last executing test programs: 5.045243177s ago: executing program 2 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 4.162245348s ago: executing program 2 (id=476): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.175738065s ago: executing program 1 (id=500): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 3.09791338s ago: executing program 1 (id=503): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 2.959917968s ago: executing program 1 (id=505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.879994462s ago: executing program 1 (id=508): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 2.862265153s ago: executing program 1 (id=509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.218616191s ago: executing program 2 (id=527): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f}) 2.028327882s ago: executing program 0 (id=521): r0 = socket$inet(0x2, 0x2, 0xffffffc0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8844) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) 1.908758449s ago: executing program 0 (id=524): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) 1.814206374s ago: executing program 0 (id=536): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x10}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "fc9e3c1e2fa36bbbb80305c37098baf96cb67e"}) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.726485379s ago: executing program 0 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x3, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES8=r1], 0xdd12}], 0x1, 0x0, 0x0, 0x20040800}, 0x20040051) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x2}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.72138782s ago: executing program 4 (id=529): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.666016553s ago: executing program 4 (id=530): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Y', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 1.582484348s ago: executing program 0 (id=532): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x400, @loopback, 0x15}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x800010000008eb8, 0x3) 1.330908183s ago: executing program 2 (id=537): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x8001, 0x800, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x3, 0xe0}, @generic={0x94, 0x2}, @rr={0x7, 0xf, 0xfb, [@remote, @broadcast, @broadcast]}]}}}}}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.007246581s ago: executing program 2 (id=538): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x4810) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 808.867233ms ago: executing program 4 (id=539): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) 805.373153ms ago: executing program 3 (id=549): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) 789.737204ms ago: executing program 3 (id=540): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xee6d1536b697d354, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x20000000) 717.000058ms ago: executing program 0 (id=541): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 716.502788ms ago: executing program 3 (id=542): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14"], 0x48}}, 0x0) 701.049939ms ago: executing program 3 (id=543): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 676.212181ms ago: executing program 3 (id=544): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x6, 0x3ff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) getsockopt(0xffffffffffffffff, 0x2f, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) 114.842093ms ago: executing program 2 (id=545): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x74, 0x0, 0x1ae20, 0x9000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 114.601653ms ago: executing program 3 (id=546): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0x200fd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') bind$tipc(0xffffffffffffffff, 0x0, 0x0) 113.971953ms ago: executing program 1 (id=547): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000140)=[{r1, 0x601}, {r1, 0x2304}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 91.956914ms ago: executing program 4 (id=548): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r3, 0x1000, 0x4}, 0x8) 9.303929ms ago: executing program 4 (id=550): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=551): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e31000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 26.394736][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.394762][ T29] audit: type=1400 audit(1769554988.009:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.395729][ T3301] cgroup: Unknown subsys name 'net' [ 26.402280][ T29] audit: type=1400 audit(1769554988.009:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.467422][ T29] audit: type=1400 audit(1769554988.049:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.623882][ T3301] cgroup: Unknown subsys name 'cpuset' [ 26.631080][ T3301] cgroup: Unknown subsys name 'rlimit' [ 26.750082][ T29] audit: type=1400 audit(1769554988.359:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.788994][ T29] audit: type=1400 audit(1769554988.359:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.807154][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.814574][ T29] audit: type=1400 audit(1769554988.359:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.852283][ T29] audit: type=1400 audit(1769554988.359:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.874914][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.878818][ T29] audit: type=1400 audit(1769554988.369:77): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.920558][ T29] audit: type=1400 audit(1769554988.369:78): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.948080][ T29] audit: type=1400 audit(1769554988.389:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.636220][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.652699][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.710858][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.759977][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.767223][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.774670][ T3317] bridge_slave_0: entered allmulticast mode [ 28.781281][ T3317] bridge_slave_0: entered promiscuous mode [ 28.789961][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.797508][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.805509][ T3317] bridge_slave_1: entered allmulticast mode [ 28.811781][ T3317] bridge_slave_1: entered promiscuous mode [ 28.818259][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.826209][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.833506][ T3313] bridge_slave_0: entered allmulticast mode [ 28.840274][ T3313] bridge_slave_0: entered promiscuous