last executing test programs: 2.154309288s ago: executing program 3 (id=707): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 2.128457038s ago: executing program 3 (id=708): openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) r4 = io_uring_setup(0x4edd, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000000), 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.910530571s ago: executing program 4 (id=709): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x38540c4, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@grpjquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000540)='\x87b\ra \xbb\xcfV~T)\x00\x17\x9b@\x05\xe9\x01\xa6RF\xc9f\xc9m\xdcl\xaa\x97\xde\x87\x84\x01\x00'/49, 0x0) 1.398049768s ago: executing program 1 (id=716): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.386543329s ago: executing program 4 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1.364271199s ago: executing program 1 (id=720): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x38, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084522, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) fdatasync(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000500)=""/201, 0xc9}], 0x1, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd4}], 0x1}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x40, 0x7, 0x6, 0xfffffffffffffff5, 0x7, 0x3, 0xfffffffffffffff8, 0x20000008}, &(0x7f0000000500)={0x2, 0x29, 0x0, 0x8000, 0x287b, 0x0, 0x8000000000000000, 0x1ff}, &(0x7f0000000380)={0xfdd, 0x0, 0x7, 0x8, 0x20, 0x1, 0x5, 0x2}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000000c0)={&(0x7f0000000480)={[0x40]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) 1.29197109s ago: executing program 4 (id=722): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 1.211099301s ago: executing program 3 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 1.090731123s ago: executing program 0 (id=725): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047454, 0x0) 1.090478243s ago: executing program 0 (id=726): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0) 909.551956ms ago: executing program 3 (id=727): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12d3091bf10aa0000000420000003f9400000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r6, &(0x7f00000018c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e63, @multicast2}, 0x80, 0x0, 0x0, &(0x7f0000001580)=[{0x10, 0x1, 0x24}], 0x10}}], 0x1, 0x1900) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r9, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0x20000000e2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c00000009"], 0x5c}}, 0x0) 744.942388ms ago: executing program 0 (id=729): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 670.584949ms ago: executing program 0 (id=730): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x38540c4, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@grpjquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000540)='\x87b\ra \xbb\xcfV~T)\x00\x17\x9b@\x05\xe9\x01\xa6RF\xc9f\xc9m\xdcl\xaa\x97\xde\x87\x84\x01\x00'/49, 0x0) 470.721272ms ago: executing program 2 (id=732): r0 = fsopen(&(0x7f00000000c0)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) 376.525993ms ago: executing program 4 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00Z\x00\r'], 0x28}], 0x1}, 0x0) 295.379765ms ago: executing program 1 (id=735): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x78}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000000000000000000000000000000000000000000004e200000000000000a"], 0xb8}}, 0x4004) 294.822385ms ago: executing program 2 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0308000000000000000009000000300003800800010000000000050008000600000014000200596c616e31000000000000000000000008000300"], 0x44}}, 0x0) 294.367825ms ago: executing program 3 (id=737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 174.645937ms ago: executing program 2 (id=738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0xfdef) 164.410137ms ago: executing program 1 (id=739): socket(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) eventfd(0x858) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 123.101867ms ago: executing program 1 (id=740): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x8, 0x6, 0x2}) 122.572347ms ago: executing program 4 (id=741): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x2a) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121002, 0x0) pwrite64(r1, &(0x7f00000007c0)='c', 0x1, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 106.367828ms ago: executing program 3 (id=742): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 72.089908ms ago: executing program 1 (id=743): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x2d0634a4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r2, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0xffffffffffffff60, 0x80800) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="1513410000010000002800018014000400ff020000000000000000000000f8b201060005004e22000085060001000a0000000000000000"], 0x3c}, 0x5}, 0x0) 66.514058ms ago: executing program 4 (id=744): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 33.176159ms ago: executing program 0 (id=745): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10) 32.912109ms ago: executing program 2 (id=746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14}}, 0x3c}}, 0x0) 464.509µs ago: executing program 2 (id=747): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 0s ago: executing program 0 (id=748): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047454, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 28.678131][ T29] audit: type=1400 audit(1747246599.637:65): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.679281][ T3305] cgroup: Unknown subsys name 'net' [ 28.702273][ T29] audit: type=1400 audit(1747246599.637:66): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.729766][ T29] audit: type=1400 audit(1747246599.667:67): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.868438][ T3305] cgroup: Unknown subsys name 'cpuset' [ 28.874766][ T3305] cgroup: Unknown subsys name 'rlimit' [ 29.007053][ T29] audit: type=1400 audit(1747246599.957:68): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.033157][ T29] audit: type=1400 audit(1747246599.967:69): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.054419][ T29] audit: type=1400 audit(1747246599.967:70): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.063014][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.074899][ T29] audit: type=1400 audit(1747246599.967:71): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.104320][ T29] audit: type=1400 audit(1747246599.967:72): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.129231][ T29] audit: type=1400 audit(1747246599.967:73): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.152912][ T29] audit: type=1400 audit(1747246600.047:74): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.191195][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.135039][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.147505][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 31.170796][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.199671][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 31.230087][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 31.301794][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.309043][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.316254][ T3318] bridge_slave_0: entered allmulticast mode [ 31.322872][ T3318] bridge_slave_0: entered promiscuous mode [ 31.330074][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.337271][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.344652][ T3318] bridge_slave_1: entered