last executing test programs: 9.753967381s ago: executing program 2 (id=185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00ff0300890100000056319ac00027dddb76ecf7233bb84a98d0"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, r0}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f00000000c0), 0x2, 0x786, &(0x7f00000004c0)="$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") pipe(&(0x7f0000000c80)) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x4000010, 0xffffffffffffffff, 0xf7ffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e40), 0x651, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b3c, 0x0) recvmmsg(r2, &(0x7f0000000e80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 8.134968547s ago: executing program 2 (id=186): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 8.020256399s ago: executing program 0 (id=187): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 7.884051112s ago: executing program 2 (id=189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r3], 0x14) 7.12931856s ago: executing program 0 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x1, r2}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 7.103710232s ago: executing program 0 (id=191): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000ff", 0x23}], 0x1}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="390000000000000004000fcf066505acb612f691f3bd3508abca1be6eeb89c7f9ec632f284c6ffb7d553b4e921550000000000000000", 0x36}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = syz_clone(0x10000000, &(0x7f0000000240)="45dcfdbac200b160136fb70efc2809f277b56d80aa0eacc611e6a041025cbebb230e0d0dfc9c5e61fd3f36e268596a6f5705eed7bc41c63c44895bb143", 0x3d, &(0x7f0000000140), 0x0, &(0x7f0000000400)="1dcf31408ee997f05ce24e14799969cbca4adf90b40f8bfcbe976b916fd8127b7291beb0569c3e716ceb0d7681e06cd932c7fe5c58") perf_event_open(0x0, r3, 0xc, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='[\x00') recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000500), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) write$cgroup_subtree(r8, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 6.870678976s ago: executing program 2 (id=193): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x48844) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="720005"], 0x8) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5004"], 0x7) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbc7000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="080003009a000000"], 0x2c}}, 0x0) write$nci(r0, &(0x7f0000000680)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 6.763433358s ago: executing program 4 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x38}}, 0x0) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @llc={@llc={0x0, 0xff, '\x00', "c02d2cd53c1fefe9b933987a9203"}}}}, 0x1f) 6.73397463s ago: executing program 0 (id=199): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x40008c0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5103"], 0xc) 6.565985618s ago: executing program 3 (id=201): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 6.565610887s ago: executing program 4 (id=202): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x40008c0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 5.719903064s ago: executing program 3 (id=203): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) 5.687536698s ago: executing program 3 (id=204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r3], 0x14) 3.827471478s ago: executing program 0 (id=205): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x48844) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="720005"], 0x8) write$nci(r0, &(0x7f0000000580)=ANY=[], 0x7) write$nci(r0, &(0x7f0000000680)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 3.827080688s ago: executing program 4 (id=206): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x4000087, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xa8802, 0x0) sysinfo(&(0x7f00000005c0)=""/112) unshare(0x42000080) flistxattr(r3, &(0x7f0000000700)=""/236, 0xec) sendmsg$nl_route(r0, 0x0, 0x0) r4 = syz_usb_connect$uac2(0x0, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x499, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x9c, 0x20, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x9, 0x20, 0xe0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x4, 0x15, 0xf}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x7, 0x3, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x4, 0x80, {0x8, 0x25, 0x1, 0x1, 0x33, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x240, 0x5, 0x8, 0x7, {0x8, 0x25, 0x1, 0x181, 0xc, 0x3, 0x5}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee01]) setregid(r5, 0xffffffffffffffff) syz_usb_connect$uac2(0x1, 0xc6, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0xf, 0x3b905a7ac1a7906d, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x9, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x36f8, 0x3, 0x12, 0x1}, [@selector_unit={0x9, 0x24, 0xb, 0x7f, 0x4, "04ae90d3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x6e, 0xe, 0x6, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x80, 0x10, 0xd, "ae80369deeddfb21"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0xd5, 0xd0, "032058cda2"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xa2fd, 0x7, 0x1, "3c293403ea74fa4f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf9, 0x2, 0x3, {0x8, 0x25, 0x1, 0xc1, 0x5, 0x4, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x10, 0x2, 0x2, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x4, 0x6, {0x8, 0x25, 0x1, 0x3, 0x3f, 0xd3, 0xdafd}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x5, 0x40, 0x8, 0x20, 0x1}, 0x17, &(0x7f0000000940)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x8, 0x0, 0x4f, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x7, 0x9, 0x330}]}, 0x1, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc3a}}]}) unshare(0x60000600) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@delqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_usb_control_io$uac2(r4, 0x0, 0x0) 3.799622211s ago: executing program 3 (id=208): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x32) 3.799186021s ago: executing program 2 (id=209): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000ff", 0x23}], 0x1}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="390000000000000004000fcf066505acb612f691f3bd3508abca1be6eeb89c7f9ec632f284c6ffb7d553b4e921550000000000000000", 0x36}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = syz_clone(0x10000000, &(0x7f0000000240)="45dcfdbac200b160136fb70efc2809f277b56d80aa0eacc611e6a041025cbebb230e0d0dfc9c5e61fd3f36e268596a6f5705eed7bc41c63c44895bb143", 0x3d, &(0x7f0000000140), 0x0, &(0x7f0000000400)="1dcf31408ee997f05ce24e14799969cbca4adf90b40f8bfcbe976b916fd8127b7291beb0569c3e716ceb0d7681e06cd932c7fe5c58") perf_event_open(0x0, r3, 0xc, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='[\x00') recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000500), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) write$cgroup_subtree(r8, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 3.676611763s ago: executing program 3 (id=210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x40008c0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.842248009s ago: executing program 1 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000004c0), 0x56) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200dc0f14000e0000000025c10200000024125ce882cbf400930bf4533f00429c6511", 0x25}, {&(0x7f0000000640)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 2.686510035s ago: executing program 1 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000680)=@xdp={0x2c, 0x0, r10, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000740)="27030200d1eb14120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.565753237s ago: executing program 1 (id=213): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.700931806s ago: executing program 1 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x400000000008d}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="151e37f88251ab509daada6376f3fccbe93a6391a54375814587431cb699712e8bb157ba992f7180d41e9e83fde72368df99255b8fd0e64d7a4b381e340727df77cf06ea868df55f7eea127f77f87b14e9d0954d5ff6a3eb637628f64b4cb9eb7fcb966bd90582a126b7d9d555e5a7c76df24ba458accce32f80e8497f864def9e21d31a75f7f13cb5ffd88af2e017191a0927dd7f6cbc659a4945af21c5e97e40388217e47db14d1fe0a41d10a1e4b3da10d47866890a2f3837e21066ae091e85e1fef1651cf9a4eea07fa86b9e8fa8ebd6a16872babbab3d2ffce618038cafbb40d4da4389fccc18f9", 0xea) close_range(r0, r1, 0x0) 736.646145ms ago: executing program 4 (id=215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x38}}, 0x0) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @llc={@llc={0x0, 0xff, '\x00', "c02d2cd53c1fefe9b933987a9203"}}}}, 0x1f) 680.16373ms ago: executing program 4 (id=216): sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./myproc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./myproc/interrupts\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/175, 0xaf}], 0x1, 0x200, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 653.525893ms ago: executing program 2 (id=217): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x40008c0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 632.454265ms ago: executing program 4 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r3], 0x14) 632.007265ms ago: executing program 3 (id=219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 615.140607ms ago: executing program 0 (id=220): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00ff0300890100000056319ac00027dddb76ecf7233bb84a98d0"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, r0}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f00000000c0), 0x2, 0x786, &(0x7f00000004c0)="$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") pipe(&(0x7f0000000c80)) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x4000010, 0xffffffffffffffff, 0xf7ffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e40), 0x651, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b3c, 0x0) recvmmsg(r2, &(0x7f0000000e80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 42.437435ms ago: executing program 1 (id=221): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000180)=0xa, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'geneve1\x00', 0x400}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x591, 0xe0, 0xd6}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000840)={'rose0\x00', 0x102}) 0s ago: executing program 1 (id=222): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1842, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000280)=0x8000) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 28.260260][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 28.260276][ T29] audit: type=1400 audit(1793394425.842:126): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.260519][ T29] audit: type=1400 audit(1793394425.842:127): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.261006][ T3281] cgroup: Unknown subsys name 'net' [ 28.261212][ T29] audit: type=1400 audit(1793394425.842:128): avc: denied { unmount } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.420107][ T3281] cgroup: Unknown subsys name 'cpuset' [ 28.426393][ T3281] cgroup: Unknown subsys name 'rlimit' [ 28.485991][ T29] audit: type=1400 audit(1793394426.062:129): avc: denied { setattr } for pid=3281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.486922][ T29] audit: type=1400 audit(1793394426.062:130): avc: denied { create } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.486994][ T29] audit: type=1400 audit(1793394426.062:131): avc: denied { write } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.487245][ T29] audit: type=1400 audit(1793394426.062:132): avc: denied { read } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.494311][ T29] audit: type=1400 audit(1793394426.072:133): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.494342][ T29] audit: type=1400 audit(1793394426.072:134): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.537586][ T3283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.537788][ T29] audit: type=1400 audit(1793394426.112:135): avc: denied { relabelto } for pid=3283 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.581421][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.642335][ T3291] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.642697][ T3291] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.642901][ T3291] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.673137][ T3292] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.700769][ T3298] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.701276][ T3297] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.723055][ T3300] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.740276][ T3291] infiniband rxe0: set active [ 29.740294][ T3291] infiniband rxe0: added rxe_eth0 [ 29.741304][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.762718][ T3298] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.775600][ T3291] RDS/IB: rxe0: added [ 29.775615][ T3291] smc: adding ib device rxe0 with port count 1 [ 29.775626][ T3291] smc: ib device rxe0 port 1 has no pnetid [ 29.790082][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.815703][ T3297] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.863611][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.912147][ T3291] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.938610][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.938646][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.938778][ T3292] bridge_slave_0: entered allmulticast mode [ 29.948080][ T3292] bridge_slave_0: entered promiscuous mode [ 29.949109][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.949198][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.949322][ T3292] bridge_slave_1: entered allmulticast mode [ 29.951353][ T3292] bridge_slave_1: entered promiscuous mode [ 30.019503][ T3292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.020674][ T3292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.023480][ T3291] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.079783][ T3292] team0: Port device team_slave_0 added [ 30.081101][ T3292] team0: Port device team_slave_1 added [ 30.107428][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.107487][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.107535][ T3298] bridge_slave_0: entered allmulticast mode [ 30.107903][ T3298] bridge_slave_0: entered promiscuous mode [ 30.125482][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.125497][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.125525][ T3292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.125941][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.125970][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.126043][ T3298] bridge_slave_1: entered allmulticast mode [ 30.126528][ T3298] bridge_slave_1: entered promiscuous mode [ 30.131857][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.131905][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.132091][ T3297] bridge_slave_0: entered allmulticast mode [ 30.132666][ T3297] bridge_slave_0: entered promiscuous mode [ 30.136987][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.137001][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.137029][ T3292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.152940][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.152972][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.153027][ T3297] bridge_slave_1: entered allmulticast mode [ 30.153481][ T3297] bridge_slave_1: entered promiscuous mode [ 30.164061][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.165554][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.197336][ T3292] hsr_slave_0: entered promiscuous mode [ 30.198001][ T3292] hsr_slave_1: entered promiscuous mode [ 30.201199][ T3298] team0: Port device team_slave_0 added [ 30.202508][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.203780][ T3298] team0: Port device team_slave_1 added [ 30.211776][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.249708][ T3297] team0: Port device team_slave_0 added [ 30.252212][ T3297] team0: Port device team_slave_1 added [ 30.272299][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.272313][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.272386][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.283856][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.283869][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.283921][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.294320][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.294332][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.294356][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.294861][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.294873][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.294997][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.348568][ T3297] hsr_slave_0: entered promiscuous mode [ 30.349016][ T3297] hsr_slave_1: entered promiscuous mode [ 30.349645][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 30.349656][ T3297] Cannot create hsr debugfs directory [ 30.385843][ T3298] hsr_slave_0: entered promiscuous mode [ 30.387788][ T3298] hsr_slave_1: entered promiscuous mode [ 30.387993][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 30.388005][ T3298] Cannot create hsr debugfs directory [ 30.535967][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.535999][ T3291] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.536101][ T3291] bridge_slave_0: entered allmulticast mode [ 30.537134][ T3291] bridge_slave_0: entered promiscuous mode [ 30.572888][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.572920][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.573019][ T3300] bridge_slave_0: entered allmulticast mode [ 30.573453][ T3300] bridge_slave_0: entered promiscuous mode [ 30.585622][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.585655][ T3291] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.585703][ T3291] bridge_slave_1: entered allmulticast mode [ 30.586153][ T3291] bridge_slave_1: entered promiscuous mode [ 30.604697][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.604729][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.604800][ T3300] bridge_slave_1: entered allmulticast mode [ 30.605161][ T3300] bridge_slave_1: entered promiscuous mode [ 30.617646][ T3292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.621069][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.632173][ T3291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.639853][ T3292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.646623][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.653132][ T3291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.658954][ T3292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.666833][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.677806][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.687966][ T3292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.692739][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.693722][ T3291] team0: Port device team_slave_0 added [ 30.694679][ T3291] team0: Port device team_slave_1 added [ 30.700639][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.730127][ T3300] team0: Port device team_slave_0 added [ 30.731222][ T3300] team0: Port device team_slave_1 added [ 30.731468][ T3291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.731480][ T3291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.731506][ T3291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.732030][ T3291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.732041][ T3291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.732126][ T3291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.772981][ T3291] hsr_slave_0: entered promiscuous mode [ 30.773375][ T3291] hsr_slave_1: entered promiscuous mode [ 30.773537][ T3291] debugfs: 'hsr0' already exists in 'hsr' [ 30.773550][ T3291] Cannot create hsr debugfs directory [ 30.778655][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.778668][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.778701][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.779293][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.779304][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.779887][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.794556][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.794588][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.794744][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.794849][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.799282][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.807445][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.832555][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.852195][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.862828][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.869995][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.894463][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.905218][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.093494][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.101979][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.104404][ T3300] hsr_slave_0: entered promiscuous mode [ 31.104781][ T3300] hsr_slave_1: entered promiscuous mode [ 31.104925][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 31.104938][ T3300] Cannot create hsr debugfs directory [ 31.121757][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.129293][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.133270][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.140595][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.157970][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.163375][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.165009][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.168780][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.217901][ T3292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.261942][ T3291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.263632][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.264127][ T3291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.265753][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.266760][ T3292] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.266906][ T3291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.268412][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.268787][ T3291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.271086][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.278890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.278923][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.282245][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.282273][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.336209][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.344129][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.356181][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.364544][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.375172][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.378815][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.380840][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.385887][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.395635][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.413215][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.418168][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.421325][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.421358][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.434486][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.434518][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.439236][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.452007][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.452087][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.457383][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.457417][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.463923][ T3291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.504250][ T3291] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.505874][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.520453][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.520559][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.540374][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.540408][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.592029][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.614971][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.619273][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.619312][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.646398][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.646429][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.722241][ T3292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.794181][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.809533][ T3291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.850315][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.897206][ T3292] veth0_vlan: entered promiscuous mode [ 31.901488][ T3292] veth1_vlan: entered promiscuous mode [ 31.910765][ T3292] veth0_macvtap: entered promiscuous mode [ 31.912401][ T3292] veth1_macvtap: entered promiscuous mode [ 31.917334][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.928437][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.004059][ T3291] veth0_vlan: entered promiscuous mode [ 32.005435][ T3297] veth0_vlan: entered promiscuous mode [ 32.008813][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.010824][ T3297] veth1_vlan: entered promiscuous mode [ 32.027563][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.027629][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.027923][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.028059][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.042052][ T3297] veth0_macvtap: entered promiscuous mode [ 32.047194][ T3297] veth1_macvtap: entered promiscuous mode [ 32.053343][ T3291] veth1_vlan: entered promiscuous mode [ 32.087588][ T3292] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.089662][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.097535][ T3298] veth0_vlan: entered promiscuous mode [ 32.100140][ T3298] veth1_vlan: entered