last executing test programs: 1m8.672972176s ago: executing program 4 (id=5): close(0xffffffffffffffff) r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x20000000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1m8.274587029s ago: executing program 4 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0xa53059, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) unshare(0x22020600) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 1m8.172907752s ago: executing program 4 (id=24): fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2008) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 1m6.736962469s ago: executing program 4 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) 1m6.721954479s ago: executing program 32 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) 57.311593184s ago: executing program 2 (id=134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x6bb7, &(0x7f0000000400)={0x0, 0x45ff, 0x2, 0x3, 0x119}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 57.202962498s ago: executing program 2 (id=137): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 56.919187827s ago: executing program 2 (id=140): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xb, r2, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 56.769586771s ago: executing program 2 (id=143): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 56.603278917s ago: executing program 2 (id=144): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc}, 0x50) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r3, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x5a}}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6, 0x26, 0x5}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.123478912s ago: executing program 2 (id=152): socket$inet_smc(0x2b, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 56.123347312s ago: executing program 33 (id=152): socket$inet_smc(0x2b, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.952308197s ago: executing program 0 (id=1014): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) 1.578988239s ago: executing program 1 (id=1021): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r4, 0x0) sendmmsg$unix(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20, 0x8000}}], 0x1, 0x80) 1.52747531s ago: executing program 1 (id=1023): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x8000) 1.324070087s ago: executing program 1 (id=1030): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x8000388, 0x800}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000a40)=0x6) readv(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) 1.254015529s ago: executing program 5 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.201284281s ago: executing program 5 (id=1032): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r2, 0x1009}], 0x1, 0x8000007) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.192216261s ago: executing program 1 (id=1033): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.033430037s ago: executing program 5 (id=1034): r0 = socket$unix(0x1, 0x1, 0x0) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x30000000}) 1.001399097s ago: executing program 0 (id=1035): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x449) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x100) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x20000010) close_range(r0, 0xffffffffffffffff, 0x2) 928.960749ms ago: executing program 0 (id=1036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x79d}, {0x0}, {&(0x7f0000003d00)}], 0x3}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 820.166213ms ago: executing program 5 (id=1039): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xeaae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 775.327955ms ago: executing program 5 (id=1041): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 746.052486ms ago: executing program 5 (id=1043): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 705.099667ms ago: executing program 6 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb2}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xb4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 697.233117ms ago: executing program 6 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 642.470339ms ago: executing program 6 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c8fd040000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x404c850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 599.311411ms ago: executing program 6 (id=1047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 553.524582ms ago: executing program 6 (id=1048): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x26) fcntl$notify(r3, 0x402, 0x0) getdents64(r2, 0x0, 0x0) 553.069142ms ago: executing program 6 (id=1049): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x100000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 331.533829ms ago: executing program 1 (id=1053): perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) 305.90457ms ago: executing program 1 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x0) accept(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 258.881202ms ago: executing program 3 (id=1057): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x7df2, 0x7721, 0x16, 0x0, 0x0) 242.033962ms ago: executing program 3 (id=1058): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 131.756256ms ago: executing program 3 (id=1059): openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6400000010"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3c8, 0x110, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local, @private=0xa010101, @broadcast, 0x8, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 109.799086ms ago: executing program 0 (id=1060): socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x400000002}, 0xf582, 0x0, 0x10800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 95.121727ms ago: executing program 3 (id=1061): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x8000388, 0x800}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000a40)=0x6) readv(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) 74.630257ms ago: executing program 0 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x3c, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e20, 0xff, @empty, 0xe}}, 0x0, 0x0, 0x1d, 0x0, "020602c431ee4eed18bcdf9bade9919b2e9088a80d94fabc05ddefcec013240a728cdd9f47964fc3c013ce6ad4c3c609f21ea5f3848a5fb0bbbdf311f9d8a156441a6a97d5b636ce0c025d22183bfd29"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4772000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 37.361799ms ago: executing program 3 (id=1063): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x26) fcntl$notify(r3, 0x402, 0x0) getdents64(r2, 0x0, 0x0) 28.723389ms ago: executing program 0 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd27, 0x2ddfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {0xfff2, 0xfff1}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x24049004) 0s ago: executing program 3 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xca0b}}]}, 0x38}}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2b, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xffe0, 0xb}, {0x8, 0xfff1}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000) kernel console output (not intermixed with test programs): ridge0: port 2(bridge_slave_1) entered blocking state [ 33.638297][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.645484][ T3298] bridge_slave_1: entered allmulticast mode [ 33.651956][ T3298] bridge_slave_1: entered promiscuous mode [ 33.658446][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.665667][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.672868][ T3305] bridge_slave_1: entered allmulticast mode [ 33.679800][ T3305] bridge_slave_1: entered promiscuous mode [ 33.687488][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.702768][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.722571][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.736832][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.744064][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.770207][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.800070][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.807136][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.833198][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.850081][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.860792][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.870608][ T3304] team0: Port device team_slave_0 added [ 33.877308][ T3304] team0: Port device team_slave_1 added [ 33.886457][ T3303] team0: Port device team_slave_0 added [ 33.893172][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.903235][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.922792][ T3303] team0: Port device team_slave_1 added [ 33.944178][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.951207][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.977213][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.002808][ T3305] team0: Port device team_slave_0 added [ 34.009555][ T3305] team0: Port device team_slave_1 added [ 34.015632][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.022679][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.048640][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.065043][ T3298] team0: Port device team_slave_0 added [ 34.083308][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.090368][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.116319][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.127848][ T3298] team0: Port device team_slave_1 added [ 34.136054][ T3299] hsr_slave_0: entered promiscuous mode [ 34.142071][ T3299] hsr_slave_1: entered promiscuous mode [ 34.153358][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.160348][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.186353][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.197471][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.204556][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.230529][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.260058][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.267122][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.293091][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.334207][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.341241][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.367360][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.380471][ T3304] hsr_slave_0: entered promiscuous mode [ 34.386629][ T3304] hsr_slave_1: entered promiscuous mode [ 34.392543][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.398291][ T3304] Cannot create hsr debugfs directory [ 34.411436][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.418418][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.444363][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.506658][ T3305] hsr_slave_0: entered promiscuous mode [ 34.512853][ T3305] hsr_slave_1: entered promiscuous mode [ 34.518707][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 34.524478][ T3305] Cannot create hsr debugfs directory [ 34.532155][ T3303] hsr_slave_0: entered promiscuous mode [ 34.538156][ T3303] hsr_slave_1: entered promiscuous mode [ 34.544045][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.549770][ T3303] Cannot create hsr debugfs directory [ 34.560302][ T3298] hsr_slave_0: entered promiscuous mode [ 34.566380][ T3298] hsr_slave_1: entered promiscuous mode [ 34.572427][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 34.578168][ T3298] Cannot create hsr debugfs directory [ 