allmulticast mode [ 31.351084][ T3318] bridge_slave_1: entered promiscuous mode [ 31.357730][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.364980][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.372312][ T3314] bridge_slave_0: entered allmulticast mode [ 31.378954][ T3314] bridge_slave_0: entered promiscuous mode [ 31.407360][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.414598][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.421919][ T3314] bridge_slave_1: entered allmulticast mode [ 31.428387][ T3314] bridge_slave_1: entered promiscuous mode [ 31.443963][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.451256][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.458899][ T3317] bridge_slave_0: entered allmulticast mode [ 31.465278][ T3317] bridge_slave_0: entered promiscuous mode [ 31.474758][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.482009][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.490412][ T3316] bridge_slave_0: entered allmulticast mode [ 31.496775][ T3316] bridge_slave_0: entered promiscuous mode [ 31.503589][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.510793][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.519171][ T3316] bridge_slave_1: entered allmulticast mode [ 31.525527][ T3316] bridge_slave_1: entered promiscuous mode [ 31.537515][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.548115][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.557387][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.564774][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.572132][ T3317] bridge_slave_1: entered allmulticast mode [ 31.578738][ T3317] bridge_slave_1: entered promiscuous mode [ 31.596512][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.632211][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.642736][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.652558][ T3318] team0: Port device team_slave_0 added [ 31.659321][ T3318] team0: Port device team_slave_1 added [ 31.674915][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.682062][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.689452][ T3322] bridge_slave_0: entered allmulticast mode [ 31.695881][ T3322] bridge_slave_0: entered promiscuous mode [ 31.708586][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.729780][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.740420][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.749663][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.756756][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.764147][ T3322] bridge_slave_1: entered allmulticast mode [ 31.770597][ T3322] bridge_slave_1: entered promiscuous mode [ 31.792331][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.799450][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.826151][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.847506][ T3314] team0: Port device team_slave_0 added [ 31.853995][ T3316] team0: Port device team_slave_0 added [ 31.860147][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.867134][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.893259][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.911304][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.920937][ T3314] team0: Port device team_slave_1 added [ 31.927529][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.937368][ T3316] team0: Port device team_slave_1 added [ 31.948146][ T3317] team0: Port device team_slave_0 added [ 31.974688][ T3317] team0: Port device team_slave_1 added [ 31.985445][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.992505][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.018525][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.035620][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.042656][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.069379][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.085556][ T3322] team0: Port device team_slave_0 added [ 32.091780][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.098800][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.124886][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.142005][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.148984][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.175049][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.192063][ T3322] team0: Port device team_slave_1 added [ 32.219622][ T3318] hsr_slave_0: entered promiscuous mode [ 32.225645][ T3318] hsr_slave_1: entered promiscuous mode [ 32.232974][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.240064][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.266218][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.283061][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.290287][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.316455][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.329065][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.336087][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.362309][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.392027][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.399277][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.425609][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.444924][ T3314] hsr_slave_0: entered promiscuous mode [ 32.450989][ T3314] hsr_slave_1: entered promiscuous mode [ 32.456813][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.464577][ T3314] Cannot create hsr debugfs directory [ 32.496537][ T3316] hsr_slave_0: entered promiscuous mode [ 32.502794][ T3316] hsr_slave_1: entered promiscuous mode [ 32.509150][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.516796][ T3316] Cannot create hsr debugfs directory [ 32.532403][ T3322] hsr_slave_0: entered promiscuous mode [ 32.538674][ T3322] hsr_slave_1: entered promiscuous mode [ 32.544666][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.552293][ T3322] Cannot create hsr debugfs directory [ 32.608974][ T3317] hsr_slave_0: entered promiscuous mode [ 32.615032][ T3317] hsr_slave_1: entered promiscuous mode [ 32.620924][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.628537][ T3317] Cannot create hsr debugfs directory [ 32.783948][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.800710][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.814463][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.825534][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.840378][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.853137][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.865732][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.879257][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.891289][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.907822][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.924155][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.933584][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.965185][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.974265][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.983745][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.997297][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.043645][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.053970][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.064937][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.075275][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.086096][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.097830][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.109816][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.131359][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.140979][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.148139][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.174500][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.181698][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.191051][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.198170][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.219134][ T1749] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.226304][ T1749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.276521][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.285280][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.317871][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.334021][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.344038][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.362974][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.371393][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.378499][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.390971][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.398151][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.410728][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.417846][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.453090][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.461296][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.471703][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.484838][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.491973][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.501881][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.509035][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.531988][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.539130][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.595245][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.617912][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.685377][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.738334][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.758708][ T3316] veth0_vlan: entered promiscuous mode [ 33.795997][ T3316] veth1_vlan: entered promiscuous mode [ 33.838930][ T3318] veth0_vlan: entered promiscuous mode [ 33.849766][ T3316] veth0_macvtap: entered promiscuous mode [ 33.861753][ T3314] veth0_vlan: entered promiscuous mode [ 33.869688][ T3318] veth1_vlan: entered promiscuous mode [ 33.880314][ T3316] veth1_macvtap: entered promiscuous mode [ 33.889964][ T3314] veth1_vlan: entered promiscuous mode [ 33.913663][ T3314] veth0_macvtap: entered promiscuous mode [ 33.923665][ T3317] veth0_vlan: entered promiscuous mode [ 33.939023][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.948735][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.956612][ T3318] veth0_macvtap: entered promiscuous mode [ 33.971258][ T3314] veth1_macvtap: entered promiscuous mode [ 33.978676][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.987436][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.996401][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.005188][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.029988][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.030004][ T29] audit: type=1400 audit(1747246604.987:84): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.r5IiHl/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.034255][ T3318] veth1_macvtap: entered promiscuous mode [ 34.036102][ T29] audit: type=1400 audit(1747246604.987:85): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.067085][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.088122][ T29] audit: type=1400 audit(1747246604.987:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.r5IiHl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.088152][ T29] audit: type=1400 audit(1747246604.987:87): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.088176][ T29] audit: type=1400 audit(1747246604.987:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.r5IiHl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.098593][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.099458][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.123741][ T29] audit: type=1400 audit(1747246604.987:89): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.r5IiHl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.152903][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.172426][ T29] audit: type=1400 audit(1747246604.987:90): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.182333][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.185133][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.269160][ T3322] veth0_vlan: entered promiscuous mode [ 34.275988][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.277152][ T3322] veth1_vlan: entered promiscuous mode [ 34.296987][ T29] audit: type=1400 audit(1747246605.017:91): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.297929][ T3317] veth1_vlan: entered promiscuous mode [ 34.319929][ T29] audit: type=1400 audit(1747246605.017:92): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.335978][ T3317] veth0_macvtap: entered promiscuous mode [ 34.366123][ T3317] veth1_macvtap: entered promiscuous mode [ 34.381271][ T29] audit: type=1400 audit(1747246605.337:93): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.384279][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.416204][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.426104][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.436598][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.448312][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.458574][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.467386][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.476206][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.485103][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.497124][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.507953][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.517887][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.528446][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.539511][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.548805][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.559505][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.569491][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.580005][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.589978][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.600429][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.611821][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.705036][ T3322] veth0_macvtap: entered promiscuous mode [ 34.715486][ T3322] veth1_macvtap: entered promiscuous mode [ 34.725762][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.736286][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.746216][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.756824][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.766699][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.777192][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.787122][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.797638][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.809913][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.818441][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.828983][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.838840][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.849330][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.859281][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.869740][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.880259][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.889965][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.900534][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.910484][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.920975][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.930832][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.941302][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.951229][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.961698][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.973871][ T3459] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 34.974114][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.996951][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.006026][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.014765][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.023508][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.037114][ T3322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.045955][ T3322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.054789][ T3322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.063629][ T3322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.075820][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.085082][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.093994][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.102778][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.402800][ T3481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.423431][ T3481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.898097][ T3503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.906732][ T3503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.201154][ T3510] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.449024][ T3519] syz_tun: entered allmulticast mode [ 36.723261][ T3517] syz_tun: left allmulticast mode [ 36.756692][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.780046][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.929825][ T3542] netlink: 104 bytes leftover after parsing attributes in process `syz.4.33'. [ 37.062698][ T3555] loop2: detected capacity change from 0 to 1764 [ 37.155105][ T3559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.202012][ T3559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.212180][ T3559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.224048][ T3559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.257998][ C1] Illegal XDP return value 16128 on prog (id 5) dev lo, expect packet loss! [ 37.259379][ T3563] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 37.443922][ T3572] sctp: [Deprecated]: syz.1.45 (pid 3572) Use of int in maxseg socket option. [ 37.443922][ T3572] Use struct sctp_assoc_value instead [ 37.477767][ T3576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.490452][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a370c00: rx timeout, send abort [ 37.498813][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a370c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 37.513396][ T3576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.773598][ T3596] loop2: detected capacity change from 0 to 256 [ 37.780614][ T3596] ======================================================= [ 37.780614][ T3596] WARNING: The mand mount option has been deprecated and [ 37.780614][ T3596] and is ignored by this kernel. Remove the mand [ 37.780614][ T3596] option from the mount to silence this warning. [ 37.780614][ T3596] ======================================================= [ 37.838285][ T3596] FAT-fs (loop2): codepage cp862 not found [ 37.853018][ T3601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.894416][ T3601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.970443][ T3610] loop2: detected capacity change from 0 to 128 [ 37.983161][ T3610] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.002476][ T3610] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.129867][ T3618] loop0: detected capacity change from 0 to 128 [ 38.137789][ T3618] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.516034][ T3618] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.540154][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.672500][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.689949][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.887160][ T3635] netlink: 'syz.2.61': attribute type 4 has an invalid length. [ 38.900843][ T3635] netlink: 'syz.2.61': attribute type 4 has an invalid length. [ 39.300503][ T3642] loop1: detected capacity change from 0 to 512 [ 39.342724][ T3642] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.435463][ T3642] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 39.463737][ T3642] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 39.472205][ T3642] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.68: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.493379][ T3642] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.68: couldn't read orphan inode 13 (err -117) [ 39.506861][ T3642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.530695][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.555813][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 39.555830][ T29] audit: type=1400 audit(1747246610.507:188): avc: denied { read } for pid=3648 comm="syz.1.71" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.617678][ T29] audit: type=1400 audit(1747246610.547:189): avc: denied { open } for pid=3648 comm="syz.1.71" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.641275][ T29] audit: type=1400 audit(1747246610.567:190): avc: denied { bind } for pid=3648 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.672988][ T29] audit: type=1400 audit(1747246610.617:191): avc: denied { write } for pid=3645 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.960539][ T3635] syz.2.61 (3635) used greatest stack depth: 10696 bytes left [ 40.113685][ T3662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.492044][ T3668] loop0: detected capacity change from 0 to 512 [ 40.498434][ T29] audit: type=1400 audit(1747246611.447:192): avc: denied { create } for pid=3658 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.502942][ T3668] EXT4-fs: Ignoring removed orlov option [ 40.526358][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 40.528835][ T3668] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.78: casefold flag without casefold feature [ 40.549871][ T3668] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.78: couldn't read orphan inode 15 (err -117) [ 40.563332][ T29] audit: type=1400 audit(1747246611.457:193): avc: denied { setopt } for pid=3658 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.565027][ T3668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.582748][ T29] audit: type=1400 audit(1747246611.457:194): avc: denied { write } for pid=3658 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.605275][ T3672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.656440][ T29] audit: type=1400 audit(1747246611.587:195): avc: denied { append } for pid=3667 comm="syz.0.78" path="/10/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.694533][ T3672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.706896][ T29] audit: type=1400 audit(1747246611.647:196): avc: denied { map } for pid=3667 comm="syz.0.78" path="/10/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.730526][ T29] audit: type=1400 audit(1747246611.647:197): avc: denied { name_bind } for pid=3675 comm="syz.1.81" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.786258][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.117465][ T3688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.176922][ T3688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.251337][ T3688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.262759][ T3688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.372329][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.382093][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.430348][ T3704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.439796][ T3704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.858432][ T3734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.867289][ T3734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.315058][ T3769] loop1: detected capacity change from 0 to 1024 [ 43.326986][ T3767] loop2: detected capacity change from 0 to 2048 [ 43.342373][ T3767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.357524][ T3769] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.454518][ T3769] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.117: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 43.487668][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.521500][ T3769] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.117: couldn't read orphan inode 11 (err -117) [ 43.730905][ T3769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.851163][ T3769] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.117: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 43.852667][ T3769] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.117: Invalid block bitmap block 0 in block_group 0 [ 43.852880][ T3769] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.117: Failed to acquire dquot type 0 [ 43.873586][ T3769] syz.1.117 (3769) used greatest stack depth: 10192 bytes left [ 43.925935][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.201273][ T3814] loop3: detected capacity change from 0 to 1024 [ 44.224640][ T3814] ext4: Unknown parameter 'fsname' [ 44.329847][ T3821] loop0: detected capacity change from 0 to 512 [ 44.386673][ T3821] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 44.424417][ T3821] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 44.521210][ T3821] EXT4-fs (loop0): 1 truncate cleaned up [ 44.539954][ T3821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.611607][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.638017][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.646550][ T3819] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.136: Logical block already allocated [ 44.647760][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 44.647778][ T29] audit: type=1400 audit(1747246615.597:222): avc: denied { create } for pid=3818 comm="syz.0.136" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 44.748798][ T3841] loop2: detected capacity change from 0 to 128 [ 44.760969][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.802057][ T29] audit: type=1400 audit(1747246615.757:223): avc: denied { getopt } for pid=3844 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.970303][ T29] audit: type=1400 audit(1747246615.827:224): avc: denied { execmem } for pid=3853 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.979665][ T3861] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 44.989567][ T29] audit: type=1326 audit(1747246615.887:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6464c75927 code=0x7ffc0000 [ 45.020978][ T29] audit: type=1326 audit(1747246615.887:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6464c1ab39 code=0x7ffc0000 [ 45.039266][ T3867] loop2: detected capacity change from 0 to 128 [ 45.044717][ T29] audit: type=1326 audit(1747246615.887:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6464c75927 code=0x7ffc0000 [ 45.058202][ T3867] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.074754][ T29] audit: type=1326 audit(1747246615.887:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6464c1ab39 code=0x7ffc0000 [ 45.090776][ T3867] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.110134][ T29] audit: type=1326 audit(1747246615.887:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6464c75927 code=0x7ffc0000 [ 45.165608][ T29] audit: type=1326 audit(1747246615.887:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6464c1ab39 code=0x7ffc0000 [ 45.189170][ T29] audit: type=1326 audit(1747246615.887:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6464c75927 code=0x7ffc0000 [ 45.314916][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.328879][ T3873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 45.825847][ T10] kernel write not supported for file /85/attr/sockcreate (pid: 10 comm: kworker/0:1) [ 46.056816][ T3894] loop0: detected capacity change from 0 to 1024 [ 46.411304][ T3903] Zero length message leads to an empty skb [ 46.526640][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.606724][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.738557][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.767653][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.080557][ T10] IPVS: starting estimator thread 0... [ 47.167715][ T3937] IPVS: using max 2352 ests per chain, 117600 per kthread [ 47.181490][ T3941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.411582][ T3951] loop2: detected capacity change from 0 to 1764 [ 47.482147][ T3955] xt_hashlimit: size too large, truncated to 1048576 [ 48.016238][ T3991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.059093][ T3988] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 48.076214][ T3991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.755445][ T4005] syz_tun: entered allmulticast mode [ 48.824342][ T4009] netlink: 48 bytes leftover after parsing attributes in process `syz.1.207'. [ 48.850829][ T4009] GUP no longer grows the stack in syz.1.207 (4009): 200000006000-20000000a000 (200000005000) [ 48.861341][ T4009] CPU: 1 UID: 0 PID: 4009 Comm: syz.1.207 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 48.861372][ T4009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.861420][ T4009] Call Trace: [ 48.861427][ T4009] [ 48.861434][ T4009] __dump_stack+0x1d/0x30 [ 48.861460][ T4009] dump_stack_lvl+0xe8/0x140 [ 48.861479][ T4009] dump_stack+0x15/0x1b [ 48.861497][ T4009] __get_user_pages+0x1758/0x1d20 [ 48.861672][ T4009] ? free_pgd_range+0x105/0x8e0 [ 48.861712][ T4009] __gup_longterm_locked+0x9c9/0x1010 [ 48.861775][ T4009] ? __rcu_read_unlock+0x34/0x70 [ 48.861804][ T4009] ? try_get_folio+0x351/0x3c0 [ 48.861837][ T4009] ? __slab_free+0x77/0x270 [ 48.861867][ T4009] gup_fast_fallback+0x1134/0x1500 [ 48.861907][ T4009] get_user_pages_fast+0x5f/0x90 [ 48.862006][ T4009] __iov_iter_get_pages_alloc+0x24b/0x720 [ 48.862042][ T4009] ? enqueue_task_fair+0x6c3/0x990 [ 48.862080][ T4009] iov_iter_get_pages2+0x5e/0xa0 [ 48.862112][ T4009] __se_sys_vmsplice+0x4ce/0x1100 [ 48.862156][ T4009] ? fpregs_restore_userregs+0xbb/0x190 [ 48.862185][ T4009] __x64_sys_vmsplice+0x55/0x70 [ 48.862216][ T4009] x64_sys_call+0x2f45/0x2fb0 [ 48.862244][ T4009] do_syscall_64+0xd0/0x1a0 [ 48.862316][ T4009] ? clear_bhb_loop+0x40/0x90 [ 48.862346][ T4009] ? clear_bhb_loop+0x40/0x90 [ 48.862434][ T4009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.862463][ T4009] RIP: 0033:0x7ffa789fe969 [ 48.862489][ T4009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.862511][ T4009] RSP: 002b:00007ffa77067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 48.862533][ T4009] RAX: ffffffffffffffda RBX: 00007ffa78c25fa0 RCX: 00007ffa789fe969 [ 48.862544][ T4009] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 48.862562][ T4009] RBP: 00007ffa78a80ab1 R08: 0000000000000000 R09: 0000000000000000 [ 48.862574][ T4009] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 48.862667][ T4009] R13: 0000000000000000 R14: 00007ffa78c25fa0 R15: 00007fffa66d5f78 [ 48.862760][ T4009] [ 48.873439][ T4016] netlink: 'syz.2.211': attribute type 12 has an invalid length. [ 48.889861][ T4017] loop4: detected capacity change from 0 to 164 [ 48.890755][ T4016] netlink: 'syz.2.211': attribute type 29 has an invalid length. [ 49.016451][ T4019] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 49.018243][ T4016] netlink: 'syz.2.211': attribute type 2 has an invalid length. [ 