last executing test programs: 5.177761659s ago: executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getpid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './cgroup'}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000), 0x20000000) getpid() process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 5.03952532s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0xa}, @jmp={0x6, 0x0, 0xd}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 4.956784493s ago: executing program 0: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x70, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x0]}}, {{0x1c, 0x1, {0x7, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x70}}, 0x0) 4.943223255s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x3}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000740)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESHEX, @ANYBLOB="2c6d6f64653d3078303030303030303038303030303030312c696f636861727365743d6d6163696e7569742c66756e633d4250524d5f434845434b2c0020e70c853946a2904771793dc06c06611e03f5e2c7602f64a957c88cc3d8ee83589beff40c21fbbb1601b5869235b81f95cf0a39f6c3195e5125f94f2f8c75c38fc0c09c03ea3fbd2e56cce2a69c86db67514e59f271f5f87b7b075aabe717344a6eaeb832436386d4424b4a3d25832eb577d44c6accfaa75c7ae620d71699794e59af4cb377883fc3e4c9dfdb6340cb6395e3776c2b7e56043e63b8dd704ed4ede91e42537942c5e62bf46bf7b8542c03f6240d54f161466db4e9134915ca2839bbf4d798c1de7af1366d9b142b4e603178a6862a8b03340d309cab1a0cd33fb757910ccc8420000000934038e92ed734e0eb7d200c8283ff14dcc7b61114a4fef9561fa91274ac0114c707f4e3bf295693abd959f52b9564cd00500cfc"], 0x1, 0x59d, &(0x7f00000009c0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r2, 0x4b32, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000004"], 0x44}, 0x1, 0xffffffff00000003}, 0x0) 4.298520765s ago: executing program 3: mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) creat(&(0x7f00000000c0)='./bus\x00', 0x0) io_uring_enter(r0, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) 4.086248168s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100082020732500000000002020207b0af8ff00000000bfa000000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xfed, &(0x7f0000001e00)=""/4077}, 0x90) 4.07216719s ago: executing program 0: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x420e, r1, 0x0, &(0x7f0000000000)) 3.448561317s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000001500)='./file0\x00', 0x10e, &(0x7f00000016c0)={[{@errors_remount}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x45e, &(0x7f0000001780)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) tee(0xffffffffffffffff, r3, 0x0, 0x0) sync_file_range(r2, 0x5, 0x0, 0x8) rt_sigaction(0xd, &(0x7f0000000000)={&(0x7f0000000380)="36d2d8f2438395ff1f965a00c4c1185c840561ee00007b7bc4816a512425160000006f6aa1c463f962d60064660fd054060aa89ef3ae7864640f2a6cda00c412c12e1129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) 3.393308455s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000012c0)={'filter\x00', 0x4, "8f7d32a7"}, &(0x7f0000002300)=0x2c) unshare(0x42000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000048000000030a0102000000000000000001000000080007006e6174000900030073796031000000000900010073797a3000000000140004800800024000000000080001"], 0x90}}, 0x0) 3.29992331s ago: executing program 4: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0xe) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7fffffff}, 0x8) bind$bt_sco(r7, &(0x7f0000000400), 0x8) listen(r7, 0x0) shutdown(r7, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800110100000000000000000a00400000000006"], 0x1c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2}, 0x40) syz_emit_ethernet(0xe, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 3.243618508s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 3.180442808s ago: executing program 4: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x70, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x0]}}, {{0x1c, 0x1, {0x7, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x70}}, 0x0) 2.58245523s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00'}, 0x10) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x27) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x0) 2.562275053s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x3}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000740)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x59d, &(0x7f00000009c0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r2, 0x4b32, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000004"], 0x44}, 0x1, 0xffffffff00000003}, 0x0) 1.712014894s ago: executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x220000, 0x0, 0x22}, 0x18) 1.699192147s ago: executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 991.980536ms ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = epoll_create(0x10000e9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000080), 0x1c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, '\x00', "0090709400080000eb1eaf7b05200020", '\x00\b\x00', "060000000900"}, 0x28) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x4}) 702.407191ms ago: executing program 1: mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) 672.878025ms ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000280), 0x12) 657.855468ms ago: executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/4103, 0x1007}], 0x1) 647.920799ms ago: executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) inotify_init1(0x0) ptrace$getenv(0x4205, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}}]}}]}, 0x8c}}, 0x0) 471.984287ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e657665000018000280060005004e20000004000600050008"], 0x58}}, 0x0) 461.494389ms ago: executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) creat(&(0x7f00000000c0)='./bus\x00', 0x0) io_uring_enter(r0, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) 454.88022ms ago: executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 445.172021ms ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) r3 = dup2(r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 143.920387ms ago: executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x2) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xd2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 68.424379ms ago: executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) r2 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x44800) 56.435501ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) 10.053629ms ago: executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) lseek(r0, 0x0, 0x2) 0s ago: executing program 2: syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x80) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x800000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x8, 0x4, [@local]}]}}}], 0x18}}], 0x23, 0x0) socket(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) lchown(&(0x7f0000000100)='./file0\x00', r7, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x15) r8 = creat(&(0x7f0000000280)='./file1\x00', 0x0) sendmmsg$unix(r3, &(0x7f0000000340)=[{{&(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000480)="55a5c3adb008a599a69afb189ab163e4bd9496fd180aa2dc4cf7b3c453185a4be105d2c1a27ddf21d4623c924cf1b054c702bfb4fefcb8db626c5b8f086672c8a187612db3fbcff15e080a31fcb7ed0f0b675f0b7dd593e34f8eeda958aef6d29447323d29c1f06ca393eb31dd65b0bb8b35e1400d48fced29d5dd556e3190b6581ebe59c7fc7ab583ac800ec958c12df551dd5c95b07e13003c7a2b101faf4e9c18bbc0de1734bdb6463b81ca70c0f0051e43d36553045e0c2cfc13282acf0b86b106f91c20db6b03b60f1b8a64eaabaf687b5aca", 0xd5}, {&(0x7f0000001740)="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", 0x1000}], 0x2, &(0x7f0000000300), 0x0, 0x8030}}], 0x1, 0x10) write$eventfd(r8, &(0x7f0000000080), 0xfffffe5e) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder-control\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. 