last executing test programs: 2.597657661s ago: executing program 0 (id=493): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 2.110891888s ago: executing program 0 (id=505): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)="0b42a596edafee7a4d4ab50fa4719e13a85655ce2d1b064449c08e3b7579f4d98778d34a6ca2037729904179c32dbcb852521c8adaa495377d1fb14b4045cf0dce7d5c24ac9febb9ee4476f8ebeef0a4c55bad25d121b54e626a984ffef35f7ee98c1d395d8499a04e4f367e4726bca610a3f92ecc69c1c9540a647bbd278166818b1f7467", 0x85}], 0x1}, 0x40010) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000000c0), 0x66) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) close(0x3) 2.026811814s ago: executing program 0 (id=507): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 1.777472177s ago: executing program 1 (id=513): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) epoll_create1(0x0) close(r0) 1.666904704s ago: executing program 1 (id=519): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x9880) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 1.631434286s ago: executing program 1 (id=521): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) ppoll(&(0x7f00000002c0)=[{r2, 0x80}], 0x1, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x7]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.447377267s ago: executing program 2 (id=528): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) listen(r0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x2, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r1, 0x663e, 0x0, 0x2, 0x0, 0x0) shutdown(r0, 0x1) 1.402161789s ago: executing program 3 (id=531): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) 1.370236601s ago: executing program 1 (id=532): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000300800"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.361442792s ago: executing program 4 (id=533): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$sock(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="713ce35d1e", 0x5}, {&(0x7f0000003540)='-', 0x1}], 0x2}, 0x5) 1.343137623s ago: executing program 3 (id=534): r0 = socket(0x10, 0x2, 0x0) r1 = gettid() timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r0, 0x0, 0x0) 1.331913913s ago: executing program 1 (id=535): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000201bbbbbbbbbbbbaaaaaaaaaabb86dd6d00008800b311ff00000000000000000000ffffe0000002ff0200000000000000000000000000014f194e2000b390"], 0xed) 1.326308234s ago: executing program 4 (id=536): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) vmsplice(r2, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 1.320508394s ago: executing program 3 (id=537): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000069123a000000000000000095007400000040"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)="231803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.288177596s ago: executing program 3 (id=538): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) openat$cgroup_subtree(r1, &(0x7f0000000240), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) unshare(0x2040600) close_range(r2, 0xffffffffffffffff, 0x0) 1.275188477s ago: executing program 3 (id=539): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x40) 1.240508308s ago: executing program 1 (id=540): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 1.226303129s ago: executing program 3 (id=541): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0xfffffff9, 0xf, 0xf, "000000600000002b2400a14a5ea24f999600"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.173725122s ago: executing program 0 (id=542): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000980)="f871", 0x2}], 0x1, 0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143041, 0x100) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="fd", 0x1}], 0x1, 0xe7b, 0x6, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff6}}}, 0x38) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 1.054321069s ago: executing program 4 (id=543): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x74}}, 0x0) 909.759257ms ago: executing program 4 (id=544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "3679fb199b149359", "f45e062fd344d4bbc9af0c6543391989", "671a99cb", "a820135ca1c84ee6"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 738.822577ms ago: executing program 0 (id=545): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x6}, 0x8) 684.414141ms ago: executing program 0 (id=546): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f00000004c0)={0x0, 0x3, 0x13090, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000000c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 596.703765ms ago: executing program 2 (id=547): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000000080)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 537.287739ms ago: executing program 2 (id=548): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)="0b00002525f5", 0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200880c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 504.066061ms ago: executing program 2 (id=549): io_submit(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2004, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x6}]) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 404.527706ms ago: executing program 2 (id=550): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 371.001839ms ago: executing program 2 (id=551): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000280)=""/47, 0x2f}, {0x0}, {&(0x7f0000000a00)=""/197, 0xc5}], 0x3}, 0x7000000}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800e911ff20010000000000000000000000000000ff0200000000000000000000000000014f194e2000e990"], 0x123) 39.053968ms ago: executing program 4 (id=552): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r2, 0x6, 0x3ff}, &(0x7f0000000400)=0x8) 0s ago: executing program 4 (id=553): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1}) kernel console output (not intermixed with test programs): [ 18.636980][ T29] audit: type=1400 audit(1769599257.708:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.659011][ T29] audit: type=1400 audit(1769599257.708:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.681715][ T29] audit: type=1400 audit(1769599257.708:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.704580][ T29] audit: type=1400 audit(1769599257.708:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.727535][ T29] audit: type=1400 audit(1769599257.708:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 25.008720][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.008735][ T29] audit: type=1400 audit(1769599264.078:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.037701][ T29] audit: type=1400 audit(1769599264.108:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.038454][ T3299] cgroup: Unknown subsys name 'net' [ 25.065574][ T29] audit: type=1400 audit(1769599264.138:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.181866][ T3299] cgroup: Unknown subsys name 'cpuset' [ 25.188021][ T3299] cgroup: Unknown subsys name 'rlimit' [ 25.316970][ T29] audit: type=1400 audit(1769599264.388:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.341186][ T29] audit: type=1400 audit(1769599264.388:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.360263][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.361752][ T29] audit: type=1400 audit(1769599264.388:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.390855][ T29] audit: type=1400 audit(1769599264.388:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.396803][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.411443][ T29] audit: type=1400 audit(1769599264.398:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.444894][ T29] audit: type=1400 audit(1769599264.398:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.468236][ T29] audit: type=1400 audit(1769599264.408:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.545080][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.621191][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.630256][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.637706][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.644927][ T3311] bridge_slave_0: entered allmulticast mode [ 26.651475][ T3311] bridge_slave_0: entered promiscuous mode [ 26.657879][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.678496][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.685798][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.693036][ T3311] bridge_slave_1: entered allmulticast mode [ 26.699430][ T3311] bridge_slave_1: entered promiscuous mode [ 26.708601][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.745988][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.777120][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.787276][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.815642][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.822737][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.829911][ T3312] bridge_slave_0: entered allmulticast mode [ 26.836386][ T3312] bridge_slave_0: entered promiscuous mode [ 26.856224][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.863583][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.870705][ T3312] bridge_slave_1: entered allmulticast mode [ 26.877343][ T3312] bridge_slave_1: entered promiscuous mode [ 26.899585][ T3311] team0: Port device team_slave_0 added [ 26.920039][ T3311] team0: Port device team_slave_1 added [ 26.934025][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.941187][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.948433][ T3318] bridge_slave_0: entered allmulticast mode [ 26.954847][ T3318] bridge_slave_0: entered promiscuous mode [ 26.961455][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.968499][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.975731][ T3313] bridge_slave_0: entered allmulticast mode [ 26.982214][ T3313] bridge_slave_0: entered promiscuous mode [ 26.989598][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.001384][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.008311][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.034445][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.045319][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.052421][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.059561][ T3318] bridge_slave_1: entered allmulticast mode [ 27.065984][ T3318] bridge_slave_1: entered promiscuous mode [ 27.072286][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.079441][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.086716][ T3313] bridge_slave_1: entered allmulticast mode [ 27.093170][ T3313] bridge_slave_1: entered promiscuous mode [ 27.100156][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.113401][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.120338][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.146295][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.177880][ T3311] hsr_slave_0: entered promiscuous mode [ 27.183896][ T3311] hsr_slave_1: entered promiscuous mode [ 27.212501][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.221856][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.228947][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.236257][ T3314] bridge_slave_0: entered allmulticast mode [ 27.242645][ T3314] bridge_slave_0: entered promiscuous mode [ 27.249844][ T3312] team0: Port device team_slave_0 added [ 27.255465][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.262604][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.269842][ T3314] bridge_slave_1: entered allmulticast mode [ 27.276290][ T3314] bridge_slave_1: entered promiscuous mode [ 27.283613][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.293769][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.312335][ T3312] team0: Port device team_slave_1 added [ 27.323311][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.342795][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.369587][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.379969][ T3313] team0: Port device team_slave_0 added [ 27.386114][ T3318] team0: Port device team_slave_0 added [ 27.392012][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.399459][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.425448][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.445293][ T3313] team0: Port device team_slave_1 added [ 27.455564][ T3318] team0: Port device team_slave_1 added [ 27.462007][ T3314] team0: Port device team_slave_0 added [ 27.467897][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.474956][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.500888][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.523029][ T3314] team0: Port device team_slave_1 added [ 