last executing test programs: 2.643144427s ago: executing program 1 (id=365): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r1, 0x0) 2.523482557s ago: executing program 1 (id=368): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000040)={0x2, 0x1, 0x5, 0xe2, 0x4, 0x2380}) 2.243461258s ago: executing program 0 (id=371): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x5, 0x0, 0x747, 0x0, &(0x7f0000000600)="9807fd801528921165f7530216f71ddee24565f9f41836ded33816b41f5aead809bd74a5cf2c4364fd312d040de9908c7cf01436032ed1fb3fe063659ddb07e89017b736bad0be13f49de159b566ab7132e4a2b418ef97e453108b7fd958174e767f1b1afd7ae77435624ccdee25f37b891554b8e0f2351713d99e0e4b71250b05ad78a4eb0eef661644c109c664309f4dab5d01a593074f0165b28649d3b1b0bdc90d658d8807af27deca0b8dc772ea9997de99d204b6ff015222433f7b3484237c280acc0c2732e3808fb4cd1991319e1cea367e90bf2b2f94c81a18471b8816e601bbfd12855e5d432917871c69015201ab316371ef8b9f5a7cdefb09cf4c782a0e3c307ce6e51409af2f0c510dd4d3dc736c5258febecc56ac2a191021024dc95f798149855f0c8167318b4351c18327de711c9fdd14fa441d780a6cfe01f577a3da9b388bafceaee07a6f4dc25e4123bb7d51d92b8bcb9ff6125ae0c19e4cc1a53870cd2305d5b3769f49f336da69558bc9752515377c5def950cc72bcba328bfa1e2f5aa9b810b2d41a7fe52e73bd9c2d7366e7acc3d57ec81f49da6a9178866a8290859eaaef6d531653d31204a38c14f1a4eab2eeec2cbfb2bfa25b3dabcadb531ee7bafa675da7539180f287be970aeee7ced035ad87530b120e9d096addbc98b41c456411c1a0abbb1bf41f8986f325435e52af5345f21c69cf5ec2deaf40110d4cbd1d492397089a44512b00e69437d31d90cabc2debb9d5d146bf365d6ced55f1b6ecb0ab07176c6f826a1d2444ac15299c5a00341dc112ee5ab89a7ae2fb0a76bef340231bb633e0989d687f7e9bf40bb71a830df07b6439f5a663ea4d1a6e4eb90831fa10d0a77bea3e4b2bb9950a7abf73dec6895f933cc3f98defb5bf6b9891268a962fd7e9c54a7bcb85ec3cfb3f0e97ce470ca1caee7e3fef3107ca8f4816f691fb1a1e79f0ed88eb93d7e97c0edacfa3975ae8a7c8ba79f6552bec902c2e1903b8fba211e76aec92e748ea767068f88458326e65f2315d6f48e5bbcdee303481be23c95e1c0367cf4af805d9390c5bbf4a364dd6c627d0a06fefdbb5ce50c09bf3fede938868f830c83c705c6d4cd24f6d678ebbd29698fd818354fa564bd8c3b76abd42f8eb387de9b555f948a4b039324c9b9914e0e0ca28d425c47b1f609ca1ac9f97b3038ad35d912a0a0320a49b0e12dc5338b82b3e4c32765a625d07a585fec59c3187337daaaf629a5a2b8e63049ba1e2b7a0c6d432b3ce3d606b879a51df4d94bf54f67764f17fad4cd845785216c697d9d491e6093fafc5b63bf985c5fe018de0d2906ba706156d3804d0e60320b82a93d5b9933f1ad4bbbc6c26070d8bfa2c056f5fd2b2fc8e4de393f3e80d19c814cea1ad789d056835202879ab6862b2439465fee98ccc4c937aa205a349cd6d93b8bd7bfe39dd889b67d3ebc912508a10f8dadb5cc55184b668ad4cfd5bb6be80eec614b31c1b5b581757a42fe6c0f91fbe6a553ff8707b23ca8be95026c28cbbd00256163a7279723eacc671e9ee07b79d347a67cd5e2784272a62a68ece065ef675e22a136e9e76c71079d83216ad10b453b901d2841593eb2d1925813fd496e2e0bd80ea87f5545146dc297a1c08116521cdeb28dec8e7c9ba7bcbb822f22bff67ff615a500bf66c30287894185ab730774d0154a533ab8cc0bf078641523b8397367aa8c17454263036caf6d3c83404d220d55cd4255f7b203aec806d2f36e00efd3f88726816ef1a2e9a17d5038d6f3a6d3354da00a743c7f6c0b81a3d90c1c4552ff1574b94ba613400bd58376e8141a90fc613499766378783240b0852db62c13088b1f1a0e481b105f8fdc895ebcb690c0bf681cbc11fec0c624536eb510bd99e15b43e59540f0d9773e010a8bf47d1a10e304ba27e9a6c00b827b4dddf6dd4da579903e5e4f7b666a56d519ec7eeb6aa6693cb0bb3996fe73fc0d28fb74d514a95277e6bdfb3f0c0804e72dd821b6ea74630714e0901701e7615b51cf245ebf6cf5ea334072a472d6847baa52f7a3b4d02846a0f2700db268b707b937f6bb58943db0f9608847635065bed93b2b714d12a1b5bce8fa4a34b56a8b68fe4dba653991b0185bb02ca9ccbce01ee8bd6765231082fa4ff349270b0de6ced61f1207663049fb6e33d4dbcbeb9981e63623ffc3616c473998b5747317572cb443ae4e82aaadef5f38c3e851f1e271dc22b45843d06ffd544e879be1fb112974789340601743ba1e43acb446f1498db515ff5665a6247b8fb69a25764e173d9562b360b7e96dbb3866a538e613248bda8aacaaa3bdc5f7c9331e5021d53ee3064dc91c2b5b1ebd26367b956b828d080fa0c7d49bb005b48f7c91417830cfa52dfe8219919cfa2bffadf8369fc8dcd42516cbdb954f6d2da5e69d0d5eb7ea6a12b01a45eaba0fb212fa0d91d4d38812fe7386d880d696efab311aa0774dae2d0747047ff692f6fbd055bde2d675eba2ba1b2c6cf325202db3036ce72bfbdf9f1467b47d0b23cfe8be517ad26990b95ad54aef2851b96a01c87a234d40e10f51bb5a9dce8bdba7aeab3d0465e1af9b9879d651031cc5ffa4a263e78bef24e45071cbf6addf6952ddeff6", 0x0, 0x5, 0x0, 0xdfb}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x12, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) 2.243326218s ago: executing program 0 (id=372): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8000, 0x8, "00009f62ce0a00002000"}) r1 = syz_open_pts(r0, 0xc0041) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xf223, 0x6, 0x6, 0x5, 0x11, "b034c006aec0b8ee504891997b14a2367c3cc4"}) 2.169650736s ago: executing program 0 (id=373): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x1, 0xfffffffa}, 0x28) 2.152481272s ago: executing program 0 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0xc) lseek(0xffffffffffffffff, 0x38, 0x0) 1.923528273s ago: executing program 1 (id=375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 1.795543481s ago: executing program 3 (id=377): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0xa, 0x4e1e, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000290000003700000033cf"], 0x18}, 0x40) 1.515496582s ago: executing program 3 (id=380): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) 1.006508254s ago: executing program 0 (id=381): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x8}], 0x1, 0x102, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 981.3224ms ago: executing program 1 (id=382): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000e00)={0x0, 0x31, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c40)={0x34, &(0x7f00000008c0)={0x0, 0x11, 0x3, "28679e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000800)={0x40, 0xe, 0x44, {0x44, 0x3, "c609f729c1086394d12b65c8177addbe682bb103b1702d6bffcd06518a6064ca48dcf1d52f86ad3dfa18f4cceb73ee75c7cd52dfe80b6ef1772e1891aab73d100618"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000b40)={0x44, &(0x7f00000005c0)={0x20, 0x13, 0xf, "d16d1820a7c606f7cfaee63464ceef"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}, 0x0, &(0x7f00000009c0)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000a00)={0x20, 0x83, 0x3, "fab5d7"}, &(0x7f0000000ac0)={0x20, 0x84, 0x2, "fda2"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "8117e0"}}) 898.832735ms ago: executing program 3 (id=383): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) poll(0x0, 0x0, 0x20000080) 739.171138ms ago: executing program 2 (id=387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "09df168a00400000"}]}}}}}}}, 0x0) 686.624298ms ago: executing program 2 (id=390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7495, 0x0, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000) 556.487456ms ago: executing program 2 (id=394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) 496.762326ms ago: executing program 2 (id=396): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) socket(0x2b, 0x80801, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x2b, @multicast2, 0x4e20, 0x4, 'nq\x00', 0x32, 0x45, 0x5b}, {@loopback, 0x4e22, 0x1, 0xda2d, 0x80e}}, 