mode [ 28.851242][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.858453][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.865782][ T3313] bridge_slave_1: entered allmulticast mode [ 28.872327][ T3313] bridge_slave_1: entered promiscuous mode [ 28.902599][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.913281][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.926817][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.939449][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.955815][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.998905][ T3317] team0: Port device team_slave_0 added [ 29.007275][ T3317] team0: Port device team_slave_1 added [ 29.013092][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.020276][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.027547][ T3319] bridge_slave_0: entered allmulticast mode [ 29.034875][ T3319] bridge_slave_0: entered promiscuous mode [ 29.045781][ T3313] team0: Port device team_slave_0 added [ 29.059330][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.066485][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.073730][ T3319] bridge_slave_1: entered allmulticast mode [ 29.080288][ T3319] bridge_slave_1: entered promiscuous mode [ 29.089805][ T3313] team0: Port device team_slave_1 added [ 29.119355][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.126789][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.152889][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.163990][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.171453][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.198366][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.219560][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.231908][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.241461][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.248491][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.275005][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.286655][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.294034][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.320445][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.335636][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 29.354847][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.361907][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.369271][ T3312] bridge_slave_0: entered allmulticast mode [ 29.375678][ T3312] bridge_slave_0: entered promiscuous mode [ 29.385443][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.392499][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.399863][ T3312] bridge_slave_1: entered allmulticast mode [ 29.406367][ T3312] bridge_slave_1: entered promiscuous mode [ 29.427672][ T3319] team0: Port device team_slave_0 added [ 29.456126][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.468507][ T3317] hsr_slave_0: entered promiscuous mode [ 29.474623][ T3317] hsr_slave_1: entered promiscuous mode [ 29.481334][ T3319] team0: Port device team_slave_1 added [ 29.495435][ T3313] hsr_slave_0: entered promiscuous mode [ 29.501419][ T3313] hsr_slave_1: entered promiscuous mode [ 29.507282][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 29.512992][ T3313] Cannot create hsr debugfs directory [ 29.519737][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.567244][ T3312] team0: Port device team_slave_0 added [ 29.574088][ T3312] team0: Port device team_slave_1 added [ 29.583939][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.591347][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.618803][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.652044][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.660753][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.689858][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.714185][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.721558][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.728949][ T3324] bridge_slave_0: entered allmulticast mode [ 29.735378][ T3324] bridge_slave_0: entered promiscuous mode [ 29.747964][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.756110][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.786486][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.801898][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.810163][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.818019][ T3324] bridge_slave_1: entered allmulticast mode [ 29.825475][ T3324] bridge_slave_1: entered promiscuous mode [ 29.842829][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.850728][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.879472][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.917926][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.930475][ T3319] hsr_slave_0: entered promiscuous mode [ 29.936753][ T3319] hsr_slave_1: entered promiscuous mode [ 29.942768][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 29.948857][ T3319] Cannot create hsr debugfs directory [ 29.965983][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.982367][ T3312] hsr_slave_0: entered promiscuous mode [ 29.989567][ T3312] hsr_slave_1: entered promiscuous mode [ 29.996220][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 30.002289][ T3312] Cannot create hsr debugfs directory [ 30.024744][ T3324] team0: Port device team_slave_0 added [ 30.031498][ T3324] team0: Port device team_slave_1 added [ 30.078270][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.085661][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.112533][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.124181][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.131537][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.158148][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.238591][ T3324] hsr_slave_0: entered promiscuous mode [ 30.244940][ T3324] hsr_slave_1: entered promiscuous mode [ 30.251078][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 30.256913][ T3324] Cannot create hsr debugfs directory [ 