last executing test programs: 1.338058134s ago: executing program 2 (id=709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x90) unshare(0x2000400) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40044591, &(0x7f0000ffcffc)=0x3) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx:Dd', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x4b4a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1500, 0xa49b4c5eb6e09b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) ftruncate(r3, 0xf1b3) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 1.304396239s ago: executing program 2 (id=711): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gretap0\x00', 0x0}) socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") lstat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b09000c0007800800050002000000"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x38, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={0x0, 0xfc}}, 0x80) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r8, 0x400, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffca4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 1.16559071s ago: executing program 2 (id=714): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x7ffffffd, 0x350, 0x0, 0x228, 0xffffffff, 0x0, 0x228, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'wg0\x00', 'geneve1\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@empty, @gre_key}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@private, @dev, 0x0, 0x0, 'team_slave_1\x00', 'wg2\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 1.141981324s ago: executing program 2 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000002e40)='./file0\x00', 0x1) 1.118857537s ago: executing program 2 (id=716): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x6}}, [], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x175) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 1.085046793s ago: executing program 1 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) 1.068167115s ago: executing program 1 (id=721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x90) unshare(0x2000400) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40044591, &(0x7f0000ffcffc)=0x3) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx:Dd', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x4b4a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1500, 0xa49b4c5eb6e09b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) ftruncate(r3, 0xf1b3) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 1.060600467s ago: executing program 2 (id=722): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000080)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) 1.059741167s ago: executing program 0 (id=723): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)) r3 = memfd_secret(0x0) ftruncate(r3, 0x5) finit_module(r3, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, &(0x7f0000000040), 0x0) 998.277416ms ago: executing program 1 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 948.036754ms ago: executing program 1 (id=727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) write$binfmt_script(r0, &(0x7f0000000300), 0xfe7f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) recvmmsg(r0, &(0x7f0000010bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000cc0)=""/142, 0x7ffff000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001040)=""/191, 0xbf}], 0x1}}], 0x2, 0x2, 0x0) 945.607614ms ago: executing program 3 (id=728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@alu, @jmp={0x6}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x8d6) shmctl$SHM_INFO(0x0, 0xe, 0x0) set_mempolicy_home_node(&(0x7f0000587000/0x3000)=nil, 0x3000, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = getpid() semget$private(0x0, 0x3, 0x83) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='%\',%$},:(.-#%\x00') mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x8, 0x7, 0x2) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) 917.550459ms ago: executing program 0 (id=729): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0x33, &(0x7f0000000480)=0xa4ffffff, 0x4) 876.708245ms ago: executing program 0 (id=730): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x0, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000240)={'veth1_virt_wifi\x00', {0x2, 0x0, @multicast1}}) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8}, 0x90) socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4026012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6], 0x1d8}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 646.30395ms ago: executing program 3 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) 619.578634ms ago: executing program 3 (id=732): socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184d, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 614.297865ms ago: executing program 0 (id=733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 564.229173ms ago: executing program 0 (id=734): r0 = getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = socket(0x2, 0x3, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) shutdown(r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001140)=ANY=[], 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, 0x0, 0x40c0000) socket$inet6(0xa, 0x3, 0x1) fsopen(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r3, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) get_robust_list(r0, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x240b, &(0x7f0000000080)={0x0, 0x9d28, 0x10}, &(0x7f0000000100), &(0x7f00000003c0)) 546.469816ms ago: executing program 3 (id=735): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r1) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) keyctl$link(0x8, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000200)='keyring\x00') keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000100)=""/107, 0x6b, &(0x7f00000001c0)={0x0, &(0x7f0000000180)="12824e122e2dbf5a154e6bf7e4a3f5e3a642b5b488b69adb2ce4797d726e", 0x1e}) r3 = add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, r3) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r2, &(0x7f00000007c0)='pkcs7_test\x00', &(0x7f00000009c0)='1\xe1\a0\xbe\xf021<\x88\"F\x85\x15/\x83L\x1e\x88\x142\xe9\xa6\xf8q\xa7OK\x98\r\xac\xa2JG0xffffffffffffffff}, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x8d6) shmctl$SHM_INFO(0x0, 0xe, 0x0) set_mempolicy_home_node(&(0x7f0000587000/0x3000)=nil, 0x3000, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = getpid() semget$private(0x0, 0x3, 0x83) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='%\',%$},:(.-#%\x00') mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x8, 0x7, 0x2) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) 331.182879ms ago: executing program 4 (id=742): shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x2002) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x9, 0x50000000, 0x8000000, 0xac6, 0x8}) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) r5 = socket$l2tp6(0xa, 0x2, 0x73) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) r6 = dup2(r0, r5) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffff156}}]}]}]}, 0x34}}, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmsg$can_bcm(r7, &(0x7f00000006c0)={&(0x7f0000000380)={0x1d, r11}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="06000000000800000900000000000000", @ANYRES64=r12, @ANYRES64=r13/1000+60000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="040000c001000000020000201e0200008b24638ab8d3137f3d5ac3213d14022e5b2119f81ec1ebc9b74df85f07da5d4459c8b7babfc10176c3f94284b9dfd5177c5a07c4e22bc84cf5ea8c08dfb3ca3c"], 0x80}, 0x1, 0x0, 0x0, 0x4008081}, 0xc040) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000001c0)={@local, @private}, &(0x7f0000000200)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)}) 237.145433ms ago: executing program 4 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@dev, @broadcast, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}}}, 0x0) 193.43824ms ago: executing program 4 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 155.280096ms ago: executing program 4 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r2 = getpgid(0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, r2}) 80.700707ms ago: executing program 1 (id=746): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=r0]) 63.15309ms ago: executing program 4 (id=747): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = eventfd(0x0) r4 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x131a, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="4e8fc38e", 0x4}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 0s ago: executing program 1 (id=748): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x400000000000003, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_nat_t_type={0x1, 0x8}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): [ 22.020595][ T29] audit: type=1400 audit(1719258354.287:81): avc: denied { read } for pid=2769 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 23.705686][ T29] audit: type=1400 audit(1719258355.967:82): avc: denied { mounton } for pid=3074 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.706960][ T3074] cgroup: Unknown subsys name 'net' [ 23.728661][ T29] audit: type=1400 audit(1719258355.967:83): avc: denied { mount } for pid=3074 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.755954][ T29] audit: type=1400 audit(1719258355.997:84): avc: denied { unmount } for pid=3074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.889303][ T3074] cgroup: Unknown subsys name 'rlimit' [ 24.043497][ T29] audit: type=1400 audit(1719258356.307:85): avc: denied { create } for pid=3074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.069653][ T29] audit: type=1400 audit(1719258356.307:86): avc: denied { write } for pid=3074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.072349][ T3075] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.090109][ T29] audit: type=1400 audit(1719258356.307:87): avc: denied { read } for pid=3074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.119050][ T29] audit: type=1400 audit(1719258356.317:88): avc: denied { mounton } for pid=3074 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.143852][ T29] audit: type=1400 audit(1719258356.317:89): avc: denied { mount } for pid=3074 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.144441][ T3074] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.167090][ T29] audit: type=1400 audit(1719258356.367:90): avc: denied { relabelto } for pid=3075 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.201287][ T29] audit: type=1400 audit(1719258356.367:91): avc: denied { write } for pid=3075 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.804681][ T3083] chnl_net:caif_netlink_parms(): no params data found [ 24.851383][ T3085] chnl_net:caif_netlink_parms(): no params data found [ 24.862280][ T3088] chnl_net:caif_netlink_parms(): no params data found [ 24.912559][ T3087] chnl_net:caif_netlink_parms(): no params data found [ 