34.741186][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.750117][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.757820][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.766452][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.774237][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.782982][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.805705][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.814521][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.853100][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.862126][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.873035][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.882185][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.890285][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.899110][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.912984][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.922002][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.948065][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.956766][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.964832][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.973899][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.987960][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.996795][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.007108][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.016193][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.040996][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.050344][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.058673][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.067582][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.075557][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.084640][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.092340][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.101037][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.145365][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.154629][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.169238][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.176615][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.185563][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.199676][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.208982][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.216876][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.225649][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.248953][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.267024][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.274117][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.283233][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.290306][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.313592][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.340088][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.356156][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.366398][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.373611][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.390500][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.397769][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.414423][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.436673][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.447031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.454158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.470195][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.477285][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.490771][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.508068][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.525590][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.532762][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.555992][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.566711][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.579413][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.586583][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.605184][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.618200][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.625329][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.662542][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.669658][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.783024][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.838363][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.912394][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.975349][ T3299] veth0_vlan: entered promiscuous mode [ 35.994451][ T3299] veth1_vlan: entered promiscuous mode [ 36.011624][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.040784][ T3304] veth0_vlan: entered promiscuous mode [ 36.048488][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.064781][ T3304] veth1_vlan: entered promiscuous mode [ 36.080870][ T3299] veth0_macvtap: entered promiscuous mode [ 36.096876][ T3299] veth1_macvtap: entered promiscuous mode [ 36.117471][ T3305] veth0_vlan: entered promiscuous mode [ 36.127212][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.137942][ T3304] veth0_macvtap: entered promiscuous mode [ 36.153383][ T3305] veth1_vlan: entered promiscuous mode [ 36.163483][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.171912][ T3304] veth1_macvtap: entered promiscuous mode [ 36.188134][ T3433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.203490][ T3433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.213345][ T3433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.232788][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.240316][ T3433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.254649][ T3305] veth0_macvtap: entered promiscuous mode [ 36.263486][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.284006][ T117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.293644][ T117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.304404][ T3305] veth1_macvtap: entered promiscuous mode [ 36.317615][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.326829][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.362268][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.373576][ T3298] veth0_vlan: entered promiscuous mode [ 36.386092][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.407803][ T3298] veth1_vlan: entered promiscuous mode [ 36.426253][ T3433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.432737][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.450477][ T3433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.461883][ T3433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.475168][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 36.475186][ T28] audit: type=1400 audit(1781099007.396:155): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.506060][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.515451][ T28] audit: type=1400 audit(1781099007.396:156): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.539978][ T28] audit: type=1400 audit(1781099007.396:157): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.584861][ T3298] veth0_macvtap: entered promiscuous mode [ 36.598034][ T3507] loop0: detected capacity change from 0 to 2048 [ 36.607246][ T3506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.616564][ T3298] veth1_macvtap: entered promiscuous mode [ 36.629831][ T3303] veth0_vlan: entered promiscuous mode [ 36.645677][ T3303] veth1_vlan: entered promiscuous mode [ 36.662735][ T3507] loop0: p1 p4 [ 36.667839][ T3507] loop0: p4 size 589824 extends beyond EOD, truncated [ 36.677238][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.699338][ T3303] veth0_macvtap: entered promiscuous mode [ 36.712818][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.724902][ T28] audit: type=1400 audit(1781099007.646:158): avc: denied { open } for pid=3509 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.753440][ T3303] veth1_macvtap: entered promiscuous mode [ 36.765290][ T28] audit: type=1400 audit(1781099007.646:159): avc: denied { perfmon } for pid=3509 comm="syz.1.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.787896][ T28] audit: type=1400 audit(1781099007.646:160): avc: denied { kernel } for pid=3509 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.817589][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.831292][ T3433] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.841044][ T3433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.854365][ T28] audit: type=1400 audit(1781099007.646:161): avc: denied { tracepoint } for pid=3509 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.876457][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.888266][ T3433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.913684][ T3433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.941609][ T28] audit: type=1400 audit(1781099007.666:162): avc: denied { create } for pid=3509 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.956779][ T3433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.998929][ T3433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.008972][ T3433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.017143][ T28] audit: type=1400 audit(1781099007.666:163): avc: denied { write } for pid=3509 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.052958][ T3433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.062693][ T28] audit: type=1400 audit(1781099007.776:164): avc: denied { create } for pid=3504 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.217749][ T3528] ref_ctr increment failed for inode: 0x12 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104da0d80 [ 37.237429][ T3526] uprobe: syz.2.3:3526 failed to unregister, leaking uprobe [ 37.346189][ T3540] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 37.360664][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 37.405660][ T3542] team1: entered promiscuous mode [ 37.419045][ T3542] team1: entered allmulticast mode [ 37.427835][ T3542] 8021q: adding VLAN 0 to HW filter on device team1 [ 37.554097][ T3555] ======================================================= [ 37.554097][ T3555] WARNING: The mand mount option has been deprecated and [ 37.554097][ T3555] and is ignored by this kernel. Remove the mand [ 37.554097][ T3555] option from the mount to silence this warning. [ 37.554097][ T3555] ======================================================= [ 38.092617][ T3549] syz.1.18 (3549) used greatest stack depth: 9408 bytes left [ 38.132786][ T3570] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 38.182694][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 38.193298][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 38.571438][ T3585] netlink: 'syz.2.32': attribute type 10 has an invalid length. [ 38.605649][ T3585] syz_tun: entered promiscuous mode [ 38.614864][ T3585] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 38.733589][ T3591] loop2: detected capacity change from 0 to 1024 [ 38.743755][ T3591] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 38.774449][ T3591] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.34: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.815521][ T3591] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 38.815832][ T3591] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.34: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.825044][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 38.825075][ C1] EXT4-fs (loop2): initial error at time 1781099009: ext4_map_blocks:791: inode 3: block 2 [ 38.825237][ C1] EXT4-fs (loop2): last error at time 1781099009: ext4_map_blocks:791: inode 3: block 2 [ 38.869382][ T3591] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 38.870367][ T3591] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.34: Failed to acquire dquot type 0 [ 38.894632][ T3591] loop2: lost filesystem error report for type 5 error -117 [ 38.895017][ T3591] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 38.914227][ T3591] loop2: lost filesystem error report for type 5 error -117 [ 38.914615][ T3591] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.34: mark_inode_dirty error [ 38.934577][ T3591] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.934960][ T3591] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 38.973203][ T3591] EXT4-fs (loop2): 1 orphan inode deleted [ 38.980963][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.993970][ T30] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.014496][ T30] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.014641][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 39.066736][ T117] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.077529][ T3602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3602 comm=syz.1.37 [ 39.107280][ T3591] EXT4-fs: Ignoring removed bh option [ 39.122958][ T3591] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 39.162642][ T3591] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.34: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.251010][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.263090][ T3605] syzkaller0: entered promiscuous mode [ 39.276160][ T3605] syzkaller0: entered allmulticast mode [ 39.358293][ T3615] SELinux: failed to load policy [ 39.412761][ T3609] loop3: detected capacity change from 0 to 256 [ 39.610019][ T12] tipc: Subscription rejected, illegal request [ 40.075575][ T3609] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.086638][ T3609] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.098311][ T3609] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.110607][ T3618] tipc: Started in network mode [ 40.110906][ T3609] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.115513][ T3618] tipc: Node identity 2007ff, cluster identity 4711 [ 40.115529][ T3618] tipc: Node number set to 2099199 [ 40.145385][ T3608] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.175079][ T117] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.187066][ T3608] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.208008][ T3622] netlink: 'syz.1.46': attribute type 39 has an invalid length. [ 40.216207][ T3608] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.227809][ T3609] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.254893][ T3609] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.288650][ T117] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.312699][ T3609] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 40.442085][ T117] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.484634][ T3642] netlink: 112 bytes leftover after parsing attributes in process `syz.1.53'. [ 40.645093][ T3652] loop3: detected capacity change from 0 to 256 [ 40.677101][ T117] bridge_slave_1: left allmulticast mode [ 40.705446][ T117] bridge_slave_1: left promiscuous mode [ 40.736891][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.761799][ T117] bridge_slave_0: left allmulticast mode [ 40.776030][ T117] bridge_slave_0: left promiscuous mode [ 40.792727][ T3644] loop1: detected capacity change from 0 to 512 [ 40.804303][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.874018][ T3676] xt_hashlimit: size too large, truncated to 1048576 [ 40.976647][ T3644] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.54: inode #1792: comm syz.1.54: iget: illegal inode # [ 41.020928][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.021298][ T3644] loop1: lost filesystem error report for type 5 error -117 [ 41.034131][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.050191][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 41.056646][ C1] EXT4-fs (loop1): initial error at time 1781099011: ext4_get_journal_inode:5896 [ 41.065851][ C1] EXT4-fs (loop1): last error at time 1781099011: ext4_get_journal_inode:5896 [ 41.075852][ T3644] EXT4-fs (loop1): Remounting filesystem read-only [ 41.086114][ T117] bond0 (unregistering): Released all slaves [ 41.099625][ T3668] syzkaller0: entered promiscuous mode [ 41.100152][ T3644] EXT4-fs (loop1): no journal found [ 41.105657][ T3668] syzkaller0: entered allmulticast mode [ 41.125187][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.132336][ T3644] EXT4-fs (loop1): can't get journal size [ 41.196183][ T117] hsr_slave_0: left promiscuous mode [ 41.231132][ T117] hsr_slave_1: left promiscuous mode [ 41.240189][ T3644] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 41.257141][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.284116][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.298085][ T3644] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 41.313176][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.327573][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.331147][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.510345][ T117] veth1_macvtap: left promiscuous mode [ 41.522877][ T117] veth0_macvtap: left promiscuous mode [ 41.538831][ T117] veth1_vlan: left promiscuous mode [ 41.542528][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 41.542630][ T28] audit: type=1400 audit(1781099012.466:247): avc: denied { create } for pid=3643 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.554917][ T117] veth0_vlan: left promiscuous mode [ 41.592065][ T28] audit: type=1400 audit(1781099012.506:248): avc: denied { setopt } for pid=3691 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.613930][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.624518][ T28] audit: type=1400 audit(1781099012.506:249): avc: denied { listen } for pid=3691 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.685480][ T28] audit: type=1400 audit(1781099012.506:250): avc: denied { accept } for pid=3691 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.722018][ T28] audit: type=1400 audit(1781099012.596:251): avc: denied { watch } for pid=3694 comm="syz.1.65" path="/15" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.745025][ T3701] loop2: detected capacity change from 0 to 128 [ 41.766497][ T3701] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 41.781673][ T3701] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.828660][ T117] team0 (unregistering): Port device team_slave_1 removed [ 41.836939][ T28] audit: type=1400 audit(1781099012.756:252): avc: denied { write } for pid=3700 comm="syz.2.68" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.876990][ T117] team0 (unregistering): Port device team_slave_0 removed [ 41.888072][ T28] audit: type=1400 audit(1781099012.756:253): avc: denied { add_name } for pid=3700 comm="syz.2.68" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.888108][ T28] audit: type=1400 audit(1781099012.756:254): avc: denied { create } for pid=3700 comm="syz.2.68" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.888207][ T28] audit: type=1400 audit(1781099012.756:255): avc: denied { read write open } for pid=3700 comm="syz.2.68" path="/14/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.888237][ T28] audit: type=1400 audit(1781099012.776:256): avc: denied { setattr } for pid=3700 comm="syz.2.68" path="/14/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.992544][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.992578][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.992708][ T3611] bridge_slave_0: entered allmulticast mode [ 41.993256][ T3611] bridge_slave_0: entered promiscuous mode [ 41.994220][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.994256][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.994371][ T3611] bridge_slave_1: entered allmulticast mode [ 41.994853][ T3611] bridge_slave_1: entered promiscuous mode [ 42.007322][ T3611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.008701][ T3611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.026214][ T3611] team0: Port device team_slave_0 added [ 42.141037][ T3611] team0: Port device team_slave_1 added [ 42.166624][ T3611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.173761][ T3611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.214752][ T3611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.232589][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.233779][ T3611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.249114][ T3611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.297137][ T3611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.375545][ T3611] hsr_slave_0: entered promiscuous mode [ 42.381992][ T3611] hsr_slave_1: entered promiscuous mode [ 42.388091][ T3611] debugfs: 'hsr0' already exists in 'hsr' [ 42.394203][ T3611] Cannot create hsr debugfs directory [ 42.412518][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 42.419260][ T3742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 42.584617][ T3611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.599253][ T3753] netlink: 'syz.0.79': attribute type 3 has an invalid length. [ 42.609115][ T3611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.617765][ T3753] netlink: 'syz.0.79': attribute type 7 has an invalid length. [ 42.635075][ T3611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.648119][ T3753] netlink: 198320 bytes leftover after parsing attributes in process `syz.0.79'. [ 42.659312][ T3611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.667451][ T3611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.703793][ T3611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.712174][ T3611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.729408][ T3611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.746923][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 42.855749][ T3611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.889681][ T3611] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.922915][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.930045][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.968349][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.975526][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.200759][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 43.338793][ T3821] capability: warning: `syz.0.89' uses deprecated v2 capabilities in a way that may be insecure [ 43.365637][ T3611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.742740][ T3611] veth0_vlan: entered promiscuous mode [ 43.765761][ T3611] veth1_vlan: entered promiscuous mode [ 43.782914][ T3865] loop1: detected capacity change from 0 to 4096 [ 43.804486][ T3865] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 43.814711][ T3611] veth0_macvtap: entered promiscuous mode [ 43.827683][ T3865] System zones: 0-5 [ 43.854696][ T3865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.872916][ T3611] veth1_macvtap: entered promiscuous mode [ 43.895736][ T3611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.904590][ T3611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.913907][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.937812][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.948431][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.480061][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.576278][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.647944][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 44.834551][ T3975] loop3: detected capacity change from 0 to 1024 [ 44.843282][ T3975] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.104: Failed to acquire dquot type 0 [ 44.854799][ T3975] loop3: lost filesystem error report for type 5 error -117 [ 44.855310][ T3975] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, [ 44.862675][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 44.862699][ C0] EXT4-fs (loop3): initial error at time 1781099015: ext4_acquire_dquot:7034 [ 44.862726][ C0] EXT4-fs (loop3): last error at time 1781099015: ext4_acquire_dquot:7034 [ 44.894555][ T3975] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 44.904571][ T3975] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.104: corrupted inode contents [ 44.916622][ T3975] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 44.918284][ T3975] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #13: comm syz.3.104: mark_inode_dirty error [ 44.950604][ T3975] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 44.951037][ T3975] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.104: corrupted inode contents [ 44.972089][ T3975] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 44.972442][ T3975] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.104: mark_inode_dirty error [ 44.994666][ T3975] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 44.998214][ T3975] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.104: corrupted inode contents [ 45.046101][ T3975] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.046297][ T3975] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 45.069676][ T3385] IPVS: starting estimator thread 0... [ 45.085071][ T3975] loop3: lost filesystem error report for type 5 error -117 [ 45.085465][ T3975] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.104: corrupted inode contents [ 45.126139][ T3975] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.127030][ T3975] EXT4-fs error (device loop3): ext4_truncate:4690: inode #13: comm syz.3.104: mark_inode_dirty error [ 45.164325][ T3975] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.167398][ T3975] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 45.185660][ T3979] IPVS: using max 2016 ests per chain, 100800 per kthread [ 45.207465][ T3975] loop3: lost filesystem error report for type 5 error -117 [ 45.208154][ T3975] EXT4-fs (loop3): 1 truncate cleaned up [ 45.267284][ T3975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.307326][ T3983] bridge_slave_0: left allmulticast mode [ 45.323061][ T3983] bridge_slave_0: left promiscuous mode [ 45.339145][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.360466][ T3983] bridge_slave_1: left allmulticast mode [ 45.368148][ T3983] bridge_slave_1: left promiscuous mode [ 45.375945][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.419965][ T3983] bond0: (slave bond_slave_0): Releasing backup interface [ 45.462992][ T3983] bond0: (slave bond_slave_1): Releasing backup interface [ 45.475224][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.510444][ T3983] team0: Port device team_slave_0 removed [ 45.524627][ T3983] team0: Port device team_slave_1 removed [ 