30.301610][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.322317][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.335793][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.354883][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.390434][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.402771][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.416097][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.426612][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.457802][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.471114][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.487318][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.496839][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.529020][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.539304][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.548274][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.557176][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.604730][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.614508][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.627117][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.637634][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.649007][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.678318][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.691833][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.706941][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.716185][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.723513][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.742723][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.751039][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.758304][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.778478][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.785623][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.795132][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.807754][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.815014][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.825794][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.833187][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.849672][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.858920][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.866007][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.900145][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.913570][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.920653][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.938674][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.949088][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.978634][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.985876][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.015033][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.032100][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.047689][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.071520][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.083059][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.105698][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.114434][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.137672][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.148222][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.164569][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.171687][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.194040][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.212325][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.272448][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.285251][ T3317] veth0_vlan: entered promiscuous mode [ 31.301865][ T3317] veth1_vlan: entered promiscuous mode [ 31.317201][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.343407][ T3317] veth0_macvtap: entered promiscuous mode [ 31.368718][ T3317] veth1_macvtap: entered promiscuous mode [ 31.390021][ T3313] veth0_vlan: entered promiscuous mode [ 31.406012][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.421374][ T3312] veth0_vlan: entered promiscuous mode [ 31.435215][ T3313] veth1_vlan: entered promiscuous mode [ 31.446047][ T3312] veth1_vlan: entered promiscuous mode [ 31.454356][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.493658][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.505717][ T3319] veth0_vlan: entered promiscuous mode [ 31.511992][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527277][ T3312] veth0_macvtap: entered promiscuous mode [ 31.537704][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.548565][ T3319] veth1_vlan: entered promiscuous mode [ 31.558502][ T3312] veth1_macvtap: entered promiscuous mode [ 31.567515][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.587239][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.595000][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 31.595015][ T29] audit: type=1400 audit(1769554993.199:90): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.ENKatO/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.630946][ T29] audit: type=1400 audit(1769554993.239:91): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.647974][ T3324] veth0_vlan: entered promiscuous mode [ 31.653868][ T29] audit: type=1400 audit(1769554993.239:92): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.ENKatO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.663548][ T3324] veth1_vlan: entered promiscuous mode [ 31.684529][ T29] audit: type=1400 audit(1769554993.239:93): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.692119][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.712000][ T29] audit: type=1400 audit(1769554993.239:94): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.ENKatO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.730786][ T3313] veth0_macvtap: entered promiscuous mode [ 31.745768][ T29] audit: type=1400 audit(1769554993.239:95): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.ENKatO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.769557][ T3324] veth0_macvtap: entered promiscuous mode [ 31.780112][ T29] audit: type=1400 audit(1769554993.239:96): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.794950][ T3319] veth0_macvtap: entered promiscuous mode [ 31.808916][ T29] audit: type=1400 audit(1769554993.239:97): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.836720][ T29] audit: type=1400 audit(1769554993.239:98): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=4663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.864136][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.866509][ T3313] veth1_macvtap: entered promiscuous mode [ 31.888434][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.899330][ T3319] veth1_macvtap: entered promiscuous mode [ 31.911113][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.920561][ T3324] veth1_macvtap: entered promiscuous mode [ 31.935644][ T29] audit: type=1400 audit(1769554993.539:99): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.970543][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.978284][ T3483] SELinux: ebitmap start bit (100663296) is beyond the end of the bitmap (320) [ 31.982104][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.997622][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.005581][ T3483] SELinux: failed to load policy [ 