][ T4170] loop1: detected capacity change from 0 to 128 [ 49.319630][ T4172] EXT4-fs: Ignoring removed oldalloc option [ 49.331746][ T4161] loop4: detected capacity change from 0 to 8192 [ 49.332264][ T4170] EXT4-fs: Ignoring removed nobh option [ 49.366119][ T4170] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.422181][ T4170] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.462673][ T4172] EXT4-fs (loop0): 1 truncate cleaned up [ 49.478117][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.491199][ T4172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.550656][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.569662][ T4192] loop1: detected capacity change from 0 to 256 [ 49.629974][ T4198] EXT4-fs: Ignoring removed orlov option [ 49.664085][ T4198] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 49.697795][ T4198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.722325][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.794826][ T4216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 49.821098][ T4218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4218 comm=syz.1.219 [ 49.835415][ T4215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.856030][ T4215] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.860816][ T4222] geneve2: entered promiscuous mode [ 49.881895][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.971184][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 50.019595][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 50.088108][ T4248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.100708][ T4248] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.126639][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.188507][ T29] audit: type=1400 audit(1770433399.918:221): avc: denied { create } for pid=4235 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.491596][ T4261] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 50.531970][ T29] audit: type=1400 audit(1770433400.238:222): avc: denied { remount } for pid=4262 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.564032][ T4261] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.598544][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 50.638564][ T4271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 50.686646][ T4275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.699811][ T4275] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.734327][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.313936][ T29] audit: type=1400 audit(1770433401.038:223): avc: denied { ioctl } for pid=4294 comm="syz.3.251" path="socket:[8317]" dev="sockfs" ino=8317 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.328707][ T4297] syz_tun: entered allmulticast mode [ 51.348133][ T4296] syz_tun: left allmulticast mode [ 51.383416][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 51.452547][ T4305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'. [ 51.566621][ T4324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 51.602381][ T4329] tipc: Started in network mode [ 51.607380][ T4329] tipc: Node identity a212f3cc1508, cluster identity 4711 [ 51.614580][ T4329] tipc: Enabled bearer , priority 0 [ 51.621862][ T4329] syzkaller0: entered promiscuous mode [ 51.627472][ T4329] syzkaller0: entered allmulticast mode [ 51.640170][ T4329] tipc: Resetting bearer [ 51.648808][ T4328] tipc: Resetting bearer [ 51.656484][ T4328] tipc: Disabling bearer [ 51.720768][ T29] audit: type=1400 audit(1770433401.448:224): avc: denied { write } for pid=4332 comm="syz.4.268" path="socket:[7364]" dev="sockfs" ino=7364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.747769][ T4333] bond0: entered promiscuous mode [ 51.753348][ T4333] bond_slave_0: entered promiscuous mode [ 51.753427][ T4333] bond_slave_1: entered promiscuous mode [ 51.767412][ T4333] batadv_slave_0: entered promiscuous mode [ 51.773432][ T4333] batadv_slave_0: left promiscuous mode [ 51.780268][ T4333] bond0: left promiscuous mode [ 51.785341][ T4333] bond_slave_0: left promiscuous mode [ 51.791039][ T4333] bond_slave_1: left promiscuous mode [ 51.833619][ T4341] EXT4-fs: Ignoring removed orlov option [ 51.840390][ T4341] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 51.876032][ T4341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.915296][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.938957][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 51.966364][ T4353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.982812][ T4353] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.004706][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.016514][ T4361] EXT4-fs: Ignoring removed orlov option [ 52.047922][ T4361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.065239][ T4361] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.101455][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.180098][ T4376] geneve2: entered promiscuous mode [ 52.267341][ T4385] EXT4-fs: Ignoring removed orlov option [ 52.286584][ T4385] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 52.324094][ T4385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.360231][ T29] audit: type=1400 audit(1770433402.088:225): avc: denied { setopt } for pid=4402 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.381381][ T4403] tipc: Started in network mode [ 52.386444][ T4403] tipc: Node identity 4, cluster identity 4711 [ 52.392926][ T4403] tipc: Node number set to 4 [ 52.399298][ T29] audit: type=1400 audit(1770433402.128:226): avc: denied { write } for pid=4402 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.401089][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.419180][ T4401] EXT4-fs: Ignoring removed orlov option [ 52.443881][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.469721][ T4401] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.500408][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.548509][ T4414] FAT-fs (loop3): codepage cp1250 not found [ 52.648938][ T4430] set_capacity_and_notify: 14 callbacks suppressed [ 52.648957][ T4430] loop3: detected capacity change from 0 to 1024 [ 52.677020][ T4430] EXT4-fs: Ignoring removed orlov option [ 52.688602][ T4430] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 52.708465][ T4430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.730961][ T4440] geneve2: entered promiscuous mode [ 52.737232][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.738732][ T4441] sctp: [Deprecated]: syz.4.311 (pid 4441) Use of int in max_burst socket option. [ 52.738732][ T4441] Use struct sctp_assoc_value instead [ 52.867923][ T29] audit: type=1400 audit(1770433402.588:227): avc: denied { getopt } for pid=4452 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.228332][ T4476] loop3: detected capacity change from 0 to 1024 [ 53.237795][ T4476] ======================================================= [ 53.237795][ T4476] WARNING: The mand mount option has been deprecated and [ 53.237795][ T4476] and is ignored by this kernel. Remove the mand [ 53.237795][ T4476] option from the mount to silence this warning. [ 53.237795][ T4476] ======================================================= [ 53.385719][ T4476] EXT4-fs: inline encryption not supported [ 53.467430][ T4476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.561946][ T29] audit: type=1400 audit(1770433403.288:228): avc: denied { quotaon } for pid=4475 comm="syz.3.328" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.584699][ T29] audit: type=1400 audit(1770433403.288:229): avc: denied { create } for pid=4475 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.774504][ T4503] geneve2: entered promiscuous mode [ 54.024879][ T29] audit: type=1400 audit(1770433403.558:230): avc: denied { setopt } for pid=4475 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.045183][ T29] audit: type=1400 audit(1770433403.558:231): avc: denied { write } for pid=4475 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.312016][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.339185][ T4513] loop4: detected capacity change from 0 to 512 [ 54.378352][ T4513] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.397196][ T29] audit: type=1400 audit(1770433404.028:232): avc: denied { read } for pid=4496 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.771241][ T4514] syz.0.341 (4514) used greatest stack depth: 9296 bytes left [ 54.855179][ T29] audit: type=1400 audit(1770433404.368:233): avc: denied { map } for pid=4519 comm="syz.1.346" path="socket:[8660]" dev="sockfs" ino=8660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.878554][ T29] audit: type=1400 audit(1770433404.368:234): avc: denied { read } for pid=4519 comm="syz.1.346" path="socket:[8660]" dev="sockfs" ino=8660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.901837][ T29] audit: type=1400 audit(1770433404.578:235): avc: denied { getopt } for pid=4519 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.986506][ T4528] loop4: detected capacity change from 0 to 512 [ 55.039047][ T4531] __nla_validate_parse: 7 callbacks suppressed [ 55.039066][ T4531] netlink: 7 bytes leftover after parsing attributes in process `syz.3.350'. [ 55.055893][ T4528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.072785][ T4528] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.126323][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.177524][ T4539] loop3: detected capacity change from 0 to 512 [ 55.185672][ T4539] EXT4-fs: Ignoring removed orlov option [ 55.206915][ T4539] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.570156][ T4547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'. [ 56.212637][ T4573] loop3: detected capacity change from 0 to 512 [ 56.221620][ T4573] EXT4-fs: Ignoring removed orlov option [ 56.237678][ T4573] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.289420][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 56.361021][ T4586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 56.511394][ T4600] loop1: detected capacity change from 0 to 512 [ 56.525746][ T4600] EXT4-fs: Ignoring removed orlov option [ 56.544396][ T4600] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.997515][ T4629] loop4: detected capacity change from 0 to 512 [ 57.005110][ T4629] EXT4-fs: Ignoring removed oldalloc option [ 57.077168][ T4629] EXT4-fs (loop4): 1 truncate cleaned up [ 57.149083][ T4633] loop4: detected capacity change from 0 to 512 [ 57.156386][ T4633] EXT4-fs: Ignoring removed orlov option [ 57.198127][ T4633] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.282492][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.392'. [ 57.362903][ T4651] syz_tun: entered allmulticast mode [ 57.369465][ T4650] syz_tun: left allmulticast mode [ 57.405591][ T4656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 57.429474][ T4658] netlink: 7 bytes leftover after parsing attributes in process `syz.3.400'. [ 57.452096][ T4660] syzkaller0: entered promiscuous mode [ 57.457772][ T4660] syzkaller0: entered allmulticast mode [ 57.478547][ T4660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.401'. [ 57.487852][ T4660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.401'. [ 57.497468][ T4660] 0: reclassify loop, rule prio 0, protocol 800 [ 57.572239][ T4672] tipc: Started in network mode [ 57.577259][ T4672] tipc: Node identity 4, cluster identity 4711 [ 57.583580][ T4672] tipc: Node number set to 4 [ 57.642876][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 57.745395][ T29] audit: type=1400 audit(1770433407.468:236): avc: denied { open } for pid=4693 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 57.824813][ T4702] tipc: Cannot configure node identity twice [ 58.103456][ T4728] tipc: Cannot configure node identity twice [ 58.128963][ T4730] tipc: Cannot configure node identity twice [ 58.890598][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 58.890615][ T29] audit: type=1326 audit(1770433408.618:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38d57aeb9 code=0x7ffc0000 [ 58.920334][ T29] audit: type=1326 audit(1770433408.618:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38d57aeb9 code=0x7ffc0000 [ 58.944272][ T29] audit: type=1326 audit(1770433408.618:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe38d57aeb9 code=0x7ffc0000 [ 58.970768][ T29] audit: type=1326 audit(1770433408.698:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38d57aeb9 code=0x7ffc0000 [ 59.002522][ T29] audit: type=1326 audit(1770433408.728:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38d57aeb9 code=0x7ffc0000 [ 59.026297][ T29] audit: type=1326 audit(1770433408.728:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe38d57aeb9 code=0x7ffc0000 [ 59.026484][ T4746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.049879][ T29] audit: type=1326 audit(1770433408.728:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38d57aeb9 code=0x7ffc0000 [ 59.058822][ T4746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.081971][ T29] audit: type=1326 audit(1770433408.728:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38d57aeb9 code=0x7ffc0000 [ 59.113285][ T29] audit: type=1326 audit(1770433408.728:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe38d53b78e code=0x7ffc0000 [ 59.113313][ T29] audit: type=1400 audit(1770433408.728:248): avc: denied { read write } for pid=4745 comm="syz.1.440" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.453876][ T4777] loop0: detected capacity change from 0 to 128 [ 59.461111][ T4777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.473980][ T4777] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.487512][ T60] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.560296][ T4783] loop0: detected capacity change from 0 to 256 [ 59.696598][ T4789] loop0: detected capacity change from 0 to 512 [ 59.703398][ T4789] EXT4-fs: Ignoring removed orlov option [ 59.726203][ T4789] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 59.737364][ T4789] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.458: attempt to clear invalid blocks 2 len 1 [ 59.751833][ T4789] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 59.767105][ T4789] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.458: invalid indirect mapped block 1819239214 (level 0) [ 59.782183][ T4789] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.458: invalid indirect mapped block 1819239214 (level 1) [ 59.803049][ T4789] EXT4-fs (loop0): 1 truncate cleaned up [ 60.012638][ T3315] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 60.052031][ T3315] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 60.078283][ T3315] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 60.241583][ T3503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.373238][ T3503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.419046][ T3503] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.478702][ T3503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.553951][ T3503] bridge_slave_1: left allmulticast mode [ 60.559953][ T3503] bridge_slave_1: left promiscuous mode [ 60.566068][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.584448][ T3503] bridge_slave_0: left allmulticast mode [ 60.590225][ T3503] bridge_slave_0: left promiscuous mode [ 60.596136][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.669476][ T4816] loop3: detected capacity change from 0 to 512 [ 60.698343][ T4816] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.712727][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.738664][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.761436][ T3503] bond0 (unregistering): Released all slaves [ 60.923922][ T3503] tipc: Left network mode [ 60.934769][ T3503] hsr_slave_0: left promiscuous mode [ 60.951050][ T3503] hsr_slave_1: left promiscuous mode [ 