24.921415][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.928719][ T3083] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.936715][ T3083] bridge_slave_0: entered allmulticast mode [ 24.943304][ T3083] bridge_slave_0: entered promiscuous mode [ 24.949911][ T3094] chnl_net:caif_netlink_parms(): no params data found [ 24.974771][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.982142][ T3083] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.989316][ T3083] bridge_slave_1: entered allmulticast mode [ 24.996046][ T3083] bridge_slave_1: entered promiscuous mode [ 25.030012][ T3083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.042283][ T3083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.072075][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.079232][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.086424][ T3088] bridge_slave_0: entered allmulticast mode [ 25.092889][ T3088] bridge_slave_0: entered promiscuous mode [ 25.111624][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.118793][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.125890][ T3087] bridge_slave_0: entered allmulticast mode [ 25.132338][ T3087] bridge_slave_0: entered promiscuous mode [ 25.149076][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.156165][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.163602][ T3088] bridge_slave_1: entered allmulticast mode [ 25.170009][ T3088] bridge_slave_1: entered promiscuous mode [ 25.178860][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.185976][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.193167][ T3087] bridge_slave_1: entered allmulticast mode [ 25.199554][ T3087] bridge_slave_1: entered promiscuous mode [ 25.205660][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.212950][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.220169][ T3085] bridge_slave_0: entered allmulticast mode [ 25.226577][ T3085] bridge_slave_0: entered promiscuous mode [ 25.233739][ T3083] team0: Port device team_slave_0 added [ 25.240463][ T3083] team0: Port device team_slave_1 added [ 25.259351][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.266426][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.273654][ T3085] bridge_slave_1: entered allmulticast mode [ 25.280152][ T3085] bridge_slave_1: entered promiscuous mode [ 25.301757][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.325382][ T3083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.332663][ T3083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.358792][ T3083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.370635][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.380060][ T3083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.387140][ T3083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.413157][ T3083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.429487][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.438633][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.445766][ T3094] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.452975][ T3094] bridge_slave_0: entered allmulticast mode [ 25.459871][ T3094] bridge_slave_0: entered promiscuous mode [ 25.479335][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.489578][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.496670][ T3094] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.503868][ T3094] bridge_slave_1: entered allmulticast mode [ 25.510445][ T3094] bridge_slave_1: entered promiscuous mode [ 25.517749][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.548265][ T3088] team0: Port device team_slave_0 added [ 25.554735][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.564685][ T3088] team0: Port device team_slave_1 added [ 25.576286][ T3094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.597400][ T3087] team0: Port device team_slave_0 added [ 25.618705][ T3094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.628076][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.635076][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.661151][ T3088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.674133][ T3083] hsr_slave_0: entered promiscuous mode [ 25.680278][ T3083] hsr_slave_1: entered promiscuous mode [ 25.692028][ T3087] team0: Port device team_slave_1 added [ 25.712400][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.719515][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.745439][ T3088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.770289][ T3085] team0: Port device team_slave_0 added [ 25.776607][ T3094] team0: Port device team_slave_0 added [ 25.783873][ T3094] team0: Port device team_slave_1 added [ 25.795250][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.802291][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.828262][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.839832][ T3085] team0: Port device team_slave_1 added [ 25.845684][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.852670][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.878677][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.933221][ T3094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.940219][ T3094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.966210][ T3094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.982296][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.989300][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.015489][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.026704][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.033836][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.059888][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.074548][ T3088] hsr_slave_0: entered promiscuous mode [ 26.080889][ T3088] hsr_slave_1: entered promiscuous mode [ 26.089138][ T3088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.096737][ T3088] Cannot create hsr debugfs directory [ 26.102736][ T3094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.109775][ T3094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.135697][ T3094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.153985][ T3087] hsr_slave_0: entered promiscuous mode [ 26.160067][ T3087] hsr_slave_1: entered promiscuous mode [ 26.165982][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.173608][ T3087] Cannot create hsr debugfs directory [ 26.236739][ T3094] hsr_slave_0: entered promiscuous mode [ 26.242951][ T3094] hsr_slave_1: entered promiscuous mode [ 26.249302][ T3094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.256868][ T3094] Cannot create hsr debugfs directory [ 26.280438][ T3085] hsr_slave_0: entered promiscuous mode [ 26.286687][ T3085] hsr_slave_1: entered promiscuous mode [ 26.292861][ T3085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.300493][ T3085] Cannot create hsr debugfs directory [ 26.416600][ T3083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.446983][ T3083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.469015][ T3083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.480002][ T3083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.499022][ T3087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.508476][ T3087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.521776][ T3087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.533022][ T3087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.561994][ T3088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.570970][ T3088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.579991][ T3088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.588645][ T3088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.629006][ T3094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.638832][ T3094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.647906][ T3094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.670831][ T3094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.702070][ T3085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.725192][ T3085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.734130][ T3085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.743102][ T3085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.759978][ T3083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.771434][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.786069][ T3083] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.798701][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.818786][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.825976][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.835251][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.842323][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.867223][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.874316][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.883268][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.890513][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.923637][ T3083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.934159][ T3083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.963669][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.973346][ T3094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.987479][ T3087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.013540][ T3088] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.039584][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.046692][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.058676][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.065783][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.081933][ T3094] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.113113][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.120402][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.133164][ T3083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.156507][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.165394][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.172517][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.193345][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.204960][ T3094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.215459][ T3094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.254065][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.288502][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.295726][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.327089][ T3088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.335839][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.342999][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.369818][ T3094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.413390][ T3087] veth0_vlan: entered promiscuous mode [ 27.422554][ T3083] veth0_vlan: entered promiscuous mode [ 27.448331][ T3087] veth1_vlan: entered promiscuous mode [ 27.478399][ T3083] veth1_vlan: entered promiscuous mode [ 27.488959][ T3087] veth0_macvtap: entered promiscuous mode [ 27.514434][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.538806][ T3083] veth0_macvtap: entered