32.007257][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.034187][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.055412][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.062779][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.075508][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.098819][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.114245][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.134121][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.154385][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227340][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.262422][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.271685][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.289473][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.301282][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.330604][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.362408][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.386685][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.601811][ T3507] loop3: detected capacity change from 0 to 32768 [ 32.665410][ T3507] loop3: p1 p2 p3 < p5 > [ 32.669911][ T3507] loop3: p1 size 242222080 extends beyond EOD, truncated [ 32.686893][ T3507] loop3: p2 start 16777215 is beyond EOD, truncated [ 32.817486][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 32.829682][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 32.830208][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 32.974073][ C1] hrtimer: interrupt took 39520 ns [ 32.991573][ T3536] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 33.209948][ T3552] netlink: 19 bytes leftover after parsing attributes in process `syz.2.23'. [ 33.563899][ T3574] Zero length message leads to an empty skb [ 33.971129][ T3589] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.050635][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 34.071504][ T3589] bridge_slave_1: left allmulticast mode [ 34.077243][ T3589] bridge_slave_1: left promiscuous mode [ 34.083118][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.096893][ T3589] bridge_slave_0: left allmulticast mode [ 34.102662][ T3589] bridge_slave_0: left promiscuous mode [ 34.108723][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.478414][ T3610] loop3: detected capacity change from 0 to 4096 [ 34.501962][ T3610] EXT4-fs: Ignoring removed bh option [ 34.508154][ T3610] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.547775][ T3610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.615720][ T3620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 34.671418][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.820944][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.926634][ T3631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'. [ 34.996163][ T3651] netlink: 'syz.3.65': attribute type 30 has an invalid length. [ 35.182193][ T3664] loop3: detected capacity change from 0 to 512 [ 35.229654][ T3664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 35.238040][ T3664] System zones: 1-12 [ 35.243001][ T3664] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.70: corrupted in-inode xattr: e_value size too large [ 35.265243][ T3664] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.70: couldn't read orphan inode 15 (err -117) [ 35.283507][ T3664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.401507][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.660092][ T3685] netlink: 56 bytes leftover after parsing attributes in process `syz.2.76'. [ 35.967172][ T3452] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.480183][ T3773] loop0: detected capacity change from 0 to 128 [ 37.488437][ T3773] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615⅗' [ 37.502475][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 37.502489][ T29] audit: type=1326 audit(1769554999.109:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.537153][ T29] audit: type=1326 audit(1769554999.149:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.560728][ T29] audit: type=1326 audit(1769554999.149:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.584483][ T29] audit: type=1326 audit(1769554999.149:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.610596][ T29] audit: type=1400 audit(1769554999.149:174): avc: denied { watch watch_reads } for pid=3772 comm="syz.0.108" path="/24/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.635603][ T29] audit: type=1326 audit(1769554999.149:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.661279][ T29] audit: type=1326 audit(1769554999.149:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.685790][ T29] audit: type=1326 audit(1769554999.149:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.711347][ T29] audit: type=1326 audit(1769554999.149:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.735057][ T29] audit: type=1326 audit(1769554999.149:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680c54aeb9 code=0x7ffc0000 [ 37.850458][ T3793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'. [ 37.950553][ T3810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'. [ 38.013535][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 38.019752][ T3675] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.033342][ T3815] bridge_slave_0: left allmulticast mode [ 38.040226][ T3815] bridge_slave_0: left promiscuous mode [ 38.046276][ T3815] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.084857][ T3815] bridge_slave_1: left allmulticast mode [ 38.090659][ T3815] bridge_slave_1: left promiscuous mode [ 38.096627][ T3815] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.115545][ T3815] bond0: (slave bond_slave_0): Releasing backup interface [ 38.134983][ T3815] bond0: (slave bond_slave_1): Releasing backup interface [ 38.148779][ T3815] team0: Port device team_slave_0 removed [ 38.158608][ T3815] team0: Port device team_slave_1 removed [ 38.166430][ T3815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.173878][ T3815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.183353][ T3815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.191660][ T3815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.204551][ T3815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 38.579335][ T3841] loop0: detected capacity change from 0 to 4096 [ 38.770954][ T3841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.844097][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 38.920042][ T3870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.932281][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.982080][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.001071][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.050016][ T3870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.113089][ T3870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.145416][ T3870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.157665][ T3870] netlink: 566 bytes leftover after parsing