49.018259][ T4016] netlink: 'syz.2.211': attribute type 2 has an invalid length. [ 49.018273][ T4016] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 49.031733][ T4017] Unsupported NM flag settings (8) [ 49.048675][ T4016] netlink: 'syz.2.211': attribute type 37 has an invalid length. [ 49.048695][ T4016] netlink: 'syz.2.211': attribute type 2 has an invalid length. [ 49.048734][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.988836][ T4045] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 50.167309][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 50.259831][ T4053] tmpfs: Unknown parameter 'usrquota' [ 50.950296][ T4065] loop2: detected capacity change from 0 to 512 [ 50.982436][ T4065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.028835][ T4065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.097763][ T4065] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.168389][ T4068] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 51.416734][ T4080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.480782][ T4080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.602269][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 51.602290][ T29] audit: type=1400 audit(1747246622.557:280): avc: denied { connect } for pid=4083 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.922534][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.229617][ T4094] capability: warning: `syz.0.238' uses deprecated v2 capabilities in a way that may be insecure [ 52.405655][ T29] audit: type=1400 audit(1747246623.357:281): avc: denied { name_bind } for pid=4098 comm="syz.0.239" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.554217][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 53.417658][ T29] audit: type=1400 audit(1747246624.367:282): avc: denied { write } for pid=4141 comm="syz.1.255" name="udplite6" dev="proc" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.510814][ T4145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.528166][ T4147] netlink: 'syz.1.257': attribute type 21 has an invalid length. [ 53.536003][ T4147] netlink: 168 bytes leftover after parsing attributes in process `syz.1.257'. [ 53.558219][ T29] audit: type=1400 audit(1747246624.457:283): avc: denied { setopt } for pid=4143 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.632015][ T4145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.701520][ T4145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.762658][ T4145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.917201][ T4145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.929989][ T4145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.940896][ T4158] ip6gretap0: entered promiscuous mode [ 53.946686][ T4158] vlan2: entered promiscuous mode [ 53.964329][ T4145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.976488][ T4145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.141667][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.150241][ T29] audit: type=1400 audit(1747246624.997:284): avc: denied { ioctl } for pid=4152 comm="syz.2.260" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.209588][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.310393][ T29] audit: type=1400 audit(1747246625.187:285): avc: denied { bind } for pid=4162 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.008127][ T29] audit: type=1400 audit(1747246625.947:286): avc: denied { append } for pid=4184 comm="syz.2.274" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.208990][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 55.764387][ T4240] netlink: 'syz.1.295': attribute type 4 has an invalid length. [ 55.795362][ T4240] netlink: 'syz.1.295': attribute type 4 has an invalid length. [ 55.828751][ T4248] loop4: detected capacity change from 0 to 256 [ 55.865098][ T4248] FAT-fs (loop4): codepage cp1251 not found [ 55.919637][ T4255] netlink: 104 bytes leftover after parsing attributes in process `syz.4.303'. [ 56.339783][ T29] audit: type=1400 audit(1747246627.267:287): avc: denied { execute } for pid=4257 comm="syz.4.304" name="file0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.879412][ T4260] process 'syz.4.304' launched './file0' with NULL argv: empty string added [ 56.901258][ T29] audit: type=1400 audit(1747246627.857:288): avc: denied { execute_no_trans } for pid=4257 comm="syz.4.304" path="/64/file0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.988721][ T4281] 8021q: VLANs not supported on gre0 [ 57.052200][ T4287] team0: entered allmulticast mode [ 57.057466][ T4287] team_slave_0: entered allmulticast mode [ 57.063771][ T4287] team_slave_1: entered allmulticast mode [ 57.495062][ T29] audit: type=1400 audit(1747246628.447:289): avc: denied { create } for pid=4307 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.146314][ T4318] 8021q: VLANs not supported on gre0 [ 58.160011][ T4320] netlink: 'syz.0.330': attribute type 4 has an invalid length. [ 58.193400][ T4320] netlink: 'syz.0.330': attribute type 4 has an invalid length. [ 58.461588][ T29] audit: type=1400 audit(1747246629.417:290): avc: denied { create } for pid=4338 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.515323][ T29] audit: type=1400 audit(1747246629.447:291): avc: denied { setopt } for pid=4338 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.886960][ T4349] 8021q: VLANs not supported on gre0 [ 59.070161][ T4361] loop3: detected capacity change from 0 to 512 [ 59.091055][ T4364] netlink: 'syz.2.347': attribute type 4 has an invalid length. [ 59.096836][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 59.110919][ T4361] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.133323][ T4361] EXT4-fs (loop3): 1 orphan inode deleted [ 59.154549][ T3418] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 59.164808][ T3418] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 59.238329][ T4361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.255824][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 59.290183][ T4361] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.440127][ T29] audit: type=1400 audit(1747246630.377:292): avc: denied { remount } for pid=4360 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.470176][ T4361] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.536622][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.097703][ T29] audit: type=1400 audit(1747246631.047:293): avc: denied { read } for pid=4402 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.216544][ T29] audit: type=1400 audit(1747246631.057:294): avc: denied { create } for pid=4400 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.236393][ T29] audit: type=1400 audit(1747246631.077:295): avc: denied { setopt } for pid=4400 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.279016][ T4418] netlink: 'syz.1.370': attribute type 4 has an invalid length. [ 60.381084][ T4429] syz.4.376 uses obsolete (PF_INET,SOCK_PACKET) [ 60.394271][ T4429] syzkaller1: entered promiscuous mode [ 60.399868][ T4429] syzkaller1: entered allmulticast mode [ 60.406820][ T29] audit: type=1400 audit(1747246631.357:296): avc: denied { create } for pid=4430 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.549628][ T4436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 62.170537][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 62.170552][ T29] audit: type=1400 audit(1747246633.127:309): avc: denied { kexec_image_load } for pid=4499 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 62.264440][ T29] audit: type=1400 audit(1747246633.177:310): avc: denied { bind } for pid=4506 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.644497][ T4537] pimreg: entered allmulticast mode [ 63.667118][ T4539] loop3: detected capacity change from 0 to 128 [ 63.712654][ T29] audit: type=1400 