promiscuous mode [ 32.108675][ T3298] veth0_macvtap: entered promiscuous mode [ 32.113673][ T3291] veth0_macvtap: entered promiscuous mode [ 32.115583][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.120081][ T3298] veth1_macvtap: entered promiscuous mode [ 32.127884][ T3291] veth1_macvtap: entered promiscuous mode [ 32.135489][ T3440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.135607][ T3440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.135755][ T3440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.135792][ T3440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.144030][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.154139][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.175212][ T3291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.187333][ T3291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.211544][ T3440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.212130][ T3440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.212248][ T3440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.212282][ T3440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.219988][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.220166][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.220254][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.220287][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.660526][ T3440] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.775654][ T3517] loop0: detected capacity change from 0 to 1024 [ 32.813378][ T3517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.394143][ T3516] loop2: detected capacity change from 0 to 512 [ 33.406827][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 33.406851][ T29] audit: type=1400 audit(1793394430.832:178): avc: denied { create } for pid=3514 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.406874][ T29] audit: type=1400 audit(1793394430.832:179): avc: denied { write } for pid=3514 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.288533][ T3516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 34.288670][ T3516] System zones: 1-12 [ 34.290327][ T3516] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.3: missing EA_INODE flag [ 34.290367][ T3516] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 34.290610][ T3516] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3: error while reading EA inode 12 err=-117 [ 34.290660][ T3516] loop2: lost filesystem error report for type 5 error -117 [ 34.290871][ T3516] EXT4-fs (loop2): 1 orphan inode deleted [ 34.291647][ T3516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.319404][ T29] audit: type=1400 audit(1793394431.842:180): avc: denied { write } for pid=3514 comm="syz.0.1" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.875363][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.475049][ T3300] veth0_vlan: entered promiscuous mode [ 35.477153][ T3300] veth1_vlan: entered promiscuous mode [ 36.062179][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.092198][ T3300] veth0_macvtap: entered promiscuous mode [ 36.095572][ T3300] veth1_macvtap: entered promiscuous mode [ 36.123062][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.129098][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.190941][ T29] audit: type=1400 audit(1793394433.772:181): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.272231][ T3535] loop4: detected capacity change from 0 to 512 [ 36.299913][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.301006][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.305936][ T3535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.341866][ T32] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.342255][ T32] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.367459][ T29] audit: type=1400 audit(1793394433.942:182): avc: denied { write } for pid=3534 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.368036][ T29] audit: type=1400 audit(1793394433.942:183): avc: denied { read append open } for pid=3534 comm="syz.4.5" path="/0/file2/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.509094][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.034907][ T3546] WARNING! power/level is deprecated; use power/control instead [ 37.105389][ T29] audit: type=1400 audit(1793394434.592:184): avc: denied { mount } for pid=3543 comm="syz.3.10" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 37.105448][ T29] audit: type=1400 audit(1793394434.592:185): avc: denied { search } for pid=3543 comm="syz.3.10" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 37.105558][ T29] audit: type=1400 audit(1793394434.592:186): avc: denied { read write } for pid=3543 comm="syz.3.10" name="set_event" dev="tracefs" ino=2367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.105587][ T29] audit: type=1400 audit(1793394434.592:187): avc: denied { open } for pid=3543 comm="syz.3.10" path="/2/trace/set_event" dev="tracefs" ino=2367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.184834][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.388454][ T3555] loop2: detected capacity change from 0 to 512 [ 37.388787][ T3555] ======================================================= [ 37.388787][ T3555] WARNING: The mand mount option has been deprecated and [ 37.388787][ T3555] and is ignored by this kernel. Remove the mand [ 37.388787][ T3555] option from the mount to silence this warning. [ 37.388787][ T3555] ======================================================= [ 37.452257][ T3556] loop4: detected capacity change from 0 to 512 [ 37.506373][ T3552] loop0: detected capacity change from 0 to 1024 [ 37.553583][ T3552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.556494][ T3556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.556605][ T3556] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.651610][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.615521][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 38.615610][ T29] audit: type=1400 audit(1793394436.192:201): avc: denied { create } for pid=3582 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.615758][ T29] audit: type=1400 audit(1793394436.192:202): avc: denied { setopt } for pid=3580 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.621959][ T29] audit: type=1400 audit(1793394436.202:203): avc: denied { connect } for pid=3582 comm="syz.1.17" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.115510][ T3555] netlink: 218 bytes leftover after parsing attributes in process `syz.2.12'. [ 39.141333][ T29] audit: type=1400 audit(1793394436.702:204): avc: denied { create } for pid=3551 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.158999][ T29] audit: type=1400 audit(1793394436.732:205): avc: denied { setopt } for pid=3582 comm="syz.1.17" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.178636][ T3583] xt_hashlimit: size too large, truncated to 1048576 [ 39.251107][ T29] audit: type=1400 audit(1793394436.832:206): avc: denied { write } for pid=3582 comm="syz.1.17" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.397080][ T29] audit: type=1400 audit(1793394436.972:207): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.430749][ T29] audit: type=1400 audit(1793394437.012:208): avc: denied { write } for pid=3591 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 39.455130][ T3596] loop4: detected capacity change from 0 to 512 [ 39.458818][ T3596] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.458846][ T3596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.458916][ T3596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.462472][ T3596] EXT4-fs (loop4): 1 truncate cleaned up [ 39.462802][ T3596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.468273][ T29] audit: type=1400 audit(1793394437.042:209): avc: denied { write } for pid=3595 comm="syz.4.20" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.469651][ T29] audit: type=1400 audit(1793394437.042:210): avc: denied { ioctl } for pid=3595 comm="syz.4.20" path="/3/bus/file1" dev="loop4" ino=15 ioctlcmd=0x40305829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.493952][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.476422][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.528514][ T3609] loop3: detected capacity change from 0 to 512 [ 40.528817][ T3609] EXT4-fs: Ignoring removed orlov option [ 40.529080][ T3609] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 40.529092][ T3609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.547252][ T3607] loop2: detected capacity change from 0 to 512 [ 40.561457][ T3609] EXT4-fs (loop3): 1 truncate cleaned up [ 40.561816][ T3609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.573914][ T3607] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 40.573942][ T3607] FAT-fs (loop2): Filesystem has been set read-only [ 40.574314][ T3607] loop2: Can't mount, would change RO state [ 