attributes in process `syz.3.144'. [ 39.426243][ T3893] loop2: detected capacity change from 0 to 128 [ 39.454279][ T3893] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615⅗' [ 39.848128][ T3898] loop2: detected capacity change from 0 to 32768 [ 39.903655][ T3305] loop2: p1 p2 p3 < p5 > [ 39.909324][ T3305] loop2: p1 size 242222080 extends beyond EOD, truncated [ 39.931773][ T3305] loop2: p2 start 16777215 is beyond EOD, truncated [ 39.954569][ T3898] loop2: p1 p2 p3 < p5 > [ 39.959365][ T3898] loop2: p1 size 242222080 extends beyond EOD, truncated [ 39.967564][ T3898] loop2: p2 start 16777215 is beyond EOD, truncated [ 40.077380][ T3917] loop2: detected capacity change from 0 to 4096 [ 40.124205][ T3917] EXT4-fs: Ignoring removed bh option [ 40.129795][ T3917] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.244015][ T3931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.262298][ T3930] loop4: detected capacity change from 0 to 4096 [ 40.405978][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.427752][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 40.435250][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 40.445861][ T3917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.472739][ T3930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.488090][ T3931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.548172][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 40.564656][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 40.576297][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.591108][ T3931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.658246][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.672067][ T3931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.734168][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.735186][ T3931] netlink: 566 bytes leftover after parsing attributes in process `syz.1.167'. [ 40.789733][ T3941] loop3: detected capacity change from 0 to 4096 [ 40.843344][ T3941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.962924][ T3946] loop4: detected capacity change from 0 to 32768 [ 41.005016][ T3304] loop4: p1 p2 p3 < p5 > [ 41.009571][ T3304] loop4: p1 size 242222080 extends beyond EOD, truncated [ 41.069761][ T3304] loop4: p2 start 16777215 is beyond EOD, truncated [ 41.089429][ T3946] loop4: p1 p2 p3 < p5 > [ 41.094308][ T3946] loop4: p1 size 242222080 extends beyond EOD, truncated [ 41.102803][ T3946] loop4: p2 start 16777215 is beyond EOD, truncated [ 41.128387][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.299747][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.302625][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 41.311506][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.355406][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 41.385975][ T3959] bridge_slave_1: left allmulticast mode [ 41.391868][ T3959] bridge_slave_1: left promiscuous mode [ 41.398339][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.427930][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 41.443569][ T3959] bridge_slave_0: left allmulticast mode [ 41.449454][ T3959] bridge_slave_0: left promiscuous mode [ 41.455313][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.111165][ T3977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 42.175651][ T3977] bridge_slave_1: left allmulticast mode [ 42.181433][ T3977] bridge_slave_1: left promiscuous mode [ 42.187290][ T3977] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.350022][ T3977] bridge_slave_0: left allmulticast mode [ 42.355741][ T3977] bridge_slave_0: left promiscuous mode [ 42.361525][ T3977] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.442711][ T3989] loop0: detected capacity change from 0 to 4096 [ 42.466574][ T3989] EXT4-fs: Ignoring removed bh option [ 42.472561][ T3989] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.549073][ T3989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.915798][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.938275][ T3997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 43.085416][ T4008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.125124][ T4008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.155165][ T4008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.174215][ T4008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.200297][ T4008] netlink: 566 bytes leftover after parsing attributes in process `syz.2.190'. [ 43.264506][ T4011] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 43.383870][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 43.383885][ T29] audit: type=1326 audit(1769555004.999:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.453259][ T29] audit: type=1326 audit(1769555005.029:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.476852][ T29] audit: type=1326 audit(1769555005.029:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.500170][ T29] audit: type=1326 audit(1769555005.029:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.523726][ T29] audit: type=1326 audit(1769555005.029:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.547232][ T29] audit: type=1326 audit(1769555005.029:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.570845][ T29] audit: type=1326 audit(1769555005.029:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.594126][ T29] audit: type=1326 audit(1769555005.029:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.617415][ T29] audit: type=1326 audit(1769555005.029:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.640695][ T29] audit: type=1326 audit(1769555005.029:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c17baaeb9 code=0x7ffc0000 [ 43.734096][ T4001] loop0: detected capacity change from 0 to 32768 [ 43.832461][ T3305] loop0: p1 p2 p3 < p5 > [ 43.842075][ T3305] loop0: p1 size 242222080 extends beyond EOD, truncated [ 43.862099][ T3305] loop0: p2 start 16777215 is beyond EOD, truncated [ 43.887344][ T4001] loop0: p1 p2 p3 < > [ 43.891606][ T4001] loop0: p1 size 242222080 extends beyond EOD, truncated [ 43.918893][ T4001] loop0: p2 start 16777215 is beyond EOD, truncated [ 44.065058][ T4046] netlink: 'syz.2.207': attribute type 83 has an invalid length. [ 44.073272][ T4045] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 44.119813][ T4045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.222564][ T4057] loop4: detected capacity change from 0 to 512 [ 44.281972][ T4057] EXT4-fs: Invalid want_extra_isize 64870 [ 44.304653][ T4052] bond1: (slave veth3): Enslaving as an active interface with a down link [ 44.329607][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 44.345237][ T4045] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 44.391617][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 44.412226][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 