0x44) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 496.200796ms ago: executing program 0 (id=398): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x88) creat(&(0x7f0000000000)='./file0\x00', 0x20e07a3bceb9fd48) 471.111062ms ago: executing program 2 (id=399): socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 301.573762ms ago: executing program 1 (id=405): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000500)="88a9131cf90d056c26f9fbb61532bc6dbee9e4688070d97f50f7d9a557f67083867c1dd810c17b510db0c6f5b5fbe4847f462a360060ac10cb674c18f7992a2b194205b505face76fa1d5efaeb182e3a51eb551626185e1546e26810155fdb825f5ff6ab936e5607499c2191ff3ed92cc1398ad4e52345cf159b3016c58835f2f8d8249c1e0c2f228a0a30e649a90eaefcc10616f99b31365d", 0x99) 275.489248ms ago: executing program 1 (id=406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x22, 0x2, 0x24) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000340)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 194.428584ms ago: executing program 2 (id=410): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 141.344664ms ago: executing program 4 (id=412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "09df168a00400000"}]}}}}}}}, 0x0) 140.940624ms ago: executing program 4 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000a40)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) 114.55456ms ago: executing program 4 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 60.26167ms ago: executing program 4 (id=415): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) 60.05769ms ago: executing program 3 (id=416): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) sendto$packet(r0, &(0x7f0000000180)="e8b77052a9f6d4be", 0x8, 0x40, &(0x7f0000000100)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 59.841801ms ago: executing program 4 (id=417): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000005380)=[{{&(0x7f0000000180)=@can={0x1d, r1, 0x15}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="a4371c2aeb47c781f250344b8c994fe14dc7f486b230436a5d974ec09beafb151e3bfad4aaecb40bfd564e7bb1bfaa87d7", 0x31}, {0x0}], 0x2}}], 0x1, 0x20008040) 252.46µs ago: executing program 3 (id=418): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004064}, 0x40046) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) 126.83µs ago: executing program 3 (id=419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x34}}, 0x0) 0s ago: executing program 4 (id=420): close(0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000280)={0x0, 0xb, 0x3, 0x8, 0x9, 0x2}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x658}, 0x1, 0x0, 0x0, 0x4801}, 0x4040005) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 32.589785][ T28] audit: type=1400 audit(1772772212.734:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.612839][ T28] audit: type=1400 audit(1772772212.754:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.614842][ T3302] cgroup: Unknown subsys name 'net' [ 32.640654][ T28] audit: type=1400 audit(1772772212.784:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.774680][ T3302] cgroup: Unknown subsys name 'cpuset' [ 32.780879][ T3302] cgroup: Unknown subsys name 'rlimit' [ 32.891877][ T28] audit: type=1400 audit(1772772213.034:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.927518][ T28] audit: type=1400 audit(1772772213.044:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.948053][ T28] audit: type=1400 audit(1772772213.044:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.968495][ T28] audit: type=1400 audit(1772772213.044:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.987192][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.988980][ T28] audit: type=1400 audit(1772772213.044:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.022384][ T28] audit: type=1400 audit(1772772213.054:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.045839][ T28] audit: type=1400 audit(1772772213.064:71): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.074931][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.233010][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 34.254827][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 34.331067][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 34.368635][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 34.387397][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.394527][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.401646][ T3314] bridge_slave_0: entered allmulticast mode [ 34.408367][ T3314] bridge_slave_0: entered promiscuous mode [ 34.423706][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 34.444378][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.451552][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.458703][ T3314] bridge_slave_1: entered allmulticast mode [ 34.465174][ T3314] bridge_slave_1: entered promiscuous mode [ 34.478725][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.485785][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.492913][ T3320] bridge_slave_0: entered allmulticast mode [ 34.499357][ T3320] bridge_slave_0: entered promiscuous mode [ 34.510060][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.517201][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.524350][ T3320] bridge_slave_1: entered allmulticast mode [ 34.530803][ T3320] bridge_slave_1: entered promiscuous mode [ 34.551172][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.558304][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.565566][ T3322] bridge_slave_0: entered allmulticast mode [ 34.571980][ T3322] bridge_slave_0: entered promiscuous mode [ 34.593515][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.609435][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.616618][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.623734][ T3322] bridge_slave_1: entered allmulticast mode [ 34.630440][ T3322] bridge_slave_1: entered promiscuous mode [ 34.647599][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.668588][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.683482][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.695308][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.702464][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.709656][ T3316] bridge_slave_0: entered allmulticast mode [ 34.716000][ T3316] bridge_slave_0: entered promiscuous mode [ 34.723742][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.742593][ T3314] team0: Port device team_slave_0 added [ 34.755773][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.762835][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.770058][ T3316] bridge_slave_1: entered allmulticast mode [ 34.776541][ T3316] bridge_slave_1: entered promiscuous mode [ 34.783650][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.798041][ T3314] team0: Port device team_slave_1 added [ 34.804373][ T3320] team0: Port device team_slave_0 added [ 34.837274][ T3320] team0: Port device team_slave_1 added [ 34.843961][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.853274][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.860473][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.867723][ T3318] bridge_slave_0: entered allmulticast mode [ 34.874250][ T3318] bridge_slave_0: entered promiscuous mode [ 34.880887][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.888014][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.914052][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.935338][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.948997][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.956324][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.963527][ T3318] bridge_slave_1: entered allmulticast mode [ 34.970192][ T3318] bridge_slave_1: entered promiscuous mode [ 34.977705][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.984702][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.010724][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.022302][ T3322] team0: Port device team_slave_0 added [ 35.028933][ T3322] team0: Port device team_slave_1 added [ 35.058815][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.065786][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.091996][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.103565][ T3316] team0: Port device team_slave_0 added [ 35.114091][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.121154][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.147167][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.158939][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.166020][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.192087][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.203744][ T3316] team0: Port device team_slave_1 added [ 35.210734][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.220216][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.227338][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.253400][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.272543][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.300629][ T3314] hsr_slave_0: entered promiscuous mode [ 35.306765][ T3314] hsr_slave_1: entered promiscuous mode [ 35.321464][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.328498][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.354445][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.371729][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.378920][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.404952][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.436235][ T3320] hsr_slave_0: entered promiscuous mode [ 35.442373][ T3320] hsr_slave_1: entered promiscuous mode [ 35.448237][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 35.454007][ T3320] Cannot create hsr debugfs directory [ 35.460179][ T3318] team0: Port device team_slave_0 added [ 35.487141][ T3318] team0: Port device team_slave_1 added [ 35.495284][ T3322] hsr_slave_0: entered promiscuous mode [ 35.501264][ T3322] hsr_slave_1: entered promiscuous mode [ 35.507299][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 35.513148][ T3322] Cannot create hsr debugfs directory [ 35.541533][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.548572][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.574588][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.589929][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.596920][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.622969][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.650643][ T3316] hsr_slave_0: entered promiscuous mode [ 35.656710][ T3316] hsr_slave_1: entered promiscuous mode [ 35.662634][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 35.668461][ T3316] Cannot create hsr debugfs directory [ 35.708478][ T3318] hsr_slave_0: entered promiscuous mode [ 35.714638][ T3318] hsr_slave_1: entered promiscuous mode [ 35.720454][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 35.726220][ T3318] Cannot create hsr debugfs directory [ 35.878299][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.887049][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.895939][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.904510][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.933433][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.942827][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.955530][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.967610][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.995164][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.007450][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.019827][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.032216][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.050220][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.066928][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.075587][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.084447][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.106905][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.116749][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.141489][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.148568][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.169565][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.176709][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.185714][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.194565][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.215489][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.226179][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.235175][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.248480][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.262810][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.275689][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.292763][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.299916][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.308909][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.316034][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.332364][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.339455][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.350656][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.371143][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.378236][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.462020][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.472843][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.494862][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.514667][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.526745][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.533900][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.553759][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.574877][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.581967][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.590756][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.597976][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.614344][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.630873][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.641496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.648596][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.687307][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.700136][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.730118][ T3314] veth0_vlan: entered promiscuous mode [ 36.748050][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.759019][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.771521][ T3314] veth1_vlan: entered promiscuous mode [ 36.837916][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.851868][ T3314] veth0_macvtap: entered promiscuous mode [ 36.865567][ T3314] veth1_macvtap: entered promiscuous mode [ 36.887256][ T3320] veth0_vlan: entered promiscuous mode [ 36.902374][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.913790][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.923628][ T3320] veth1_vlan: entered promiscuous mode [ 36.940065][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.963959][ T3322] veth0_vlan: entered promiscuous mode [ 36.975044][ T3322] veth1_vlan: entered promiscuous mode [ 36.986950][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.996311][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.015131][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.029082][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.046733][ T3320] veth0_macvtap: entered promiscuous mode [ 37.060398][ T3322] veth0_macvtap: entered promiscuous mode [ 37.093528][ T3320] veth1_macvtap: entered promiscuous mode [ 37.101942][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.108445][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.131783][ T3322] veth1_macvtap: entered promiscuous mode [ 37.148745][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.167562][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.177370][ T3316] veth0_vlan: entered promiscuous mode [ 37.185550][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.202755][ T3316] veth1_vlan: entered promiscuous mode [ 37.209305][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.224752][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.233754][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.242698][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.257605][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.284770][ T3484] loop0: detected capacity change from 0 to 1024 [ 37.290248][ T3318] veth0_vlan: entered promiscuous mode [ 37.302577][ T3484] ======================================================= [ 37.302577][ T3484] WARNING: The mand mount option has been deprecated and [ 37.302577][ T3484] and is ignored by this kernel. Remove the mand [ 37.302577][ T3484] option from the mount to silence this warning. [ 37.302577][ T3484] ======================================================= [ 37.340375][ T3484] EXT4-fs: inline encryption not supported [ 37.346705][ T3484] EXT4-fs: Ignoring removed nobh option [ 37.352405][ T3484] EXT4-fs: Ignoring removed nobh option [ 37.360479][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.369528][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.379240][ T3316] veth0_macvtap: entered promiscuous mode [ 37.385755][ T3484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.397783][ T3318] veth1_vlan: entered promiscuous mode [ 37.414039][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.431209][ T3318] veth0_macvtap: entered promiscuous mode [ 37.458630][ T3316] veth1_macvtap: entered promiscuous mode [ 37.458650][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.474136][ T3318] veth1_macvtap: entered promiscuous mode [ 37.505663][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.521567][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.537572][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.548615][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.572305][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.599008][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.631351][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.647014][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 37.647028][ T28] audit: type=1400 audit(1772772217.784:117): avc: denied { create } for pid=3503 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.648140][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.674083][ T28] audit: type=1400 audit(1772772217.794:118): avc: denied { accept } for pid=3503 comm="syz.0.10" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.706492][ T3505] loop4: detected capacity change from 0 to 164 [ 37.716034][ T28] audit: type=1400 audit(1772772217.794:119): avc: denied { create } for pid=3503 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.746986][ T3505] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 37.753769][ T28] audit: type=1400 audit(1772772217.844:120): avc: denied { write } for pid=3503 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.762643][ T3505] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 37.778169][ T28] audit: type=1400 audit(1772772217.864:121): avc: denied { write } for pid=3503 comm="syz.0.10" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.806123][ T28] audit: type=1400 audit(1772772217.864:122): avc: denied { open } for pid=3503 comm="syz.0.10" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.829660][ T28] audit: type=1400 audit(1772772217.864:123): avc: denied { ioctl } for pid=3503 comm="syz.0.10" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.854760][ T28] audit: type=1400 audit(1772772217.884:124): avc: denied { mount } for pid=3501 comm="syz.4.9" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 37.858069][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.885538][ T28] audit: type=1400 audit(1772772217.904:125): avc: denied { create } for pid=3501 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.885655][ T28] audit: type=1400 audit(1772772217.904:126): avc: denied { write } for pid=3501 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.925881][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.956106][ T3513] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.976234][ C0] hrtimer: interrupt took 37767 ns [ 37.987051][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.996216][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.047715][ T3516] loop1: detected capacity change from 0 to 512 [ 38.076152][ T3516] SELinux: security_context_str_to_sid () failed with errno=-22 [ 38.188951][ T3513] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.216589][ T3513] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 38.239648][ T3524] loop2: detected capacity change from 0 to 1024 [ 38.247634][ T3524] EXT4-fs: inline encryption not supported [ 38.253590][ T3524] EXT4-fs: Ignoring removed nobh option [ 38.259753][ T3523] syzkaller0: entered promiscuous mode [ 38.265770][ T3523] syzkaller0: entered allmulticast mode [ 38.271630][ T3524] EXT4-fs: Ignoring removed nobh option [ 38.300012][ T3524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.331191][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.368618][ T3530] loop2: detected capacity change from 0 to 256 [ 38.469570][ T3513] syz.4.12 (3513) used greatest stack depth: 9864 bytes left [ 38.520091][ T3540] loop0: detected capacity change from 0 to 512 [ 38.551024][ T3540] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.569322][ T3539] loop4: detected capacity change from 0 to 2048 [ 38.577158][ T3540] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.583571][ T3540] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 38.595151][ T3540] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.18: attempt to clear invalid blocks 2 len 1 [ 38.608274][ T3539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.651177][ T3539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.661169][ T3540] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.661593][ T3540] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, [ 38.670771][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 38.670787][ C1] EXT4-fs (loop0): initial error at time 1772772218: ext4_clear_blocks:876: inode 13 [ 38.670820][ C1] EXT4-fs (loop0): last error at time 1772772218: ext4_clear_blocks:876: inode 13 [ 38.704591][ T3540] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 38.715723][ T3540] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.18: invalid indirect mapped block 1819239214 (level 0) [ 38.729605][ T3540] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.729742][ T3540] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.18: invalid indirect mapped block 1819239214 (level 1) [ 38.753065][ T3540] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.755350][ T3540] EXT4-fs (loop0): 1 truncate cleaned up [ 38.793821][ T3540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.822288][ T3540] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 38.911809][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.078820][ T3575] Zero length message leads to an empty skb [ 39.089342][ T3576] FAULT_INJECTION: forcing a failure. [ 39.089342][ T3576] name failslab, interval 1, probability 0, space 0, times 1 [ 39.102392][ T3576] CPU: 1 UID: 0 PID: 3576 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) [ 39.102417][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.102436][ T3576] Call Trace: [ 39.102444][ T3576] [ 39.102452][ T3576] __dump_stack+0x1d/0x30 [ 39.102546][ T3576] dump_stack_lvl+0x95/0xd0 [ 39.102576][ T3576] dump_stack+0x15/0x1b [ 39.102603][ T3576] should_fail_ex+0x263/0x280 [ 39.102626][ T3576] should_failslab+0x8c/0xb0 [ 39.102676][ T3576] kmem_cache_alloc_noprof+0x66/0x400 [ 39.102705][ T3576] ? io_submit_one+0xcf/0x1350 [ 39.102815][ T3576] io_submit_one+0xcf/0x1350 [ 39.102848][ T3576] __se_sys_io_submit+0xfb/0x280 [ 39.102942][ T3576] __x64_sys_io_submit+0x43/0x50 [ 39.103006][ T3576] x64_sys_call+0x19d5/0x3020 [ 39.103075][ T3576] do_syscall_64+0x12c/0x370 [ 39.103102][ T3576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.103129][ T3576] RIP: 0033:0x7faea320c799 [ 39.103152][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.103169][ T3576] RSP: 002b:00007faea1bef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 39.103242][ T3576] RAX: ffffffffffffffda RBX: 00007faea3486090 RCX: 00007faea320c799 [ 39.103272][ T3576] RDX: 00002000000009c0 RSI: 0000000000000001 RDI: 00007faea1bf0000 [ 39.103288][ T3576] RBP: 00007faea1bef090 R08: 0000000000000000 R09: 0000000000000000 [ 39.103303][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.103318][ T3576] R13: 00007faea3486128 R14: 00007faea3486090 R15: 00007ffdb8c93428 [ 39.103341][ T3576] [ 39.275564][ T3550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.22'. [ 39.288113][ T3549] pimreg: entered allmulticast mode [ 39.328257][ T3547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 39.451227][ T3595] loop0: detected capacity change from 0 to 512 [ 39.467473][ T3595] EXT4-fs: Ignoring removed orlov option [ 39.474422][ T3595] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.487558][ T3605] loop4: detected capacity change from 0 to 1024 [ 39.494327][ T3605] EXT4-fs: inline encryption not supported [ 39.500197][ T3605] EXT4-fs: Ignoring removed nobh option [ 39.514101][ T3605] EXT4-fs: Ignoring removed nobh option [ 39.531088][ T3605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.574864][ T3595] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.27: corrupted in-inode xattr: e_value size too large [ 39.600056][ T3595] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.601846][ T3595] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.27: couldn't read orphan inode 15 (err -117) [ 39.611220][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 39.611439][ C1] EXT4-fs (loop0): initial error at time 1772772219: ext4_iget_extra_inode:5025: inode 15 [ 39.611609][ C1] EXT4-fs (loop0): last error at time 1772772219: ext4_iget_extra_inode:5025: inode 15 [ 39.653639][ T3623] netlink: 64 bytes leftover after parsing attributes in process `syz.1.29'. [ 39.662973][ T3623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 39.679850][ T3623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 39.684389][ T3595] loop0: lost filesystem error report for type 5 error -117 [ 39.688827][ T3623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 39.726680][ T3623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 39.728391][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.742654][ T3623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 39.761399][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.807331][ T3623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 39.860424][ T3623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'. [ 39.872982][ T3640] xt_TCPMSS: Only works on TCP SYN packets [ 39.951468][ T3674] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 12: comm syz.0.27: lblock 3 mapped to illegal pblock 12 (length 1) [ 40.229800][ T3691] netlink: 'syz.4.35': attribute type 21 has an invalid length. [ 40.690810][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.727637][ T3705] 9p: Bad value for 'rfdno' [ 40.735149][ T3705] loop3: detected capacity change from 0 to 512 [ 40.747097][ T3705] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.782080][ T3705] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 40.841588][ T3708] 9p: Bad value for 'rfdno' [ 40.884710][ T3708] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.903716][ T3708] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 41.032877][ T3714] EXT4-fs: inline encryption not supported [ 41.038953][ T3714] EXT4-fs: Ignoring removed nobh option [ 41.046104][ T3714] EXT4-fs: Ignoring removed nobh option [ 41.063207][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.152237][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.245196][ T3728] syz.2.44 (3728): /proc/3727/oom_adj is deprecated, please use /proc/3727/oom_score_adj instead. [ 41.260916][ T3724] FAT-fs (loop4): Directory bread(block 64) failed [ 41.273326][ T3705] Alternate GPT is invalid, using primary GPT. [ 41.280730][ T3724] FAT-fs (loop4): Directory bread(block 65) failed [ 41.289869][ T3705] loop3: p2 p3 p7 [ 41.294301][ T3724] FAT-fs (loop4): Directory bread(block 66) failed [ 41.300833][ T3724] FAT-fs (loop4): Directory bread(block 67) failed [ 41.321446][ T3724] FAT-fs (loop4): Directory bread(block 68) failed [ 41.344124][ T3724] FAT-fs (loop4): Directory bread(block 69) failed [ 41.351045][ T3724] FAT-fs (loop4): Directory bread(block 70) failed [ 41.363561][ T3001] Alternate GPT is invalid, using primary GPT. [ 41.369965][ T3001] loop3: p2 p3 p7 [ 41.377397][ T3724] FAT-fs (loop4): Directory bread(block 71) failed [ 41.394584][ T3708] Alternate GPT is invalid, using primary GPT. [ 41.401821][ T3724] FAT-fs (loop4): Directory bread(block 72) failed [ 41.409443][ T3724] FAT-fs (loop4): Directory bread(block 73) failed [ 41.435230][ T3708] loop1: p2 p3 p7 [ 41.601016][ T3001] Alternate GPT is invalid, using primary GPT. [ 41.620907][ T3001] loop1: p2 p3 p7 [ 41.705146][ T3738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.760934][ T3738] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.793798][ T3747] 9p: Bad value for 'rfdno' [ 41.840446][ T3730] pim6reg: entered allmulticast mode [ 41.847267][ T3733] pim6reg: left allmulticast mode [ 41.916143][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.084776][ T3760] EXT4-fs: inline encryption not supported [ 42.090804][ T3760] EXT4-fs: Ignoring removed nobh option [ 42.104165][ T3760] EXT4-fs: Ignoring removed nobh option [ 42.148766][ T3760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.232570][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.559621][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 43.559639][ T28] audit: type=1400 audit(1772772223.694:204): avc: denied { mounton } for pid=3898 comm="syz.4.60" path="/14/file0" dev="cgroup" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 43.684092][ T28] audit: type=1400 audit(1772772223.774:205): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.740375][ T3753] x_tables: duplicate entry at hook 1 [ 43.764191][ T28] audit: type=1400 audit(1772772223.834:206): avc: denied { map } for pid=3904 comm="syz.4.61" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.833945][ T3908] 9p: Bad value for 'rfdno' [ 43.856013][ T3908] set_capacity_and_notify: 7 callbacks suppressed [ 43.856030][ T3908] loop2: detected capacity change from 0 to 512 [ 43.943772][ T3764] loop0: detected capacity change from 0 to 32768 [ 43.950633][ T3913] pimreg: entered allmulticast mode [ 44.015189][ T3915] loop4: detected capacity change from 0 to 764 [ 44.087343][ T3908] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.106528][ T3915] Symlink component flag not implemented [ 44.161971][ T3915] Symlink component flag not implemented (122) [ 44.178185][ T3908] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 44.609862][ T28] audit: type=1400 audit(1772772224.754:207): avc: denied { read } for pid=3936 comm="syz.4.69" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.682753][ T28] audit: type=1400 audit(1772772224.784:208): avc: denied { open } for pid=3936 comm="syz.4.69" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.721962][ T28] audit: type=1400 audit(1772772224.864:209): avc: denied { create } for pid=3938 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.742923][ T28] audit: type=1400 audit(1772772224.884:210): avc: denied { setopt } for pid=3938 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.775950][ T28] audit: type=1400 audit(1772772224.884:211): avc: denied { bind } for pid=3938 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.936488][ T3908] loop2: detected capacity change from 0 to 2048 [ 44.944872][ T3948] bridge_slave_0: left allmulticast mode [ 44.950787][ T3948] bridge_slave_0: left promiscuous mode [ 44.956572][ T3948] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.967759][ T3948] bridge_slave_1: left allmulticast mode [ 44.973490][ T3948] bridge_slave_1: left promiscuous mode [ 44.976273][ T3949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.980019][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.994735][ T3949] netlink: 'syz.3.74': attribute type 39 has an invalid length. [ 45.015616][ T3948] bond0: (slave bond_slave_0): Releasing backup interface [ 45.036903][ T3948] bond0: (slave bond_slave_1): Releasing backup interface [ 45.131096][ T3948] team0: Port device team_slave_0 removed [ 45.142429][ T3908] Alternate GPT is invalid, using primary GPT. [ 45.156307][ T3948] team0: Port device team_slave_1 removed [ 45.161182][ T3908] loop2: p2 p3 p7 [ 45.172549][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.180394][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.195935][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.232498][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.242481][ T3948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.508810][ T3949] hsr_slave_1 (unregistering): left promiscuous mode [ 45.526757][ T3953] hsr0: entered promiscuous mode [ 45.577374][ T28] audit: type=1400 audit(1772772225.694:212): avc: denied { create } for pid=3956 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.605363][ T28] audit: type=1400 audit(1772772225.694:213): avc: denied { connect } for pid=3956 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.632143][ T3959] loop0: detected capacity change from 0 to 1024 [ 45.641929][ T3959] EXT4-fs: Ignoring removed orlov option [ 45.651839][ T3959] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 45.689846][ T3947] syz.4.72 (3947) used greatest stack depth: 8968 bytes left [ 45.730398][ T3959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.748697][ T3959] EXT4-fs (loop0): shut down requested (1) [ 45.792661][ T3959] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 45.792696][ T3959] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 45.792903][ T3959] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 45.839882][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.415700][ T3993] loop0: detected capacity change from 0 to 512 [ 46.424250][ T3993] msdos: Unknown parameter 'l2tp' [ 46.609110][ T3997] __nla_validate_parse: 4 callbacks suppressed [ 46.609136][ T3997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 46.672611][ T3997] geneve1: entered promiscuous mode [ 46.713191][ T3998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 47.282527][ T4014] netlink: 'syz.2.94': attribute type 2 has an invalid length. [ 48.248323][ T4016] xt_TCPMSS: Only works on TCP SYN packets [ 48.565281][ T4043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.573749][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 48.573760][ T28] audit: type=1400 audit(1772772228.714:249): avc: denied { ioctl } for pid=4041 comm="syz.3.104" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.609544][ T4043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.618312][ T4045] mmap: syz.2.106 (4045) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.638413][ T28] audit: type=1400 audit(1772772228.774:250): avc: denied { bind } for pid=4041 