promiscuous mode [ 27.546974][ T3087] veth1_macvtap: entered promiscuous mode [ 27.554378][ T3083] veth1_macvtap: entered promiscuous mode [ 27.575991][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.600875][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.611433][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.626019][ T3083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.649157][ T3083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.657507][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.668024][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.683505][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.701137][ T3087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.709983][ T3087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.718941][ T3087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.727725][ T3087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.739732][ T3083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.748530][ T3083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.757428][ T3083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.766218][ T3083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.776778][ T3088] veth0_vlan: entered promiscuous mode [ 27.785886][ T3088] veth1_vlan: entered promiscuous mode [ 27.820226][ T3085] veth0_vlan: entered promiscuous mode [ 27.840132][ T3085] veth1_vlan: entered promiscuous mode [ 27.850350][ T3088] veth0_macvtap: entered promiscuous mode [ 27.861784][ T3094] veth0_vlan: entered promiscuous mode [ 27.875924][ T3088] veth1_macvtap: entered promiscuous mode [ 27.895453][ T3094] veth1_vlan: entered promiscuous mode [ 27.905985][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.916691][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.926569][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.937051][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.949907][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.963201][ T3085] veth0_macvtap: entered promiscuous mode [ 27.971026][ T3085] veth1_macvtap: entered promiscuous mode [ 27.986424][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.997003][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.006844][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.017447][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.031397][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.043128][ T3224] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.051974][ T3224] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.064141][ T3088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.067018][ T3224] syz.2.3 (3224) used greatest stack depth: 11032 bytes left [ 28.072908][ T3088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.089529][ T3088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.098457][ T3088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.130255][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.140865][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.150873][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.161558][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.171513][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.182073][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.195239][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.213869][ T3094] veth0_macvtap: entered promiscuous mode [ 28.229608][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.240129][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.249980][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.260509][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.270365][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.280994][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.285890][ T3237] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.293625][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.468183][ T3237] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.475507][ T3237] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.540167][ T3237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.552312][ T3237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.598882][ T3237] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.608085][ T3237] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.616989][ T3237] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.626118][ T3237] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.652690][ T3085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.661499][ T3085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.670319][ T3085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.679475][ T3085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.692628][ T3237] syz.2.10 (3237) used greatest stack depth: 10792 bytes left [ 28.746502][ T3094] veth1_macvtap: entered promiscuous mode [ 28.774484][ T3094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.785635][ T3094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.785642][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 28.785656][ T29] audit: type=1400 audit(1719258361.057:131): avc: denied { cpu } for pid=3273 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.795518][ T3094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.831376][ T3094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.841581][ T3094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.852062][ T3094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.865633][ T29] audit: type=1400 audit(1719258361.127:132): avc: denied { write } for pid=3275 comm="syz.1.13" name="001" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.888383][ T3276] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 28.897108][ T3094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.949610][ T3094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.960435][ T3094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.970457][ T3094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.981181][ T3094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.991140][ T3094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.001619][ T3094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.013332][ T3094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.020951][ T3282] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14'. [ 29.027259][ T29] audit: type=1400 audit(1719258361.277:133): avc: denied { write } for pid=3280 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.029868][ T3282] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14'. [ 29.079800][ T3094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.088599][ T3094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.097410][ T3094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.106467][ T3094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.137492][ T29] audit: type=1400 audit(1719258361.397:134): avc: denied { create } for pid=3287 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 29.160630][ T29] audit: type=1400 audit(1719258361.407:135): avc: denied { connect } for pid=3287 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 29.180073][ T29] audit: type=1400 audit(1719258361.407:136): avc: denied { read } for pid=3287 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 29.207038][ T29] audit: type=1400 audit(1719258361.467:137): avc: denied { read } for pid=3287 comm="syz.0.1" name="event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.216898][ T3294] Cannot find add_set index 0 as target [ 29.230000][ T29] audit: type=1400 audit(1719258361.467:138): avc: denied { open } for pid=3287 comm="syz.0.1" path="/dev/input/event0" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.263393][ T29] audit: type=1400 audit(1719258361.467:139): avc: denied { ioctl } for pid=3287 comm="syz.0.1" path="/dev/input/event0" dev="devtmpfs" ino=217 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.288703][ T29] audit: type=1400 audit(1719258361.467:140): avc: denied { create } for pid=3287 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.432587][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.440011][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.496830][ T3297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.510106][ T3297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.556834][ T3297] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.565960][ T3297] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.575114][ T3297] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.584102][ T3297] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.700672][ T3317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 29.780182][ T3325] netlink: 92 bytes leftover after parsing attributes in process `syz.1.28'. [ 29.789063][ T3325] netlink: 92 bytes leftover after parsing attributes in process `syz.1.28'. [ 30.669113][ T3423] loop2: detected capacity change from 0 to 2048 [ 30.686977][ T3423] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.725693][ T3423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.749710][ T3423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.72: bg 0: block 234: padding at end of block bitmap is not set [ 30.790243][ T3423] EXT4-fs (loop2): Remounting filesystem read-only [ 30.805934][ T3423] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 30.815301][ T3423] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 30.824548][ T3423] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 30.842255][ T3083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.953309][ T3457] Zero length message leads to an empty skb [ 30.989636][ T3459] netlink: 76 bytes leftover after parsing attributes in process `syz.4.88'. [ 31.020385][ T3464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.042010][ T3469] loop3: detected capacity change from 0 to 2048 [ 31.057154][ T3469] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.070519][ T3469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.099838][ T3472] can: request_module (can-proto-0) failed. [ 31.108971][ T3469] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.91: bg 0: block 234: padding at end of block bitmap is not set [ 31.153997][ T3469] EXT4-fs (loop3): Remounting filesystem read-only [ 31.168716][ T3469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 31.181846][ T3469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 31.191868][ T3469] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 31.211257][ T3087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.264548][ T3476] rdma_op ffff888112160980 conn xmit_rdma 0000000000000000 [ 31.409182][ T3501] loop1: detected capacity change from 0 to 2048 [ 31.418845][ T3501] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.429161][ T3501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.455986][ T3501] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.103: bg 0: block 234: padding at end of block bitmap is not set [ 31.493015][ T3506] can: request_module (can-proto-0) failed. [ 31.513234][ T3509] rdma_op ffff888112160980 conn xmit_rdma 0000000000000000 [ 31.522906][ T3501] EXT4-fs (loop1): Remounting filesystem read-only [ 31.522946][ T3510] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 31.557158][ T3510] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 31.566514][ T3510] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 31.616114][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.713102][ T3515] loop0: detected capacity change from 0 to 512 [ 31.738112][ T3515] EXT4-fs (loop0): bad geometry: first data block 1 is beyond end of filesystem (0) [ 31.850710][ T3535] rdma_op ffff888112183180 conn xmit_rdma 0000000000000000 [ 31.923923][ T3538] loop3: detected capacity change from 0 to 2048 [ 31.933531][ T3538] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.952551][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.978226][ T3538] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.118: bg 0: block 234: padding at end of block bitmap is not set [ 31.998605][ T3538] EXT4-fs (loop3): Remounting filesystem read-only [ 32.010464][ T3538] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 32.020594][ T3538] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 32.039049][ T3538] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 32.059392][ T3087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.213040][ T3552] can: request_module (can-proto-0) failed. [ 32.519099][ T3562] loop0: detected capacity change from 0 to 1764 [ 32.526812][ T3562] iso9660: Bad value for 'sbsector' [ 32.580846][ T3562] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 32.580846][ T3562] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 32.580846][ T3562] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 32.580846][ T3562] csum(0x350e00a0 start=160 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 32.580846][ T3562] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 32.580846][ T3562] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 32.580846][ T3562] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 32.630461][ T3562] dev name=veth0 feat=0x000061164fdd19e9 [ 32.636121][ T3562] skb linear: 00000000: 45 02 29 89 4a e9 00 00 0f 2f 97 2b ac 14 14 18 [ 32.644697][ T3562] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 32.653286][ T3562] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 32.662021][ T3562] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 32.670579][ T3562] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 32.679200][ T3562] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 32 00 00 4c 80 14 00 [ 32.687962][ T3562] skb linear: 00000060: 00 00 11 00 01 00 00 00 00 00 00 00 00 00 00 00 [ 32.696469][ T3562] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.705079][ T3562] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.713679][ T3562] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.722207][ T3562] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.730742][ T3562] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.739275][ T3562] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.747874][ T3562] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.756394][ T3562] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.764914][ T3562] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.773436][ T3562] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.782012][ T3562] ------------[ cut here ]------------ [ 32.787479][ T3562] offset+2 (13608) > skb_headlen() (10633) [ 32.793861][ T3562] WARNING: CPU: 0 PID: 3562 at net/core/dev.c:3334 skb_checksum_help+0x43b/0x450 [ 32.803066][ T3562] Modules linked in: [ 32.806978][ T3562] CPU: 0 PID: 3562 Comm: syz.0.125 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 32.817077][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 32.827151][ T3562] RIP: 0010:skb_checksum_help+0x43b/0x450 [ 32.832921][ T3562] Code: 90 4c 89 ff e8 e6 41 60 fd 41 8b 1f 4c 89 e7 e8 db 41 60 fd 41 2b 1c 24 48 c7 c7 32 5a e1 85 48 89 ee 89 da e8 96 eb 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 45 fe ff ff 0f 1f 80 00 00 00 00 90 [ 32.852742][ T3562] RSP: 0018:ffffc90001357410 EFLAGS: 00010246 [ 32.858913][ T3562] RAX: 419855710e6efe00 RBX: 0000000000002989 RCX: 0000000000040000 [ 32.866991][ T3562] RDX: ffffc90001a99000 RSI: 000000000001577b RDI: 000000000001577c [ 32.875047][ T3562] RBP: 0000000000003528 R08: ffffffff81110bd7 R09: 0000000000000000 [ 32.883079][ T3562] R10: 0001ffffffffffff R11: ffff888112a58000 R12: ffff888119618774 [ 32.891116][ T3562] R13: 0000000055fb430e R14: ffff888119618700 R15: ffff888119618770 [ 32.899116][ T3562] FS: 00007f21b609f6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 32.908089][ T3562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.914709][ T3562] CR2: 0000000000000000 CR3: 0000000112690000 CR4: 00000000003506f0 [ 32.922729][ T3562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.930780][ T3562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.938905][ T3562] Call Trace: [ 32.942201][ T3562] [ 32.945164][ T3562] ? __warn+0x13c/0x350 [ 32.949426][ T3562] ? report_bug+0x315/0x420 [ 32.953993][ T3562] ? skb_checksum_help+0x43b/0x450 [ 32.959174][ T3562] ? handle_bug+0x3e/0x70 [ 32.963524][ T3562] ? exc_invalid_op+0x1a/0x50 [ 32.968225][ T3562] ? asm_exc_invalid_op+0x1a/0x20 [ 32.973272][ T3562] ? __warn_printk+0x167/0x1b0 [ 32.978098][ T3562] ? skb_checksum_help+0x43b/0x450 [ 32.983218][ T3562] ip_do_fragment+0xdb/0xd00 [ 32.987858][ T3562] ? perf_trace_kmem_cache_free+0x128/0x160 [ 32.993879][ T3562] ? __kfree_skb+0x102/0x150 [ 32.998510][ T3562] ? __kfree_skb+0x102/0x150 [ 33.003103][ T3562] ? __pfx_ip_finish_output2+0x10/0x10 [ 33.008609][ T3562] ? __traceiter_kmem_cache_free+0x33/0x50 [ 33.014503][ T3562] ip_fragment+0xd2/0x140 [ 33.018911][ T3562] ip_finish_output+0x1c4/0x2a0 [ 33.023922][ T3562] ip_output+0xab/0x170 [ 33.028188][ T3562] ? __pfx_ip_finish_output+0x10/0x10 [ 33.033667][ T3562] ? __pfx_ip_output+0x10/0x10 [ 33.038752][ T3562] ip_local_out+0xab/0xd0 [ 33.043226][ T3562] iptunnel_xmit+0x33f/0x460 [ 33.047941][ T3562] ip_tunnel_xmit+0x1685/0x1740 [ 33.052808][ T3562] ipgre_xmit+0x5f4/0x6d0 [ 33.057222][ T3562] dev_hard_start_xmit+0x119/0x3f0 [ 33.062360][ T3562] __dev_queue_xmit+0xf83/0x1e50 [ 33.067356][ T3562] ? __dev_queue_xmit+0x161/0x1e50 [ 33.072575][ T3562] packet_xmit+0x4b/0x1e0 [ 33.076958][ T3562] packet_sendmsg+0x2ae1/0x3320 [ 33.081922][ T3562] ? selinux_socket_sendmsg+0x182/0x1b0 [ 33.087524][ T3562] ? __pfx_packet_sendmsg+0x10/0x10 [ 33.092766][ T3562] __sock_sendmsg+0x140/0x180 [ 33.097512][ T3562] ____sys_sendmsg+0x312/0x410 [ 33.102289][ T3562] __sys_sendmsg+0x1e9/0x280 [ 33.106977][ T3562] ? futex_wait+0x18e/0x1c0 [ 33.111556][ T3562] __x64_sys_sendmsg+0x46/0x50 [ 33.116330][ T3562] x64_sys_call+0xb25/0x2d70 [ 33.121049][ T3562] do_syscall_64+0xc9/0x1c0 [ 33.125638][ T3562] ? clear_bhb_loop+0x55/0xb0 [ 33.130464][ T3562] ? clear_bhb_loop+0x55/0xb0 [ 33.135224][ T3562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.141179][ T3562] RIP: 0033:0x7f21b6e1dd39 [ 33.145614][ T3562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.165351][ T3562] RSP: 002b:00007f21b609f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.173790][ T3562] RAX: ffffffffffffffda RBX: 00007f21b6fabfa0 RCX: 00007f21b6e1dd39 [ 33.181811][ T3562] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000005 [ 33.189871][ T3562] RBP: 00007f21b6e9e766 R08: 0000000000000000 R09: 0000000000000000 [ 33.197866][ T3562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.205989][ T3562] R13: 000000000000000b R14: 00007f21b6fabfa0 R15: 00007ffd950b3b48 [ 33.214051][ T3562] [ 33.217161][ T3562] ---[ end trace 0000000000000000 ]--- [ 33.253682][ T3536] syz.1.111 (3536) used greatest stack depth: 10344 bytes left [ 33.300684][ T3562] syz.0.125 (3562) used greatest stack depth: 10328 bytes left [ 33.332269][ T3579] loop0: detected capacity change from 0 to 2048 [ 33.340297][ T3579] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.359054][ T3579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.402093][ T3579] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.132: bg 0: block 234: padding at end of block bitmap is not set [ 33.436683][ T3579] EXT4-fs (loop0): Remounting filesystem read-only [ 33.446057][ T3587] can: request_module (can-proto-0) failed. [ 33.464508][ T3589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 33.498721][ T3589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 33.536335][ T3589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 33.591216][ T3591] loop2: detected capacity change from 0 to 512 [ 33.599876][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.600500][ T3591] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 33.677672][ T3596] loop0: detected capacity change from 0 to 512 [ 33.692128][ T3596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.730021][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.779898][ T3610] process 'syz.0.141' launched './file0' with NULL argv: empty string added [ 33.790385][ T3609] loop1: detected capacity change from 0 to 1764 [ 33.798553][ T3609] iso9660: Bad value for 'sbsector' [ 33.831849][ T29] kauditd_printk_skb: 3675 callbacks suppressed [ 33.831862][ T29] audit: type=1400 audit(1719258366.097:3816): avc: denied { connect } for pid=3611 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.857895][ T29] audit: type=1400 audit(1719258366.097:3817): avc: denied { write } for pid=3611 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.891041][ T29] audit: type=1400 audit(1719258366.157:3818): avc: denied { name_bind } for pid=3613 comm="syz.0.145" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.912741][ T29] audit: type=1400 audit(1719258366.157:3819): avc: denied { create } for pid=3613 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.933182][ T29] audit: type=1400 audit(1719258366.157:3820): avc: denied { write } for pid=3613 comm="syz.0.145" path="socket:[4610]" dev="sockfs" ino=4610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.957633][ T29] audit: type=1400 audit(1719258366.157:3821): avc: denied { nlmsg_write } for pid=3613 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.963506][ T3615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 34.118606][ T29] audit: type=1400 audit(1719258366.387:3822): avc: denied { create } for pid=3627 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 34.139063][ T29] audit: type=1400 audit(1719258366.387:3823): avc: denied { create } for pid=3627 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.158741][ T29] audit: type=1400 audit(1719258366.387:3824): avc: denied { create } for pid=3627 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.178364][ T29] audit: type=1400 audit(1719258366.387:3825): avc: denied { connect } for pid=3627 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.205232][ T3632] loop3: detected capacity change from 0 to 512 [ 34.213991][ T3632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.247916][ T3087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.388527][ T3652] loop3: detected