44.433089][ T4072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.445930][ T4074] loop3: detected capacity change from 0 to 512 [ 44.476433][ T4074] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.489606][ T4074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.544797][ T4072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.569136][ T4074] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.603482][ T4074] EXT4-fs (loop3): 1 truncate cleaned up [ 44.611730][ T4074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.674307][ T4072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.722521][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.758567][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 44.786942][ T4072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.872584][ T4096] syz_tun: entered promiscuous mode [ 44.891209][ T4096] syz_tun: left promiscuous mode [ 44.949744][ T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.009906][ T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.064074][ T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.095139][ T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.153092][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.164092][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.173360][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.181635][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.189776][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.198159][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.206346][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.214278][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.222170][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.230603][ T3395] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 45.241594][ T3395] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 45.349827][ T4122] fido_id[4122]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.379147][ T4133] syz.0.246 uses obsolete (PF_INET,SOCK_PACKET) [ 45.611741][ T4146] syzkaller0: entered promiscuous mode [ 45.617293][ T4146] syzkaller0: entered allmulticast mode [ 45.679921][ T4151] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 45.699842][ T4151] geneve1: entered promiscuous mode [ 45.735258][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 45.753616][ T4151] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 45.764029][ T4153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 46.130552][ T4185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 46.167130][ T4191] loop4: detected capacity change from 0 to 512 [ 46.191845][ T4191] EXT4-fs: Ignoring removed bh option [ 46.204713][ T4191] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 46.250853][ T4191] EXT4-fs (loop4): 1 truncate cleaned up [ 46.276828][ T4191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.327533][ T4191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.270'. [ 46.397245][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.439363][ T4214] xt_hashlimit: size too large, truncated to 1048576 [ 46.544409][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 46.602769][ T4221] syz.2.281 (4221) used greatest stack depth: 10320 bytes left [ 46.676182][ T4230] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 46.767980][ T4238] loop4: detected capacity change from 0 to 2048 [ 46.804264][ T3305] Alternate GPT is invalid, using primary GPT. [ 46.812731][ T3305] loop4: p1 p2 p3 [ 46.817222][ T3305] loop4: partition table partially beyond EOD, truncated [ 46.831805][ T4238] Alternate GPT is invalid, using primary GPT. [ 46.838281][ T4238] loop4: p1 p2 p3 [ 46.842038][ T4238] loop4: partition table partially beyond EOD, truncated [ 46.897475][ T4241] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.289'. [ 46.898571][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.909752][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 46.918782][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.965999][ T4243] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 47.026740][ T4251] loop4: detected capacity change from 0 to 1024 [ 47.034652][ T4251] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.046661][ T4251] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.057139][ C0] Illegal XDP return value 16128 on prog (id 31) dev lo, expect packet loss! [ 47.063665][ T4251] JBD2: no valid journal superblock found [ 47.073240][ T4251] EXT4-fs (loop4): Could not load journal inode [ 47.171672][ T4258] process 'syz.3.297' launched './file1' with NULL argv: empty string added [ 47.257234][ T4261] dvmrp0: entered allmulticast mode [ 47.363463][ T4271] loop3: detected capacity change from 0 to 512 [ 47.370291][ T4271] ======================================================= [ 47.370291][ T4271] WARNING: The mand mount option has been deprecated and [ 47.370291][ T4271] and is ignored by this kernel. Remove the mand [ 47.370291][ T4271] option from the mount to silence this warning. [ 47.370291][ T4271] ======================================================= [ 47.408998][ T4271] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.303: bad orphan inode 15 [ 47.421544][ T4271] ext4_test_bit(bit=14, block=5) = 0 [ 47.427597][ T4271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.448882][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.583427][ T4283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 47.662852][ T4291] loop3: detected capacity change from 0 to 128 [ 47.714414][ T4291] syz.3.312: attempt to access beyond end of device [ 47.714414][ T4291] loop3: rw=2049, sector=145, nr_sectors = 69 limit=128 [ 47.796284][ T4300] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.898391][ T4306] loop3: detected capacity change from 0 to 128 [ 47.965849][ T4306] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.987162][ T4306] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.043412][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.068158][ T4322] loop3: detected capacity change from 0 to 512 [ 48.076035][ T4322] EXT4-fs: Ignoring removed bh option [ 48.083021][ T4322] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 48.095926][ T4322] EXT4-fs (loop3): 1 truncate cleaned up [ 48.106446][ T4322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.133223][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.457828][ T4348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.469798][ T4348] EXT4-fs (loop4): 1 truncate cleaned up [ 48.476877][ T4348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.491344][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 48.491361][ T29] audit: type=1400 audit(1769555010.099:373): avc: denied { read write } for pid=4347 comm="syz.4.337" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.530907][ T29] audit: type=1400 