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.660397][ T28] audit: type=1400 audit(1772772228.784:251): avc: denied { ioctl } for pid=4041 comm="syz.3.104" path="socket:[6403]" dev="sockfs" ino=6403 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.705261][ T3397] kernel write not supported for file bpf-prog (pid: 3397 comm: kworker/1:3) [ 48.792208][ T28] audit: type=1400 audit(1772772228.934:252): avc: denied { name_bind } for pid=4059 comm="syz.2.114" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 48.825434][ T28] audit: type=1400 audit(1772772228.934:253): avc: denied { node_bind } for pid=4059 comm="syz.2.114" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 48.972653][ T4085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.981279][ T4085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.085085][ T28] audit: type=1400 audit(1772772229.234:254): avc: denied { egress } for pid=4091 comm="syz.4.129" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 49.110582][ T28] audit: type=1400 audit(1772772229.234:255): avc: denied { sendto } for pid=4091 comm="syz.4.129" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 49.157507][ T28] audit: type=1400 audit(1772772229.304:256): avc: denied { bind } for pid=4093 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.191208][ T4085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.200788][ T4085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.370420][ T4117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.379472][ T4117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.402932][ T4120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.142'. [ 49.421189][ T28] audit: type=1400 audit(1772772229.564:257): avc: denied { ioctl } for pid=4121 comm="syz.0.143" path="socket:[5614]" dev="sockfs" ino=5614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.457432][ T4122] team0 (unregistering): Port device team_slave_0 removed [ 49.467238][ T4122] team0 (unregistering): Port device team_slave_1 removed [ 49.532798][ T4130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.541568][ T4130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.586895][ T4134] capability: warning: `syz.0.149' uses 32-bit capabilities (legacy support in use) [ 49.691787][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.700614][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.089490][ T4162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 50.148161][ T28] audit: type=1400 audit(1772772230.294:258): avc: denied { mount } for pid=4173 comm="syz.3.167" name="/" dev="ramfs" ino=5706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.242902][ T4180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 50.252048][ T4180] netlink: 64 bytes leftover after parsing attributes in process `syz.3.170'. [ 50.261290][ T4180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 50.802123][ T4208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.810773][ T4208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.105122][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 51.440334][ T4238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'. [ 51.451938][ T4238] IPv6: sit1: Disabled Multicast RS [ 51.458256][ T4238] sit1: entered allmulticast mode [ 51.503946][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 51.846192][ T4246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.858796][ T4246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.161673][ T4255] 9p: Bad value for 'wfdno' [ 52.926966][ T4281] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 52.938976][ T10] IPVS: starting estimator thread 0... [ 53.003068][ T4254] delete_channel: no stack [ 53.294139][ T4282] IPVS: using max 2688 ests per chain, 134400 per kthread [ 53.307932][ T4285] 9p: Bad value for 'wfdno' [ 53.409556][ T4291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'. [ 53.829099][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 53.829116][ T28] audit: type=1400 audit(1772772233.974:264): avc: denied { bind } for pid=4314 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.869113][ T4319] 9p: Bad value for 'wfdno' [ 53.915185][ T28] audit: type=1400 audit(1772772233.974:265): avc: denied { node_bind } for pid=4314 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 53.954606][ T28] audit: type=1400 audit(1772772234.014:266): avc: denied { remount } for pid=4311 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.113094][ T28] audit: type=1400 audit(1772772234.254:267): avc: denied { read append } for pid=4328 comm="syz.3.229" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.608161][ T28] audit: type=1400 audit(1772772234.254:268): avc: denied { open } for pid=4328 comm="syz.3.229" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.178471][ T3410] kernel read not supported for file bpf-prog (pid: 3410 comm: kworker/1:4) [ 56.402264][ T4373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.451721][ T4373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.618317][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 56.627264][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 57.427622][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 57.675778][ T28] audit: type=1400 audit(1772772237.824:269): avc: denied { write } for pid=4396 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.696514][ T28] audit: type=1400 audit(1772772237.824:270): avc: denied { read } for pid=4396 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.738201][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.773074][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.110751][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.372992][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.374553][ T4415] syz.3.263 uses obsolete (PF_INET,SOCK_PACKET) [ 58.405845][ T28] audit: type=1400 audit(1772772238.534:271): avc: denied { read write } for pid=4413 comm="syz.4.262" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.456322][ T28] audit: type=1400 audit(1772772238.534:272): avc: denied { open } for pid=4413 comm="syz.4.262" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.490745][ T28] audit: type=1400 audit(1772772238.534:273): avc: denied { ioctl } for pid=4413 comm="syz.4.262" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.571355][ T4424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 58.770337][ T4445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.779589][ T4445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.839239][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 58.839324][ T28] audit: type=1400 audit(1772772238.984:277): avc: denied { connect } for pid=4449 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.877222][ T28] audit: type=1400 audit(1772772238.984:278): avc: denied { write } for pid=4449 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.911884][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.920768][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.939820][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.958568][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.967250][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 