40.659190][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.694115][ T3618] capability: warning: `syz.1.29' uses deprecated v2 capabilities in a way that may be insecure [ 40.724692][ T3622] loop3: detected capacity change from 0 to 512 [ 40.744676][ T3622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.744772][ T3622] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.748035][ T3417] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.913857][ T3633] syzkaller0: entered promiscuous mode [ 41.913876][ T3633] syzkaller0: entered allmulticast mode [ 42.914479][ T3643] netlink: 'syz.1.33': attribute type 1 has an invalid length. [ 42.931129][ T3643] batman_adv: batadv0: Adding interface: dummy0 [ 42.931144][ T3643] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.931176][ T3643] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 42.933382][ T3643] netlink: 'syz.1.33': attribute type 10 has an invalid length. [ 42.933422][ T3643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'. [ 42.933497][ T3643] dummy0: entered promiscuous mode [ 42.934571][ T3643] batman_adv: batadv0: Interface activated: dummy0 [ 42.937849][ T3643] batman_adv: batadv0: Interface deactivated: dummy0 [ 42.937863][ T3643] batman_adv: batadv0: Removing interface: dummy0 [ 43.073633][ T3643] syz.1.33 (3643) used greatest stack depth: 11096 bytes left [ 43.075334][ T3645] netlink: 84 bytes leftover after parsing attributes in process `syz.1.34'. [ 43.097570][ T3645] veth2: entered allmulticast mode [ 43.300497][ T3671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.300573][ T3671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.722240][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 43.722256][ T29] audit: type=1400 audit(1793394441.302:241): avc: denied { read } for pid=3670 comm="syz.1.40" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.722334][ T29] audit: type=1400 audit(1793394441.302:242): avc: denied { open } for pid=3670 comm="syz.1.40" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.841766][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.891070][ T3682] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 43.894834][ T3682] batman_adv: batadv0: Adding interface: dummy0 [ 43.894848][ T3682] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.894878][ T3682] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 43.896158][ T3682] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 43.896189][ T3682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'. [ 43.896315][ T3682] dummy0: entered promiscuous mode [ 43.897900][ T3682] batman_adv: batadv0: Interface activated: dummy0 [ 43.898298][ T3682] batman_adv: batadv0: Interface deactivated: dummy0 [ 43.898310][ T3682] batman_adv: batadv0: Removing interface: dummy0 [ 43.916524][ T3682] syz.0.45 (3682) used greatest stack depth: 10744 bytes left [ 43.926095][ T3687] loop0: detected capacity change from 0 to 512 [ 43.933177][ T3687] Invalid ELF header len 10 [ 44.528927][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.532145][ T3689] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.860878][ T29] audit: type=1400 audit(1793394441.492:243): avc: denied { watch watch_reads } for pid=3686 comm="syz.0.46" path="/6/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 44.860910][ T29] audit: type=1400 audit(1793394441.492:244): avc: denied { module_load } for pid=3686 comm="syz.0.46" path="/6/file0/file1" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 44.904631][ T3694] loop2: detected capacity change from 0 to 256 [ 44.918633][ T3696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.918782][ T3696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.991592][ T3700] loop2: detected capacity change from 0 to 512 [ 45.005104][ T3700] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.029505][ T29] audit: type=1400 audit(1793394442.602:245): avc: denied { create } for pid=3703 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.030557][ T3700] EXT4-fs (loop2): 1 truncate cleaned up [ 45.031032][ T3700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.033197][ T29] audit: type=1400 audit(1793394442.612:246): avc: denied { write } for pid=3699 comm="syz.2.50" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.033797][ T29] audit: type=1400 audit(1793394442.612:247): avc: denied { bind } for pid=3703 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.033821][ T29] audit: type=1400 audit(1793394442.612:248): avc: denied { name_bind } for pid=3703 comm="syz.3.51" src=21044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 45.033843][ T29] audit: type=1400 audit(1793394442.612:249): avc: denied { node_bind } for pid=3703 comm="syz.3.51" src=21044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 45.191277][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.212750][ T3712] syzkaller0: entered promiscuous mode [ 45.212773][ T3712] syzkaller0: entered allmulticast mode [ 45.293926][ T3715] loop2: detected capacity change from 0 to 512 [ 45.658201][ T3721] tipc: Started in network mode [ 45.658358][ T3721] tipc: Node identity 6af421e0062d, cluster identity 4711 [ 45.658539][ T3721] tipc: Enabled bearer , priority 0 [ 45.681037][ T3720] tipc: Disabling bearer [ 45.881313][ T29] audit: type=1400 audit(1793394443.462:250): avc: denied { setopt } for pid=3724 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.082033][ T3715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.082098][ T3715] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.775292][ T3734] loop4: detected capacity change from 0 to 512 [ 46.777419][ T3734] EXT4-fs: inline encryption not supported [ 46.853395][ T3734] EXT4-fs (loop4): 1 truncate cleaned up [ 46.854126][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.893952][ T3744] loop1: detected capacity change from 0 to 128 [ 47.923391][ T3744] EXT4-fs: test_dummy_encryption option not supported [ 48.055114][ T3747] syzkaller0: entered promiscuous mode [ 48.055135][ T3747] syzkaller0: entered allmulticast mode [ 48.123312][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.134838][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.182635][ T3750] loop1: detected capacity change from 0 to 2048 [ 48.210859][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.211007][ T3750] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.241480][ T3756] syzkaller0: entered promiscuous mode [ 48.241515][ T3756] syzkaller0: entered allmulticast mode [ 48.246052][ T3756] tipc: Started in network mode [ 48.246196][ T3756] tipc: Node identity 16ba50eeafa5, cluster identity 4711 [ 48.246232][ T3756] tipc: Enabled bearer , priority 0 [ 48.280644][ T3755] tipc: Resetting bearer [ 48.299638][ T3755] tipc: Disabling bearer [ 48.300853][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.304503][ T3763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.304631][ T3763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.338011][ T3766] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 48.381892][ T3768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.382011][ T3768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.489453][ T3766] netlink: 'syz.1.73': attribute type 10 has an invalid length. [ 48.489472][ T3766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.73'. [ 48.570164][ T3773] loop1: detected capacity change from 0 to 512 [ 48.570561][ T3773] journal_path: Non-blockdev passed as './file1' [ 48.570579][ T3773] EXT4-fs: error: could not find journal device path [ 48.622688][ T3775] loop1: detected capacity change from 0 to 2048 [ 48.642076][ T3775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.666576][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.693823][ T3779] loop1: detected capacity change from 0 to 512 [ 48.698784][ T3779] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 48.698799][ T3779] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.699902][ T3779] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.77: corrupted in-inode xattr: invalid ea_ino [ 48.699928][ T3779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.700118][ T3779] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.77: couldn't read orphan inode 15 (err -117) [ 48.700142][ T3779] loop1: lost filesystem error report for type 5 error -117 [ 48.700610][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.701902][ T3779] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.77: corrupted in-inode xattr: invalid ea_ino [ 48.702254][ T3779] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.77: corrupted in-inode xattr: invalid ea_ino [ 48.729567][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.000442][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 49.000457][ T29] audit: type=1400 audit(1793394446.582:265): avc: denied { ioctl } for pid=3788 comm="syz.4.81" path="socket:[5307]" dev="sockfs" ino=5307 