audit(1769555010.099:374): avc: denied { open } for pid=4347 comm="syz.4.337" path="/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.579124][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.622571][ T4356] EXT4-fs: Ignoring removed bh option [ 48.632760][ T4356] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 48.642786][ T4356] EXT4-fs (loop2): 1 truncate cleaned up [ 48.649081][ T4356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.675800][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.764671][ T4361] Alternate GPT is invalid, using primary GPT. [ 48.771056][ T4361] loop2: p1 p2 p3 [ 48.774990][ T4361] loop2: partition table partially beyond EOD, truncated [ 48.843786][ T29] audit: type=1400 audit(1769555010.459:375): avc: denied { create } for pid=4369 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.845953][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 48.876908][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 48.880826][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 48.925527][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 48.943080][ T29] audit: type=1400 audit(1769555010.549:376): avc: denied { setopt } for pid=4369 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.702363][ T4404] set_capacity_and_notify: 3 callbacks suppressed [ 49.702378][ T4404] loop1: detected capacity change from 0 to 2048 [ 49.738688][ T4405] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 49.784511][ T3304] Alternate GPT is invalid, using primary GPT. [ 49.791140][ T3304] loop1: p1 p2 p3 [ 49.795193][ T3304] loop1: partition table partially beyond EOD, truncated [ 49.815042][ T4404] Alternate GPT is invalid, using primary GPT. [ 49.821338][ T4404] loop1: p1 p2 p3 [ 49.825102][ T4404] loop1: partition table partially beyond EOD, truncated [ 49.849423][ T4413] loop0: detected capacity change from 0 to 128 [ 49.880384][ T29] audit: type=1326 audit(1769555011.479:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4184feaeb9 code=0x7ffc0000 [ 49.884546][ T4412] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 49.904441][ T29] audit: type=1326 audit(1769555011.479:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4184feaeb9 code=0x7ffc0000 [ 49.943724][ T29] audit: type=1326 audit(1769555011.479:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4184feaeb9 code=0x7ffc0000 [ 49.967174][ T29] audit: type=1326 audit(1769555011.479:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4184feaeb9 code=0x7ffc0000 [ 49.990955][ T29] audit: type=1326 audit(1769555011.479:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4184feaeb9 code=0x7ffc0000 [ 49.997793][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 50.014728][ T29] audit: type=1326 audit(1769555011.479:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f4184feaeb9 code=0x7ffc0000 [ 50.026241][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 50.050439][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 50.071689][ T4413] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.106118][ T4413] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.152037][ T4422] loop2: detected capacity change from 0 to 512 [ 50.177987][ T4422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.194126][ T4422] EXT4-fs (loop2): 1 truncate cleaned up [ 50.206918][ T4422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.232708][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.288856][ T4433] __nla_validate_parse: 9 callbacks suppressed [ 50.288875][ T4433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.369'. [ 50.325849][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.555956][ T4443] loop2: detected capacity change from 0 to 128 [ 50.677122][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 50.687493][ T4443] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.687871][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 50.803044][ T4443] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.863453][ T4452] netlink: 'syz.1.379': attribute type 1 has an invalid length. [ 50.908161][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.910247][ T4452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.006276][ T4452] bond1: (slave veth1): Enslaving as an active interface with a down link [ 51.085061][ T4452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 51.092336][ T4452] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 51.309860][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 51.325175][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 51.408672][ T4472] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.385'. [ 51.418540][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 52.297747][ T4513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.403'. [ 52.328767][ T4515] loop4: detected capacity change from 0 to 1024 [ 52.339153][ T4515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.348497][ T4515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 52.357661][ T4515] System zones: 0-1, 3-36 [ 52.367371][ T4515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.443812][ T4521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 52.729635][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.745446][ T4533] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 52.763875][ T4533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.791504][ T4533] bond1: (slave veth5): Enslaving as an active interface with a down link [ 52.832356][ T4533] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 52.840306][ T4533] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 52.985599][ T4563] netlink: 'syz.3.426': attribute type 10 has an invalid length. [ 52.998259][ T4563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.008225][ T4563] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 53.018324][ T4566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 53.103464][ T4563] syz.3.426 (4563) used greatest stack depth: 9120 bytes left [ 53.591146][ T4583] loop0: detected capacity change from 0 to 764 [ 53.653712][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 53.653729][ T29] audit: type=1400 audit(1769555015.269:428): avc: denied { mount } for pid=4584 comm="syz.4.434" name="/" dev="ramfs" ino=8626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.743859][ T4583] iso9660: Unknown parameter 'overridC۝Am' [ 53.758188][ T29] audit: type=1400 audit(1769555015.369:429): avc: denied { bind } for pid=4588 comm="syz.4.436" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.808662][ T29] audit: type=1400 audit(1769555015.369:430): avc: denied { name_bind } for pid=4588 comm="syz.4.436" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 53.831471][ T29] audit: type=1400 audit(1769555015.369:431): avc: denied { node_bind } for pid=4588 