audit(1747246634.667:311): avc: denied { mount } for pid=4538 comm="syz.3.422" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 63.811803][ T29] audit: type=1400 audit(1747246634.707:312): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.445711][ T29] audit: type=1400 audit(1747246635.397:313): avc: denied { getopt } for pid=4577 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.492277][ T29] audit: type=1326 audit(1747246635.447:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad22edab39 code=0x7ffc0000 [ 64.574374][ T4580] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.581063][ T4580] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 64.588941][ T4580] audit: backlog limit exceeded [ 64.606372][ T4581] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.934403][ T4592] netlink: 'syz.2.445': attribute type 21 has an invalid length. [ 64.960564][ T4592] netlink: 156 bytes leftover after parsing attributes in process `syz.2.445'. [ 65.084720][ T4596] syz_tun: entered allmulticast mode [ 65.107288][ T4596] pimreg: left allmulticast mode [ 65.271006][ T4602] netlink: 104 bytes leftover after parsing attributes in process `syz.1.449'. [ 65.308113][ T4595] syz_tun: left allmulticast mode [ 65.345193][ T4608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.452'. [ 65.892764][ T4643] loop3: detected capacity change from 0 to 1024 [ 65.903571][ T4643] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.938144][ T4643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.967635][ T4653] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 66.210613][ T31] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.347068][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 320 with error 28 [ 66.359716][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.359716][ T31] [ 66.369399][ T31] EXT4-fs (loop3): Total free blocks count 0 [ 66.375449][ T31] EXT4-fs (loop3): Free/Dirty block details [ 66.381390][ T31] EXT4-fs (loop3): free_blocks=68451041280 [ 66.387367][ T31] EXT4-fs (loop3): dirty_blocks=320 [ 66.392643][ T31] EXT4-fs (loop3): Block reservation details [ 66.398779][ T31] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 66.452060][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.555598][ T4685] netlink: 'syz.4.481': attribute type 4 has an invalid length. [ 66.709937][ T4688] netlink: 'syz.4.481': attribute type 4 has an invalid length. [ 67.501130][ T4719] netlink: 104 bytes leftover after parsing attributes in process `syz.2.497'. [ 67.633844][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 67.648873][ T4740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 67.655810][ T4740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.663419][ T4740] vhci_hcd vhci_hcd.0: Device attached [ 67.680896][ T4740] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 67.687652][ T4740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.695233][ T4740] vhci_hcd vhci_hcd.0: Device attached [ 67.724432][ T4740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 67.757071][ T4740] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 67.763816][ T4740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.771475][ T4740] vhci_hcd vhci_hcd.0: Device attached [ 67.826672][ T4762] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 67.832012][ T4767] netlink: 104 bytes leftover after parsing attributes in process `syz.0.513'. [ 67.833391][ T4762] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.848936][ T4765] syz_tun: left allmulticast mode [ 67.849949][ T4762] vhci_hcd vhci_hcd.0: Device attached [ 67.877812][ T2969] vhci_hcd: vhci_device speed not set [ 67.897132][ T4740] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(16) [ 67.903810][ T4740] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.911600][ T4740] vhci_hcd vhci_hcd.0: Device attached [ 67.933882][ T4775] syz_tun: entered allmulticast mode [ 67.940388][ T4774] syz_tun: left allmulticast mode [ 67.950092][ T2969] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 68.036355][ T29] kauditd_printk_skb: 1231 callbacks suppressed [ 68.036419][ T29] audit: type=1400 audit(1747246638.987:1544): avc: denied { ioctl } for pid=4773 comm="syz.1.516" path="socket:[8002]" dev="sockfs" ino=8002 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.070602][ T4740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.110746][ T4740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 68.117473][ T4740] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.125609][ T4740] vhci_hcd vhci_hcd.0: Device attached [ 68.147148][ T29] audit: type=1400 audit(1747246639.057:1545): avc: denied { search } for pid=4746 comm="syz.3.508" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.156192][ T4762] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.169633][ T29] audit: type=1400 audit(1747246639.057:1546): avc: denied { read } for pid=4746 comm="syz.3.508" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.200665][ T29] audit: type=1400 audit(1747246639.057:1547): avc: denied { open } for pid=4746 comm="syz.3.508" path="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.323350][ T4798] loop4: detected capacity change from 0 to 128 [ 68.371847][ T4798] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.384275][ T4740] vhci_hcd vhci_hcd.0: port 0 already used [ 68.450089][ T4771] vhci_hcd: connection closed [ 68.450399][ T4747] vhci_hcd: connection closed [ 68.455165][ T4764] vhci_hcd: connection closed [ 68.460672][ T4741] vhci_hcd: connection reset by peer [ 68.470754][ T4788] vhci_hcd: connection closed [ 68.470988][ T4755] vhci_hcd: connection closed [ 68.476030][ T31] vhci_hcd: stop threads [ 68.477512][ T4798] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.481489][ T31] vhci_hcd: release socket [ 68.515853][ T1040] kernel write not supported for file /256/attr/sockcreate (pid: 1040 comm: kworker/0:2) [ 68.517752][ T31] vhci_hcd: disconnect device [ 68.546920][ T31] vhci_hcd: stop threads [ 68.551351][ T31] vhci_hcd: release socket [ 68.555792][ T31] vhci_hcd: disconnect device [ 68.571088][ T31] vhci_hcd: stop threads [ 68.575388][ T31] vhci_hcd: release socket [ 68.579855][ T31] vhci_hcd: disconnect device [ 68.590320][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.603389][ T31] vhci_hcd: stop threads [ 68.607772][ T31] vhci_hcd: release socket [ 68.612224][ T31] vhci_hcd: disconnect device [ 68.621380][ T31] vhci_hcd: stop threads [ 68.625668][ T31] vhci_hcd: release socket [ 68.630369][ T31] vhci_hcd: disconnect device [ 68.638996][ T31] vhci_hcd: stop threads [ 68.643288][ T31] vhci_hcd: release socket [ 68.647842][ T31] vhci_hcd: disconnect device [ 68.653488][ T4812] netlink: 104 bytes leftover after parsing attributes in process `syz.1.528'. [ 68.812479][ T29] audit: type=1400 audit(1747246639.767:1548): avc: denied { bind } for pid=4831 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 68.840486][ T29] audit: type=1400 audit(1747246639.797:1549): avc: denied { search } for pid=4834 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.879998][ T29] audit: type=1400 audit(1747246639.807:1550): avc: denied { read } for pid=4837 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.903530][ T29] audit: type=1400 audit(1747246639.807:1551): avc: denied { open } for pid=4837 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.928722][ T29] audit: type=1400 audit(1747246639.807:1552): avc: denied { getattr } for pid=4837 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.954491][ T29] audit: type=1400 audit(1747246639.807:1553): avc: denied { getattr } for pid=4837 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.014214][ T4859] netlink: 104 bytes leftover after parsing attributes in process `syz.1.543'. [ 70.319321][ T4902] netlink: 104 bytes leftover after parsing