2024/06/12 17:36:35 fuzzer started 2024/06/12 17:36:36 dialing manager at 10.128.0.163:30030 [ 25.162363][ T29] audit: type=1400 audit(1718213796.076:82): avc: denied { node_bind } for pid=3075 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.183308][ T29] audit: type=1400 audit(1718213796.076:83): avc: denied { name_bind } for pid=3075 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.841411][ T29] audit: type=1400 audit(1718213796.756:84): avc: denied { mounton } for pid=3084 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.843533][ T3084] cgroup: Unknown subsys name 'net' [ 25.874132][ T29] audit: type=1400 audit(1718213796.756:85): avc: denied { mount } for pid=3084 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.902129][ T29] audit: type=1400 audit(1718213796.786:86): avc: denied { create } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.916253][ T3086] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.923306][ T29] audit: type=1400 audit(1718213796.786:87): avc: denied { write } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.954304][ T29] audit: type=1400 audit(1718213796.786:88): avc: denied { unmount } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.974569][ T3085] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.983314][ T29] audit: type=1400 audit(1718213796.786:89): avc: denied { read } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.003736][ T29] audit: type=1400 audit(1718213796.806:90): avc: denied { mounton } for pid=3091 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.028818][ T29] audit: type=1400 audit(1718213796.806:91): avc: denied { mount } for pid=3091 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.141463][ T3084] cgroup: Unknown subsys name 'rlimit' 2024/06/12 17:36:37 suppressing KCSAN reports in functions: 'ext4_fill_raw_inode' 'pcpu_alloc_noprof' 'do_select' '__xa_clear_mark' '__ext4_unlink' 'exit_mm' '__find_get_block' 2024/06/12 17:36:37 starting 5 executor processes [ 26.995744][ T3101] chnl_net:caif_netlink_parms(): no params data found [ 27.036689][ T3106] chnl_net:caif_netlink_parms(): no params data found [ 27.073958][ T3110] chnl_net:caif_netlink_parms(): no params data found [ 27.128679][ T3101] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.136488][ T3101] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.143747][ T3101] bridge_slave_0: entered allmulticast mode [ 27.150320][ T3101] bridge_slave_0: entered promiscuous mode [ 27.159878][ T3119] chnl_net:caif_netlink_parms(): no params data found [ 27.174156][ T3109] chnl_net:caif_netlink_parms(): no params data found [ 27.185696][ T3101] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.193028][ T3101] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.200207][ T3101] bridge_slave_1: entered allmulticast mode [ 27.206525][ T3101] bridge_slave_1: entered promiscuous mode [ 27.235081][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.253135][ T3106] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.260338][ T3106] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.267578][ T3106] bridge_slave_0: entered allmulticast mode [ 27.273992][ T3106] bridge_slave_0: entered promiscuous mode [ 27.288120][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.307426][ T3106] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.314949][ T3106] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.322998][ T3106] bridge_slave_1: entered allmulticast mode [ 27.329411][ T3106] bridge_slave_1: entered promiscuous mode [ 27.344112][ T3110] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.351313][ T3110] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.358588][ T3110] bridge_slave_0: entered allmulticast mode [ 27.365936][ T3110] bridge_slave_0: entered promiscuous mode [ 27.374820][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.382252][ T3110] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.389451][ T3110] bridge_slave_1: entered allmulticast mode [ 27.395932][ T3110] bridge_slave_1: entered promiscuous mode [ 27.420239][ T3101] team0: Port device team_slave_0 added [ 27.434708][ T3106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.446483][ T3106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.461482][ T3101] team0: Port device team_slave_1 added [ 27.472840][ T3110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.494253][ T3119] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.501401][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.508779][ T3119] bridge_slave_0: entered allmulticast mode [ 27.515130][ T3119] bridge_slave_0: entered promiscuous mode [ 27.522798][ T3110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.532186][ T3119] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.539363][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.547388][ T3119] bridge_slave_1: entered allmulticast mode [ 27.553872][ T3119] bridge_slave_1: entered promiscuous mode [ 27.569899][ T3106] team0: Port device team_slave_0 added [ 27.597810][ T3106] team0: Port device team_slave_1 added [ 27.608428][ T3101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.615429][ T3101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.641495][ T3101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.652716][ T3110] team0: Port device team_slave_0 added [ 27.659191][ T3110] team0: Port device team_slave_1 added [ 27.669075][ T3109] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.676166][ T3109] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.683596][ T3109] bridge_slave_0: entered allmulticast mode [ 27.690117][ T3109] bridge_slave_0: entered promiscuous mode [ 27.701427][ T3101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.708515][ T3101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.734410][ T3101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.752992][ T3119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.766780][ T3109] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.773948][ T3109] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.781070][ T3109] bridge_slave_1: entered allmulticast mode [ 27.787371][ T3109] bridge_slave_1: entered promiscuous mode [ 27.793804][ T3106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.800850][ T3106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.826999][ T3106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.838231][ T3106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.845313][ T3106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.871446][ T3106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.891713][ T3119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.904570][ T3110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.911629][ T3110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.937871][ T3110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.969312][ T3101] hsr_slave_0: entered promiscuous mode [ 27.975406][ T3101] hsr_slave_1: entered promiscuous mode [ 27.982533][ T3110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.989506][ T3110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.015520][ T3110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.027181][ T3109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.051441][ T3109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.068961][ T3106] hsr_slave_0: entered promiscuous mode [ 28.074889][ T3106] hsr_slave_1: entered promiscuous mode [ 28.080921][ T3106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.088497][ T3106] Cannot create hsr debugfs directory [ 28.100406][ T3119] team0: Port device team_slave_0 added [ 28.112447][ T3109] team0: Port device team_slave_0 added [ 28.124020][ T3119] team0: Port device team_slave_1 added [ 28.140417][ T3109] team0: Port device team_slave_1 added [ 28.162233][ T3110] hsr_slave_0: entered promiscuous mode [ 28.168257][ T3110] hsr_slave_1: entered promiscuous mode [ 28.174092][ T3110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.181766][ T3110] Cannot create hsr debugfs directory [ 28.193691][ T3119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.200827][ T3119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.226760][ T3119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.254575][ T3119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.261621][ T3119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.288460][ T3119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.309704][ T3109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.316746][ T3109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.342850][ T3109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.365485][ T3109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.372473][ T3109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.398934][ T3109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.434347][ T3119] hsr_slave_0: entered promiscuous mode [ 28.440408][ T3119] hsr_slave_1: entered promiscuous mode [ 28.446256][ T3119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.453837][ T3119] Cannot create hsr debugfs directory [ 28.518530][ T3109] hsr_slave_0: entered promiscuous mode [ 28.524581][ T3109] hsr_slave_1: entered promiscuous mode [ 28.530423][ T3109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.538303][ T3109] Cannot create hsr debugfs directory [ 28.596743][ T3106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.607316][ T3106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.623418][ T3106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.648305][ T3106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.664131][ T3101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.674644][ T3101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.685843][ T3101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.695119][ T3101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.730411][ T3110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.741212][ T3110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.760464][ T3110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.771503][ T3110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.790495][ T3119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.804299][ T3119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.812928][ T3119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.822597][ T3119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.859367][ T3109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.877607][ T3109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.889912][ T3109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.909405][ T3109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.929707][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.953488][ T3101] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.962224][ T3106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.972839][ T3110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.991440][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.998598][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.012432][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.019506][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.037116][ T3106] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.058659][ T3119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.069268][ T3110] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.084577][ T3101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.100632][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.107700][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.116892][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.123943][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.148939][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.156089][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.167914][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.175009][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.192886][ T3106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.203454][ T3106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.220037][ T3119] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.240234][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.247365][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.256164][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.263208][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.276708][ T3109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.297854][ T3109] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.316050][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.323174][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.335766][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.343034][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.366641][ T3101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.419782][ T3110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.437479][ T3106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.493298][ T3119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.520470][ T3109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.592184][ T3110] veth0_vlan: entered promiscuous mode [ 29.620286][ T3110] veth1_vlan: entered promiscuous mode [ 29.661452][ T3106] veth0_vlan: entered promiscuous mode [ 29.676820][ T3106] veth1_vlan: entered promiscuous mode [ 29.687204][ T3110] veth0_macvtap: entered promiscuous mode [ 29.700050][ T3109] veth0_vlan: entered promiscuous mode [ 29.713358][ T3119] veth0_vlan: entered promiscuous mode [ 29.721274][ T3109] veth1_vlan: entered promiscuous mode [ 29.728562][ T3110] veth1_macvtap: entered promiscuous mode [ 29.737398][ T3119] veth1_vlan: entered promiscuous mode [ 29.748852][ T3101] veth0_vlan: entered promiscuous mode [ 29.757574][ T3110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.767717][ T3110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.776385][ T3101] veth1_vlan: entered promiscuous mode [ 29.794062][ T3106] veth0_macvtap: entered promiscuous mode [ 29.806195][ T3110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.815026][ T3110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.823895][ T3110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.832596][ T3110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.853687][ T3106] veth1_macvtap: entered promiscuous mode [ 29.862325][ T3109] veth0_macvtap: entered promiscuous mode [ 29.871070][ T3109] veth1_macvtap: entered promiscuous mode [ 29.879364][ T3119] veth0_macvtap: entered promiscuous mode [ 29.895801][ T3101] veth0_macvtap: entered promiscuous mode [ 29.906208][ T3106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.916709][ T3106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.927464][ T3106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.939327][ T3119] veth1_macvtap: entered promiscuous mode [ 29.955200][ T3101] veth1_macvtap: entered promiscuous mode [ 29.966167][ T3106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.977191][ T3106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.987990][ T3106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.997721][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.008268][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.018321][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.028776][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.040107][ T3109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.048904][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.059399][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.069211][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.079654][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.090554][ T3109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.105048][ T3106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.114051][ T3106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.122858][ T3106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.133139][ T3106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.145324][ T3109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.154108][ T3109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.162943][ T3109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.171935][ T3109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.201632][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 30.201645][ T29] audit: type=1400 audit(1718213801.116:116): avc: denied { create } for pid=3246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.205911][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.219474][ T29] audit: type=1400 audit(1718213801.136:117): avc: denied { write } for pid=3246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.228983][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.269865][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.270136][ T3248] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.280335][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.280352][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.280365][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.283061][ T3101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.330542][ T29] audit: type=1400 audit(1718213801.186:118): avc: denied { create } for pid=3246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.333127][ T3119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.350476][ T29] audit: type=1400 audit(1718213801.216:119): avc: denied { open } for pid=3246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.360898][ T3119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.360908][ T3119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.380538][ T29] audit: type=1400 audit(1718213801.216:120): avc: denied { perfmon } for pid=3246 comm="syz-executor.0" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.390319][ T3119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.390329][ T3119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.400842][ T29] audit: type=1400 audit(1718213801.216:121): avc: denied { kernel } for pid=3246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.421978][ T3119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.421991][ T3119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.422003][ T3119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.424853][ T3119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.485752][ T29] audit: type=1400 audit(1718213801.346:122): avc: denied { map_create } for pid=3246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.519840][ T29] audit: type=1400 audit(1718213801.356:123): avc: denied { map_read map_write } for pid=3246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.540018][ T29] audit: type=1400 audit(1718213801.356:124): avc: denied { prog_load } for pid=3246 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.559567][ T29] audit: type=1400 audit(1718213801.356:125): avc: denied { bpf } for pid=3246 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.586571][ T3119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.597201][ T3119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.607134][ T3119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.617824][ T3119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.627815][ T3119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.638410][ T3119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.654320][ T3119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.690371][ T3248] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 30.698659][ T3248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 30.714096][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.724579][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.734511][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.745120][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.755015][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.765490][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.775414][ T3101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.785882][ T3101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.796886][ T3101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.805761][ T3119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.814650][ T3119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.823374][ T3119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.832196][ T3119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.849676][ T3101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.858658][ T3101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.867432][ T3101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.876275][ T3101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.949857][ T3248] syz-executor.0 (3248) used greatest stack depth: 11448 bytes left [ 30.966030][ T3265] loop4: detected capacity change from 0 to 128 [ 31.066413][ T3276] loop1: detected capacity change from 0 to 764 [ 31.105893][ T3280] team_slave_0: entered promiscuous mode [ 31.111700][ T3280] team_slave_1: entered promiscuous mode [ 31.117844][ T3280] macvtap1: entered promiscuous mode [ 31.123231][ T3280] team0: entered promiscuous mode [ 31.129801][ T3280] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 31.138448][ T3280] team0: Device macvtap1 is already an upper device of the team interface [ 31.147558][ T3280] team0: left promiscuous mode [ 31.152804][ T3280] team_slave_0: left promiscuous mode [ 31.158953][ T3280] team_slave_1: left promiscuous mode [ 31.222787][ T3280] syz-executor.4 (3280) used greatest stack depth: 11208 bytes left [ 31.302098][ T3301] loop3: detected capacity change from 0 to 128 [ 31.410321][ T3314] team_slave_0: entered promiscuous mode [ 31.416114][ T3314] team_slave_1: entered promiscuous mode [ 31.422921][ T3314] macvtap1: entered promiscuous mode [ 31.428315][ T3314] team0: entered promiscuous mode [ 31.435553][ T3314] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 31.456779][ T3314] team0: Device macvtap1 is already an upper device of the team interface [ 31.466339][ T3314] team0: left promiscuous mode [ 31.471464][ T3314] team_slave_0: left promiscuous mode [ 31.476858][ T3314] team_slave_1: left promiscuous mode [ 31.605574][ T3328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.698117][ T3338] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [S]L3 index 0 [ 31.712832][ T3334] syz-executor.2 (3334) used greatest stack depth: 10512 bytes left [ 31.862944][ T3348] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.052140][ T3381] loop4: detected capacity change from 0 to 2048 [ 32.103390][ T3391] loop3: detected capacity change from 0 to 128 [ 32.116589][ T3381] Alternate GPT is invalid, using primary GPT. [ 32.122992][ T3381] loop4: p1 p2 p3 [ 32.291590][ T3401] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.372781][ T3410] ======================================================= [ 32.372781][ T3410] WARNING: The mand mount option has been deprecated and [ 32.372781][ T3410] and is ignored by this kernel. Remove the mand [ 32.372781][ T3410] option from the mount to silence this warning. [ 32.372781][ T3410] ======================================================= [ 32.459817][ T3418] loop1: detected capacity change from 0 to 2048 [ 32.509068][ T3268] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.789919][ T3462] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.986433][ T3472] loop3: detected capacity change from 0 to 2048 [ 33.052801][ T3472] Alternate GPT is invalid, using primary GPT. [ 33.059178][ T3472] loop3: p1 p2 p3 [ 33.079830][ T2784] Alternate GPT is invalid, using primary GPT. [ 33.086130][ T2784] loop3: p1 p2 p3 [ 33.452112][ T3519] loop2: detected capacity change from 0 to 1024 [ 33.468781][ T3519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.512482][ T3519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.610307][ T3109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.652703][ T3538] loop0: detected capacity change from 0 to 256 [ 33.763049][ T3554] loop2: detected capacity change from 0 to 2048 [ 33.811665][ T3554] loop2: p1 < > p4 [ 33.829121][ T3554] loop2: p4 size 8388608 extends beyond EOD, truncated [ 33.875879][ T2784] loop2: p1 < > p4 [ 33.887861][ T2784] loop2: p4 size 8388608 extends beyond EOD, truncated [ 33.938298][ T3109] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 33.945490][ T3268] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 33.955182][ T3090] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 33.969725][ T3268] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.978880][ T3571] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.986204][ T3268] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 33.991753][ T3090] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.995919][ T3268] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 34.003411][ T3090] Buffer I/O error on dev loop2p4, logical block 1, async page read [ 34.012778][ T3268] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 34.031252][ T3268] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 34.040421][ T3268] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 34.049699][ T3268] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 34.059378][ T3268] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 34.067638][ T3268] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 34.076946][ T3268] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 34.097563][ T3090] udevd[3090]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.097831][ T3268] udevd[3268]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.120696][ T3587] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 34.128854][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 34.129514][ T3268] udevd[3268]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.153759][ T3090] udevd[3090]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.161191][ T3590] loop3: detected capacity change from 0 to 2048 [ 34.171154][ T3090] udevd[3090]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.171675][ T3268] udevd[3268]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.199425][ T3590] Alternate GPT is invalid, using primary GPT. [ 34.205781][ T3590] loop3: p1 p2 p3 [ 34.358100][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 34.489596][ T3623] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 34.506658][ T3623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.540832][ T3631] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.554207][ T3633] loop0: detected capacity change from 0 to 128 [ 34.769991][ T3662] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 34.866027][ T3671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 34.940726][ T3669] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 34.949325][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 34.970890][ T3675] loop1: detected capacity change from 0 to 1024 [ 34.982833][ T3675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.045481][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.062949][ T3678] loop2: detected capacity change from 0 to 2048 [ 35.119596][ T3678] loop2: p1 < > p4 [ 35.133287][ T3678] loop2: p4 size 8388608 extends beyond EOD, truncated [ 35.143818][ T3106] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.198989][ T3548] udevd[3548]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 35.273352][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 35.273365][ T29] audit: type=1400 audit(1718213806.186:238): avc: denied { create } for pid=3708 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 35.307650][ T3713] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 35.316703][ T29] audit: type=1400 audit(1718213806.186:239): avc: denied { connect } for pid=3708 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 35.337385][ T29] audit: type=1400 audit(1718213806.186:240): avc: denied { read } for pid=3708 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 35.357647][ T29] audit: type=1400 audit(1718213806.186:241): avc: denied { listen } for pid=3706 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.378103][ T29] audit: type=1400 audit(1718213806.186:242): avc: denied { getopt } for pid=3706 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.400832][ T29] audit: type=1400 audit(1718213806.316:243): avc: denied { create } for pid=3716 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.413351][ T3711] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 35.420825][ T29] audit: type=1400 audit(1718213806.316:244): avc: denied { connect } for pid=3716 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.450990][ T29] audit: type=1400 audit(1718213806.316:245): avc: denied { write } for pid=3716 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.471490][ T29] audit: type=1400 audit(1718213806.316:246): avc: denied { write } for pid=3708 comm="syz-executor.3" path="socket:[4707]" dev="sockfs" ino=4707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 35.571035][ T29] audit: type=1400 audit(1718213806.486:247): avc: denied { create } for pid=3732 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.654051][ T3746] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 35.667946][ T3749] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 35.682758][ T3746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.869204][ T3767] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 35.927110][ T3793] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 36.301657][ T3817] loop1: detected capacity change from 0 to 128 [ 36.412058][ T3832] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 36.424200][ T3819] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 36.496546][ T3841] loop4: detected capacity change from 0 to 128 [ 36.530638][ T3841] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 36.709237][ T3864] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 36.771624][ T3873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 36.807271][ T3873] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 36.829656][ T3870] team_slave_0: entered promiscuous mode [ 36.835331][ T3870] team_slave_1: entered promiscuous mode [ 36.836480][ T3878] loop2: detected capacity change from 0 to 128 [ 36.865782][ T3870] macsec1: entered promiscuous mode [ 36.871104][ T3870] team0: entered promiscuous mode [ 36.874104][ T3878] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 36.876379][ T3870] macsec1: entered allmulticast mode [ 36.891017][ T3870] team0: entered allmulticast mode [ 36.896386][ T3870] team_slave_0: entered allmulticast mode [ 36.902205][ T3870] team_slave_1: entered allmulticast mode [ 36.940483][ T3870] team0: Device macsec1 is already an upper device of the team interface [ 36.950652][ T3870] team0: left allmulticast mode [ 36.955888][ T3870] team_slave_0: left allmulticast mode [ 36.955904][ T3870] team_slave_1: left allmulticast mode [ 36.955925][ T3870] team0: left promiscuous mode [ 36.956238][ T3870] team_slave_0: left promiscuous mode [ 36.977359][ T3870] team_slave_1: left promiscuous mode [ 37.007606][ T3882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.066271][ T8] kernel read not supported for file /vcs (pid: 8 comm: kworker/0:0) [ 37.373607][ T3923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.452134][ T3935] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 37.478636][ T3182] kernel read not supported for file /vcs (pid: 3182 comm: kworker/1:5) [ 37.483850][ T3933] syzkaller0: entered promiscuous mode [ 37.492661][ T3933] syzkaller0: entered allmulticast mode [ 37.615002][ T3954] Process accounting resumed [ 37.725706][ T3967] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 37.726915][ T3968] loop0: detected capacity change from 0 to 512 [ 37.851550][ T3981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.920385][ T3983] syzkaller0: entered promiscuous mode [ 37.925924][ T3983] syzkaller0: entered allmulticast mode [ 37.948445][ T3181] kernel read not supported for file /vcs (pid: 3181 comm: kworker/1:4) [ 38.073103][ T3996] loop0: detected capacity change from 0 to 2048 [ 38.082047][ T3996] EXT4-fs: Ignoring removed orlov option [ 38.102748][ T3996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.135711][ T3996] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.152152][ T3996] EXT4-fs (loop0): Remounting filesystem read-only [ 38.166910][ T3110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.321816][ T4012] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 38.329958][ T4012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 38.871716][ T4022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 38.967163][ T4032] loop2: detected capacity change from 0 to 2048 [ 38.979001][ T4032] EXT4-fs: Ignoring removed orlov option [ 38.998908][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.019526][ T4032] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.055449][ T4032] EXT4-fs (loop2): Remounting filesystem read-only [ 39.094154][ T3109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.140504][ T4046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 39.161156][ T4046] loop4: detected capacity change from 0 to 256 [ 39.243647][ T4052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 39.317205][ T4061] Zero length message leads to an empty skb [ 39.335782][ T4070] loop2: detected capacity change from 0 to 2048 [ 39.343769][ T4070] EXT4-fs: Ignoring removed orlov option [ 39.369633][ T4070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.386000][ T4070] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.401103][ T4070] EXT4-fs (loop2): Remounting filesystem read-only [ 39.413273][ T3109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.584264][ T4085] loop2: detected capacity change from 0 to 2048 [ 39.599641][ T4085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.622590][ T3109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.710588][ T4090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4090 comm=syz-executor.2 [ 39.723631][ T4090] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 39.734444][ T4090] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.743207][ T4090] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.752022][ T4090] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.760747][ T4090] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.187630][ T4107] loop3: detected capacity change from 0 to 256 [ 40.227051][ T4114] loop0: detected capacity change from 0 to 1024 [ 40.235807][ T4114] ext4: Unknown parameter 'nouser_xattr' [ 40.243855][ T4116] process 'syz-executor.4' launched '/dev/fd/4' with NULL argv: empty string added [ 40.299625][ T29] kauditd_printk_skb: 9553 callbacks suppressed [ 40.299638][ T29] audit: type=1400 audit(1718213811.216:9801): avc: denied { create } for pid=4113 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 40.327884][ T29] audit: type=1400 audit(1718213811.226:9802): avc: denied { ioctl } for pid=4113 comm="syz-executor.0" path="socket:[6372]" dev="sockfs" ino=6372 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 40.403247][ T4134] SELinux: security_context_str_to_sid () failed with errno=-22 [ 40.462622][ T4142] loop3: detected capacity change from 0 to 256 [ 40.470846][ T29] audit: type=1326 audit(1718213811.386:9803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe658aea9 code=0x7ffc0000 [ 40.495285][ T29] audit: type=1326 audit(1718213811.386:9804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe658aea9 code=0x7ffc0000 [ 40.520074][ T4090] syz-executor.2 (4090) used greatest stack depth: 10184 bytes left [ 40.520759][ T29] audit: type=1326 audit(1718213811.386:9805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbfe658aea9 code=0x7ffc0000 [ 40.552033][ T29] audit: type=1326 audit(1718213811.386:9806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe658aea9 code=0x7ffc0000 [ 40.565117][ T4146] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 40.575989][ T29] audit: type=1326 audit(1718213811.386:9807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe658aea9 code=0x7ffc0000 [ 40.609763][ T29] audit: type=1400 audit(1718213811.436:9808): avc: denied { mount } for pid=4145 comm="syz-executor.4" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 40.635092][ T29] audit: type=1326 audit(1718213811.446:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfe658aea9 code=0x7ffc0000 [ 40.659385][ T29] audit: type=1326 audit(1718213811.446:9810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe658aea9 code=0x7ffc0000 [ 40.700952][ T4149] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 40.702836][ T4148] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 40.717330][ T4148] team0: entered promiscuous mode [ 40.722582][ T4148] team_slave_0: entered promiscuous mode [ 40.728533][ T4148] team_slave_1: entered promiscuous mode [ 40.736173][ T4148] bridge0: port 3(team0) entered blocking state [ 40.742536][ T4148] bridge0: port 3(team0) entered disabled state [ 40.753294][ T4148] team0: entered allmulticast mode [ 40.758638][ T4148] team_slave_0: entered allmulticast mode [ 40.764431][ T4148] team_slave_1: entered allmulticast mode [ 40.777594][ T4155] 9pnet_fd: p9_fd_create_unix (4155): problem connecting socket: éq‰Y’3aK: -111 [ 40.782635][ T4148] bridge0: port 3(team0) entered blocking state [ 40.793213][ T4148] bridge0: port 3(team0) entered forwarding state [ 40.800745][ T4155] sctp: [Deprecated]: syz-executor.2 (pid 4155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 40.800745][ T4155] Use struct sctp_sack_info instead [ 40.851240][ T4166] SELinux: security_context_str_to_sid () failed with errno=-22 [ 40.884004][ T4168] loop3: detected capacity change from 0 to 1024 [ 40.901436][ T4168] ext4: Unknown parameter 'nouser_xattr' [ 40.938041][ T4177] loop4: detected capacity change from 0 to 2048 [ 40.999432][ T4177] Alternate GPT is invalid, using primary GPT. [ 41.005734][ T4177] loop4: p1 p2 p3 [ 41.074201][ T4195] 9pnet_fd: p9_fd_create_unix (4195): problem connecting socket: éq‰Y’3aK: -111 [ 41.088926][ T4195] sctp: [Deprecated]: syz-executor.1 (pid 4195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 41.088926][ T4195] Use struct sctp_sack_info instead [ 41.094548][ T4199] loop3: detected capacity change from 0 to 512 [ 41.115975][ T4199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.129710][ T4199] ext4 filesystem being mounted at /root/syzkaller-testdir1623412711/syzkaller.0PwCeJ/97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.196198][ T4205] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 41.204502][ T4205] __nla_validate_parse: 5 callbacks suppressed [ 41.204514][ T4205] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.224937][ T4207] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 41.406359][ T3119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.436128][ T4224] loop2: detected capacity change from 0 to 1024 [ 41.444345][ T4224] ext4: Unknown parameter 'nouser_xattr' [ 41.473950][ T4225] 9pnet_fd: p9_fd_create_unix (4225): problem connecting socket: éq‰Y’3aK: -111 [ 41.485127][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 41.492764][ T4225] sctp: [Deprecated]: syz-executor.1 (pid 4225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 41.492764][ T4225] Use struct sctp_sack_info instead [ 41.495506][ T4236] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 41.520045][ T4236] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (15) [ 41.628134][ T4253] loop0: detected capacity change from 0 to 512 [ 41.656072][ T4253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.675926][ T4260] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 41.684116][ T4260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.702513][ T4253] ext4 filesystem being mounted at /root/syzkaller-testdir3932050569/syzkaller.jTEsG0/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.832338][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 41.877037][ T4277] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 41.921331][ T4283] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 41.945451][ T4284] loop2: detected capacity change from 0 to 512 [ 42.093239][ T4296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.484813][ T4320] loop2: detected capacity change from 0 to 1024 [ 42.520740][ T4320] ext4: Unknown parameter 'nouser_xattr' [ 42.543963][ T3110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.633189][ T4332] loop2: detected capacity change from 0 to 512 [ 42.933056][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 42.973391][ T4351] loop4: detected capacity change from 0 to 512 [ 42.981614][ T4351] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.994862][ T4351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.006960][ T4351] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz-executor.4: invalid indirect mapped block 512 (level 0) [ 43.022148][ T4351] EXT4-fs (loop4): Remounting filesystem read-only [ 43.028895][ T4351] EXT4-fs (loop4): 1 orphan inode deleted [ 43.034617][ T4351] EXT4-fs (loop4): 1 truncate cleaned up [ 43.040827][ T4351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.053402][ T4351] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 43.054156][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 43.060975][ T4351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.485381][ T4381] loop1: detected capacity change from 0 to 736 [ 43.492978][ T4381] iso9660: Bad value for 'mode' [ 43.706860][ T4386] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 44.026968][ T4416] loop2: detected capacity change from 0 to 256 [ 44.034671][ T4416] FAT-fs (loop2): Unrecognized mount option "nt" or missing value [ 44.716909][ T4435] loop4: detected capacity change from 0 to 1024 [ 44.729547][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.747648][ T4435] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 372 with max blocks 8 with error 28 [ 44.760061][ T4435] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.760061][ T4435] [ 44.769715][ T4435] EXT4-fs (loop4): Total free blocks count 0 [ 44.775680][ T4435] EXT4-fs (loop4): Free/Dirty block details [ 44.781689][ T4435] EXT4-fs (loop4): free_blocks=0 [ 44.786611][ T4435] EXT4-fs (loop4): dirty_blocks=0 [ 44.791629][ T4435] EXT4-fs (loop4): Block reservation details [ 44.797592][ T4435] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 44.828776][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.905499][ T4448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4448 comm=syz-executor.3 [ 44.919846][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 44.929403][ T4448] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 44.942629][ T4448] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.951857][ T4448] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.960716][ T4448] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.969486][ T4448] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.122140][ T4471] loop2: detected capacity change from 0 to 1024 [ 45.136150][ T4450] chnl_net:caif_netlink_parms(): no params data found [ 45.144819][ T4471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.163047][ T4471] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 372 with max blocks 8 with error 28 [ 45.175541][ T4471] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.175541][ T4471] [ 45.185374][ T4471] EXT4-fs (loop2): Total free blocks count 0 [ 45.191370][ T4471] EXT4-fs (loop2): Free/Dirty block details [ 45.197250][ T4471] EXT4-fs (loop2): free_blocks=0 [ 45.202359][ T4471] EXT4-fs (loop2): dirty_blocks=0 [ 45.207825][ T4471] EXT4-fs (loop2): Block reservation details [ 45.213944][ T4471] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 45.227710][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.234936][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.242244][ T4450] bridge_slave_0: entered allmulticast mode [ 45.249190][ T4450] bridge_slave_0: entered promiscuous mode [ 45.251870][ T3109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.256348][ T4450] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.271251][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.278508][ T4450] bridge_slave_1: entered allmulticast mode [ 45.285405][ T4450] bridge_slave_1: entered promiscuous mode [ 45.301632][ T4480] loop1: detected capacity change from 0 to 2048 [ 45.309230][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.327538][ T4450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.341949][ T4450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.364486][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.376492][ T4450] team0: Port device team_slave_0 added [ 45.383301][ T4450] team0: Port device team_slave_1 added [ 45.401700][ T4450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.409029][ T4450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.435092][ T4450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.450716][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.462179][ T4450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.463633][ T29] kauditd_printk_skb: 11245 callbacks suppressed [ 45.463645][ T29] audit: type=1400 audit(1718213816.376:21056): avc: denied { read } for pid=4483 comm="syz-executor.2" name="usbmon7" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.469797][ T4450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.479248][ T3166] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.499907][ T4450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.533410][ T29] audit: type=1400 audit(1718213816.386:21057): avc: denied { open } for pid=4483 comm="syz-executor.2" path="/dev/usbmon7" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.568233][ T29] audit: type=1400 audit(1718213816.386:21058): avc: denied { read write } for pid=4483 comm="syz-executor.2" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.592193][ T29] audit: type=1400 audit(1718213816.386:21059): avc: denied { open } for pid=4483 comm="syz-executor.2" path="/dev/uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.616075][ T3166] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 45.636060][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.661465][ T4450] hsr_slave_0: entered promiscuous mode [ 45.673967][ T4450] hsr_slave_1: entered promiscuous mode [ 45.680603][ T4450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.689196][ T4450] Cannot create hsr debugfs directory [ 45.697448][ T4488] bridge0: port 3(vlan1) entered blocking state [ 45.704146][ T4488] bridge0: port 3(vlan1) entered disabled state [ 45.711577][ T4488] vlan1: entered allmulticast mode [ 45.717163][ T4488] vlan1: left allmulticast mode [ 45.802275][ T63] bridge_slave_1: left allmulticast mode [ 45.808044][ T63] bridge_slave_1: left promiscuous mode [ 45.813846][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.825398][ T4496] loop0: detected capacity change from 0 to 2048 [ 45.841741][ T63] bridge_slave_0: left allmulticast mode [ 45.847534][ T63] bridge_slave_0: left promiscuous mode [ 45.853301][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.900297][ T4496] Alternate GPT is invalid, using primary GPT. [ 45.906600][ T4496] loop0: p1 p2 p3 [ 45.971642][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.983057][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.993815][ T63] bond0 (unregistering): Released all slaves [ 46.004324][ T63] bond1 (unregistering): Released all slaves [ 46.017140][ T29] audit: type=1400 audit(1718213816.926:21060): avc: denied { create } for pid=4505 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.039125][ T29] audit: type=1400 audit(1718213816.926:21061): avc: denied { write } for pid=4505 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.041428][ T4508] loop0: detected capacity change from 0 to 736 [ 46.060025][ T29] audit: type=1400 audit(1718213816.926:21062): avc: denied { nlmsg_read } for pid=4505 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.067945][ T4508] iso9660: Bad value for 'mode' [ 46.112327][ T4513] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4513 comm=syz-executor.2 [ 46.141282][ T4515] bridge0: port 3(vlan1) entered blocking state [ 46.147677][ T4515] bridge0: port 3(vlan1) entered disabled state [ 46.163913][ T4515] vlan1: entered allmulticast mode [ 46.170870][ T29] audit: type=1326 audit(1718213817.086:21063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfe658aea9 code=0x0 [ 46.195948][ T4515] vlan1: left allmulticast mode [ 46.215592][ T63] hsr_slave_0: left promiscuous mode [ 46.217571][ T4525] __nla_validate_parse: 2 callbacks suppressed [ 46.217584][ T4525] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 46.236699][ T63] hsr_slave_1: left promiscuous mode [ 46.246654][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.254193][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.267118][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.275043][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.285770][ T4528] loop1: detected capacity change from 0 to 512 [ 46.294685][ T63] veth1_macvtap: left promiscuous mode [ 46.300044][ T4531] loop3: detected capacity change from 0 to 512 [ 46.300224][ T63] veth0_macvtap: left promiscuous mode [ 46.306650][ T29] audit: type=1400 audit(1718213817.216:21064): avc: denied { remount } for pid=4530 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.311905][ T63] veth1_vlan: left promiscuous mode [ 46.311949][ T63] veth0_vlan: left promiscuous mode [ 46.313121][ T4528] journal_path: Lookup failure for './file0' [ 46.348497][ T4528] EXT4-fs: error: could not find journal device path [ 46.362533][ T29] audit: type=1400 audit(1718213817.276:21065): avc: denied { create } for pid=4530 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 46.398000][ T4535] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 46.473804][ T63] team0 (unregistering): Port device team_slave_1 removed [ 46.475205][ T4543] loop1: detected capacity change from 0 to 512 [ 46.488816][ T63] team0 (unregistering): Port device team_slave_0 removed [ 46.490948][ T4543] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.509493][ T4543] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz-executor.1: invalid indirect mapped block 512 (level 0) [ 46.523594][ T4543] EXT4-fs (loop1): Remounting filesystem read-only [ 46.530945][ T4543] EXT4-fs (loop1): 1 orphan inode deleted [ 46.536735][ T4543] EXT4-fs (loop1): 1 truncate cleaned up [ 46.542909][ T4543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.544437][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 46.556586][ T4543] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 46.572930][ T4543] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.645195][ T4546] syz-executor.3 (4546) used greatest stack depth: 10056 bytes left [ 46.720544][ T4450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.729856][ T4450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.738116][ T4450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.746388][ T4450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.780458][ T4450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.791722][ T4450] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.802188][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.809391][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.827843][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.834982][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.851217][ T4450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.909676][ T4450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.006295][ T4450] veth0_vlan: entered promiscuous mode [ 47.014123][ T4450] veth1_vlan: entered promiscuous mode [ 47.031920][ T910] kernel write not supported for file bpf-prog (pid: 910 comm: kworker/0:2) [ 47.034021][ T4450] veth0_macvtap: entered promiscuous mode [ 47.048622][ T4450] veth1_macvtap: entered promiscuous mode [ 47.060050][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.070567][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.080705][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.090276][ T4579] loop2: detected capacity change from 0 to 512 [ 47.091568][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.107479][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.118041][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.127950][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.138457][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.149544][ T4450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.159852][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.170533][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.180529][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.191007][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.200822][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.211249][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.221124][ T4450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.232109][ T4450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.243070][ T4450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.254391][ T4450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.263167][ T4450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.272045][ T4450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.280784][ T4450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.356338][ T4589] IPv6: Can't replace route, no match found [ 47.456865][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.476980][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 47.546903][ T4607] loop2: detected capacity change from 0 to 512 [ 47.556914][ T4612] loop3: detected capacity change from 0 to 512 [ 47.594811][ T4612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.617613][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 47.632917][ T4612] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz-executor.3: invalid indirect mapped block 512 (level 0) [ 47.647537][ T4612] EXT4-fs (loop3): Remounting filesystem read-only [ 47.660147][ T4612] EXT4-fs (loop3): 1 orphan inode deleted [ 47.665936][ T4612] EXT4-fs (loop3): 1 truncate cleaned up [ 47.676183][ T4612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.688845][ T4612] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 47.689625][ T4612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.709215][ T4621] IPv6: Can't replace route, no match found [ 47.959777][ T4644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 48.063218][ T4653] loop2: detected capacity change from 0 to 2048 [ 48.079669][ T4653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.102848][ T3109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.390974][ T4659] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 48.414103][ T4661] loop3: detected capacity change from 0 to 736 [ 48.421500][ T4661] iso9660: Bad value for 'mode' [ 48.608343][ T4666] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 48.817343][ T4672] loop1: detected capacity change from 0 to 512 [ 48.829601][ T4672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.842216][ T4672] ext4 filesystem being mounted at /root/syzkaller-testdir3261137048/syzkaller.xje7xl/93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.864175][ T3106] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.914006][ T4676] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 48.936275][ T4678] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 49.012027][ T4688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 49.149033][ T4700] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 49.253957][ T4711] loop1: detected capacity change from 0 to 2048 [ 49.269383][ T4711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.338572][ T4719] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 49.351558][ T4719] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 49.593564][ T4721] chnl_net:caif_netlink_parms(): no params data found [ 49.624792][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.632002][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.639351][ T4721] bridge_slave_0: entered allmulticast mode [ 49.645705][ T4721] bridge_slave_0: entered promiscuous mode [ 49.652589][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.659743][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.667041][ T4721] bridge_slave_1: entered allmulticast mode [ 49.673458][ T4721] bridge_slave_1: entered promiscuous mode [ 49.693314][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.703680][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.715999][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.726372][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.744965][ T4721] team0: Port device team_slave_0 added [ 49.753698][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.764082][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.775747][ T4721] team0: Port device team_slave_1 added [ 49.790230][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.797231][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.823314][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.837130][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.847742][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.859114][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.866097][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.892146][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.917054][ T4721] hsr_slave_0: entered promiscuous mode [ 49.923130][ T4721] hsr_slave_1: entered promiscuous mode [ 49.942468][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.952805][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.010351][ T40] bridge_slave_1: left allmulticast mode [ 50.016027][ T40] bridge_slave_1: left promiscuous mode [ 50.021909][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.030216][ T40] bridge_slave_0: left allmulticast mode [ 50.035966][ T40] bridge_slave_0: left promiscuous mode [ 50.041784][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.180748][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.191283][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.201542][ T40] bond0 (unregistering): Released all slaves [ 50.218231][ T3106] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.300576][ T40] hsr_slave_0: left promiscuous mode [ 50.306254][ T40] hsr_slave_1: left promiscuous mode [ 50.312980][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.320810][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.328920][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.336523][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.345848][ T40] veth1_macvtap: left promiscuous mode [ 50.351371][ T40] veth0_macvtap: left promiscuous mode [ 50.357314][ T40] veth0_vlan: left promiscuous mode [ 50.442053][ T40] team0 (unregistering): Port device team_slave_1 removed [ 50.453087][ T40] team0 (unregistering): Port device team_slave_0 removed [ 50.671112][ T4721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.685130][ T4721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.695684][ T4721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.706362][ T4721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.750194][ T4760] chnl_net:caif_netlink_parms(): no params data found [ 50.788857][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.795983][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.803199][ T4760] bridge_slave_0: entered allmulticast mode [ 50.810067][ T4760] bridge_slave_0: entered promiscuous mode [ 50.822777][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.830554][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.837824][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 50.837837][ T29] audit: type=1400 audit(1718213821.736:21082): avc: denied { bind } for pid=4774 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.838805][ T4760] bridge_slave_1: entered allmulticast mode [ 50.843947][ T29] audit: type=1400 audit(1718213821.736:21083): avc: denied { name_bind } for pid=4774 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 50.864333][ T4760] bridge_slave_1: entered promiscuous mode [ 50.869723][ T29] audit: type=1400 audit(1718213821.736:21084): avc: denied { node_bind } for pid=4774 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 50.920076][ T29] audit: type=1400 audit(1718213821.736:21085): avc: denied { listen } for pid=4774 comm="syz-executor.2" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.956821][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.967099][ T4760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.983733][ T4760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.995433][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.009439][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.025701][ T4760] team0: Port device team_slave_0 added [ 51.032489][ T4760] team0: Port device team_slave_1 added [ 51.061987][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.072526][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.102803][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.109944][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.136160][ T4760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.237004][ T4784] ================================================================== [ 51.245128][ T4784] BUG: KCSAN: data-race in ondemand_readahead / ondemand_readahead [ 51.253037][ T4784] [ 51.255355][ T4784] write to 0xffff888103d69b78 of 8 bytes by task 4786 on cpu 1: [ 51.262977][ T4784] ondemand_readahead+0x588/0x6b0 [ 51.268007][ T4784] page_cache_async_ra+0x94/0xa0 [ 51.272949][ T4784] filemap_fault+0x2d3/0xa60 [ 51.277538][ T4784] __do_fault+0xb6/0x200 [ 51.281789][ T4784] handle_mm_fault+0xdeb/0x2a80 [ 51.286647][ T4784] exc_page_fault+0x296/0x650 [ 51.291327][ T4784] asm_exc_page_fault+0x26/0x30 [ 51.296188][ T4784] fault_in_readable+0xf8/0x1b0 [ 51.301120][ T4784] fault_in_iov_iter_readable+0x152/0x190 [ 51.306853][ T4784] generic_perform_write+0x106/0x410 [ 51.312149][ T4784] ext4_buffered_write_iter+0x1f6/0x380 [ 51.317700][ T4784] ext4_file_write_iter+0x29f/0xe30 [ 51.322908][ T4784] vfs_write+0x78f/0x900 [ 51.327153][ T4784] ksys_write+0xeb/0x1b0 [ 51.331408][ T4784] __x64_sys_write+0x42/0x50 [ 51.336187][ T4784] x64_sys_call+0x27ef/0x2d70 [ 51.340967][ T4784] do_syscall_64+0xc9/0x1c0 [ 51.345468][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.351391][ T4784] [ 51.353910][ T4784] read to 0xffff888103d69b78 of 8 bytes by task 4784 on cpu 0: [ 51.361453][ T4784] ondemand_readahead+0x133/0x6b0 [ 51.366492][ T4784] page_cache_async_ra+0x94/0xa0 [ 51.371445][ T4784] filemap_fault+0x2d3/0xa60 [ 51.376064][ T4784] __do_fault+0xb6/0x200 [ 51.380336][ T4784] handle_mm_fault+0xdeb/0x2a80 [ 51.385296][ T4784] exc_page_fault+0x296/0x650 [ 51.389979][ T4784] asm_exc_page_fault+0x26/0x30 [ 51.394838][ T4784] rep_movs_alternative+0x30/0x70 [ 51.399871][ T4784] _copy_from_user+0x80/0xd0 [ 51.404480][ T4784] copy_msghdr_from_user+0x54/0x2a0 [ 51.409679][ T4784] do_recvmmsg+0x290/0x720 [ 51.414092][ T4784] __x64_sys_recvmmsg+0xe2/0x170 [ 51.419032][ T4784] x64_sys_call+0x271d/0x2d70 [ 51.423785][ T4784] do_syscall_64+0xc9/0x1c0 [ 51.428272][ T4784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.434159][ T4784] [ 51.436490][ T4784] value changed: 0x0000000000000065 -> 0x0000000000000066 [ 51.443580][ T4784] [ 51.445887][ T4784] Reported by Kernel Concurrency Sanitizer on: [ 51.452118][ T4784] CPU: 0 PID: 4784 Comm: syz-executor.2 Not tainted 6.10.0-rc3-syzkaller-00022-gcea2a26553ac #0 [ 51.462528][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 51.472568][ T4784] ================================================================== 2024/06/12 17:37:02 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 51.505367][ T4789] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 51.515384][ T29] audit: type=1400 audit(1718213822.406:21086): avc: denied { write } for pid=3075 comm="syz-fuzzer" path="pipe:[499]" dev="pipefs" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1