comm="syz.4.436" saddr=fe80::27 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 54.023244][ T29] audit: type=1400 audit(1769555015.629:432): avc: denied { create } for pid=4603 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.046518][ T29] audit: type=1400 audit(1769555015.629:433): avc: denied { setopt } for pid=4603 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.069313][ T29] audit: type=1400 audit(1769555015.629:434): avc: denied { bind } for pid=4603 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.106659][ T4609] loop1: detected capacity change from 0 to 512 [ 54.182623][ T4609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.206986][ T4609] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.215249][ T29] audit: type=1400 audit(1769555015.759:435): avc: denied { ioctl } for pid=4614 comm="syz.2.449" path="socket:[7991]" dev="sockfs" ino=7991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.245552][ T29] audit: type=1400 audit(1769555015.759:436): avc: denied { bind } for pid=4614 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.485686][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.516071][ T29] audit: type=1400 audit(1769555016.129:437): avc: denied { ioctl } for pid=4636 comm="syz.0.457" path="socket:[8724]" dev="sockfs" ino=8724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.676859][ T4649] capability: warning: `syz.3.462' uses 32-bit capabilities (legacy support in use) [ 54.784679][ T4653] loop0: detected capacity change from 0 to 512 [ 54.815385][ T4653] journal_path: Non-blockdev passed as './bus' [ 54.821688][ T4653] EXT4-fs: error: could not find journal device path [ 54.855577][ T4655] loop4: detected capacity change from 0 to 4096 [ 54.886548][ T4649] io-wq is not configured for unbound workers [ 54.913665][ T4655] EXT4-fs: Ignoring removed bh option [ 54.925926][ T4655] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.958472][ T4655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.195799][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.358873][ T4705] loop0: detected capacity change from 0 to 512 [ 55.381585][ T4705] EXT4-fs: Ignoring removed bh option [ 55.403282][ T4705] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 55.437409][ T4705] EXT4-fs (loop0): 1 truncate cleaned up [ 55.453902][ T4705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.496399][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.446944][ T4762] __nla_validate_parse: 4 callbacks suppressed [ 56.446962][ T4762] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.507'. [ 56.497103][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.035331][ T4778] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 57.067844][ T4782] capability: warning: `syz.4.516' uses deprecated v2 capabilities in a way that may be insecure [ 57.083454][ T4778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.093890][ T4778] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 57.423907][ T4802] loop3: detected capacity change from 0 to 512 [ 57.441741][ T4802] EXT4-fs: Ignoring removed bh option [ 57.451943][ T4802] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 57.484061][ T4802] EXT4-fs (loop3): 1 truncate cleaned up [ 57.502173][ T4802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.528848][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.595595][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 57.611864][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 57.643830][ T4812] veth1_macvtap: left promiscuous mode [ 57.962279][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 57.973970][ T4835] loop3: detected capacity change from 0 to 128 [ 58.098292][ T4837] loop2: detected capacity change from 0 to 512 [ 58.120922][ T4837] EXT4-fs: Ignoring removed nobh option [ 58.136426][ T4837] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.167889][ T4837] EXT4-fs (loop2): 1 truncate cleaned up [ 58.180330][ T4837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.220121][ T4837] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.537'. [ 58.231509][ T4837] netlink: zone id is out of range [ 58.238117][ T4837] netlink: zone id is out of range [ 58.245289][ T4837] netlink: zone id is out of range [ 58.251662][ T4837] netlink: zone id is out of range [ 58.257768][ T4837] netlink: zone id is out of range [ 58.264126][ T4837] netlink: zone id is out of range [ 58.270396][ T4837] netlink: zone id is out of range [ 58.277341][ T4837] netlink: zone id is out of range [ 58.284799][ T4837] netlink: zone id is out of range [ 58.291370][ T4837] netlink: zone id is out of range [ 58.311870][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.573641][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 58.580294][ T3675] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.605929][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 58.615630][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 58.681555][ T4858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.544'. [ 59.396597][ T4853] ================================================================== [ 59.404889][ T4853] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 59.412110][ T4853] [ 59.414440][ T4853] read-write to 0xffff88811b017d2c of 4 bytes by task 4848 on cpu 1: [ 59.422693][ T4853] fifo_open+0x86/0x5d0 [ 59.426885][ T4853] do_dentry_open+0x54b/0xa60 [ 59.431857][ T4853] vfs_open+0x37/0x1e0 [ 59.436044][ T4853] path_openat+0x1de9/0x23c0 [ 59.440760][ T4853] do_filp_open+0x15d/0x280 [ 59.445299][ T4853] do_sys_openat2+0xa6/0x150 [ 59.450018][ T4853] __x64_sys_openat+0xf2/0x120 [ 59.454893][ T4853] x64_sys_call+0x2b07/0x3000 [ 59.459599][ T4853] do_syscall_64+0xc0/0x2a0 [ 59.464355][ T4853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.470279][ T4853] [ 59.472619][ T4853] read to 0xffff88811b017d2c of 4 bytes by task 4853 on cpu 0: [ 59.480191][ T4853] wait_for_partner+0xd5/0x1e0 [ 59.484983][ T4853] fifo_open+0x4b1/0x5d0 [ 59.489246][ T4853] do_dentry_open+0x54b/0xa60 [ 59.494128][ T4853] vfs_open+0x37/0x1e0 [ 59.498234][ T4853] path_openat+0x1de9/0x23c0 [ 59.502905][ T4853] do_filp_open+0x15d/0x280 [ 59.507441][ T4853] do_sys_openat2+0xa6/0x150 [ 59.512059][ T4853] __x64_sys_openat+0xf2/0x120 [ 59.516851][ T4853] x64_sys_call+0x2b07/0x3000 [ 59.521555][ T4853] do_syscall_64+0xc0/0x2a0 [ 59.526067][ T4853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.532145][ T4853] [ 59.534478][ T4853] value changed: 0x00000001 -> 0x00000002 [ 59.540188][ T4853] [ 59.542503][ T4853] Reported by Kernel Concurrency Sanitizer on: [ 59.548655][ T4853] CPU: 0 UID: 0 PID: 4853 Comm: syz.0.541 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.558292][ T4853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.568425][ T4853] ==================================================================