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.006923][ T3790] loop1: detected capacity change from 0 to 128 [ 49.007522][ T3790] vfat: Unknown parameter '' [ 49.454605][ T3796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.460814][ T3796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.475317][ T29] audit: type=1400 audit(1793394447.052:266): avc: denied { remount } for pid=3795 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.476580][ T3796] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.533396][ T3798] EXT4-fs (loop4): shut down requested (0) [ 49.541892][ T29] audit: type=1400 audit(1793394447.122:267): avc: denied { read } for pid=2959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.542018][ T29] audit: type=1400 audit(1793394447.122:268): avc: denied { search } for pid=2959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.542073][ T29] audit: type=1400 audit(1793394447.122:269): avc: denied { write search } for pid=2959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.542176][ T29] audit: type=1400 audit(1793394447.122:270): avc: denied { add_name } for pid=2959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.542277][ T29] audit: type=1400 audit(1793394447.122:271): avc: denied { create } for pid=2959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.542296][ T29] audit: type=1400 audit(1793394447.122:272): avc: denied { append open } for pid=2959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.542316][ T29] audit: type=1400 audit(1793394447.122:273): avc: denied { getattr } for pid=2959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.548188][ T3802] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.598642][ ** replaying previous printk message ** [ 50.598642][ T3802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 50.599210][ T3802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.599505][ T3802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.600048][ T3802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.600119][ T3802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.610287][ T3802] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.707216][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.712466][ T3804] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 50.767877][ T3805] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 50.767895][ T3805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'. [ 50.953659][ T29] audit: type=1400 audit(1793394448.532:274): avc: denied { name_bind } for pid=3806 comm="syz.1.88" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 52.460464][ T3814] set_capacity_and_notify: 1 callbacks suppressed [ 52.460483][ T3814] loop0: detected capacity change from 0 to 1024 [ 52.476852][ T3817] loop1: detected capacity change from 0 to 512 [ 52.486038][ T3814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.486157][ T3814] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.545163][ T12] ------------[ cut here ]------------ [ 52.545174][ T12] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x8f/0xa0, CPU#1: kworker/u8:0/12 [ 52.586478][ T3821] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #15: block 3: comm syz.0.89: lblock 3 mapped to illegal pblock 3 (length 3) [ 52.586848][ T3821] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 52.586875][ T3821] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.586875][ T3821] [ 52.593595][ T3821] EXT4-fs error (device loop0): ext4_free_blocks:6717: comm syz.0.89: Freeing blocks not in datazone - block = 3, count = 3 [ 52.593859][ T3821] EXT4-fs error (device loop0): ext4_free_blocks:6717: comm syz.0.89: Freeing blocks not in datazone - block = 0, count = 16 [ 52.771107][ T12] Modules linked in: [ 52.775103][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.784593][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.794757][ T12] Workqueue: iou_exit io_ring_exit_work [ 52.800461][ T12] RIP: 0010:io_sq_thread_stop+0x8f/0xa0 [ 52.806021][ T12] Code: 37 e4 59 ff 48 89 df e8 6f 72 40 ff eb 05 e8 28 e4 59 ff 4c 89 f7 e8 a0 12 ae 03 5b 41 5e c3 cc cc cc cc cc e8 12 e4 59 ff 90 <0f> 0b 90 eb a0 e8 07 e4 59 ff 90 0f 0b 90 eb ca 90 90 90 90 90 90 [ 52.826198][ T12] RSP: 0018:ffffc9000006fc20 EFLAGS: 00010293 [ 52.832294][ T12] RAX: ffffffff8200beee RBX: ffff888103b50d80 RCX: ffff888100291140 [ 52.840383][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 52.848646][ T12] RBP: 0000000000000000 R08: 0001c9000006fbcf R09: 0000000000000000 [ 52.856744][ T12] R10: 0001c9000006fbcc R11: 0001c9000006fbcf R12: ffff888103b50da8 [ 52.864763][ T12] R13: ffff888103b50da8 R14: 0000000000000001 R15: ffff888103b50d90 [ 52.872977][ T12] FS: 0000000000000000(0000) GS:ffff8882ae752000(0000) knlGS:0000000000000000 [ 52.882012][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.888642][ T12] CR2: 00002000003a9030 CR3: 000000010d3aa000 CR4: 00000000003506f0 [ 52.897001][ T12] Call Trace: [ 52.900473][ T12] [ 52.903393][ T12] io_put_sq_data+0x4e/0xe0 [ 52.908064][ T12] io_sq_thread_finish+0x1e9/0x230 [ 52.913364][ T12] io_ring_ctx_free+0x1a/0x460 [ 52.918137][ T12] io_ring_exit_work+0x3b0/0x3e0 [ 52.923104][ T12] ? ttwu_do_activate+0x201/0x230 [ 52.928168][ T12] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 52.933637][ T12] process_scheduled_works+0x53f/0xa20 [ 52.939239][ T12] ? __list_add_valid_or_report+0x38/0xe0 [ 52.945175][ T12] worker_thread+0x56c/0x770 [ 52.950105][ T12] ? __pfx_worker_thread+0x10/0x10 [ 52.955295][ T12] kthread+0x223/0x270 [ 52.959489][ T12] ? __pfx_kthread+0x10/0x10 [ 52.964177][ T12] ret_from_fork+0x146/0x330 [ 52.968759][ T12] ? __pfx_kthread+0x10/0x10 [ 52.973368][ T12] ret_from_fork_asm+0x1a/0x30 [ 52.978219][ T12] [ 52.981329][ T12] ---[ end trace 0000000000000000 ]--- [ 52.987717][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.185818][ T3835] syzkaller0: entered promiscuous mode [ 53.185838][ T3835] syzkaller0: entered allmulticast mode [ 53.611298][ T3844] loop2: detected capacity change from 0 to 2048 [ 53.642191][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.595190][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 54.595253][ T29] audit: type=1400 audit(1793394452.172:283): avc: denied { mount } for pid=3849 comm="syz.4.99" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.635111][ T29] audit: type=1400 audit(1793394452.212:284): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.662909][ T3331] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.665202][ T29] audit: type=1400 audit(1793394452.242:285): avc: denied { bind } for pid=3851 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.665354][ T29] audit: type=1400 audit(1793394452.242:286): avc: denied { write } for pid=3851 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.760799][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.798364][ T3857] batman_adv: batadv0: Adding interface: syzkaller0 [ 54.798378][ T3857] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.798411][ T3857] batman_adv: batadv0: Interface activated: syzkaller0 [ 54.799145][ T3856] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 54.848960][ T3856] batman_adv: batadv0: Removing interface: syzkaller0 [ 54.927964][ T3862] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 54.961265][ T3862] netlink: 'syz.1.103': attribute type 10 has an invalid length. [ 54.961326][ T3862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.103'. [ 54.983932][ T3869] syzkaller0: entered promiscuous mode [ 54.983953][ T3869] syzkaller0: entered allmulticast mode [ 55.222583][ T3877] syzkaller0: entered promiscuous mode [ 55.222597][ T3877] syzkaller0: entered allmulticast mode [ 56.184448][ T3837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.222751][ T3881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.222862][ T3881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.233954][ T3886] syzkaller0: entered promiscuous mode [ 56.233973][ T3886] syzkaller0: entered allmulticast mode [ 56.259612][ T3885] loop1: detected capacity change from 0 to 2048 [ 56.284215][ T3885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.349455][ T3892] tipc: Enabled bearer , priority 0 [ 56.350440][ T3892] tipc: Resetting bearer [ 56.352522][ T3891] tipc: Disabling bearer [ 56.461512][ T3898] batman_adv: batadv0: Adding interface: syzkaller0 [ 56.461635][ T3898] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.461662][ T3898] batman_adv: batadv0: Interface activated: syzkaller0 [ 56.463421][ T3897] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 56.466786][ T3897] batman_adv: batadv0: Removing interface: syzkaller0 [ 56.699466][ T3521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.794647][ T3902] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 56.847143][ T3905] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 56.847239][ T3905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.116'. [ 56.847467][ T3905] dummy0: entered promiscuous mode [ 56.928761][ T3907] syzkaller0: entered promiscuous mode [ 56.928835][ T3907] syzkaller0: entered allmulticast mode [ 57.181592][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.172839][ T3931] syzkaller0: entered promiscuous mode [ 58.172854][ T3931] syzkaller0: entered allmulticast mode [ 58.356047][ T3935] netlink: 'syz.2.124': attribute type 7 has an invalid length. [ 58.356065][ T3935] netlink: 'syz.2.124': attribute type 5 has an invalid length. [ 58.356076][ T3935] netlink: 17 bytes leftover after parsing attributes in process `syz.2.124'. [ 58.363927][ T29] audit: type=1400 audit(1793394455.942:287): avc: denied { read write } for pid=3932 comm="syz.2.124" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.363989][ T29] audit: type=1400 audit(1793394455.942:288): avc: denied { open } for pid=3932 comm="syz.2.124" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.364081][ T29] audit: type=1400 audit(1793394455.942:289): avc: denied { ioctl } for pid=3932 comm="syz.2.124" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x4008700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.107744][ T3937] batman_adv: batadv0: Adding interface: syzkaller0 [ 59.107758][ T3937] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.107782][ T3937] batman_adv: batadv0: Interface activated: syzkaller0 [ 59.108415][ T3936] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 59.117149][ T3936] batman_adv: batadv0: Removing interface: syzkaller0 [ 59.311611][ T3944] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 59.351078][ T3944] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 59.351095][ T3944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'. [ 60.219225][ T3911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.230675][ T3949] loop0: detected capacity change from 0 to 2048 [ 60.256413][ T3949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.292621][ T3955] loop3: detected capacity change from 0 to 1024 [ 60.394453][ T3963] syzkaller0: entered promiscuous mode [ 60.394534][ T3963] syzkaller0: entered allmulticast mode [ 60.473412][ T3955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.583852][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.678447][ T3972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.690624][ T3972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.778960][ T3976] netlink: 'syz.2.136': attribute type 7 has an invalid length. [ 60.778984][ T3976] netlink: 'syz.2.136': attribute type 5 has an invalid length. [ 60.778994][ T3976] netlink: 17 bytes leftover after parsing attributes in process `syz.2.136'. [ 61.094558][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.213122][ T3986] batman_adv: batadv0: Adding interface: syzkaller0 [ 61.213135][ T3986] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.213161][ T3986] batman_adv: batadv0: Interface activated: syzkaller0 [ 61.214107][ T3985] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 61.216223][ T3985] batman_adv: batadv0: Removing interface: syzkaller0 [ 61.530246][ T3994] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.632909][ T3994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.142'. [ 61.634173][ T3994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.634390][ T3994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.635719][ T3994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.635929][ T3994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.650709][ T3994] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.249020][ T3988] syz.0.141 (3988) used greatest stack depth: 10032 bytes left [ 62.715206][ T4005] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 62.735427][ T4005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.762968][ T4005] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 62.768309][ T4005] Zero length message leads to an empty skb [ 62.768580][ T4005] netlink: 'syz.2.145': attribute type 10 has an invalid length. [ 62.768593][ T4005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.145'. [ 62.768627][ T4005] dummy0: entered promiscuous mode [ 63.941937][ T3978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.988379][ T4026] loop1: detected capacity change from 0 to 1024 [ 63.989065][ T4020] syzkaller0: entered promiscuous mode [ 63.989081][ T4020] syzkaller0: entered allmulticast mode [ 63.997351][ T4022] syzkaller0: entered promiscuous mode [ 63.997369][ T4022] syzkaller0: entered allmulticast mode [ 64.021908][ T4026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.024016][ T29] audit: type=1400 audit(1793394461.602:290): avc: denied { write } for pid=4024 comm="syz.1.151" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.024390][ T29] audit: type=1400 audit(1793394461.602:291): avc: denied { write } for pid=4024 comm="syz.1.151" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.111750][ T4031] batman_adv: batadv0: Adding interface: syzkaller0 [ 64.111765][ T4031] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.111873][ T4031] batman_adv: batadv0: Interface activated: syzkaller0 [ 64.112898][ T4030] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 64.115432][ T4030] batman_adv: batadv0: Removing interface: syzkaller0 [ 64.194459][ T4035] loop2: detected capacity change from 0 to 1024 [ 64.256444][ T4037] netlink: 'syz.4.153': attribute type 7 has an invalid length. [ 64.256474][ T4037] netlink: 'syz.4.153': attribute type 5 has an invalid length. [ 64.256520][ T4037] netlink: 17 bytes leftover after parsing attributes in process `syz.4.153'. [ 64.454550][ T4035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.736064][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.777658][ T4050] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 64.800856][ T4050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.834663][ T4050] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 64.838689][ T4050] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 64.838707][ T4050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.157'. [ 64.900203][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.033544][ T4069] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.132773][ T4069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.158'. [ 65.133979][ T4069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.134251][ T4069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.135820][ T4069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.136014][ T4069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.151047][ T4069] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.503390][ T4042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.543086][ T4078] batman_adv: batadv0: Adding interface: syzkaller0 [ 67.543100][ T4078] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.543124][ T4078] batman_adv: batadv0: Interface activated: syzkaller0 [ 67.543944][ T4077] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 67.545880][ T4077] batman_adv: batadv0: Removing interface: syzkaller0 [ 67.609230][ T4081] syzkaller0: entered promiscuous mode [ 67.609254][ T4081] syzkaller0: entered allmulticast mode [ 67.614751][ T4081] tipc: Enabled bearer , priority 0 [ 67.616898][ T4081] tipc: Resetting bearer [ 67.618168][ T4083] syzkaller0: entered promiscuous mode [ 67.618186][ T4083] syzkaller0: entered allmulticast mode [ 67.627746][ T4080] tipc: Resetting bearer [ 67.635173][ T4085] loop4: detected capacity change from 0 to 512 [ 67.643786][ T4080] tipc: Disabling bearer [ 67.661518][ T4085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.662636][ T4085] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.673335][ T4090] loop2: detected capacity change from 0 to 1024 [ 67.680838][ T4090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.684491][ T29] audit: type=1400 audit(1793394465.262:292): avc: denied { write } for pid=4089 comm="syz.2.168" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.915994][ T29] audit: type=1400 audit(1793394465.492:293): avc: denied { write } for pid=4084 comm="syz.4.167" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.918148][ T4097] loop3: detected capacity change from 0 to 1024 [ 67.940667][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.971817][ T29] audit: type=1400 audit(1793394465.522:294): avc: denied { map } for pid=4084 comm="syz.4.167" path="/33/bus/blkio.throttle.io_service_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.039933][ T4097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.066239][ T29] audit: type=1400 audit(1793394465.642:295): avc: denied { write } for pid=4096 comm="syz.3.171" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.140067][ T4102] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 68.190218][ T4102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.244515][ T4107] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 