45.545904][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.574851][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.604924][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.626586][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.668955][ T3983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.709303][ T3984] team0: Mode changed to "roundrobin" [ 46.005202][ T4001] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.012449][ T4001] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.101401][ T4001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.111958][ T4001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.223292][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.233010][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.255950][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.273307][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.471931][ T4022] bridge_slave_0: left allmulticast mode [ 46.484180][ T4022] bridge_slave_0: left promiscuous mode [ 46.497940][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.517999][ T4022] bridge_slave_1: left allmulticast mode [ 46.523845][ T4022] bridge_slave_1: left promiscuous mode [ 46.533661][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.547948][ T4022] bond0: (slave bond_slave_0): Releasing backup interface [ 46.566087][ T4022] bond0: (slave bond_slave_1): Releasing backup interface [ 46.582060][ T4022] team0: Port device team_slave_0 removed [ 46.591539][ T4022] team0: Port device team_slave_1 removed [ 46.598569][ T4022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.606251][ T4022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.615745][ T4022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.626323][ T4022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.639877][ T4022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 46.797192][ T4035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 47.354201][ T4029] team0: Mode changed to "roundrobin" [ 48.336852][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 48.336870][ T28] audit: type=1400 audit(1781099019.256:297): avc: denied { connect } for pid=4044 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.374662][ T28] audit: type=1400 audit(1781099019.286:298): avc: denied { bind } for pid=4044 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.396672][ T28] audit: type=1400 audit(1781099019.316:299): avc: denied { setopt } for pid=4016 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.418236][ T28] audit: type=1400 audit(1781099019.336:300): avc: denied { write } for pid=4044 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.461333][ T28] audit: type=1400 audit(1781099019.366:301): avc: denied { ioctl } for pid=4047 comm="syz.0.132" path="socket:[5829]" dev="sockfs" ino=5829 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.499163][ T4050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'. [ 48.509943][ T4050] netlink: 'syz.0.133': attribute type 7 has an invalid length. [ 48.519357][ T4050] netlink: 'syz.0.133': attribute type 8 has an invalid length. [ 48.529169][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 48.602285][ T28] audit: type=1400 audit(1781099019.526:302): avc: denied { sqpoll } for pid=4052 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.639330][ T4056] loop5: detected capacity change from 0 to 1024 [ 48.665207][ T4056] EXT4-fs: Ignoring removed bh option [ 48.671401][ T28] audit: type=1400 audit(1781099019.576:303): avc: denied { module_request } for pid=4057 comm="syz.0.136" kmod="crypto-gcm(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.723873][ T4056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.755475][ T28] audit: type=1400 audit(1781099019.676:304): avc: denied { write } for pid=4055 comm="syz.5.135" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.769860][ T4056] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.789355][ T28] audit: type=1400 audit(1781099019.676:305): avc: denied { read append } for pid=4055 comm="syz.5.135" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.813048][ T28] audit: type=1400 audit(1781099019.676:306): avc: denied { open } for pid=4055 comm="syz.5.135" path="/7/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.931738][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.995404][ T4081] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.140'. [ 49.025918][ T4081] netlink: zone id is out of range [ 49.031500][ T4081] netlink: zone id is out of range [ 49.036796][ T4081] netlink: zone id is out of range [ 49.052122][ T4081] netlink: set zone limit has 8 unknown bytes [ 49.113487][ T4086] netlink: 68 bytes leftover after parsing attributes in process `syz.5.142'. [ 49.143491][ T4086] netlink: 64 bytes leftover after parsing attributes in process `syz.5.142'. [ 49.587704][ T3298] bond0: (slave syz_tun): Releasing backup interface [ 49.598871][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 49.610069][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 49.688770][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.752572][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.836653][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.883738][ T4115] loop3: detected capacity change from 0 to 128 [ 49.892887][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.912664][ T4115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.931629][ T4115] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.015904][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.028848][ T12] bridge_slave_1: left allmulticast mode [ 50.040053][ T12] bridge_slave_1: left promiscuous mode [ 50.048932][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.058329][ T12] bridge_slave_0: left allmulticast mode [ 50.073860][ T12] bridge_slave_0: left promiscuous mode [ 50.090504][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.099155][ T4125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.158'. [ 50.374577][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.398098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.411274][ T12] bond0 (unregistering): Released all slaves [ 50.422359][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 50.456656][ T12] tipc: Left network mode [ 50.480600][ T12] hsr_slave_0: left promiscuous mode [ 50.490363][ T12] hsr_slave_1: left promiscuous mode [ 50.501231][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.517547][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.535365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.549033][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.577349][ T12] veth1_macvtap: left promiscuous mode [ 50.587408][ T12] veth0_macvtap: left promiscuous mode [ 50.596760][ T12] veth1_vlan: left promiscuous mode [ 50.616082][ T12] veth0_vlan: left promiscuous mode [ 50.818652][ T12] team0 (unregistering): Port device team_slave_1 removed [ 50.833447][ T12] team0 (unregistering): Port device team_slave_0 removed [ 50.892646][ T4150] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.899866][ T4150] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.937498][ T4150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.947935][ T4150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.983936][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 50.999907][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.027017][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.061610][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.090786][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.396144][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 51.446925][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.454160][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.461740][ T4112] bridge_slave_0: entered allmulticast mode [ 51.468304][ T4112] bridge_slave_0: entered promiscuous mode [ 51.476632][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.483995][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.491251][ T4112] bridge_slave_1: entered allmulticast mode [ 51.497860][ T4112] bridge_slave_1: entered promiscuous mode [ 51.521116][ T4112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.543726][ T4112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.603924][ T4112] team0: Port device team_slave_0 added [ 51.631045][ T4112] team0: Port device team_slave_1 added [ 51.689026][ T4112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.727981][ T4112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.770592][ T4112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.792482][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 51.800794][ T4112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.830300][ T4112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.870441][ T4112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.961519][ T4112] hsr_slave_0: entered promiscuous mode [ 51.982441][ T4112] hsr_slave_1: entered promiscuous mode [ 51.988431][ T4112] debugfs: 'hsr0' already exists in 'hsr' [ 52.010537][ T4112] Cannot create hsr debugfs directory [ 52.070190][ T4215] loop3: detected capacity change from 0 to 512 [ 52.091169][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.171405][ T4215] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.276223][ T4112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.285569][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.305340][ T4112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.316957][ T4112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.336667][ T4112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.370721][ T4112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.382518][ T4112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.396705][ T4112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.419322][ T4112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.543552][ T4112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.569031][ T4282] unsupported nlmsg_type 40 [ 52.577758][ T4112] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.612874][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.619978][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.652291][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.659397][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.800778][ T4289] loop5: detected capacity change from 0 to 2048 [ 52.874493][ T4289] loop5: p1 p4 [ 52.878657][ T4289] loop5: p4 size 589824 extends beyond EOD, truncated [ 52.888250][ T4112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.901912][ T2983] loop5: p1 p4 [ 52.906207][ T2983] loop5: p4 size 589824 extends beyond EOD, truncated [ 53.243011][ T4112] veth0_vlan: entered promiscuous mode [ 53.267111][ T4112] veth1_vlan: entered promiscuous mode [ 53.310004][ T4112] veth0_macvtap: entered promiscuous mode [ 53.332863][ T4112] veth1_macvtap: entered promiscuous mode [ 53.365331][ T4112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.398410][ T4112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.408480][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 53.408496][ T28] audit: type=1400 audit(1781099024.326:328): avc: denied { read write } for pid=4337 comm="syz.0.201" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.450093][ T28] audit: type=1400 audit(1781099024.326:329): avc: denied { open } for pid=4337 comm="syz.0.201" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.477118][ T3433] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.483441][ T28] audit: type=1400 audit(1781099024.396:330): avc: denied { ioctl } for pid=4337 comm="syz.0.201" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.488306][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 53.530556][ T3433] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.569232][ T3433] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.588503][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xff [ 53.598479][ T3433] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.611014][ T28] audit: type=1400 audit(1781099024.506:331): avc: denied { create } for pid=4337 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 53.652928][ T28] audit: type=1400 audit(1781099024.536:332): avc: denied { name_bind } for pid=4349 comm="syz.5.204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 53.684779][ T28] audit: type=1400 audit(1781099024.606:333): avc: denied { lock } for pid=4351 comm="syz.1.205" path="socket:[8340]" dev="sockfs" ino=8340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 53.947659][ T4359] Cannot find add_set index 0 as target [ 53.959606][ T28] audit: type=1400 audit(1781099024.876:334): avc: denied { create } for pid=4362 comm="syz.5.