capacity change from 0 to 1024 [ 34.396171][ T3652] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.407404][ T3652] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 34.416014][ T3652] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.422686][ T3652] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.161: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.436374][ T3652] EXT4-fs (loop3): 1 orphan inode deleted [ 34.443535][ T3652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.502685][ T3087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.531788][ T3661] loop2: detected capacity change from 0 to 512 [ 34.543059][ T3661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.550178][ T3666] capability: warning: `syz.4.167' uses deprecated v2 capabilities in a way that may be insecure [ 34.590059][ T3083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.620921][ T3668] loop4: detected capacity change from 0 to 512 [ 34.629178][ T3668] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 34.676921][ T3676] loop3: detected capacity change from 0 to 256 [ 34.691443][ T3676] FAT-fs (loop3): Directory bread(block 64) failed [ 34.698205][ T3676] FAT-fs (loop3): Directory bread(block 65) failed [ 34.704942][ T3676] FAT-fs (loop3): Directory bread(block 66) failed [ 34.711836][ T3676] FAT-fs (loop3): Directory bread(block 67) failed [ 34.718480][ T3676] FAT-fs (loop3): Directory bread(block 68) failed [ 34.726850][ T3676] FAT-fs (loop3): Directory bread(block 69) failed [ 34.741267][ T3676] FAT-fs (loop3): Directory bread(block 70) failed [ 34.749476][ T3676] FAT-fs (loop3): Directory bread(block 71) failed [ 34.756234][ T3676] FAT-fs (loop3): Directory bread(block 72) failed [ 34.764099][ T3676] FAT-fs (loop3): Directory bread(block 73) failed [ 34.795973][ T1705] kworker/u8:8: attempt to access beyond end of device [ 34.795973][ T1705] loop3: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 34.828507][ T3686] loop0: detected capacity change from 0 to 1024 [ 34.836250][ T3686] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.849179][ T3686] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 34.857731][ T3686] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.864679][ T3686] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.177: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.879943][ T3686] EXT4-fs (loop0): 1 orphan inode deleted [ 34.886686][ T3686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.964786][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.154664][ T3712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.185'. [ 35.445742][ T3724] loop4: detected capacity change from 0 to 164 [ 35.453208][ T3724] ======================================================= [ 35.453208][ T3724] WARNING: The mand mount option has been deprecated and [ 35.453208][ T3724] and is ignored by this kernel. Remove the mand [ 35.453208][ T3724] option from the mount to silence this warning. [ 35.453208][ T3724] ======================================================= [ 35.557902][ T3726] loop4: detected capacity change from 0 to 1024 [ 35.565816][ T3726] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.576879][ T3726] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 35.585187][ T3726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.591943][ T3726] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.192: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.605740][ T3726] EXT4-fs (loop4): 1 orphan inode deleted [ 35.612539][ T3726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.650508][ T3094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.651982][ T3731] netlink: 116 bytes leftover after parsing attributes in process `syz.2.194'. [ 35.668933][ T3731] netlink: 44 bytes leftover after parsing attributes in process `syz.2.194'. [ 35.682570][ T3731] Invalid architecture in ELF header: 0 [ 35.688652][ T3731] (unnamed net_device) (uninitialized): down delay (65535) is not a multiple of miimon (100), value rounded to 65500 ms [ 35.808459][ T3740] loop2: detected capacity change from 0 to 512 [ 35.826028][ T3740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.863379][ T3083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.949972][ T3761] loop2: detected capacity change from 0 to 136 [ 36.014648][ T3766] netlink: 116 bytes leftover after parsing attributes in process `syz.3.209'. [ 36.023787][ T3766] netlink: 44 bytes leftover after parsing attributes in process `syz.3.209'. [ 36.038744][ T3766] Invalid architecture in ELF header: 0 [ 36.045724][ T3761] netdevsim netdevsim2 netdevsim0: Caught tx_queue_len zero misconfig [ 36.054888][ T3766] (unnamed net_device) (uninitialized): down delay (65535) is not a multiple of miimon (100), value rounded to 65500 ms [ 36.182060][ T3774] loop1: detected capacity change from 0 to 512 [ 36.195471][ T3774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.259040][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.325977][ T3783] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 36.325977][ T3783] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 36.325977][ T3783] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 36.325977][ T3783] csum(0x350e2a11 start=10769 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 36.325977][ T3783] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 36.325977][ T3783] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 36.325977][ T3783] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 36.375634][ T3783] dev name=veth0 feat=0x000061164fdd19e9 [ 36.381342][ T3783] skb linear: 00000000: 45 02 29 89 09 a0 00 00 0f 2f d8 74 ac 14 14 18 [ 36.389869][ T3783] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 36.398406][ T3783] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 36.406923][ T3783] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 36.415527][ T3783] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 36.424061][ T3783] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 36.432823][ T3783] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.441356][ T3783] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.449884][ T3783] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.458421][ T3783] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.466933][ T3783] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.475459][ T3783] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.483977][ T3783] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.492646][ T3783] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.501240][ T3783] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.509769][ T3783] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.518293][ T3783] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.526827][ T3783] ------------[ cut here ]------------ [ 36.532301][ T3783] offset (10633) >= skb_headlen() (10633) [ 36.538852][ T3783] WARNING: CPU: 1 PID: 3783 at net/core/dev.c:3325 skb_checksum_help+0x3bd/0x450 [ 36.548024][ T3783] Modules linked in: [ 36.551943][ T3783] CPU: 1 PID: 3783 Comm: syz.1.216 Tainted: G W 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 36.563523][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 36.573649][ T3783] RIP: 0010:skb_checksum_help+0x3bd/0x450 [ 36.579452][ T3783] Code: 69 42 60 fd 41 8b 5d 00 48 8b 6c 24 08 48 89 ef e8 58 42 60 fd 2b 5d 00 48 c7 c7 0f 5a e1 85 44 89 e6 89 da e8 14 ec 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 c3 fe ff ff e8 50 c2 48 fd 48 c7 c7 [ 36.599292][ T3783] RSP: 0018:ffffc900014cf410 EFLAGS: 00010246 [ 36.605390][ T3783] RAX: 9f2be70f03e88c00 RBX: 0000000000002989 RCX: 0000000000040000 [ 36.613431][ T3783] RDX: ffffc9000246a000 RSI: 00000000000140f0 RDI: 00000000000140f1 [ 36.621613][ T3783] RBP: ffff888112d98f74 R08: ffffffff81110bd7 R09: 0000000000000000 [ 36.629623][ T3783] R10: 0001ffffffffffff R11: ffff888112963180 R12: 0000000000002989 [ 36.637660][ T3783] R13: ffff888112d98f70 R14: ffff888112d98f00 R15: 0000000000000000 [ 36.645656][ T3783] FS: 00007feea3cdd6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 36.645682][ T3783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.645697][ T3783] CR2: 000000002000e000 CR3: 0000000118edc000 CR4: 00000000003506f0 [ 36.645756][ T3783] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.645775][ T3783] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.645790][ T3783] Call Trace: [ 36.645871][ T3783] [ 36.645880][ T3783] ? __warn+0x13c/0x350 [ 36.645916][ T3783] ? report_bug+0x315/0x420 [ 36.645957][ T3783] ? skb_checksum_help+0x3bd/0x450 [ 36.645983][ T3783] ? handle_bug+0x3e/0x70 [ 36.646025][ T3783] ? exc_invalid_op+0x1a/0x50 [ 36.646060][ T3783] ? asm_exc_invalid_op+0x1a/0x20 [ 36.646144][ T3783] ? __warn_printk+0x167/0x1b0 [ 36.646171][ T3783] ? skb_checksum_help+0x3bd/0x450 [ 36.646198][ T3783] ip_do_fragment+0xdb/0xd00 [ 36.646228][ T3783] ? __folio_put+0x114/0x150 [ 36.646255][ T3783] ? free_large_kmalloc+0x8c/0xb0 [ 36.646382][ T3783] ? __slab_free+0x67/0x2b0 [ 36.646445][ T3783] ? __pfx_ip_finish_output2+0x10/0x10 [ 36.646538][ T3783] ip_fragment+0xd2/0x140 [ 36.759614][ T3783] ip_finish_output+0x1c4/0x2a0 [ 36.764506][ T3783] ip_output+0xab/0x170 [ 36.768714][ T3783] ? __pfx_ip_finish_output+0x10/0x10 [ 36.774206][ T3783] ? __pfx_ip_output+0x10/0x10 [ 36.779007][ T3783] ip_local_out+0xab/0xd0 [ 36.783534][ T3783] iptunnel_xmit+0x33f/0x460 [ 36.788174][ T3783] ip_tunnel_xmit+0x1685/0x1740 [ 36.793063][ T3783] ipgre_xmit+0x5f4/0x6d0 [ 36.797524][ T3783] dev_hard_start_xmit+0x119/0x3f0 [ 36.802755][ T3783] __dev_queue_xmit+0xf83/0x1e50 [ 36.807856][ T3783] ? __dev_queue_xmit+0x161/0x1e50 [ 36.813149][ T3783] packet_xmit+0x4b/0x1e0 [ 36.817538][ T3783] packet_sendmsg+0x2ae1/0x3320 [ 36.822432][ T3783] ? selinux_socket_sendmsg+0x182/0x1b0 [ 36.828158][ T3783] ? __pfx_packet_sendmsg+0x10/0x10 [ 36.833469][ T3783] __sock_sendmsg+0x140/0x180 [ 36.838313][ T3783] ____sys_sendmsg+0x312/0x410 [ 36.843186][ T3783] __sys_sendmsg+0x1e9/0x280 [ 36.847853][ T3783] __x64_sys_sendmsg+0x46/0x50 [ 36.849574][ T3793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'. [ 36.852637][ T3783] x64_sys_call+0xb25/0x2d70 [ 36.866171][ T3783] do_syscall_64+0xc9/0x1c0 [ 36.870731][ T3783] ? clear_bhb_loop+0x55/0xb0 [ 36.875523][ T3783] ? clear_bhb_loop+0x55/0xb0 [ 36.880262][ T3783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.886178][ T3783] RIP: 0033:0x7feea4a5bd39 [ 36.890614][ T3783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.910271][ T3783] RSP: 002b:00007feea3cdd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.918699][ T3783] RAX: ffffffffffffffda RBX: 00007feea4be9fa0 RCX: 00007feea4a5bd39 [ 36.926759][ T3783] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 36.934786][ T3783] RBP: 00007feea4adc766 R08: 0000000000000000 R09: 0000000000000000 [ 36.942790][ T3783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.950802][ T3783] R13: 000000000000000b R14: 00007feea4be9fa0 R15: 00007ffd79e25508 [ 36.958803][ T3783] [ 36.961844][ T3783] ---[ end trace 0000000000000000 ]--- [ 36.988707][ T3797] loop2: detected capacity change from 0 to 512 [ 36.999787][ T3797] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.219: casefold flag without casefold feature [ 37.020763][ T3797] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.219: couldn't read orphan inode 15 (err -117) [ 37.039159][ T3797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.052204][ T3797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.285559][ T3814] loop3: detected capacity change from 0 to 164 [ 37.306447][ T3816] loop2: detected capacity change from 0 to 1024 [ 37.318423][ T3816] EXT4-fs (loop2): unable to read superblock [ 37.342293][ T3818] loop1: detected capacity change from 0 to 512 [ 37.350553][ T3818] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (0) [ 37.687363][ T3849] netlink: 116 bytes leftover after parsing attributes in process `syz.4.239'. [ 37.696473][ T3849] netlink: 44 bytes leftover after parsing attributes in process `syz.4.239'. [ 37.711870][ T3849] Invalid architecture in ELF header: 0 [ 37.720661][ T3849] (unnamed net_device) (uninitialized): down delay (65535) is not a multiple of miimon (100), value rounded to 65500 ms [ 37.899374][ T3856] loop0: detected capacity change from 0 to 1024 [ 37.907398][ T3856] EXT4-fs (loop0): unable to read superblock [ 37.975981][ T3864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.244'. [ 38.142531][ T3880] Invalid architecture in ELF header: 0 [ 38.148571][ T3880] (unnamed net_device) (uninitialized): down delay (65535) is not a multiple of miimon (100), value rounded to 65500 ms [ 38.456154][ T3910] Invalid architecture in ELF header: 0 [ 38.462260][ T3910] (unnamed net_device) (uninitialized): down delay (65535) is not a multiple of miimon (100), value rounded to 65500 ms [ 38.901823][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 38.901840][ T29] audit: type=1400 audit(1719258371.167:3900): avc: denied { setattr } for pid=3946 comm="syz.4.280" name="" dev="pipefs" ino=5696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 39.013583][ T29] audit: type=1326 audit(1719258371.277:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea4a5bd39 code=0x7fc00000 [ 39.145346][ T3966] loop1: detected capacity change from 0 to 1024 [ 39.157489][ T3966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.286510][ T35] kernel write not supported for file /snd/seq (pid: 35 comm: kworker/1:1) [ 39.318602][ T3983] block device autoloading is deprecated and will be removed. [ 39.326520][ T3983] syz.4.296: attempt to access beyond end of device [ 39.326520][ T3983] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 39.339480][ T3983] FAT-fs (loop9): unable to read boot sector [ 39.371509][ T29] audit: type=1400 audit(1719258371.577:3902): avc: denied { create } for pid=3982 comm="syz.4.296" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 39.392142][ T29] audit: type=1400 audit(1719258371.577:3903): avc: denied { mounton } for pid=3982 comm="syz.4.296" path="/root/syzkaller.ybSdKa/46/file0" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 39.416828][ T29] audit: type=1400 audit(1719258371.627:3904): avc: denied { write } for pid=3965 comm="syz.1.289" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.439047][ T29] audit: type=1400 audit(1719258371.627:3905): avc: denied { add_name } for pid=3965 comm="syz.1.289" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.460958][ T29] audit: type=1400 audit(1719258371.627:3906): avc: denied { create } for pid=3965 comm="syz.1.289" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.482664][ T29] audit: type=1400 audit(1719258371.627:3907): avc: denied { read append open } for pid=3965 comm="syz.1.289" path="/root/syzkaller.BRNQ2Y/66/file0/file0/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.509827][ T29] audit: type=1400 audit(1719258371.637:3908): avc: denied { unlink } for pid=3094 comm="syz-executor" name="file0" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 39.598884][ T29] audit: type=1400 audit(1719258371.807:3909): avc: denied { map } for pid=3965 comm="syz.1.289" path="/root/syzkaller.BRNQ2Y/66/file0/file0/blkio.bfq.avg_queue_size" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.732071][ T4000] SELinux: security_context_str_to_sid (N:ُB GړbEkc{'\x.p0Txb\< JF) failed with errno=-22 [ 39.817867][ T4016] loop3: detected capacity change from 0 to 1024 [ 39.832076][ T4016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.848412][ T4016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.306: missing EA_INODE flag [ 39.860409][ T4016] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.306: error while reading EA inode 11 err=-117 [ 39.874018][ T4016] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.899705][ T3087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.938800][ T1545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.985507][ T1545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.997683][ T4002] chnl_net:caif_netlink_parms(): no params data found [ 40.005559][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.038860][ T1545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.071535][ T4002] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.078858][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.086335][ T4002] bridge_slave_0: entered allmulticast mode [ 40.092880][ T4002] bridge_slave_0: entered promiscuous mode [ 40.102732][ T1545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.114733][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.122632][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.130497][ T4002] bridge_slave_1: entered allmulticast mode [ 40.137732][ T4002] bridge_slave_1: entered promiscuous mode [ 40.171126][ T4002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.191788][ T4052] syz.3.317: attempt to access beyond end of device [ 40.191788][ T4052] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 40.205068][ T4052] FAT-fs (loop7): unable to read boot sector [ 40.211689][ T4002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.230376][ T1545] bridge_slave_1: left allmulticast mode [ 40.236086][ T1545] bridge_slave_1: left promiscuous mode [ 40.241862][ T1545] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.251078][ T1545] bridge_slave_0: left allmulticast mode [ 40.256773][ T1545] bridge_slave_0: left promiscuous mode [ 40.262516][ T1545] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.370106][ T1545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.380860][ T1545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.391554][ T1545] bond0 (unregistering): Released all slaves [ 40.400584][ T1545] bond1 (unregistering): Released all slaves [ 40.426489][ T4002] team0: Port device team_slave_0 added [ 40.433453][ T4002] team0: Port device team_slave_1 added [ 40.460604][ T4002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.467680][ T4002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.493650][ T4002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.505607][ T4002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.512688][ T4002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.538729][ T4002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.567113][ T1545] hsr_slave_0: left promiscuous mode [ 40.573083][ T1545] hsr_slave_1: left promiscuous mode [ 40.579040][ T1545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.586893][ T1545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.594658][ T1545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.602250][ T1545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.613170][ T1545] veth1_macvtap: left promiscuous mode [ 40.618800][ T1545] veth0_macvtap: left promiscuous mode [ 40.624517][ T1545] veth1_vlan: left promiscuous mode [ 40.629802][ T1545] veth0_vlan: left promiscuous mode [ 40.762210][ T1545] team0 (unregistering): Port device team_slave_1 removed [ 40.773150][ T1545] team0 (unregistering): Port device team_slave_0 removed [ 40.818442][ T4002] hsr_slave_0: entered promiscuous mode [ 40.824814][ T4002] hsr_slave_1: entered promiscuous mode [ 40.830830][ T4002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.839176][ T4002] Cannot create hsr debugfs directory [ 40.988473][ T4110] loop3: detected capacity change from 0 to 128 [ 41.215550][ T4002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.230240][ T4002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.252775][ T4002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.266629][ T4002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.337754][ T4002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.357942][ T4002] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.368114][ T908] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.375406][ T908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.389867][ T908] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.397084][ T908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.475860][ T4002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.631598][ T4002] veth0_vlan: entered promiscuous mode [ 41.644499][ T4002] veth1_vlan: entered promiscuous mode [ 41.664179][ T4002] veth0_macvtap: entered promiscuous mode [ 41.673695][ T4002] veth1_macvtap: entered promiscuous mode [ 41.686372][ T4002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.696949][ T4002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.706899][ T4002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.717444][ T4002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.730353][ T4002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.741983][ T4002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.752502][ T4002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.762511][ T4002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.773020][ T4002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.786806][ T4002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.800088][ T4002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.809031][ T4002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.817874][ T4002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.826714][ T4002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.318919][ T4210] loop1: detected capacity change from 0 to 512 [ 42.329036][ T4210] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 42.436244][ T4218] ebtables: ebtables: counters copy to user failed while replacing table [ 42.450614][ T4218] Cannot find add_set index 0 as target [ 42.504882][ T4232] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 42.569638][ T4234] Invalid ELF header magic: != ELF [ 43.060565][ T4243] netlink: 'syz.2.388': attribute type 12 has an invalid length. [ 43.068425][ T4243] __nla_validate_parse: 6 callbacks suppressed [ 43.068439][ T4243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.388'. [ 43.091848][ T4243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.388'. [ 43.189196][ T4252] ebtables: ebtables: counters copy to user failed while replacing table [ 43.200739][ T4252] Cannot find