27.554097][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.561169][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.587100][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.599029][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.606019][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.631926][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.642890][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.649826][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.675818][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.689328][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.696351][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.722258][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.740930][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.747960][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.773975][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.797406][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.804473][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.830522][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.850539][ T3312] hsr_slave_0: entered promiscuous mode [ 27.856531][ T3312] hsr_slave_1: entered promiscuous mode [ 27.862337][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.868059][ T3312] Cannot create hsr debugfs directory [ 27.918470][ T3313] hsr_slave_0: entered promiscuous mode [ 27.924555][ T3313] hsr_slave_1: entered promiscuous mode [ 27.930300][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.936084][ T3313] Cannot create hsr debugfs directory [ 27.947425][ T3318] hsr_slave_0: entered promiscuous mode [ 27.953451][ T3318] hsr_slave_1: entered promiscuous mode [ 27.959220][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.965068][ T3318] Cannot create hsr debugfs directory [ 27.979706][ T3314] hsr_slave_0: entered promiscuous mode [ 27.985917][ T3314] hsr_slave_1: entered promiscuous mode [ 27.991767][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.997474][ T3314] Cannot create hsr debugfs directory [ 28.107597][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.131946][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.156700][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.173434][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.205551][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.223603][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.232386][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.242464][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.268852][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.277694][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.287247][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.296999][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.328735][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.337580][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.346509][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.356258][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.370807][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.414201][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.422810][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.436288][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.443413][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.452390][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.459422][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.468260][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.475466][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.487915][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.503934][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.512768][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.525877][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.532956][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.547916][ T2240] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.554979][ T2240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.573955][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.605674][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.627339][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.647723][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.661060][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.671055][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.678205][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.700335][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.707427][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.725116][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.736234][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.752910][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.764673][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.774839][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.781981][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.810046][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.817167][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.826717][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.833952][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.862630][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.869796][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.895103][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.918779][ T3311] veth0_vlan: entered promiscuous mode [ 28.949606][ T3311] veth1_vlan: entered promiscuous mode [ 28.970571][ T3311] veth0_macvtap: entered promiscuous mode [ 28.993280][ T3311] veth1_macvtap: entered promiscuous mode [ 29.009095][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.030239][ T3312] veth0_vlan: entered promiscuous mode [ 29.038042][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.049743][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.066775][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.086501][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.096436][ T3312] veth1_vlan: entered promiscuous mode [ 29.107283][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.116474][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.126270][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.136026][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.175738][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.184612][ T3312] veth0_macvtap: entered promiscuous mode [ 29.198794][ T3312] veth1_macvtap: entered promiscuous mode [ 29.237748][ T3313] veth0_vlan: entered promiscuous mode [ 29.249726][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.264614][ T3313] veth1_vlan: entered promiscuous mode [ 29.282432][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.312785][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.344217][ T3475] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 29.348569][ T3313] veth0_macvtap: entered promiscuous mode [ 29.354546][ C0] hrtimer: interrupt took 57090 ns [ 29.360942][ T3313] veth1_macvtap: entered promiscuous mode [ 29.378765][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.398847][ T3318] veth0_vlan: entered promiscuous mode [ 29.410123][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.421885][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.436067][ T3314] veth0_vlan: entered promiscuous mode [ 29.460837][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.480923][ T3318] veth1_vlan: entered promiscuous mode [ 29.509794][ T3314] veth1_vlan: entered promiscuous mode [ 29.522205][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.564251][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.588971][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.600659][ T3314] veth0_macvtap: entered promiscuous mode [ 29.623573][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.643663][ T3318] veth0_macvtap: entered promiscuous mode [ 29.651667][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.661736][ T3314] veth1_macvtap: entered promiscuous mode [ 29.677416][ T3318] veth1_macvtap: entered promiscuous mode [ 29.709285][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.724754][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.748054][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.766590][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.783055][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.806633][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.846312][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.857604][ T3502] loop2: detected capacity change from 0 to 512 [ 29.862921][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.905799][ T2240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.920897][ T3502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.941725][ T2240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.950583][ T2240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.965588][ T2240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.980175][ T3502] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.996322][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'. [ 30.016474][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 30.016495][ T29] audit: type=1400 audit(1769599269.088:130): avc: denied { create } for pid=3509 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.041805][ T29] audit: type=1400 audit(1769599269.088:131): avc: denied { write } for pid=3509 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.061022][ T29] audit: type=1400 audit(1769599269.088:132): avc: denied { connect } for pid=3509 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.080329][ T29] audit: type=1400 audit(1769599269.088:133): avc: denied { name_connect } for pid=3509 comm="syz.4.5" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 30.102128][ T29] audit: type=1400 audit(1769599269.088:134): avc: denied { ioctl } for pid=3499 comm="syz.2.9" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.111165][ T42] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x49 [ 30.127777][ T29] audit: type=1400 audit(1769599269.198:135): avc: denied { shutdown } for pid=3509 comm="syz.4.5" lport=33002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.214441][ T29] audit: type=1400 audit(1769599269.288:136): avc: denied { create } for pid=3528 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.251180][ T29] audit: type=1400 audit(1769599269.288:137): avc: denied { connect } for pid=3528 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.270615][ T29] audit: type=1400 audit(1769599269.288:138): avc: denied { ioctl } for pid=3528 comm="syz.0.14" path="socket:[5317]" dev="sockfs" ino=5317 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.435400][ T29] audit: type=1400 audit(1769599269.508:139): avc: denied { create } for pid=3535 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.734116][ T3555] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 30.746889][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.885805][ T3569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 30.927486][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 30.975769][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 31.095768][ T3577] mmap: syz.2.34 (3577) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.192853][ T3583] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.37'. [ 31.258771][ T3591] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 31.338320][ T3593] loop0: detected capacity change from 0 to 128 [ 31.354823][ T3593] FAT-fs (loop0): bogus number of directory entries (390) [ 31.362075][ T3593] FAT-fs (loop0): Can't find a valid FAT filesystem [ 31.375195][ T3602] loop4: detected capacity change from 0 to 1024 [ 31.384817][ T3602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.400584][ T3602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 31.409253][ T3602] System zones: 0-1, 3-36 [ 31.422283][ T3602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.478285][ T3609] loop2: detected capacity change from 0 to 1024 [ 31.517554][ T3609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.539946][ T3619] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 31.588131][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.740200][ T3627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 31.795582][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.856687][ T3632] process 'syz.4.55' launched './file1' with NULL argv: empty string added [ 31.869746][ T3633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57'. [ 31.920113][ T3637] loop4: detected capacity change from 0 to 512 [ 31.931420][ T3637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.950778][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.965467][ T3637] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.003831][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.026600][ T3648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 32.100335][ T3650] syz.1.65 (3650) used greatest stack depth: 10184 bytes left [ 32.115295][ T3654] loop0: detected capacity change from 0 to 128 [ 32.268859][ T3666] loop4: detected capacity change from 0 to 512 [ 32.278521][ T3666] ======================================================= [ 32.278521][ T3666] WARNING: The mand mount option has been deprecated and [ 32.278521][ T3666] and is ignored by this kernel. Remove the mand [ 32.278521][ T3666] option from the mount to silence this warning. [ 32.278521][ T3666] ======================================================= [ 32.321269][ T3666] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.71: bad orphan inode 15 [ 32.335842][ T3666] ext4_test_bit(bit=14, block=5) = 0 [ 32.354132][ T3666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.386211][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.426649][ T3672] loop4: detected capacity change from 0 to 1024 [ 32.436540][ T3672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 32.445013][ T3672] System zones: 0-1, 3-36 [ 32.450395][ T3672] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.73: bad orphan inode 134217728 [ 32.461970][ T3672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.849958][ T3687] Zero length message leads to an empty skb [ 32.860018][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.056197][ T3699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 33.110515][ T3702] -1: renamed from syzkaller0 [ 33.236166][ T3710] capability: warning: `syz.3.88' uses 32-bit capabilities (legacy support in use) [ 33.256272][ T3710] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 33.376431][ T3724] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 33.669169][ T3746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 34.561024][ T3790] netlink: 'syz.0.121': attribute type 29 has an invalid length. [ 34.586572][ T3790] netlink: 'syz.0.121': attribute type 29 has an invalid length. [ 34.604558][ T3790] unsupported nla_type 58 [ 34.655931][ T3794] hsr_slave_0: left promiscuous mode [ 34.668885][ T3794] hsr_slave_1: left promiscuous mode [ 35.068941][ T3803] capability: warning: `syz.0.127' uses deprecated v2 capabilities in a way that may be insecure [ 35.118379][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 35.118411][ T29] audit: type=1400 audit(1769599274.188:269): avc: denied { create } for pid=3802 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.170091][ T29] audit: type=1400 audit(1769599274.228:270): avc: denied { write } for pid=3802 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.250400][ T29] audit: type=1400 audit(1769599274.308:271): avc: denied { connect } for pid=3808 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 35.270236][ T29] audit: type=1400 audit(1769599274.308:272): avc: denied { read } for pid=3808 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 35.333707][ T29] audit: type=1400 audit(1769599274.368:273): avc: denied { write } for pid=3808 comm="syz.0.129" path="socket:[5730]" dev="sockfs" ino=5730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 35.393146][ T3812] __nla_validate_parse: 3 callbacks suppressed [ 35.393162][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 35.451389][ T3815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 35.471141][ T29] audit: type=1400 audit(1769599274.538:274): avc: denied { read write } for pid=3813 comm="syz.2.131" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.496357][ T29] audit: type=1400 audit(1769599274.538:275): avc: denied { open } for pid=3813 comm="syz.2.131" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.642125][ T29] audit: type=1400 audit(1769599274.608:276): avc: denied { setopt } for pid=3817 comm="syz.4.132" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.662319][ T29] audit: type=1400 audit(1769599274.708:277): avc: denied { connect } for pid=3823 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.790382][ T3832] loop2: detected capacity change from 0 to 2048 [ 35.874330][ T3832] loop2: p1 < > [ 35.893041][ T29] audit: type=1400 audit(1769599274.968:278): avc: denied { write } for pid=3831 comm="syz.2.138" name="loop2p1" dev="devtmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.893982][ T3000] loop2: p1 < > [ 36.019266][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.104746][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.534658][ T3850] netlink: 188 bytes leftover after parsing attributes in process `syz.0.143'. [ 36.543716][ T3850] netlink: 188 bytes leftover after parsing attributes in process `syz.0.143'. [ 37.755027][ T3895] loop2: detected capacity change from 0 to 512 [ 37.916390][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.923859][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.931370][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.938915][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.946339][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.953857][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.961291][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.968711][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.976254][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 37.983668][ T3415] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.042400][ T3415] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 38.176706][ T3913] loop1: detected capacity change from 0 to 512 [ 38.225316][ T3913] EXT4-fs: Ignoring removed bh option [ 38.251514][ T3913] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 38.272326][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 38.281355][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 38.317640][ T3913] EXT4-fs (loop1): 1 truncate cleaned up [ 38.343960][ T3913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.456257][ T3913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.166'. [ 38.528776][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.643382][ T3927] loop2: detected capacity change from 0 to 512 [ 38.721996][ T3938] sctp: [Deprecated]: syz.1.175 (pid 3938) Use of int in max_burst socket option deprecated. [ 38.721996][ T3938] Use struct sctp_assoc_value instead [ 38.781107][ T3927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.813609][ T3927] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.836014][ T3927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.415967][ T3970] netlink: 'syz.1.188': attribute type 1 has an invalid length. [ 39.448257][ T3970] bond1: entered promiscuous mode [ 39.453486][ T3970] bond1: entered allmulticast mode [ 39.465100][ T3970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.497317][ T3976] macvlan2: entered promiscuous mode [ 39.502698][ T3976] macvlan2: entered allmulticast mode [ 39.545323][ T3978] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.191'. [ 39.566033][ T3976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 39.587100][ T3978] netlink: zone id is out of range [ 39.592302][ T3978] netlink: zone id is out of range [ 39.640342][ T3978] netlink: zone id is out of range [ 39.697452][ T3978] netlink: set zone limit has 8 unknown bytes [ 39.781262][ T3987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 39.883605][ T3996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 40.882772][ T4039] loop4: detected capacity change from 0 to 128 [ 40.913755][ T4039] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.962879][ T4039] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.264907][ T42] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.408275][ T4049] __nla_validate_parse: 4 callbacks suppressed [ 41.408290][ T4049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.214'. [ 41.487876][ T4051] loop0: detected capacity change from 0 to 512 [ 41.513911][ T4051] journal_path: Non-blockdev passed as './bus' [ 41.520120][ T4051] EXT4-fs: error: could not find journal device path [ 41.581980][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 41.581994][ T29] audit: type=1400 audit(1769599280.658:384): avc: denied { create } for pid=4050 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.628776][ T4058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.217'. [ 41.647937][ T29] audit: type=1400 audit(1769599280.658:385): avc: denied { write } for pid=4050 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.909946][ T4068] loop0: detected capacity change from 0 to 128 [ 41.970641][ T4068] syz.0.221: attempt to access beyond end of device [ 41.970641][ T4068] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 42.220052][ T4080] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.224'. [ 42.229207][ T4080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.224'. [ 42.271213][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 42.310333][ T4081] loop3: detected capacity change from 0 to 128 [ 42.800239][ T4085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 42.882890][ T4091] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 43.065026][ T29] audit: type=1400 audit(1769599282.138:386): avc: denied { connect } for pid=4100 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.208118][ T29] audit: type=1400 audit(1769599282.278:387): avc: denied { read } for pid=4106 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.318482][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 43.368102][ T4118] dvmrp0: entered allmulticast mode [ 43.378038][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 43.386992][ T4119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.235'. [ 43.413559][ T4121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.241'. [ 43.430710][ T4119] geneve2: entered promiscuous mode [ 43.436007][ T4119] geneve2: entered allmulticast mode [ 43.653650][ T29] audit: type=1400 audit(1769599282.728:388): avc: denied { cmd } for pid=4132 comm="syz.4.245" path="socket:[9191]" dev="sockfs" ino=9191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.759871][ T29] audit: type=1400 audit(1769599282.828:389): avc: denied { watch_reads } for pid=4139 comm="syz.1.248" path="/58" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.913921][ T29] audit: type=1400 audit(1769599282.988:390): avc: denied { cpu } for pid=4145 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.344100][ T29] audit: type=1400 audit(1769599283.418:391): avc: denied { name_bind } for pid=4160 comm="syz.1.257" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 44.435544][ T29] audit: type=1400 audit(1769599283.448:392): avc: denied { name_connect } for pid=4160 comm="syz.1.257" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 44.457104][ T29] audit: type=1400 audit(1769599283.488:393): avc: denied { read } for pid=4160 comm="syz.1.257" laddr=172.20.20.170 lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.498901][ T4166] netlink: 'syz.1.258': attribute type 5 has an invalid length. [ 44.541696][ T4166] geneve2: entered promiscuous mode [ 44.546928][ T4166] geneve2: entered allmulticast mode [ 44.596912][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 44.605808][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 44.641615][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 44.675589][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 44.789553][ T4176] xt_hashlimit: max too large, truncated to 1048576 [ 44.968066][ T4191] netlink: 'syz.0.268': attribute type 4 has an invalid length. [ 44.994822][ T4191] netlink: 'syz.0.268': attribute type 4 has an invalid length. [ 45.614918][ T4221] team0: Port device team_slave_0 removed [ 45.710651][ T4227] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.799012][ T4231] team1: entered promiscuous mode [ 45.804210][ T4231] team1: entered allmulticast mode [ 45.810661][ T4231] 8021q: adding VLAN 0 to HW filter on device team1 [ 46.032921][ T3401] kernel write not supported for file /95/net/rt_cache (pid: 3401 comm: kworker/1:4) [ 46.230367][ T4261] netlink: zone id is out of range [ 46.235567][ T4261] netlink: zone id is out of range [ 46.249445][ T4261] netlink: zone id is out of range [ 46.269635][ T4261] netlink: set zone limit has 8 unknown bytes [ 46.309798][ T3415] hid_parser_main: 8 callbacks suppressed [ 46.309815][ T3415] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.340164][ T4266] loop3: detected capacity change from 0 to 2048 [ 46.347797][ T3415] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.358765][ T4266] ext4: Unknown parameter 'noacl' [ 46.406012][ T4275] loop1: detected capacity change from 0 to 512 [ 46.413050][ T4275] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.415034][ T4273] veth4: entered promiscuous mode [ 46.426117][ T4275] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.431166][ T4273] veth4: entered allmulticast mode [ 46.452455][ T4275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 46.470449][ T4275] System zones: 1-12 [ 46.475110][ T4275] EXT4-fs (loop1): 1 truncate cleaned up [ 46.481392][ T4275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.540489][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.595704][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 46.595720][ T29] audit: type=1400 audit(1769599285.668:480): avc: denied { listen } for pid=4285 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.621311][ T29] audit: type=1400 audit(1769599285.668:481): avc: denied { accept } for pid=4285 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.646416][ T29] audit: type=1400 audit(1769599285.718:482): avc: denied { setopt } for pid=4285 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.721375][ T29] audit: type=1400 audit(1769599285.798:483): avc: denied { accept } for pid=4285 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.762696][ T4289] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 46.776266][ T4289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.804528][ T4289] bond2: (slave veth3): Enslaving as an active