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.981288][ T4363] loop5: detected capacity change from 0 to 1024 [ 53.988032][ T4363] EXT4-fs: Ignoring removed orlov option [ 54.022999][ T4363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.039927][ T4363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.150677][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.213'. [ 54.171514][ T28] audit: type=1400 audit(1781099025.096:335): avc: denied { write } for pid=4383 comm="syz.6.212" path="socket:[8379]" dev="sockfs" ino=8379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.233397][ T28] audit: type=1400 audit(1781099025.146:336): avc: denied { write } for pid=4366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.298911][ T28] audit: type=1400 audit(1781099025.216:337): avc: denied { write } for pid=4391 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.631691][ T4394] loop6: detected capacity change from 0 to 512 [ 54.664732][ T4394] EXT4-fs: Mount option(s) incompatible with ext3 [ 55.076933][ T4467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 55.510504][ T4472] netlink: 'syz.5.229': attribute type 1 has an invalid length. [ 55.543971][ T4476] process 'syz.5.230' launched './file1' with NULL argv: empty string added [ 55.585230][ T4478] loop5: detected capacity change from 0 to 1024 [ 55.600538][ T4478] EXT4-fs: Ignoring removed bh option [ 55.612092][ T4478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.662268][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.922997][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.930434][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.976910][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.987779][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.024173][ T3433] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.033771][ T3433] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.042940][ T3433] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.063578][ T3433] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.296621][ T4510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.305365][ T4510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.399308][ T4338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.501669][ T4520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.247'. [ 56.709085][ T4530] loop6: detected capacity change from 0 to 512 [ 56.731614][ T4529] SET target dimension over the limit! [ 57.189257][ T4566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.257'. [ 57.665521][ T4636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4636 comm=syz.0.266 [ 57.686711][ T4637] loop5: detected capacity change from 0 to 512 [ 57.704697][ T4637] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 57.715197][ T4636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'. [ 57.728453][ T4637] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.267: inode #15: comm syz.5.267: iget: illegal inode # [ 57.745587][ T4637] loop5: lost filesystem error report for type 5 error -117 [ 57.750165][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 57.752463][ T4637] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.267: couldn't read orphan inode 15 (err -117) [ 57.757574][ C0] EXT4-fs (loop5): initial error at time 1781099028: ext4_orphan_get:1397 [ 57.784357][ C0] EXT4-fs (loop5): last error at time 1781099028: ext4_orphan_get:1397 [ 57.793097][ T4637] loop5: lost filesystem error report for type 5 error -117 [ 57.793927][ T4637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.841251][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.021034][ T4652] loop5: detected capacity change from 0 to 1024 [ 58.065207][ T4652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.108086][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.257002][ T4660] netlink: 24 bytes leftover after parsing attributes in process `syz.5.272'. [ 58.355910][ T4664] netlink: 7 bytes leftover after parsing attributes in process `syz.3.273'. [ 58.691920][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 58.691945][ T28] audit: type=1400 audit(1781099029.616:357): avc: denied { create } for pid=4671 comm="syz.6.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.755687][ T28] audit: type=1400 audit(1781099029.616:358): avc: denied { setopt } for pid=4671 comm="syz.6.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.805564][ T4685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 58.814844][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 58.975438][ T4693] loop3: detected capacity change from 0 to 256 [ 58.999716][ T4693] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.237395][ T4696] Cannot find add_set index 0 as target [ 59.289036][ T28] audit: type=1400 audit(1781099030.206:359): avc: denied { block_suspend } for pid=4697 comm="syz.3.286" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.366280][ T28] audit: type=1400 audit(1781099030.286:360): avc: denied { mounton } for pid=4701 comm="syz.3.288" path=2F37312FE91F7189591E9233614B dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 59.575309][ T4715] netlink: 190864 bytes leftover after parsing attributes in process `syz.6.294'. [ 59.629801][ T4717] mmap: syz.1.295 (4717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.829053][ T28] audit: type=1400 audit(1781099030.666:361): avc: denied { name_bind } for pid=4718 comm="syz.6.296" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.237023][ T4712] loop5: detected capacity change from 0 to 512 [ 60.297830][ T4712] EXT4-fs: Mount option(s) incompatible with ext2 [ 60.587056][ T28] audit: type=1400 audit(1781099031.506:362): avc: denied { bind } for pid=4733 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.746886][ T4750] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 60.787443][ T4750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.812379][ T28] audit: type=1400 audit(1781099031.726:363): avc: denied { create } for pid=4752 comm="syz.5.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.872595][ T4750] bond1: (slave veth3): Enslaving as an active interface with a down link [ 60.888819][ T4757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4757 comm=syz.3.311 [ 60.919677][ T4758] bond2: entered allmulticast mode [ 60.925425][ T4757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.311'. [ 60.934582][ T4758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.944908][ T4758] bond1: (slave bond2): Enslaving as an active interface with a down link [ 60.984598][ T11] IPVS: starting estimator thread 0... [ 61.067732][ T4774] capability: warning: `syz.5.317' uses 32-bit capabilities (legacy support in use) [ 61.081502][ T4765] IPVS: using max 2256 ests per chain, 112800 per kthread [ 61.090227][ T28] audit: type=1400 audit(1781099032.006:364): avc: denied { setopt } for pid=4773 comm="syz.5.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.250061][ T28] audit: type=1400 audit(1781099032.166:365): avc: denied { name_bind } for pid=4798 comm="syz.6.326" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.411325][ T4817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.328'. [ 61.435834][ T4817] erspan1: entered allmulticast mode [ 61.582644][ T28] audit: type=1400 audit(1781099032.506:366): avc: denied { mount } for pid=4827 comm="syz.6.330" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.718727][ T4834] SET target dimension over the limit! [ 62.316348][ T4843] loop6: detected capacity change from 0 to 512 [ 62.426218][ T4843] EXT4-fs: Mount option(s) incompatible with ext2 [ 62.890265][ T4919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.903467][ T4919] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.928272][ T4919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.965889][ T4922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.984002][ T4922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.986461][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.015118][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.057256][ T4919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.079943][ T4919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.119964][ T4919] veth1_vlan: left promiscuous mode [ 63.138471][ T4919] veth0_vlan: left promiscuous mode [ 63.158591][ T4919] veth0_vlan: entered promiscuous mode [ 63.188059][ T4919] veth1_vlan: entered promiscuous mode [ 63.206059][ T4919] veth1_macvtap: left promiscuous mode [ 63.213755][ T4919] veth0_macvtap: left promiscuous mode [ 63.225583][ T4919] veth0_macvtap: entered promiscuous mode [ 63.238584][ T4919] veth1_macvtap: entered promiscuous mode [ 63.261890][ T4919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.277955][ T4919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.296915][ T4919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.321544][ T4919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.344925][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.352058][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.376092][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.383292][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.485640][ T3932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.495363][ T3938] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.528513][ T3938] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.537587][ T3938] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.583225][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 63.674759][ T4931] team0: Port device team_slave_0 removed [ 63.725530][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 63.757051][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 63.757070][ T28] audit: type=1400 audit(1781099034.676:379): avc: denied { write } for pid=4959 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.989764][ T28] audit: type=1400 audit(1781099034.906:380): avc: denied { relabelfrom } for pid=4966 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.991115][ T3433] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 64.034897][ T3433] bond1: (slave veth3): making interface the new active one [ 64.035651][ T28] audit: type=1400 audit(1781099034.906:381): avc: denied { relabelto } for pid=4966 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.065461][ T3433] bond1: active interface up! [ 64.176242][ T4985] loop3: detected capacity change from 0 to 512 [ 64.191384][ T4985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.213399][ T28] audit: type=1400 audit(1781099035.136:382): avc: denied { write } for pid=4983 comm="syz.3.360" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.246778][ T28] audit: type=1400 audit(1781099035.136:383): avc: denied { add_name } for pid=4983 comm="syz.3.360" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.277553][ T28] audit: type=1400 audit(1781099035.136:384): avc: denied { create } for pid=4983 comm="syz.3.360" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.297641][ T28] audit: type=1400 audit(1781099035.166:385): avc: denied { write } for pid=4983 comm="syz.3.360" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.319249][ T28] audit: type=1400 audit(1781099035.166:386): avc: denied { add_name } for pid=4983 comm="syz.3.360" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.340909][ T28] audit: type=1400 audit(1781099035.166:387): avc: denied { append } for pid=4983 comm="syz.3.360" path="/88/file1/bus/blkio.bfq.io_serviced" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.347555][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.365350][ T28] audit: type=1400 audit(1781099035.166:388): avc: denied { write } for pid=4983 comm="syz.3.360" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.458197][ T5001] loop3: detected capacity change from 0 to 512 [ 64.467696][ T5001] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 64.483845][ T5001] EXT4-fs (loop3): invalid journal inode [ 64.504639][ T5001] EXT4-fs (loop3): can't get journal size [ 64.528843][ T5001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 64.562212][ T5001] System zones: 1-12, 13-13 [ 64.578429][ T5001] EXT4-fs (loop3): 1 truncate cleaned up [ 64.591936][ T5001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.666039][ T5001] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 64.715987][ T5001] netlink: 'syz.3.362': attribute type 4 has an invalid length. [ 64.746059][ T5001] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.362'. [ 64.804764][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.093830][ T5045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 65.109339][ T5045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.375'. [ 66.918668][ T5077] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 66.985516][ T5086] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 67.791909][ T5157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.801711][ T5157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.923092][ T5192] netlink: 168 bytes leftover after parsing attributes in process `syz.1.402'. [ 68.152905][ T5204] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 68.189477][ T5198] loop6: detected capacity change from 0 to 256 [ 68.205967][ T5204] bond1: (slave gretap1): making interface the new active one [ 68.214192][ T5204] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 68.739757][ T5243] Driver unsupported XDP return value 0 on prog (id 94) dev N/A, expect packet loss! [ 69.258494][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 69.258511][ T28] audit: type=1400 audit(1781099040.176:411): avc: denied { map } for pid=5261 comm="syz.5.430" path="socket:[17935]" dev="sockfs" ino=17935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.306429][ T28] audit: type=1400 audit(1781099040.176:412): avc: denied { accept } for pid=5261 comm="syz.5.430" path="socket:[17935]" dev="sockfs" ino=17935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.372713][ T5267] syzkaller0: entered promiscuous mode [ 69.378346][ T5267] syzkaller0: entered allmulticast mode [ 69.392097][ T5267] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 70.081618][ T5284] loop3: detected capacity change from 0 to 512 [ 70.122132][ T5284] EXT4-fs: Mount option(s) incompatible with ext2 [ 70.289507][ T28] audit: type=1400 audit(1781099041.206:413): avc: denied { create } for pid=5306 comm="syz.5.