68.271981][ T4106] loop1: detected capacity change from 0 to 2048 [ 68.307201][ T4102] netlink: 'syz.2.170': attribute type 10 has an invalid length. [ 68.307218][ T4102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.170'. [ 68.312386][ T4106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.174419][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.243399][ T3292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.546213][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.576762][ T29] audit: type=1400 audit(1793394467.152:296): avc: denied { cpu } for pid=4136 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.584838][ T29] audit: type=1400 audit(1793394467.162:297): avc: denied { write } for pid=4136 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 72.205942][ T4115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.219180][ T4137] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.177'. [ 72.272765][ T4147] loop4: detected capacity change from 0 to 1024 [ 72.293420][ T4154] loop0: detected capacity change from 0 to 1024 [ 72.313216][ T4147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.332603][ T29] audit: type=1400 audit(1793394469.892:298): avc: denied { write } for pid=4145 comm="syz.4.180" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.357564][ T4154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.370868][ T29] audit: type=1400 audit(1793394469.942:299): avc: denied { write } for pid=4153 comm="syz.0.181" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.402169][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.403458][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.494713][ T4167] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.596173][ T4167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.596320][ T4167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.597621][ T4167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.597850][ T4167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.613428][ T4167] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.829898][ T4163] loop2: detected capacity change from 0 to 2048 [ 72.984256][ T4163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.921543][ T4172] syzkaller0: entered promiscuous mode [ 73.921635][ T4172] syzkaller0: entered allmulticast mode [ 74.047477][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.211609][ T4177] loop0: detected capacity change from 0 to 1024 [ 74.229187][ T4177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.248101][ T29] audit: type=1400 audit(1793394471.822:300): avc: denied { write } for pid=4175 comm="syz.0.187" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.248380][ T4185] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 74.259953][ T4185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 74.274565][ T4185] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 74.276272][ T4185] dummy0: left promiscuous mode [ 74.278556][ T4185] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 74.278573][ T4185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.186'. [ 74.278628][ T4185] dummy0: entered promiscuous mode [ 75.035644][ T4190] syz.0.187 (4190) used greatest stack depth: 9872 bytes left [ 75.048758][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.261094][ T4146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.262825][ T4198] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.191'. [ 75.329393][ T29] audit: type=1400 audit(1793394472.892:301): avc: denied { create } for pid=4202 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.329450][ T29] audit: type=1400 audit(1793394472.892:302): avc: denied { write } for pid=4202 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.333346][ T4205] loop4: detected capacity change from 0 to 1024 [ 75.365597][ T4205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.367458][ T29] audit: type=1400 audit(1793394472.942:303): avc: denied { write } for pid=4204 comm="syz.4.195" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.431767][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.458212][ T29] audit: type=1400 audit(1793394473.032:304): avc: denied { create } for pid=4207 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.464247][ T4219] syzkaller0: entered promiscuous mode [ 75.464268][ T4219] syzkaller0: entered allmulticast mode [ 75.476450][ T4208] syzkaller0: entered promiscuous mode [ 75.476470][ T4208] syzkaller0: entered allmulticast mode [ 75.477578][ T29] audit: type=1400 audit(1793394473.032:305): avc: denied { ioctl } for pid=4207 comm="syz.3.196" path="socket:[6832]" dev="sockfs" ino=6832 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.563455][ T4231] syzkaller0: entered promiscuous mode [ 75.563475][ T4231] syzkaller0: entered allmulticast mode [ 76.463545][ T29] audit: type=1400 audit(1793394474.042:306): avc: denied { read } for pid=4242 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.306017][ T4214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.306765][ T4224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 78.358433][ T4258] loop1: detected capacity change from 0 to 1024 [ 78.411757][ T4258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.416296][ T29] audit: type=1400 audit(1793394475.992:307): avc: denied { write } for pid=4257 comm="syz.1.207" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.577134][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.680139][ T4275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.680711][ T4275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.682316][ T4275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.682565][ T4275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.698248][ T4275] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.337508][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.397016][ T4278] syzkaller0: entered promiscuous mode [ 79.397033][ T4278] syzkaller0: entered allmulticast mode [ 79.512599][ T4280] syzkaller0: entered promiscuous mode [ 79.512785][ T4280] syzkaller0: entered allmulticast mode [ 80.480533][ T29] audit: type=1400 audit(1793394478.062:308): avc: denied { create } for pid=4284 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.456754][ T4252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.456806][ T4263] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.209'. [ 81.580546][ T4302] loop0: detected capacity change from 0 to 2048 [ 81.590833][ T4302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.183716][ T4316] loop1: detected capacity change from 0 to 1024 [ 82.197335][ T4316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.198392][ T29] audit: type=1400 audit(1793394479.772:309): avc: denied { write } for pid=4315 comm="syz.1.222" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.328263][ T4319] ================================================================== [ 82.328292][ T4319] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 82.328317][ T4319] [ 82.328323][ T4319] write to 0xffff88811bd35820 of 8 bytes by task 4316 on cpu 0: [ 82.328339][ T4319] filemap_splice_read+0x504/0x750 [ 82.328362][ T4319] ext4_file_splice_read+0x8f/0xb0 [ 82.328396][ T4319] splice_direct_to_actor+0x25d/0x680 [ 82.328419][ T4319] do_splice_direct+0x119/0x1a0 [ 82.328441][ T4319] do_sendfile+0x37d/0x640 [ 82.328462][ T4319] __x64_sys_sendfile64+0x105/0x150 [ 82.328480][ T4319] x64_sys_call+0x1015/0x2550 [ 82.328502][ T4319] do_syscall_64+0x112/0x360 [ 82.328527][ T4319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.328556][ T4319] [ 82.328562][ T4319] write to 0xffff88811bd35820 of 8 bytes by task 4319 on cpu 1: [ 82.328580][ T4319] filemap_splice_read+0x504/0x750 [ 82.328603][ T4319] ext4_file_splice_read+0x8f/0xb0 [ 82.328633][ T4319] splice_direct_to_actor+0x25d/0x680 [ 82.328656][ T4319] do_splice_direct+0x119/0x1a0 [ 82.328677][ T4319] do_sendfile+0x37d/0x640 [ 82.328699][ T4319] __x64_sys_sendfile64+0x105/0x150 [ 82.328716][ T4319] x64_sys_call+0x1015/0x2550 [ 82.328737][ T4319] do_syscall_64+0x112/0x360 [ 82.328763][ T4319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.328784][ T4319] [ 82.328789][ T4319] value changed: 0x0000000000000219 -> 0x000000000000021a [ 82.328801][ T4319] [ 82.328805][ T4319] Reported by Kernel Concurrency Sanitizer on: [ 82.328830][ T4319] CPU: 1 UID: 0 PID: 4319 Comm: syz.1.222 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 82.328857][ T4319] Tainted: [W]=WARN [ 82.328864][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.328876][ T4319] ================================================================== [ 82.459261][ T3291] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.029013][ T4319] syz.1.222 (4319) used greatest stack depth: 9728 bytes left [ 83.039878][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.535272][ T4293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512