interface with a down link [ 46.840235][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 46.848807][ T4289] bond2: (slave batadv1): making interface the new active one [ 46.857537][ T4289] batadv1: entered promiscuous mode [ 46.862841][ T4289] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 46.915707][ T29] audit: type=1400 audit(1769599285.988:484): avc: denied { bind } for pid=4299 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.937473][ T4300] __nla_validate_parse: 7 callbacks suppressed [ 46.937486][ T4300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.315'. [ 46.958619][ T29] audit: type=1400 audit(1769599286.008:485): avc: denied { setopt } for pid=4299 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.978791][ T29] audit: type=1400 audit(1769599286.008:486): avc: denied { nlmsg_read } for pid=4299 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.999381][ T29] audit: type=1400 audit(1769599286.028:487): avc: denied { bind } for pid=4304 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.033931][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.041121][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.085452][ T29] audit: type=1400 audit(1769599286.158:488): avc: denied { bind } for pid=4313 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.187736][ T4327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.327'. [ 47.300882][ T29] audit: type=1400 audit(1769599286.368:489): avc: denied { watch } for pid=4344 comm="syz.3.335" path="/46/file0" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.601230][ T4370] program syz.2.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.331464][ T4419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 48.430124][ T4429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.437364][ T4429] IPv6: NLM_F_CREATE should be set when creating new route [ 48.444621][ T4429] IPv6: NLM_F_CREATE should be set when creating new route [ 48.500481][ T4431] loop2: detected capacity change from 0 to 2048 [ 48.523132][ T4431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.537201][ T4431] EXT4-fs (loop2): shut down requested (1) [ 48.552031][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.589066][ T4439] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 48.589748][ T4437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.373'. [ 48.611754][ T4439] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 48.745599][ T4446] loop1: detected capacity change from 0 to 512 [ 48.772665][ T4446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.786312][ T4446] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.799709][ T4446] EXT4-fs (loop1): shut down requested (1) [ 48.821640][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.902259][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 48.911898][ T4460] veth1_macvtap: left promiscuous mode [ 48.950901][ T4451] tipc: Started in network mode [ 48.955941][ T4451] tipc: Node identity 7f000001, cluster identity 4711 [ 48.962892][ T4451] tipc: Enabling of bearer rejected, failed to enable media [ 49.077011][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.085793][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.104299][ T3455] tipc: Left network mode [ 49.332678][ T4482] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.352839][ T4484] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 49.464802][ T4500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.473308][ T4500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.055697][ T4529] -1: renamed from syzkaller0 [ 50.062069][ T4531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.412'. [ 50.180982][ T4546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.418'. [ 50.202957][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 50.213697][ T4546] loop2: detected capacity change from 0 to 1024 [ 50.235461][ T4546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.264905][ T4546] tipc: Started in network mode [ 50.269807][ T4546] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 50.278829][ T4546] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 50.287338][ T4546] tipc: Enabled bearer , priority 10 [ 50.302337][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.326542][ T4555] tipc: Enabling of bearer rejected, already enabled [ 50.347303][ T4558] tipc: Started in network mode [ 50.352280][ T4558] tipc: Node identity 4, cluster identity 4711 [ 50.358440][ T4558] tipc: Node number set to 4 [ 51.004110][ T4592] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.281122][ T3369] tipc: Node number set to 1 [ 51.679690][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 51.679707][ T29] audit: type=1400 audit(1769599290.748:601): avc: denied { read } for pid=4602 comm="syz.0.439" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.708988][ T29] audit: type=1400 audit(1769599290.748:602): avc: denied { open } for pid=4602 comm="syz.0.439" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.733175][ T29] audit: type=1400 audit(1769599290.758:603): avc: denied { ioctl } for pid=4602 comm="syz.0.439" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.850299][ T4606] loop4: detected capacity change from 0 to 512 [ 51.857445][ T4606] EXT4-fs: test_dummy_encryption option not supported [ 52.007029][ T29] audit: type=1400 audit(1769599291.078:604): avc: denied { mount } for pid=4612 comm="syz.0.444" name="/" dev="configfs" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 52.136248][ T4623] loop4: detected capacity change from 0 to 512 [ 52.162123][ T4623] EXT4-fs: Ignoring removed nobh option [ 52.183033][ T4623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.229560][ T4623] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.247133][ T4623] EXT4-fs (loop4): 1 truncate cleaned up [ 52.270440][ T4623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.299149][ T4623] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.448'. [ 52.309815][ T4623] netlink: zone id is out of range [ 52.316064][ T4623] netlink: zone id is out of range [ 52.321909][ T4623] netlink: zone id is out of range [ 52.327692][ T4623] netlink: zone id is out of range [ 52.333292][ T4623] netlink: zone id is out of range [ 52.338844][ T4623] netlink: zone id is out of range [ 52.348403][ T4623] netlink: zone id is out of range [ 52.354437][ T4623] netlink: zone id is out of range [ 52.360639][ T4623] netlink: zone id is out of range [ 52.366558][ T4623] netlink: zone id is out of range [ 52.388408][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.503824][ T29] audit: type=1400 audit(1769599291.578:605): avc: denied { create } for pid=4644 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 52.531353][ T29] audit: type=1400 audit(1769599291.598:606): avc: denied { bind } for pid=4644 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 52.554071][ T29] audit: type=1326 audit(1769599291.608:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73fddaeb9 code=0x7ffc0000 [ 52.577529][ T29] audit: type=1326 audit(1769599291.608:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73fddaeb9 code=0x7ffc0000 [ 52.601842][ T29] audit: type=1326 audit(1769599291.628:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff73fddaeb9 code=0x7ffc0000 [ 52.625172][ T29] audit: type=1326 audit(1769599291.628:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4646 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73fddaeb9 code=0x7ffc0000 [ 52.668804][ T4650] SELinux: Context system_u: is not valid (left unmapped). [ 52.944068][ T4670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 53.022987][ T4673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.468'. [ 53.107598][ T4680] loop0: detected capacity change from 0 to 1024 [ 53.141404][ T4680] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.152352][ T4680] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 53.162573][ T4680] JBD2: no valid journal superblock found [ 53.168330][ T4680] EXT4-fs (loop0): Could not load journal inode [ 53.270664][ T4692] loop4: detected capacity change from 0 to 512 [ 53.278761][ T4692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.305431][ T4692] EXT4-fs (loop4): 1 truncate cleaned up [ 53.312598][ T4692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.467875][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.747810][ T4713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.485'. [ 54.130237][ T4741] syzkaller1: entered promiscuous mode [ 54.135787][ T4741] syzkaller1: entered allmulticast mode [ 54.184737][ T4748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.209839][ T4748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.250949][ T4748] ref_ctr_offset mismatch. inode: 0x1a0 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 54.297386][ T4750] loop4: detected capacity change from 0 to 512 [ 54.323447][ T4750] EXT4-fs: Invalid want_extra_isize 64870 [ 54.591591][ T4763] tipc: Started in network mode [ 54.596525][ T4763] tipc: Node identity 4, cluster identity 4711 [ 54.602765][ T4763] tipc: Node number set to 4 [ 54.992900][ T4799] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.004938][ T4799] bridge_slave_1: left allmulticast mode [ 55.010642][ T4799] bridge_slave_1: left promiscuous mode [ 55.016529][ T4799] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.276957][ T4837] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.537'. [ 55.316955][ T4841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 55.337091][ T4841] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 55.423728][ T4849] loop0: detected capacity change from 0 to 1024 [ 55.455787][ T4849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.481399][ T4849] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.495041][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.509406][ T4849] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 55.521827][ T4849] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.521827][ T4849] [ 55.534198][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.550112][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.542: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.564411][ T4849] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 55.576714][ T4849] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.576714][ T4849] [ 55.589616][ T4858] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.596654][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 55.622156][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 55.631604][ T4858] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.674117][ T4858] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.698749][ T4858] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.731666][ T4858] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: block 3: comm syz.0.542: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.760464][ T4858] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.542: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 55.799042][ T4849] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.542: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.849274][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.100090][ T4872] netlink: 'syz.2.549': attribute type 4 has an invalid length. [ 56.138278][ T4872] netlink: 'syz.2.549': attribute type 4 has an invalid length. [ 56.665006][ T4851] ================================================================== [ 56.673125][ T4851] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 56.680070][ T4851] [ 56.682386][ T4851] read-write to 0xffff88811cf9d4ec of 4 bytes by task 4844 on cpu 0: [ 56.690442][ T4851] fifo_open+0x86/0x5d0 [ 56.694599][ T4851] do_dentry_open+0x54b/0xa60 [ 56.699296][ T4851] vfs_open+0x37/0x1e0 [ 56.703378][ T4851] path_openat+0x1de9/0x23c0 [ 56.707990][ T4851] do_filp_open+0x15d/0x280 [ 56.712512][ T4851] do_sys_openat2+0xa6/0x150 [ 56.717116][ T4851] __x64_sys_openat+0xf2/0x120 [ 56.721889][ T4851] x64_sys_call+0x2b07/0x3000 [ 56.726579][ T4851] do_syscall_64+0xc0/0x2a0 [ 56.731087][ T4851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.736974][ T4851] [ 56.739286][ T4851] read to 0xffff88811cf9d4ec of 4 bytes by task 4851 on cpu 1: [ 56.746823][ T4851] wait_for_partner+0xd5/0x1e0 [ 56.751585][ T4851] fifo_open+0x4b1/0x5d0 [ 56.755822][ T4851] do_dentry_open+0x54b/0xa60 [ 56.760508][ T4851] vfs_open+0x37/0x1e0 [ 56.764573][ T4851] path_openat+0x1de9/0x23c0 [ 56.769170][ T4851] do_filp_open+0x15d/0x280 [ 56.773681][ T4851] do_sys_openat2+0xa6/0x150 [ 56.778275][ T4851] __x64_sys_openat+0xf2/0x120 [ 56.783055][ T4851] x64_sys_call+0x2b07/0x3000 [ 56.787730][ T4851] do_syscall_64+0xc0/0x2a0 [ 56.792237][ T4851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.798122][ T4851] [ 56.800431][ T4851] value changed: 0x00000001 -> 0x00000002 [ 56.806222][ T4851] [ 56.808530][ T4851] Reported by Kernel Concurrency Sanitizer on: [ 56.814683][ T4851] CPU: 1 UID: 0 PID: 4851 Comm: syz.1.540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.824318][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.834365][ T4851] ================================================================== [ 58.011249][ T3455] batadv1: left promiscuous mode