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.313657][ T28] audit: type=1400 audit(1781099041.206:414): avc: denied { setopt } for pid=5306 comm="syz.5.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.338016][ T28] audit: type=1400 audit(1781099041.226:415): avc: denied { shutdown } for pid=5306 comm="syz.5.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.505279][ T5317] netlink: 276 bytes leftover after parsing attributes in process `syz.3.453'. [ 70.522544][ T5317] netlink: 276 bytes leftover after parsing attributes in process `syz.3.453'. [ 70.544543][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 70.563578][ T5327] veth0_to_team: entered promiscuous mode [ 70.578372][ T5327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.617131][ T5315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.079571][ T5354] ipvlan0: entered promiscuous mode [ 71.085026][ T5354] team0: Device ipvlan0 failed to enter team mode [ 71.098586][ T5354] team0: Device ipvlan0 failed to enter team mode [ 71.141668][ T5356] netlink: 'syz.5.468': attribute type 4 has an invalid length. [ 71.154237][ T5356] netlink: 'syz.5.468': attribute type 4 has an invalid length. [ 71.199223][ T5358] netlink: 'syz.5.469': attribute type 1 has an invalid length. [ 71.231655][ T5358] bond1: (slave veth5): Enslaving as an active interface with a down link [ 71.272477][ T5358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.316147][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.472'. [ 71.456539][ T5380] sctp: [Deprecated]: syz.5.479 (pid 5380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.456539][ T5380] Use struct sctp_sack_info instead [ 71.494883][ T28] audit: type=1400 audit(1781099042.416:416): avc: denied { create } for pid=5382 comm="syz.5.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.657985][ T5390] loop5: detected capacity change from 0 to 512 [ 71.709231][ T5390] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.481: attempt to clear invalid blocks 2 len 1 [ 71.723280][ T5390] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 71.723612][ T5390] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, [ 71.732788][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 71.732812][ C1] EXT4-fs (loop5): initial error at time 1781099042: ext4_clear_blocks:876: inode 13 [ 71.732858][ C1] EXT4-fs (loop5): last error at time 1781099042: ext4_clear_blocks:876: inode 13 [ 71.766454][ T5390] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 71.775249][ T28] audit: type=1400 audit(1781099042.656:417): avc: denied { read } for pid=5393 comm="syz.3.482" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.790598][ T5390] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.481: invalid indirect mapped block 1819239214 (level 0) [ 71.797856][ T28] audit: type=1400 audit(1781099042.656:418): avc: denied { open } for pid=5393 comm="syz.3.482" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.835140][ T5390] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 71.838210][ T5390] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.481: invalid indirect mapped block 1819239214 (level 1) [ 71.865173][ T5390] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 71.866132][ T5390] EXT4-fs (loop5): 1 truncate cleaned up [ 71.888695][ T5390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.915393][ T5396] loop3: detected capacity change from 0 to 256 [ 71.930615][ T5396] msdos: Bad value for 'uid' [ 71.935335][ T5396] msdos: Bad value for 'uid' [ 71.959373][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.099462][ T28] audit: type=1400 audit(1781099043.016:419): avc: denied { map } for pid=5395 comm="syz.3.484" path="socket:[18198]" dev="sockfs" ino=18198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.129299][ T3393] IPVS: starting estimator thread 0... [ 72.167794][ T28] audit: type=1400 audit(1781099043.016:420): avc: denied { read accept } for pid=5395 comm="syz.3.484" path="socket:[18198]" dev="sockfs" ino=18198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.231492][ T5409] IPVS: using max 2256 ests per chain, 112800 per kthread [ 73.369346][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 73.406612][ T5556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 73.493679][ T5566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.505'. [ 73.816326][ T5600] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 73.883329][ T5605] netlink: 'syz.6.519': attribute type 1 has an invalid length. [ 73.969936][ T5605] bond1: (slave veth3): Enslaving as an active interface with a down link [ 74.011915][ T5605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.043128][ T5615] loop3: detected capacity change from 0 to 512 [ 74.075784][ T5615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.103842][ T5615] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.158427][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.370375][ T5571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.482900][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 74.519555][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 75.389511][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 75.389526][ T28] audit: type=1400 audit(1781099046.306:440): avc: denied { ioctl } for pid=5658 comm="syz.3.540" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.426327][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.539'. [ 75.494929][ T28] audit: type=1400 audit(1781099046.416:441): avc: denied { accept } for pid=5666 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.523752][ T28] audit: type=1326 audit(1781099046.436:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.3.542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd45ce59 code=0x7ffc0000 [ 75.549650][ T28] audit: type=1326 audit(1781099046.446:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.3.542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd45ce59 code=0x7ffc0000 [ 75.575243][ T28] audit: type=1326 audit(1781099046.446:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.3.542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd45ce59 code=0x7ffc0000 [ 75.602166][ T28] audit: type=1326 audit(1781099046.446:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.3.542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd45ce59 code=0x7ffc0000 [ 75.628127][ T28] audit: type=1326 audit(1781099046.446:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.3.542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd45ce59 code=0x7ffc0000 [ 75.654287][ T28] audit: type=1326 audit(1781099046.446:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.3.542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7cbd45bcc7 code=0x7ffc0000 [ 75.690524][ T28] audit: type=1326 audit(1781099046.446:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.3.542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd45ce59 code=0x7ffc0000 [ 75.727134][ T28] audit: type=1326 audit(1781099046.446:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.3.542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd45ce59 code=0x7ffc0000 [ 75.876429][ T11] IPVS: starting estimator thread 0... [ 75.970310][ T5693] IPVS: using max 1776 ests per chain, 88800 per kthread [ 76.638622][ T5725] syzkaller0: refused to change device tx_queue_len [ 77.103265][ T5753] loop5: detected capacity change from 0 to 512 [ 77.150090][ T5753] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.207247][ T5753] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.251247][ T5753] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.577: bad orphan inode 131083 [ 77.261846][ T5753] loop5: lost filesystem error report for type 5 error -117 [ 77.265957][ T5753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.342945][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.514194][ T3908] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.563567][ T3908] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.632174][ T3908] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.704812][ T3908] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.921798][ T3908] bridge_slave_1: left allmulticast mode [ 77.929274][ T3908] bridge_slave_1: left promiscuous mode [ 77.946916][ T3908] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.968063][ T3908] bridge_slave_0: left allmulticast mode [ 77.978761][ T3908] bridge_slave_0: left promiscuous mode [ 77.988717][ T3908] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.011843][ T5809] __nla_validate_parse: 1 callbacks suppressed [ 78.011863][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.593'. [ 78.106023][ T3908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.119054][ T3908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.136925][ T3908] bond0 (unregistering): Released all slaves [ 78.150927][ T3908] bond1 (unregistering): (slave veth3): Releasing active interface [ 78.163979][ T3908] bond1 (unregistering): Released all slaves [ 78.180510][ T5802] bridge0: port 3(team0) entered blocking state [ 78.187185][ T5802] bridge0: port 3(team0) entered disabled state [ 78.195435][ T5802] team0: entered allmulticast mode [ 78.201332][ T5802] team_slave_1: entered allmulticast mode [ 78.208720][ T5802] team0: entered promiscuous mode [ 78.213920][ T5802] team_slave_1: entered promiscuous mode [ 78.227315][ T3908] hsr_slave_0: left promiscuous mode [ 78.233097][ T3908] hsr_slave_1: left promiscuous mode [ 78.238799][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.246219][ T3908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.254152][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.272248][ T3908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.293764][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.303618][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.367098][ T5826] Zero length message leads to an empty skb [ 78.494250][ T3908] veth1_macvtap: left promiscuous mode [ 78.499823][ T3908] veth0_macvtap: left promiscuous mode [ 78.506070][ T3908] veth1_vlan: left promiscuous mode [ 78.511462][ T3908] veth0_vlan: left promiscuous mode [ 78.606810][ T3908] team0 (unregistering): Port device team_slave_1 removed [ 78.619118][ T3908] team0 (unregistering): Port device team_slave_0 removed [ 78.659221][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 78.867167][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.874733][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.882738][ T5784] bridge_slave_0: entered allmulticast mode [ 78.897344][ T5784] bridge_slave_0: entered promiscuous mode [ 78.904254][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.911639][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.919206][ T5784] bridge_slave_1: entered allmulticast mode [ 78.925992][ T5784] bridge_slave_1: entered promiscuous mode [ 78.938491][ T3908] IPVS: stop unused estimator thread 0... [ 78.949980][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.960592][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.985042][ T5784] team0: Port device team_slave_0 added [ 79.001561][ T5784] team0: Port device team_slave_1 added [ 