attributes in process `syz.0.556'. [ 70.525953][ T4933] netlink: 'syz.0.565': attribute type 4 has an invalid length. [ 70.621679][ T4938] netlink: 'syz.0.565': attribute type 4 has an invalid length. [ 71.409820][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.441675][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.561220][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.643738][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.800731][ T5012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.600967][ T5044] syz_tun: entered allmulticast mode [ 72.613590][ T5043] syz_tun: left allmulticast mode [ 72.944588][ T5057] tmpfs: Unknown parameter 'usrquota' [ 72.954014][ T5058] 8021q: VLANs not supported on ip6gre0 [ 73.067763][ T2969] usb 5-1: enqueue for inactive port 0 [ 73.079295][ T2969] usb 5-1: enqueue for inactive port 0 [ 73.144781][ T5074] syz_tun: entered allmulticast mode [ 73.157630][ T2969] vhci_hcd: vhci_device speed not set [ 73.189914][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.260030][ T5070] syz_tun: left allmulticast mode [ 73.326104][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.542488][ T5087] 8021q: VLANs not supported on ip6gre0 [ 73.666030][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 73.666055][ T29] audit: type=1400 audit(1747246644.617:1570): avc: denied { nlmsg_read } for pid=5096 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.987689][ T29] audit: type=1400 audit(1747246644.937:1571): avc: denied { sqpoll } for pid=5102 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.138245][ T5118] 8021q: VLANs not supported on ip6gre0 [ 74.221841][ T5120] netlink: 104 bytes leftover after parsing attributes in process `syz.1.621'. [ 74.350850][ T5106] cgroup: fork rejected by pids controller in /syz0 [ 74.352991][ T5160] syz_tun: entered allmulticast mode [ 74.374255][ T5152] syz_tun: left allmulticast mode [ 74.872719][ T29] audit: type=1400 audit(1747246645.827:1572): avc: denied { ioctl } for pid=5165 comm="syz.0.627" path="socket:[9131]" dev="sockfs" ino=9131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.243303][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.252566][ T5184] netlink: 104 bytes leftover after parsing attributes in process `syz.1.635'. [ 75.275871][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.414528][ T5192] syz_tun: entered allmulticast mode [ 75.423496][ T5191] syz_tun: left allmulticast mode [ 75.560717][ T5204] syz_tun: entered allmulticast mode [ 75.567301][ T5203] syz_tun: left allmulticast mode [ 75.616862][ T5211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.627175][ T5211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.764034][ T5220] syz_tun: entered allmulticast mode [ 75.770296][ T5219] syz_tun: left allmulticast mode [ 75.946375][ T5228] netlink: 'syz.4.656': attribute type 4 has an invalid length. [ 76.001275][ T5228] netlink: 'syz.4.656': attribute type 4 has an invalid length. [ 76.178187][ T10] usb usb6-port1: attempt power cycle [ 76.234466][ T5240] syz_tun: entered allmulticast mode [ 76.242766][ T5239] syz_tun: left allmulticast mode [ 76.405500][ T5256] 8021q: VLANs not supported on ip6gre0 [ 76.434082][ T5258] netlink: 'syz.0.668': attribute type 12 has an invalid length. [ 76.442042][ T5258] netlink: 'syz.0.668': attribute type 29 has an invalid length. [ 76.449925][ T5258] netlink: 'syz.0.668': attribute type 2 has an invalid length. [ 76.457696][ T5258] netlink: 'syz.0.668': attribute type 2 has an invalid length. [ 76.465440][ T5258] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 76.473265][ T5258] netlink: 'syz.0.668': attribute type 37 has an invalid length. [ 76.481122][ T5258] netlink: 'syz.0.668': attribute type 2 has an invalid length. [ 76.489227][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.584820][ T5269] netlink: 'syz.3.673': attribute type 4 has an invalid length. [ 76.746530][ T29] audit: type=1400 audit(1747246647.697:1573): avc: denied { mounton } for pid=5270 comm="syz.1.675" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 77.183019][ T5299] netlink: 104 bytes leftover after parsing attributes in process `syz.2.685'. [ 77.271749][ T1040] kernel write not supported for file /340/attr/sockcreate (pid: 1040 comm: kworker/0:2) [ 77.431290][ T5309] syz_tun: entered promiscuous mode [ 77.444741][ T5309] vlan2: entered promiscuous mode [ 77.540851][ T29] audit: type=1400 audit(1747246648.497:1574): avc: denied { setopt } for pid=5316 comm="syz.2.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.617201][ T5321] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 77.681344][ T5327] netlink: 104 bytes leftover after parsing attributes in process `syz.0.698'. [ 78.050513][ T5349] netlink: 4704 bytes leftover after parsing attributes in process `syz.3.706'. [ 78.060385][ T10] usb usb6-port1: unable to enumerate USB device [ 79.011679][ T29] audit: type=1400 audit(1747246649.957:1575): avc: denied { write } for pid=5371 comm="syz.1.715" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.224174][ T5387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.721'. [ 80.089136][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.142243][ T5420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.734'. [ 80.160793][ T5424] IPVS: Unknown mcast interface: Ylan1 [ 80.169867][ T5426] netlink: 104 bytes leftover after parsing attributes in process `syz.1.735'. [ 80.235571][ T5428] syzkaller1: entered promiscuous mode [ 80.241169][ T5428] syzkaller1: entered allmulticast mode [ 80.337105][ T29] audit: type=1400 audit(1747246651.287:1576): avc: denied { read } for pid=5438 comm="syz.1.743" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.362263][ T5436] 8021q: VLANs not supported on ip6gre0 [ 80.364923][ T29] audit: type=1400 audit(1747246651.317:1577): avc: denied { listen } for pid=5438 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.457424][ T5450] ================================================================== [ 80.465579][ T5450] BUG: KCSAN: data-race in wg_packet_encrypt_worker / wg_packet_send_staged_packets [ 80.475005][ T5450] [ 80.477349][ T5450] write to 0xffff888119552580 of 8 bytes by task 3390 on cpu 1: [ 80.485008][ T5450] wg_packet_encrypt_worker+0xab5/0xb80 [ 80.490596][ T5450] process_scheduled_works+0x4ce/0x9d0 [ 80.496098][ T5450] worker_thread+0x582/0x770 [ 80.500734][ T5450] kthread+0x489/0x510 [ 80.505282][ T5450] ret_from_fork+0x4b/0x60 [ 80.509716][ T5450] ret_from_fork_asm+0x1a/0x30 [ 80.514501][ T5450] [ 80.516833][ T5450] read to 0xffff888119552580 of 8 bytes by task 5450 on cpu 0: [ 80.524382][ T5450] wg_packet_send_staged_packets+0x75f/0xab0 [ 80.530413][ T5450] wg_xmit+0x5c7/0x6b0 [ 80.534497][ T5450] dev_hard_start_xmit+0x12c/0x3d0 [ 80.539615][ T5450] __dev_queue_xmit+0x10b9/0x1fb0 [ 80.544732][ T5450] packet_xmit+0x4b/0x1f0 [ 80.549078][ T5450] packet_sendmsg+0x2b1d/0x32d0 [ 80.553968][ T5450] __sock_sendmsg+0x142/0x180 [ 80.558673][ T5450] __sys_sendto+0x268/0x330 [ 80.563197][ T5450] __x64_sys_sendto+0x76/0x90 [ 80.567991][ T5450] x64_sys_call+0x2eb6/0x2fb0 [ 80.572677][ T5450] do_syscall_64+0xd0/0x1a0 [ 80.577196][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.583102][ T5450] [ 80.585432][ T5450] value changed: 0xffff888118828100 -> 0x0000000000000000 [ 80.592541][ T5450] [ 80.594868][ T5450] Reported by Kernel Concurrency Sanitizer on: [ 80.601034][ T5450] CPU: 0 UID: 0 PID: 5450 Comm: syz.2.747 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 80.613370][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 80.623432][ T5450] ================================================================== [ 80.663115][ T29] audit: type=1400 audit(1747246651.597:1578): avc: denied { accept } for pid=5438 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1