add_set index 0 as target [ 43.214174][ T4260] loop3: detected capacity change from 0 to 128 [ 43.224242][ T4263] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 43.303071][ T4276] netlink: 'syz.2.403': attribute type 12 has an invalid length. [ 43.311062][ T4276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.403'. [ 43.322002][ T4276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.403'. [ 43.462173][ T4289] ebtables: ebtables: counters copy to user failed while replacing table [ 43.473548][ T4289] Cannot find add_set index 0 as target [ 43.528800][ T4303] netlink: 'syz.2.415': attribute type 12 has an invalid length. [ 43.536625][ T4303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.415'. [ 43.560990][ T4303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.415'. [ 43.607011][ T4307] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.417'. [ 43.663729][ T4317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 43.715618][ T4324] netlink: 'syz.2.426': attribute type 12 has an invalid length. [ 43.723509][ T4324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.426'. [ 43.738550][ T4324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.426'. [ 43.755599][ T4327] syz.4.427 uses obsolete (PF_INET,SOCK_PACKET) [ 43.908990][ T4338] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.163317][ T4359] loop1: detected capacity change from 0 to 512 [ 44.187338][ T4359] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.200480][ T4359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.212252][ T4359] EXT4-fs (loop1): 1 truncate cleaned up [ 44.219194][ T4364] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 44.219902][ T4359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.247771][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 44.247788][ T29] audit: type=1400 audit(1719258376.517:3965): avc: denied { create } for pid=4358 comm="syz.1.440" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.274717][ T29] audit: type=1400 audit(1719258376.537:3966): avc: denied { read write open } for pid=4358 comm="syz.1.440" path="/root/syzkaller.BRNQ2Y/92/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.276452][ T4359] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.440: corrupted in-inode xattr: overlapping e_value [ 44.316983][ T4369] Invalid ELF header magic: != ELF [ 44.322514][ T29] audit: type=1400 audit(1719258376.537:3967): avc: denied { remove_name } for pid=4358 comm="syz.1.440" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.345001][ T29] audit: type=1400 audit(1719258376.537:3968): avc: denied { rename } for pid=4358 comm="syz.1.440" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.366668][ T29] audit: type=1400 audit(1719258376.537:3969): avc: denied { unlink } for pid=4358 comm="syz.1.440" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.393600][ T4359] EXT4-fs (loop1): Remounting filesystem read-only [ 44.400317][ T4359] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1766: inode #15: comm syz.1.440: unable to update i_inline_off [ 44.411984][ T4371] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.435629][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.436429][ T4373] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 44.458531][ T4373] bond3: entered promiscuous mode [ 44.476096][ T4373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 44.486074][ T4373] bond3: (slave bond4): Enslaving as an active interface with a down link [ 44.502263][ T4377] loop1: detected capacity change from 0 to 512 [ 44.510169][ T4373] bond3 (unregistering): (slave bond4): Releasing active interface [ 44.510789][ T4377] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.530412][ T4377] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 44.532292][ T4373] bond3 (unregistering): Released all slaves [ 44.546159][ T4377] EXT4-fs (loop1): Remounting filesystem read-only [ 44.558849][ T4377] EXT4-fs warning (device loop1): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 44.568952][ T4377] EXT4-fs (loop1): 1 orphan inode deleted [ 44.575334][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.587498][ T4377] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 44.594584][ T4377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.704939][ T29] audit: type=1326 audit(1719258376.967:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.2.453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f636c833d39 code=0x0 [ 44.731364][ T4391] loop1: detected capacity change from 0 to 128 [ 44.733191][ T29] audit: type=1400 audit(1719258376.967:3971): avc: denied { write } for pid=4393 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.761700][ T4397] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 44.768369][ T4397] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.776170][ T4397] vhci_hcd vhci_hcd.0: Device attached [ 44.816014][ T4403] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.942479][ T29] audit: type=1400 audit(1719258377.207:3972): avc: denied { execute } for pid=4416 comm="syz.1.462" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.996910][ T29] audit: type=1400 audit(1719258377.257:3973): avc: denied { name_bind } for pid=4419 comm="syz.1.463" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.047388][ T3255] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 45.071250][ T4423] loop1: detected capacity change from 0 to 512 [ 45.079532][ T4423] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.092096][ T4423] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.106885][ T4423] EXT4-fs (loop1): Remounting filesystem read-only [ 45.113689][ T4423] EXT4-fs warning (device loop1): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 45.123809][ T4423] EXT4-fs (loop1): 1 orphan inode deleted [ 45.130347][ T4423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.142534][ T4423] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 45.150052][ T4423] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.233351][ T4426] loop1: detected capacity change from 0 to 256 [ 45.308031][ T4432] loop1: detected capacity change from 0 to 512 [ 45.317050][ T4432] EXT4-fs (loop1): 1 truncate cleaned up [ 45.323593][ T4432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.340742][ T29] audit: type=1400 audit(1719258377.607:3974): avc: denied { mounton } for pid=4431 comm="syz.1.467" path="/root/syzkaller.BRNQ2Y/103/bus/file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.534641][ T4398] vhci_hcd: connection reset by peer [ 45.540306][ T1567] vhci_hcd: stop threads [ 45.544631][ T1567] vhci_hcd: release socket [ 45.549121][ T1567] vhci_hcd: disconnect device [ 46.004386][ T4465] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 46.068614][ T4468] Invalid ELF header magic: != ELF [ 46.149315][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.602297][ T4498] 9p: Unknown Cache mode or invalid value ze: 4 kB [ 46.602297][ T4498] Rss: 0 kB [ 46.602297][ T4498] Pss: 0 kB [ 46.602297][ T4498] Pss_Dirty: 0 kB [ 46.602297][ T4498] Shared_Clean: 0 kB [ 46.602297][ T4498] Shared_Dirty: 0 kB [ 46.602297][ T4498] Private_Clean: 0 kB [ 46.602297][ T4498] Private_Dirty: 0 kB [ 46.602297][ T4498] Referenced: 0 kB [ 46.602297][ T4498] Anonymous: 0 kB [ 46.602297][ T4498] KSM: 0 kB [ 46.602297][ T4498] LazyFree: 0 kB [ 46.602297][ T4498] AnonHugePages: 0 kB [ 46.602297][ T4498] ShmemPmdMapped: 0 kB [ 46.602297][ T4498] FilePmdMapped: 0 kB [ 46.602297][ T4498] Shared_Hugetlb: 0 kB [ 46.602297][ T4498] Private_Hugetlb: 0 kB [ 46.602297][ T4498] Swap: 0 kB [ 46.602297][ T4498] SwapPss: 0 kB [ 46.602297][ T4498] Locked: 0 kB [ 46.602297][ T4498] THPeligible: 0 [ 46.602297][ T4498] VmFlags: mr mw me [ 46.602297][ T4498] 20000000-21000000 rwxp 00000000 00:00 0 [ 46.602297][ T4498] Size: 16384 kB [ 46.602297][ T4498] KernelPageSize: 4 kB [ 46.602297][ T4498] MMUPageSize: 4 kB [ 46.602297][ T4498] Rss: 4 kB [ 46.602297][ T4498] Pss: 4 kB [ 46.602297][ T4498] Pss_Dirty: 4 kB [ 46.602297][ T4498] Shared_Clean: 0 kB [ 46.602297][ T4498] Shared_Dirty: 0 kB [ 46.602297][ T4498] Private_Clean: 0 kB [ 46.602297][ T4498] Private_Dirty: 4 kB [ 46.602297][ T4498] Referenced: 4 kB [ 46.602297][ T4498] Anonymous: 4 kB [ 46.602297][ T4498] KSM: [ 46.736398][ T4510] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 47.161189][ T4539] geneve1: entered promiscuous mode [ 47.167228][ T4539] syz_tun: entered promiscuous mode [ 47.172821][ T4538] syz_tun: left promiscuous mode [ 47.177959][ T4538] geneve1: left promiscuous mode [ 47.202383][ T4541] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 47.416319][ T4548] loop4: detected capacity change from 0 to 1024 [ 47.428747][ T4548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.557689][ T4558] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 47.804497][ T4571] geneve1: entered promiscuous mode [ 47.810605][ T4571] syz_tun: entered promiscuous mode [ 47.816240][ T4570] syz_tun: left promiscuous mode [ 47.821414][ T4570] geneve1: left promiscuous mode [ 48.028648][ T4592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.042420][ T4592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.058869][ T4592] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 48.065518][ T4592] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.073149][ T4592] vhci_hcd vhci_hcd.0: Device attached [ 48.091913][ T4592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.102279][ T4592] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 48.109050][ T4592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.116797][ T4592] vhci_hcd vhci_hcd.0: Device attached [ 48.123790][ T4598] vhci_hcd: connection closed [ 48.124240][ T4594] vhci_hcd: connection closed [ 48.124477][ T1545] vhci_hcd: stop threads [ 48.138310][ T1545] vhci_hcd: release socket [ 48.142903][ T1545] vhci_hcd: disconnect device [ 48.149372][ T1545] vhci_hcd: stop threads [ 48.153717][ T1545] vhci_hcd: release socket [ 48.158201][ T1545] vhci_hcd: disconnect device [ 48.287921][ T4002] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.298730][ T4619] loop1: detected capacity change from 0 to 128 [ 48.340623][ T4619] syz.1.540: attempt to access beyond end of device [ 48.340623][ T4619] loop1: rw=0, sector=97, nr_sectors = 128 limit=128 [ 48.356360][ T4619] syz.1.540: attempt to access beyond end of device [ 48.356360][ T4619] loop1: rw=1, sector=225, nr_sectors = 816 limit=128 [ 48.475374][ T4632] loop4: detected capacity change from 0 to 512 [ 48.490824][ T4632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.503553][ T4632] ext4 filesystem being mounted at /root/syzkaller.xvbatx/28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.545161][ T4632] syz.4.545 (4632) used greatest stack depth: 10040 bytes left [ 48.578261][ T4002] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.835838][ C0] hrtimer: interrupt took 26599 ns [ 48.879626][ T4676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.902725][ T4676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.941446][ T4676] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 