60.964766][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.972351][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.008128][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.015821][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.072975][ T3503] veth1_macvtap: left promiscuous mode [ 61.119492][ T3503] veth0_macvtap: left promiscuous mode [ 61.153324][ T3503] veth1_vlan: left promiscuous mode [ 61.193137][ T3503] veth0_vlan: left promiscuous mode [ 61.456081][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 61.473419][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 61.518639][ T4804] chnl_net:caif_netlink_parms(): no params data found [ 61.547705][ T4847] __nla_validate_parse: 2 callbacks suppressed [ 61.547722][ T4847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.472'. [ 61.606460][ T4804] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.613681][ T4804] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.698548][ T4804] bridge_slave_0: entered allmulticast mode [ 61.711935][ T4804] bridge_slave_0: entered promiscuous mode [ 61.720494][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.727905][ T4804] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.735609][ T4804] bridge_slave_1: entered allmulticast mode [ 61.742299][ T4804] bridge_slave_1: entered promiscuous mode [ 61.760162][ T4804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.770962][ T4804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.793021][ T4804] team0: Port device team_slave_0 added [ 61.805683][ T4804] team0: Port device team_slave_1 added [ 61.838700][ T4804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.845770][ T4804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.871831][ T4804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.918419][ T4874] hub 8-0:1.0: USB hub found [ 61.923314][ T4874] hub 8-0:1.0: 8 ports detected [ 62.094444][ T4804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.101537][ T4804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.128212][ T4804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.316167][ T4804] hsr_slave_0: entered promiscuous mode [ 62.322346][ T4804] hsr_slave_1: entered promiscuous mode [ 62.346036][ T4804] debugfs: 'hsr0' already exists in 'hsr' [ 62.352023][ T4804] Cannot create hsr debugfs directory [ 62.535548][ T4804] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.545093][ T4898] loop1: detected capacity change from 0 to 8192 [ 62.558956][ T4804] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.594131][ T4804] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.609954][ T4804] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.776716][ T4898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 62.798058][ T4898] bond0: entered promiscuous mode [ 62.803295][ T4898] bond_slave_0: entered promiscuous mode [ 62.809209][ T4898] bond_slave_1: entered promiscuous mode [ 62.826784][ T4898] ipvlan1: entered promiscuous mode [ 62.846684][ T4898] ipvlan1: left promiscuous mode [ 62.852034][ T4898] bond0: left promiscuous mode [ 62.857049][ T4898] bond_slave_0: left promiscuous mode [ 62.862611][ T4898] bond_slave_1: left promiscuous mode [ 62.881889][ T4804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.917020][ T4804] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.929658][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.936875][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.962552][ T2383] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.969920][ T2383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.972553][ T3313] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 62.985085][ T3313] FAT-fs (loop1): Filesystem has been set read-only [ 63.021797][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.099259][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.111243][ T4945] loop1: detected capacity change from 0 to 128 [ 63.166081][ T4945] syz.1.487: attempt to access beyond end of device [ 63.166081][ T4945] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 63.180872][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.186054][ T4945] syz.1.487: attempt to access beyond end of device [ 63.186054][ T4945] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 63.204941][ T4945] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 63.236070][ T4945] syz.1.487: attempt to access beyond end of device [ 63.236070][ T4945] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 63.268955][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.282720][ T4953] syz.1.487: attempt to access beyond end of device [ 63.282720][ T4953] loop1: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 63.297876][ T4953] syz.1.487: attempt to access beyond end of device [ 63.297876][ T4953] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 63.311589][ T4953] syz.1.487: attempt to access beyond end of device [ 63.311589][ T4953] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 63.330951][ T4804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.343060][ T4943] loop3: detected capacity change from 0 to 8192 [ 63.379365][ T52] bridge_slave_1: left allmulticast mode [ 63.385274][ T52] bridge_slave_1: left promiscuous mode [ 63.391110][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.399069][ T4953] syz.1.487: attempt to access beyond end of device [ 63.399069][ T4953] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 63.413192][ T4953] syz.1.487: attempt to access beyond end of device [ 63.413192][ T4953] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 63.428223][ T52] bridge_slave_0: left allmulticast mode [ 63.434145][ T52] bridge_slave_0: left promiscuous mode [ 63.437694][ T4945] syz.1.487: attempt to access beyond end of device [ 63.437694][ T4945] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 63.440555][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.518374][ T4953] syz.1.487: attempt to access beyond end of device [ 63.518374][ T4953] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 63.585828][ T4944] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 63.594972][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.608057][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.627181][ T52] bond0 (unregistering): Released all slaves [ 63.639871][ T4926] chnl_net:caif_netlink_parms(): no params data found [ 63.761760][ T52] hsr_slave_0: left promiscuous mode [ 63.777440][ T52] hsr_slave_1: left promiscuous mode [ 63.804776][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.812370][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.837585][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.845097][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.867554][ T52] veth1_macvtap: left promiscuous mode [ 63.895870][ T52] veth0_macvtap: left promiscuous mode [ 63.910166][ T52] veth1_vlan: left promiscuous mode [ 63.915749][ T52] veth0_vlan: left promiscuous mode [ 64.011267][ T4972] loop1: detected capacity change from 0 to 8192 [ 64.073352][ T52] team0 (unregistering): Port device team_slave_1 removed [ 64.086784][ T52] team0 (unregistering): Port device team_slave_0 removed [ 64.154995][ T4926] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.162350][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.176444][ T4926] bridge_slave_0: entered allmulticast mode [ 64.185063][ T4926] bridge_slave_0: entered promiscuous mode [ 64.193090][ T4926] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.200295][ T4926] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.215450][ T4926] bridge_slave_1: entered allmulticast mode [ 64.222400][ T4926] bridge_slave_1: entered promiscuous mode [ 64.299066][ T4926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.323897][ T4926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.370895][ T4804] veth0_vlan: entered promiscuous mode [ 64.402943][ T4926] team0: Port device team_slave_0 added [ 64.411809][ T4804] veth1_vlan: entered promiscuous mode [ 64.432957][ T4989] loop3: detected capacity change from 0 to 8192 [ 64.450815][ T4926] team0: Port device team_slave_1 added [ 64.481972][ T4804] veth0_macvtap: entered promiscuous mode [ 64.577166][ T4926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.584210][ T4926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.610724][ T4926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.669267][ T4804] veth1_macvtap: entered promiscuous mode [ 64.686126][ T4926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.693406][ T4926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.719899][ T4926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.751080][ T4926] hsr_slave_0: entered promiscuous mode [ 64.757449][ T4926] hsr_slave_1: entered promiscuous mode [ 64.763443][ T4926] debugfs: 'hsr0' already exists in 'hsr' [ 64.769236][ T4926] Cannot create hsr debugfs directory [ 64.777340][ T4804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.807002][ T4804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.829817][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.863809][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.882545][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.026789][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.100767][ T5015] loop1: detected capacity change from 0 to 8192 [ 65.159094][ T5019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.465'. [ 65.258874][ T5027] netlink: 'syz.5.492': attribute type 10 has an invalid length. [ 65.269028][ T4926] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.290310][ T4926] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.299637][ T4926] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.309177][ T4926] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.332597][ T5027] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 65.351456][ T5035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.450465][ T5027] bond_slave_0: entered promiscuous mode [ 65.456443][ T5027] bond_slave_1: entered promiscuous mode [ 65.462249][ T5027] syz_tun: entered promiscuous mode [ 65.476012][ T5027] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.532945][ T5027] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 65.542361][ T5027] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 65.550785][ T5027] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 65.593469][ T4926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.634792][ T4926] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.651183][ T5031] loop3: detected capacity change from 0 to 8192 [ 65.663791][ T2383] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.670893][ T2383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.712249][ T2383] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.719707][ T2383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.906443][ T4926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.932098][ T5072] loop5: detected capacity change from 0 to 512 [ 65.949380][ T5072] EXT4-fs: Ignoring removed orlov option [ 65.999122][ T5072] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.164558][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 66.164576][ T29] audit: type=1400 audit(1770433415.888:285): avc: denied { name_bind } for pid=5091 comm="syz.1.499" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.238009][ T4926] veth0_vlan: entered promiscuous mode [ 66.248803][ T5101] loop5: detected capacity change from 0 to 256 [ 66.277028][ T4926] veth1_vlan: entered promiscuous mode [ 66.334189][ T4926] veth0_macvtap: entered promiscuous mode [ 66.378823][ T4926] veth1_macvtap: entered promiscuous mode [ 66.405416][ T4926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.424887][ T5108] loop3: detected capacity change from 0 to 512 [ 66.449017][ T5108] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.453492][ T4926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.532342][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.562753][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.599164][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.627903][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.659289][ T5117] netlink: 28 bytes leftover after parsing attributes in process `syz.6.482'. [ 66.727017][ T29] audit: type=1400 audit(1770433416.458:286): avc: denied { execute } for pid=5124 comm="syz.3.512" name=616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161610180C2 dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.794109][ T5132] syz_tun: entered allmulticast mode [ 66.849749][ T5136] netlink: 27 bytes leftover after parsing attributes in process `syz.3.515'. [ 66.864780][ T29] audit: type=1400 audit(1770433416.598:287): avc: denied { wake_alarm } for pid=5137 comm="syz.6.516" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 67.016333][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.519'. [ 67.087666][ T5150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.522'. [ 67.254235][ T5157] loop1: detected capacity change from 0 to 512 [ 67.303157][ T5157] EXT4-fs: Ignoring removed orlov option [ 67.379166][ T5157] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 67.432618][ T5157] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.523: attempt to clear invalid blocks 2 len 1 [ 67.514160][ T5157] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 67.587201][ T5157] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.523: invalid indirect mapped block 1819239214 (level 0) [ 67.678870][ T5157] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.523: invalid indirect mapped block 1819239214 (level 1) [ 67.761509][ T5157] EXT4-fs (loop1): 1 truncate cleaned up [ 68.061785][ T29] audit: type=1400 audit(1770433417.788:288): avc: denied { create } for pid=5162 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.081337][ T29] audit: type=1400 audit(1770433417.788:289): avc: denied { setopt } for pid=5162 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.101027][ T29] audit: type=1400 audit(1770433417.788:290): avc: denied { write } for pid=5162 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.330496][ T3313] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 68.408057][ T3313] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 68.456989][ T3313] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 68.609612][ T4555] EXT4-fs unmount: 17 callbacks suppressed [ 68.609629][ T4555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.689601][ T5176] loop5: detected capacity change from 0 to 1024 [ 68.706947][ T5176] EXT4-fs: Ignoring removed orlov option [ 68.734876][ T5176] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 68.777046][ T5176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.826682][ T4804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.076689][ T5192] chnl_net:caif_netlink_parms(): no params data found [ 69.159487][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.166679][ T5192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.188427][ T5192] bridge_slave_0: entered allmulticast mode [ 69.195789][ T5192] bridge_slave_0: entered promiscuous mode [ 69.205006][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.212168][ T5192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.219789][ T5192] bridge_slave_1: entered allmulticast mode [ 69.229076][ T5192] bridge_slave_1: entered promiscuous mode [ 69.267539][ T5192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.293257][ T5192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.302009][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'. [ 69.331251][ T5192] team0: Port device team_slave_0 added [ 69.352149][ T5192] team0: Port device team_slave_1 added [ 69.436389][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.443470][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.469856][ T5192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.483226][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.490357][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.516783][ T5192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.588322][ T5192] hsr_slave_0: entered promiscuous mode [ 69.594525][ T5192] hsr_slave_1: entered promiscuous mode [ 69.615445][ T5192] debugfs: 'hsr0' already exists in 'hsr' [ 69.621304][ T5192] Cannot create hsr debugfs directory [ 69.705475][ T5239] netlink: 27 bytes leftover after parsing attributes in process `syz.6.554'. [ 69.802107][ T5192] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 69.822813][ T5192] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 69.840097][ T5192] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 69.852063][ T5192] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 69.942344][ T5192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.955258][ T5192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.986977][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.994165][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.028264][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.035485][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.060790][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 70.108457][ T5280] netlink: 104 bytes leftover after parsing attributes in process `syz.4.565'. [ 70.121135][ T5278] loop5: detected capacity change from 0 to 1024 [ 70.150066][ T5278] EXT4-fs: Ignoring removed orlov option [ 70.175297][ T5278] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.197043][ T5192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.207292][ T5278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.240409][ T4804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.309797][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 70.431994][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 70.451126][ T5192] veth0_vlan: entered promiscuous mode [ 70.459892][ T5192] veth1_vlan: entered promiscuous mode [ 70.480049][ T5192] veth0_macvtap: entered promiscuous mode [ 70.493141][ T5192] veth1_macvtap: entered promiscuous mode [ 70.507239][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.526684][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.538016][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.590196][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.661103][ T5335] syzkaller0: entered promiscuous mode [ 70.666769][ T5335] syzkaller0: entered allmulticast mode [ 70.680337][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.713033][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.993273][ T5378] syz_tun: entered allmulticast mode [ 71.042588][ T5382] syzkaller0: entered promiscuous mode [ 71.048262][ T5382] syzkaller0: entered allmulticast mode [ 71.060924][ T5377] syz_tun: left allmulticast mode [ 71.117717][ T29] audit: type=1326 audit(1770433420.838:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 71.148186][ T29] audit: type=1326 audit(1770433420.868:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 71.172021][ T29] audit: type=1326 audit(1770433420.868:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 71.195931][ T29] audit: type=1326 audit(1770433420.868:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 71.219382][ T29] audit: type=1326 audit(1770433420.868:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2e129c2d9 code=0x7ffc0000 [ 71.242665][ T29] audit: type=1326 audit(1770433420.868:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 71.366458][ T5409] loop7: detected capacity change from 0 to 8192 [ 71.513614][ T5428] tipc: Cannot configure node identity twice [ 71.542265][ T5192] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 71.550401][ T5192] FAT-fs (loop7): Filesystem has been set read-only [ 71.581621][ T5434] syz_tun: entered allmulticast mode [ 71.625318][ T5432] syzkaller0: entered promiscuous mode [ 71.630840][ T5432] syzkaller0: entered allmulticast mode [ 71.639022][ T5433] syz_tun: left allmulticast mode [ 71.783786][ T5445] loop5: detected capacity change from 0 to 8192 [ 71.831924][ T5452] loop6: detected capacity change from 0 to 512 [ 71.875042][ T5452] EXT4-fs: Ignoring removed orlov option [ 71.901741][ T3503] team0: Port device team_slave_0 removed [ 71.978431][ T29] audit: type=1400 audit(1770433421.708:297): avc: denied { mounton } for pid=5455 comm="syz.4.633" path="/136/bus" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.011769][ T5452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.025228][ T5452] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.100745][ T4926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.135078][ T5470] syz_tun: entered allmulticast mode [ 72.164278][ T5469] syz_tun: left allmulticast mode [ 72.235000][ T5478] loop6: detected capacity change from 0 to 1024 [ 72.244695][ T5478] EXT4-fs: Ignoring removed orlov option [ 72.260138][ T5478] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 72.288402][ T29] audit: type=1326 audit(1770433422.018:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 72.311731][ T29] audit: type=1326 audit(1770433422.018:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 72.336928][ T5478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.395736][ T29] audit: type=1326 audit(1770433422.068:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 72.419325][ T29] audit: type=1326 audit(1770433422.068:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e12faeb9 code=0x7ffc0000 [ 72.443379][ T29] audit: type=1326 audit(1770433422.088:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2e129c2d9 code=0x7ffc0000 [ 72.495908][ T4926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.524584][ T5490] __nla_validate_parse: 5 callbacks suppressed [ 72.524604][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.7.644'. [ 72.582514][ T5497] loop6: detected capacity change from 0 to 512 [ 72.602685][ T5497] EXT4-fs: Ignoring removed orlov option [ 72.637611][ T5497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.665441][ T5497] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.775730][ T5512] syz_tun: entered allmulticast mode [ 72.782507][ T4926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.956884][ T5527] tipc: Started in network mode [ 72.961869][ T5527] tipc: Node identity 4, cluster identity 4711 [ 72.968351][ T5527] tipc: Node number set to 4 [ 73.070631][ T5532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.656'. [ 73.096254][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 73.282337][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 73.349889][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 73.413264][ T5563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.421952][ T5563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.658501][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'. [ 74.010503][ T5605] syz_tun: entered allmulticast mode [ 74.106036][ T5617] netlink: 27 bytes leftover after parsing attributes in process `syz.7.686'. [ 74.175192][ T5625] tipc: Started in network mode [ 74.180250][ T5625] tipc: Node identity 4, cluster identity 4711 [ 74.186619][ T5625] tipc: Node number set to 4 [ 74.485336][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 74.762110][ T5689] syzkaller0: entered promiscuous mode [ 74.767743][ T5689] syzkaller0: entered allmulticast mode [ 74.781087][ T5699] tipc: Started in network mode [ 74.786619][ T5699] tipc: Node identity 4, cluster identity 4711 [ 74.792866][ T5699] tipc: Node number set to 4 [ 75.352630][ T5784] geneve2: entered promiscuous mode [ 75.408200][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.7.733'. [ 75.583017][ T5800] tipc: Started in network mode [ 75.587990][ T5800] tipc: Node identity 4, cluster identity 4711 [ 75.594252][ T5800] tipc: Node number set to 4 [ 75.749030][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.745'. [ 75.804307][ T5816] loop5: detected capacity change from 0 to 8192 [ 75.939385][ T5831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5831 comm=syz.6.750 [ 76.111876][ T5846] geneve2: entered promiscuous mode [ 76.357631][ T5825] ================================================================== [ 76.365767][ T5825] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 76.372867][ T5825] [ 76.375188][ T5825] write to 0xffff8881248bd78c of 2 bytes by task 5816 on cpu 0: [ 76.382906][ T5825] fat16_ent_put+0x28/0x60 [ 76.387411][ T5825] fat_alloc_clusters+0x57b/0xc50 [ 76.392579][ T5825] fat_get_block+0x258/0x5e0 [ 76.397175][ T5825] __block_write_begin_int+0x400/0xf90 [ 76.402653][ T5825] cont_write_begin+0x5fe/0x970 [ 76.407503][ T5825] fat_write_begin+0x4f/0xe0 [ 76.412176][ T5825] generic_perform_write+0x183/0x490 [ 76.417459][ T5825] __generic_file_write_iter+0x9e/0x120 [ 76.423009][ T5825] generic_file_write_iter+0x8d/0x310 [ 76.428500][ T5825] vfs_write+0x5a6/0x9f0 [ 76.432825][ T5825] ksys_write+0xdc/0x1a0 [ 76.437073][ T5825] __x64_sys_write+0x40/0x50 [ 76.441739][ T5825] x64_sys_call+0x2847/0x3000 [ 76.446495][ T5825] do_syscall_64+0xc0/0x2a0 [ 76.451103][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.457088][ T5825] [ 76.459619][ T5825] read to 0xffff8881248bd600 of 512 bytes by task 5825 on cpu 1: [ 76.467608][ T5825] fat_mirror_bhs+0x1df/0x320 [ 76.472296][ T5825] fat_ent_write+0xd0/0xe0 [ 76.476840][ T5825] fat_chain_add+0x16c/0x490 [ 76.481428][ T5825] fat_get_block+0x46c/0x5e0 [ 76.486109][ T5825] __block_write_begin_int+0x400/0xf90 [ 76.491585][ T5825] cont_write_begin+0x5fe/0x970 [ 76.496434][ T5825] fat_write_begin+0x4f/0xe0 [ 76.501023][ T5825] generic_perform_write+0x183/0x490 [ 76.506443][ T5825] __generic_file_write_iter+0x9e/0x120 [ 76.512094][ T5825] generic_file_write_iter+0x8d/0x310 [ 76.517463][ T5825] aio_write+0x2fe/0x430 [ 76.521791][ T5825] io_submit_one+0xbc1/0x1350 [ 76.526470][ T5825] __se_sys_io_submit+0xfb/0x280 [ 76.531684][ T5825] __x64_sys_io_submit+0x43/0x50 [ 76.536652][ T5825] x64_sys_call+0x2e40/0x3000 [ 76.541336][ T5825] do_syscall_64+0xc0/0x2a0 [ 76.546110][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.552038][ T5825] [ 76.554814][ T5825] Reported by Kernel Concurrency Sanitizer on: [ 76.560975][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: syz.5.744 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.570717][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 76.581212][ T5825] ================================================================== [ 76.704208][ T60] team0: Port device team_slave_0 removed