58.989105][ T4445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.998348][ T4445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.585403][ T28] audit: type=1400 audit(1772772239.734:279): avc: denied { sqpoll } for pid=4491 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.614326][ T28] audit: type=1400 audit(1772772239.754:280): avc: denied { name_bind } for pid=4488 comm="syz.1.296" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 59.635772][ T28] audit: type=1400 audit(1772772239.754:281): avc: denied { name_connect } for pid=4491 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 59.657132][ T28] audit: type=1400 audit(1772772239.804:282): avc: denied { read write } for pid=4490 comm="syz.2.297" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.684000][ T28] audit: type=1400 audit(1772772239.804:283): avc: denied { open } for pid=4490 comm="syz.2.297" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.726405][ T28] audit: type=1400 audit(1772772239.824:284): avc: denied { ioctl } for pid=4490 comm="syz.2.297" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.806550][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 59.835890][ T28] audit: type=1400 audit(1772772239.964:285): avc: denied { ioctl } for pid=4500 comm="syz.2.301" path="socket:[7228]" dev="sockfs" ino=7228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.948673][ T28] audit: type=1400 audit(1772772240.054:286): avc: denied { mount } for pid=4508 comm="syz.0.304" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 60.167839][ T4462] delete_channel: no stack [ 60.221932][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 60.553093][ T4541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'. [ 60.676079][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 60.704287][ T4548] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 61.222943][ T4570] bond1: (slave ip6gretap1): making interface the new active one [ 61.232388][ T4570] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 62.545309][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 62.662776][ T4650] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 62.690765][ T4650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 62.961860][ T4650] bond1: entered allmulticast mode [ 63.350400][ T4650] bond1: (slave geneve2): making interface the new active one [ 63.505375][ T4650] geneve2: entered allmulticast mode [ 63.534521][ T4650] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.543198][ T3822] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 63.574105][ T3822] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 63.614073][ T3822] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 63.622904][ T3822] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 63.639511][ T4675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.674349][ T4675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.682671][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.706771][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.784973][ T4681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.802884][ T4681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.223170][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 64.232292][ T4693] bridge_slave_1: left allmulticast mode [ 64.238088][ T4693] bridge_slave_1: left promiscuous mode [ 64.244526][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.268280][ T4693] bridge_slave_0: left allmulticast mode [ 64.373294][ T4693] bridge_slave_0: left promiscuous mode [ 64.429646][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.201666][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 65.201682][ T28] audit: type=1400 audit(1772772245.344:315): avc: denied { create } for pid=4707 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.237136][ T28] audit: type=1400 audit(1772772245.374:316): avc: denied { bind } for pid=4707 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.259438][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.269472][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.281853][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.292441][ T28] audit: type=1400 audit(1772772245.434:317): avc: denied { write } for pid=4707 comm="syz.0.381" path="socket:[7831]" dev="sockfs" ino=7831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.322615][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.342125][ T28] audit: type=1400 audit(1772772245.484:318): avc: denied { read } for pid=4707 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.660351][ T4742] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 65.667670][ T4742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 65.733228][ T28] audit: type=1400 audit(1772772245.874:319): avc: denied { mount } for pid=4749 comm="syz.4.401" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 66.021969][ T4779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.042720][ T4779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.085545][ T28] audit: type=1400 audit(1772772246.234:320): avc: denied { create } for pid=4784 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.178557][ T4760] ================================================================== [ 66.186671][ T4760] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 66.193624][ T4760] [ 66.195955][ T4760] read-write to 0xffff88810039812c of 4 bytes by task 4757 on cpu 1: [ 66.204118][ T4760] fifo_open+0x86/0x5d0 [ 66.208290][ T4760] do_dentry_open+0x4ca/0xa90 [ 66.212998][ T4760] vfs_open+0x37/0x1e0 [ 66.217091][ T4760] path_openat+0x1b70/0x2050 [ 66.221708][ T4760] do_file_open+0x16c/0x290 [ 66.226236][ T4760] do_sys_openat2+0x94/0x130 [ 66.230860][ T4760] __x64_sys_creat+0x65/0x90 [ 66.235482][ T4760] x64_sys_call+0x2ea0/0x3020 [ 66.240179][ T4760] do_syscall_64+0x12c/0x370 [ 66.244784][ T4760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.250703][ T4760] [ 66.253036][ T4760] read to 0xffff88810039812c of 4 bytes by task 4760 on cpu 0: [ 66.260593][ T4760] wait_for_partner+0xd5/0x1e0 [ 66.265385][ T4760] fifo_open+0x4b1/0x5d0 [ 66.269637][ T4760] do_dentry_open+0x4ca/0xa90 [ 66.274347][ T4760] vfs_open+0x37/0x1e0 [ 66.278524][ T4760] path_openat+0x1b70/0x2050 [ 66.283144][ T4760] do_file_open+0x16c/0x290 [ 66.287672][ T4760] do_sys_openat2+0x94/0x130 [ 66.292295][ T4760] __x64_sys_creat+0x65/0x90 [ 66.296909][ T4760] x64_sys_call+0x2ea0/0x3020 [ 66.301605][ T4760] do_syscall_64+0x12c/0x370 [ 66.306204][ T4760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.312106][ T4760] [ 66.314433][ T4760] value changed: 0x00000001 -> 0x00000002 [ 66.320155][ T4760] [ 66.322507][ T4760] Reported by Kernel Concurrency Sanitizer on: [ 66.328695][ T4760] CPU: 0 UID: 0 PID: 4760 Comm: syz.0.398 Not tainted syzkaller #0 PREEMPT(full) [ 66.337909][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.347973][ T4760] ================================================================== [ 66.733019][ T4765] delete_channel: no stack