48.948154][ T4676] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.955760][ T4676] vhci_hcd vhci_hcd.0: Device attached [ 48.968980][ T4676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 49.000419][ T4676] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 49.007106][ T4676] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.014770][ T4676] vhci_hcd vhci_hcd.0: Device attached [ 49.021571][ T4680] vhci_hcd: connection closed [ 49.021784][ T4678] vhci_hcd: connection closed [ 49.026729][ T36] vhci_hcd: stop threads [ 49.035786][ T36] vhci_hcd: release socket [ 49.040300][ T36] vhci_hcd: disconnect device [ 49.049330][ T36] vhci_hcd: stop threads [ 49.053613][ T36] vhci_hcd: release socket [ 49.058092][ T36] vhci_hcd: disconnect device [ 49.132207][ T4699] loop4: detected capacity change from 0 to 512 [ 49.150194][ T4699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.165720][ T4699] ext4 filesystem being mounted at /root/syzkaller.xvbatx/37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.191302][ T4699] EXT4-fs: test_dummy_encryption option not supported [ 49.229502][ T4002] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.259189][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 49.259206][ T29] audit: type=1400 audit(1719258893.521:4067): avc: denied { create } for pid=4712 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 49.284953][ T29] audit: type=1400 audit(1719258893.521:4068): avc: denied { getopt } for pid=4712 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 49.362027][ T4720] ipvlan0: Caught tx_queue_len zero misconfig [ 49.454095][ T4730] xfrm0: Caught tx_queue_len zero misconfig [ 49.489589][ T4734] loop4: detected capacity change from 0 to 512 [ 49.505350][ T29] audit: type=1401 audit(1719258893.761:4069): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 49.528993][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.543897][ T4734] ext4 filesystem being mounted at /root/syzkaller.xvbatx/39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.548505][ T4730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64794 sclass=netlink_route_socket pid=4730 comm=syz.3.586 [ 49.566180][ T4734] EXT4-fs: test_dummy_encryption option not supported [ 49.570053][ T29] audit: type=1400 audit(1719258893.821:4070): avc: denied { read } for pid=4732 comm="syz.4.588" name="/" dev="configfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.597944][ T29] audit: type=1400 audit(1719258893.821:4071): avc: denied { open } for pid=4732 comm="syz.4.588" path="/sys/kernel/config" dev="configfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.621489][ T29] audit: type=1400 audit(1719258893.821:4072): avc: denied { watch } for pid=4732 comm="syz.4.588" path="/sys/kernel/config" dev="configfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.653977][ T4744] __nla_validate_parse: 7 callbacks suppressed [ 49.653993][ T4744] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.590'. [ 49.669365][ T4744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.590'. [ 49.679393][ T4002] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.709111][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 50.049282][ T4772] loop4: detected capacity change from 0 to 128 [ 50.081148][ T4772] syz.4.602: attempt to access beyond end of device [ 50.081148][ T4772] loop4: rw=0, sector=97, nr_sectors = 128 limit=128 [ 50.097320][ T4772] syz.4.602: attempt to access beyond end of device [ 50.097320][ T4772] loop4: rw=1, sector=225, nr_sectors = 816 limit=128 [ 50.133403][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 50.200600][ T4787] loop4: detected capacity change from 0 to 1024 [ 50.207008][ T3255] vhci_hcd: vhci_device speed not set [ 50.211200][ T4787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.254981][ T4793] program syz.3.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.905347][ T4824] O3c: renamed from bridge_slave_0 (while UP) [ 50.998859][ T4831] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.026879][ T4835] loop1: detected capacity change from 0 to 512 [ 51.043024][ T4835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.055773][ T4835] ext4 filesystem being mounted at /root/syzkaller.BRNQ2Y/142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.083562][ T4002] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.086298][ T4835] tipc: Started in network mode [ 51.097498][ T4835] tipc: Node identity 1, cluster identity 4711 [ 51.103662][ T4835] tipc: Node number set to 1 [ 51.108407][ T4835] tipc: Cannot configure node identity twice [ 51.212503][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.256320][ T4857] xfrm0: Caught tx_queue_len zero misconfig [ 51.275793][ T4862] program syz.4.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.326367][ T4857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64794 sclass=netlink_route_socket pid=4857 comm=syz.2.634 [ 51.427524][ T4873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4873 comm=syz.2.639 [ 51.495245][ T4879] bond0: entered promiscuous mode [ 51.499781][ T4881] loop1: detected capacity change from 0 to 512 [ 51.500381][ T4879] bond_slave_0: entered promiscuous mode [ 51.512442][ T4879] bond_slave_1: entered promiscuous mode [ 51.535362][ T4881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.557847][ T4890] program syz.2.646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.561851][ T4881] ext4 filesystem being mounted at /root/syzkaller.BRNQ2Y/145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.625804][ T29] audit: type=1400 audit(1719258895.881:4073): avc: denied { unmount } for pid=4002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 51.660751][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 51.672260][ T29] audit: type=1400 audit(1719258895.941:4074): avc: denied { create } for pid=4897 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.705386][ T29] audit: type=1400 audit(1719258895.941:4075): avc: denied { bind } for pid=4897 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.727554][ T4886] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 18: invalid block bitmap [ 51.732771][ T29] audit: type=1400 audit(1719258895.991:4076): avc: denied { map } for pid=4902 comm="syz.2.653" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.787663][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.804727][ T4910] program syz.3.657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.816592][ T4912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4912 comm=syz.2.656 [ 51.883226][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 52.005368][ T4942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4942 comm=syz.4.670 [ 52.008177][ T4934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.033377][ T4934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.049429][ T4934] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 52.056209][ T4934] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.063862][ T4934] vhci_hcd vhci_hcd.0: Device attached [ 52.072539][ T4934] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.073325][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 52.081750][ T4934] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 52.097984][ T4934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.105668][ T4934] vhci_hcd vhci_hcd.0: Device attached [ 52.117441][ T4952] vhci_hcd: connection closed [ 52.117642][ T1567] vhci_hcd: stop threads [ 52.126724][ T1567] vhci_hcd: release socket [ 52.131355][ T1567] vhci_hcd: disconnect device [ 52.144136][ T4947] vhci_hcd: connection closed [ 52.144254][ T1567] vhci_hcd: stop threads [ 52.153356][ T1567] vhci_hcd: release socket [ 52.157818][ T1567] vhci_hcd: disconnect device [ 52.395891][ T4978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4978 comm=syz.4.683 [ 52.521075][ T4989] netlink: 'syz.4.688': attribute type 4 has an invalid length. [ 52.539785][ T4989] x_tables: duplicate underflow at hook 2 [ 52.600108][ T4995] loop4: detected capacity change from 0 to 256 [ 52.705110][ T4999] tipc: Started in network mode [ 52.710107][ T4999] tipc: Node identity 1, cluster identity 4711 [ 52.716344][ T4999] tipc: Node number set to 1 [ 52.721375][ T4999] tipc: Cannot configure node identity twice [ 53.290215][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 53.473233][ T11] bridge_slave_1: left allmulticast mode [ 53.479148][ T11] bridge_slave_1: left promiscuous mode [ 53.484866][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.512909][ T11] bridge_slave_0: left allmulticast mode [ 53.518612][ T11] bridge_slave_0: left promiscuous mode [ 53.524501][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.602646][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.612963][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.627844][ T11] bond0 (unregistering): Released all slaves [ 53.642291][ T11] bond1 (unregistering): Released all slaves [ 53.695578][ T11] tipc: Left network mode [ 53.716351][ T5069] chnl_net:caif_netlink_parms(): no params data found [ 53.741602][ T11] hsr_slave_0: left promiscuous mode [ 53.754565][ T11] hsr_slave_1: left promiscuous mode [ 53.763327][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.786161][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.907292][ T11] team0 (unregistering): Port device team_slave_1 removed [ 53.923075][ T11] team0 (unregistering): Port device team_slave_0 removed [ 54.056031][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.063278][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.100486][ T5069] bridge_slave_0: entered allmulticast mode [ 54.130805][ T5069] bridge_slave_0: entered promiscuous mode [ 54.165098][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.172373][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.225400][ T5133] capability: warning: `syz.1.746' uses 32-bit capabilities (legacy support in use) [ 54.235774][ T5069] bridge_slave_1: entered allmulticast mode [ 54.243191][ T5069] bridge_slave_1: entered promiscuous mode [ 54.249501][ T5133] program syz.1.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.284386][ T5069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.297272][ T5110] ================================================================== [ 54.305420][ T5110] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 54.308107][ T5069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.315249][ T5110] [ 54.315255][ T5110] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 0: [ 54.334787][ T5110] tick_do_update_jiffies64+0x112/0x1b0 [ 54.340369][ T5110] tick_nohz_handler+0x7c/0x2d0 [ 54.345247][ T5110] __hrtimer_run_queues+0x20d/0x5e0 [ 54.350489][ T5110] hrtimer_interrupt+0x210/0x7b0 [ 54.355453][ T5110] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 54.361370][ T5110] sysvec_apic_timer_interrupt+0x32/0x80 [ 54.364989][ T29] kauditd_printk_skb: 79 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 54.365044][ T29] audit: type=1400 audit(1719258898.619:4156): avc: denied { write } for pid=3074 comm="syz-executor" path="pipe:[5