79.020752][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.027909][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.054312][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.065761][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.072870][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.099116][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.111403][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 79.141695][ T5784] hsr_slave_0: entered promiscuous mode [ 79.148155][ T5784] hsr_slave_1: entered promiscuous mode [ 79.154466][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 79.160441][ T5784] Cannot create hsr debugfs directory [ 79.364023][ T5883] loop3: detected capacity change from 0 to 128 [ 79.390513][ T5883] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 79.401028][ T5883] FAT-fs (loop3): Filesystem has been set read-only [ 79.452809][ T3305] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 79.610740][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 79.635484][ T5907] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.661345][ T5907] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.693179][ T5907] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.710333][ T5894] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.875122][ T5784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.900712][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.923571][ T5784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.936036][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.954831][ T5784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.982268][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.006458][ T5784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.052423][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.167596][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.198489][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.224511][ T3926] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.231642][ T3926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.270418][ T3926] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.277555][ T3926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.547654][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 80.547673][ T28] audit: type=1400 audit(1781099051.466:489): avc: denied { write } for pid=5968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.662262][ T28] audit: type=1400 audit(1781099051.586:490): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.757737][ T28] audit: type=1400 audit(1781099051.676:491): avc: denied { write } for pid=5993 comm="syz.1.619" path="socket:[22678]" dev="sockfs" ino=22678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.831902][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.911236][ T28] audit: type=1400 audit(1781099051.836:492): avc: denied { listen } for pid=6005 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 81.064266][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 81.181679][ T5784] veth0_vlan: entered promiscuous mode [ 81.192183][ T5784] veth1_vlan: entered promiscuous mode [ 81.206483][ T28] audit: type=1400 audit(1781099052.126:493): avc: denied { name_bind } for pid=6031 comm="syz.1.627" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 81.246738][ T5784] veth0_macvtap: entered promiscuous mode [ 81.256389][ T28] audit: type=1400 audit(1781099052.156:494): avc: denied { name_connect } for pid=6031 comm="syz.1.627" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 81.268834][ T5784] veth1_macvtap: entered promiscuous mode [ 81.332258][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.355704][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.370808][ T5918] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.395126][ T5918] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.405044][ T5918] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.424450][ T5918] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.622912][ T6047] loop6: detected capacity change from 0 to 1024 [ 81.655669][ T6047] EXT4-fs: Ignoring removed bh option [ 81.688975][ T6047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.723068][ T28] audit: type=1400 audit(1781099052.646:495): avc: denied { write } for pid=6046 comm="syz.6.632" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.796230][ T28] audit: type=1400 audit(1781099052.666:496): avc: denied { write } for pid=6046 comm="syz.6.632" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.819586][ T5784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.863164][ T28] audit: type=1400 audit(1781099052.766:497): avc: denied { bind } for pid=6054 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.899633][ T6058] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.635'. [ 81.990302][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.637'. [ 81.992165][ T6059] netlink: 76 bytes leftover after parsing attributes in process `syz.3.636'. [ 82.696211][ T28] audit: type=1400 audit(1781099053.616:498): avc: denied { cmd } for pid=6101 comm="syz.1.651" path="socket:[22364]" dev="sockfs" ino=22364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.735621][ T6104] loop3: detected capacity change from 0 to 128 [ 82.822769][ T6104] syz.3.652: attempt to access beyond end of device [ 82.822769][ T6104] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 82.837193][ T6104] syz.3.652: attempt to access beyond end of device [ 82.837193][ T6104] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 82.851302][ T6104] syz.3.652: attempt to access beyond end of device [ 82.851302][ T6104] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 82.866458][ T6104] syz.3.652: attempt to access beyond end of device [ 82.866458][ T6104] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 82.881182][ T6104] syz.3.652: attempt to access beyond end of device [ 82.881182][ T6104] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 82.895841][ T6104] syz.3.652: attempt to access beyond end of device [ 82.895841][ T6104] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 82.910113][ T6104] syz.3.652: attempt to access beyond end of device [ 82.910113][ T6104] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 82.926178][ T6104] syz.3.652: attempt to access beyond end of device [ 82.926178][ T6104] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 82.941456][ T6104] syz.3.652: attempt to access beyond end of device [ 82.941456][ T6104] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 82.955500][ T6104] syz.3.652: attempt to access beyond end of device [ 82.955500][ T6104] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 83.005874][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 83.015955][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 83.029930][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 83.040115][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 83.059670][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 84.238377][ T6155] netlink: 64 bytes leftover after parsing attributes in process `syz.3.673'. [ 84.255469][ T6155] syzkaller1: entered promiscuous mode [ 84.261740][ T6155] syzkaller1: entered allmulticast mode [ 84.359292][ T6171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.677'. [ 84.419961][ T6171] netlink: 'syz.0.677': attribute type 2 has an invalid length. [ 85.326406][ T6164] syz.0.677 (6164) used greatest stack depth: 9328 bytes left [ 85.409960][ T6191] netlink: 'syz.3.689': attribute type 15 has an invalid length. [ 85.428473][ T6194] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.533107][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.692'. [ 85.637330][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 85.637347][ T28] audit: type=1400 audit(1781099056.556:503): avc: denied { mount } for pid=6213 comm="syz.6.696" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.679000][ T6217] netlink: 'syz.3.697': attribute type 4 has an invalid length. [ 85.715352][ T6217] netlink: 'syz.3.697': attribute type 4 has an invalid length. [ 85.761331][ T28] audit: type=1400 audit(1781099056.686:504): avc: denied { create } for pid=6220 comm="syz.6.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.164888][ T6231] netlink: 'syz.1.701': attribute type 4 has an invalid length. [ 86.207112][ T6231] netlink: 'syz.1.701': attribute type 4 has an invalid length. [ 86.360077][ T28] audit: type=1400 audit(1781099057.276:505): avc: denied { setopt } for pid=6237 comm="syz.1.704" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.394580][ T28] audit: type=1400 audit(1781099057.316:506): avc: denied { bind } for pid=6240 comm="syz.0.705" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.418195][ T28] audit: type=1400 audit(1781099057.316:507): avc: denied { connect } for pid=6240 comm="syz.0.705" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.442031][ T28] audit: type=1400 audit(1781099057.316:508): avc: denied { write } for pid=6240 comm="syz.0.705" path="socket:[23158]" dev="sockfs" ino=23158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.450850][ T6243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.706'. [ 86.479700][ T28] audit: type=1400 audit(1781099057.366:509): avc: denied { ioctl } for pid=6242 comm="syz.1.706" path="socket:[23166]" dev="sockfs" ino=23166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.494672][ T6243] netlink: 76 bytes leftover after parsing attributes in process `syz.1.706'. [ 86.515527][ T6243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.706'. [ 86.657104][ T28] audit: type=1400 audit(1781099057.576:510): avc: denied { allowed } for pid=6248 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.716358][ T6249] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 86.864226][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 87.024350][ T6262] bridge0: port 3(team0) entered blocking state [ 87.039832][ T6262] bridge0: port 3(team0) entered disabled state [ 87.046861][ T6262] team0: entered allmulticast mode [ 87.052543][ T6262] team_slave_0: entered allmulticast mode [ 87.058738][ T6262] team_slave_1: entered allmulticast mode [ 87.068123][ T6262] team0: entered promiscuous mode [ 87.073565][ T6262] team_slave_0: entered promiscuous mode [ 87.079830][ T6262] team_slave_1: entered promiscuous mode [ 87.087075][ T6262] bridge0: port 3(team0) entered blocking state [ 87.093613][ T6262] bridge0: port 3(team0) entered forwarding state [ 87.138821][ T6271] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 87.164369][ T6271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.204061][ T6271] bond1: (slave ip6erspan0): making interface the new active one [ 87.217993][ T6271] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 87.232570][ T28] audit: type=1326 audit(1781099058.156:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.6.721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25aa7bce59 code=0x0 [ 87.279616][ T28] audit: type=1326 audit(1781099058.156:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.1.722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd79ece59 code=0x7ffc0000 [ 87.346154][ T6287] syzkaller1: entered promiscuous mode [ 87.351949][ T6287] syzkaller1: entered allmulticast mode [ 87.527240][ T6298] syzkaller1: entered promiscuous mode [ 87.535919][ T6298] syzkaller1: entered allmulticast mode [ 87.590041][ T6303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.609930][ T6303] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 87.690408][ T3926] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 87.717543][ T6308] bridge0: port 1(team0) entered blocking state [ 87.731742][ T6308] bridge0: port 1(team0) entered disabled state [ 87.752395][ T6308] team0: entered allmulticast mode [ 87.771930][ T6308] team0: entered promiscuous mode [ 87.820663][ T5894] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 87.829568][ T6325] netlink: 'syz.5.736': attribute type 1 has an invalid length. [ 87.883564][ T6325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.953515][ T6325] bond2: (slave ip6erspan0): making interface the new active one [ 87.975048][ T6325] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 88.052766][ T6338] loop5: detected capacity change from 0 to 512 [ 88.113570][ T6338] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 88.167537][ T6338] EXT4-fs (loop5): orphan cleanup on readonly fs [ 88.175271][ T6338] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.742: Block bitmap for bg 0 marked uninitialized [ 88.200028][ T6338] loop5: lost filesystem error report for type 5 error -117 [ 88.200147][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 88.213962][ C0] EXT4-fs (loop5): initial error at time 1781099059: ext4_read_block_bitmap_nowait:517 [ 88.222418][ T6338] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 88.223675][ C0] EXT4-fs (loop5): last error at time 1781099059: ext4_read_block_bitmap_nowait:517 [ 88.249931][ T6338] loop5: lost filesystem error report for type 5 error -117 [ 88.256589][ T6338] EXT4-fs (loop5): 1 orphan inode deleted [ 88.270386][ T6338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 88.373021][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.394820][ T6352] __nla_validate_parse: 3 callbacks suppressed [ 88.394840][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 88.484771][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.751'. [ 88.551806][ T6360] loop6: detected capacity change from 0 to 128 [ 88.565690][ T6360] msdos: Bad value for 'gid' [ 88.572082][ T6360] msdos: Bad value for 'gid' [ 88.581149][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.755'. [ 88.594388][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.755'. [ 88.604296][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.755'. [ 88.620057][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.755'. [ 89.198777][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 89.233103][ T6393] team2: entered promiscuous mode [ 89.238263][ T6393] team2: entered allmulticast mode [ 89.245450][ T6393] 8021q: adding VLAN 0 to HW filter on device team2 [ 89.257216][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 89.297240][ T6396] team3: entered promiscuous mode [ 89.303007][ T6396] team3: entered allmulticast mode [ 89.308322][ T6396] 8021q: adding VLAN 0 to HW filter on device team3 [ 89.883218][ T6410] bridge0: port 1(team0) entered blocking state [ 89.890473][ T6410] bridge0: port 1(team0) entered disabled state [ 89.897416][ T6410] team0: entered allmulticast mode [ 89.936543][ T6423] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 89.946417][ T6418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 89.977817][ T6423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.047685][ T6430] bond2: (slave ip6erspan0): making interface the new active one [ 90.104524][ T6430] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 90.240566][ T6442] loop5: detected capacity change from 0 to 512 [ 90.244723][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 90.262916][ T6442] EXT4-fs (loop5): invalid journal inode [ 90.275701][ T6442] EXT4-fs (loop5): can't get journal size [ 90.300343][ T6442] EXT4-fs (loop5): 1 truncate cleaned up [ 90.311337][ T6442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.918264][ T6457] loop3: detected capacity change from 0 to 128 [ 90.928111][ T6457] msdos: Bad value for 'gid' [ 90.941046][ T6457] msdos: Bad value for 'gid' [ 90.949488][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 92.994924][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.035476][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 93.035503][ T28] audit: type=1400 audit(1781099063.956:540): avc: denied { bind } for pid=6467 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.420746][ T6491] __nla_validate_parse: 9 callbacks suppressed [ 93.420766][ T6491] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.805'. [ 93.436218][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.805'. [ 93.466816][ T6493] loop3: detected capacity change from 0 to 1024 [ 93.475710][ T6493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.514549][ T6493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.527413][ T6495] loop5: detected capacity change from 0 to 1024 [ 93.534610][ T6495] ext4: Unknown parameter 'nojournal' [ 93.566045][ T28] audit: type=1400 audit(1781099064.486:541): avc: denied { watch watch_reads } for pid=6492 comm="syz.3.807" path="/175/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.630173][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.639417][ T28] audit: type=1400 audit(1781099064.516:542): avc: denied { write } for pid=6492 comm="syz.3.807" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.670862][ T28] audit: type=1400 audit(1781099064.526:543): avc: denied { write } for pid=6492 comm="syz.3.807" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.742957][ T6504] loop5: detected capacity change from 0 to 128 [ 93.749901][ T6504] msdos: Bad value for 'gid' [ 93.754827][ T6504] msdos: Bad value for 'gid' [ 93.762814][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 93.772888][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 93.783069][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 93.801335][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 94.028105][ T6519] loop3: detected capacity change from 0 to 512 [ 94.050007][ T6519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.078601][ T6519] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.817: iget: bad i_size value: 38620345925642 [ 94.091605][ T6519] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.091798][ T6519] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.817: couldn't read orphan inode 15 (err -117) [ 94.100994][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 94.101019][ C1] EXT4-fs (loop3): initial error at time 1781099065: ext4_orphan_get:1397: inode 15 [ 94.101065][ C1] EXT4-fs (loop3): last error at time 1781099065: ext4_orphan_get:1397: inode 15 [ 94.138017][ T6519] loop3: lost filesystem error report for type 5 error -117 [ 94.140405][ T6519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.179092][ T28] audit: type=1400 audit(1781099065.096:544): avc: denied { write } for pid=6518 comm="syz.3.817" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.256406][ T6529] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.817: bg 0: block 5: invalid block bitmap [ 94.289265][ T6529] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1708 with error 28 [ 94.324489][ T6529] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.324489][ T6529] [ 94.354049][ T6529] EXT4-fs (loop3): Total free blocks count 0 [ 94.374203][ T6529] EXT4-fs (loop3): Free/Dirty block details [ 94.400048][ T6529] EXT4-fs (loop3): free_blocks=0 [ 94.415804][ T6529] EXT4-fs (loop3): dirty_blocks=1760 [ 94.438755][ T28] audit: type=1400 audit(1781099065.356:545): avc: denied { write } for pid=6518 comm="syz.3.817" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.462680][ T6529] EXT4-fs (loop3): Block reservation details [ 94.476250][ T6529] EXT4-fs (loop3): i_reserved_data_blocks=1760 [ 94.499205][ T5894] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1708 with max blocks 52 with error 28 [ 94.552445][ T3305] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 94.755382][ T6547] netlink: 'syz.5.830': attribute type 1 has an invalid length. [ 94.835189][ T6547] bond3: (slave veth7): Enslaving as an active interface with a down link [ 94.899780][ T6547] bond3: (slave dummy0): making interface the new active one [ 94.938472][ T6547] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 94.959900][ T6562] loop6: detected capacity change from 0 to 2048 [ 94.969803][ T6558] netlink: 'syz.5.830': attribute type 10 has an invalid length. [ 94.977961][ T6558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.830'. [ 95.003500][ T6558] dummy0: entered promiscuous mode [ 95.015320][ T6562] loop6: p2 p3 p7 [ 95.016857][ T6558] bond3: (slave dummy0): Releasing active interface [ 95.039643][ T28] audit: type=1400 audit(1781099065.956:546): avc: denied { read write } for pid=6561 comm="syz.6.834" name="loop6p3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.082933][ T28] audit: type=1400 audit(1781099065.956:547): avc: denied { open } for pid=6561 comm="syz.6.834" path="/dev/loop6p3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.107398][ T28] audit: type=1400 audit(1781099065.986:548): avc: denied { sys_nice } for pid=6563 comm="syz.3.835" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 95.262247][ T28] audit: type=1400 audit(1781099066.186:549): avc: denied { read write } for pid=6574 comm="syz.6.840" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.299619][ T6572] netlink: 277 bytes leftover after parsing attributes in process `syz.5.839'. [ 95.313255][ T6573] loop3: detected capacity change from 0 to 512 [ 95.370250][ T6573] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 95.494647][ T6586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.843'. [ 95.515780][ T5894] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 95.622213][ T6592] loop5: detected capacity change from 0 to 512 [ 95.631744][ T6592] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.652240][ T6592] EXT4-fs (loop5): orphan cleanup on readonly fs [ 95.658732][ T6592] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 95.680892][ T6592] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.845: attempt to clear invalid blocks 2 len 1 [ 95.711300][ T6586] ip6gre1: entered promiscuous mode [ 95.716937][ T6586] ip6gre1: entered allmulticast mode [ 95.737753][ T6592] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 95.738204][ T6592] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, [ 95.747681][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 95.747706][ C0] EXT4-fs (loop5): initial error at time 1781099066: ext4_clear_blocks:876: inode 13 [ 95.747743][ C0] EXT4-fs (loop5): last error at time 1781099066: ext4_clear_blocks:876: inode 13 [ 95.781460][ T6592] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 95.791705][ T3926] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.808405][ T6592] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.845: invalid indirect mapped block 1819239214 (level 0) [ 95.822586][ T3926] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.836173][ T3926] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.850084][ T3926] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.850612][ T6592] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 95.885920][ T6593] netlink: 'syz.6.843': attribute type 6 has an invalid length. [ 95.905807][ T6592] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.845: invalid indirect mapped block 1819239214 (level 1) [ 95.933095][ T6592] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 95.933641][ T6592] EXT4-fs (loop5): 1 truncate cleaned up [ 95.948090][ T6593] netlink: 72 bytes leftover after parsing attributes in process `syz.6.843'. [ 95.967317][ T6592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.184436][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.712707][ T6595] kexec: Could not allocate control_code_buffer [ 98.045448][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 98.045497][ T28] audit: type=1400 audit(1781099324.963:632): avc: denied { open } for pid=6684 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 98.100384][ T28] audit: type=1400 audit(1781099324.993:633): avc: denied { create } for pid=6679 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 98.139429][ T28] audit: type=1400 audit(1781099325.043:634): avc: denied { read write } for pid=6679 comm="syz.3.885" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.176094][ T6695] netlink: 'syz.6.890': attribute type 1 has an invalid length. [ 98.193852][ T28] audit: type=1400 audit(1781099325.043:635): avc: denied { create } for pid=6691 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 98.220278][ T6695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.244877][ T6695] gretap1: entered promiscuous mode [ 98.253866][ T6695] bond1: (slave gretap1): making interface the new active one [ 98.262771][ T6695] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 98.285998][ T28] audit: type=1400 audit(1781099325.053:636): avc: denied { create } for pid=6691 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 98.341156][ T6698] bridge1: entered allmulticast mode [ 98.376816][ T28] audit: type=1400 audit(1781099325.053:637): avc: denied { read write } for pid=5784 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.414793][ T28] audit: type=1400 audit(1781099325.093:638): avc: denied { create } for pid=6691 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 98.436053][ T28] audit: type=1400 audit(1781099325.093:639): avc: denied { create } for pid=6691 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 98.460470][ T6703] xt_ecn: cannot match TCP bits for non-tcp packets [ 98.478516][ T28] audit: type=1400 audit(1781099325.103:640): avc: denied { create } for pid=6691 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 98.499586][ T28] audit: type=1400 audit(1781099325.103:641): avc: denied { read write } for pid=6691 comm="syz.0.889" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 98.891493][ T6736] __nla_validate_parse: 1 callbacks suppressed [ 98.891524][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 99.122139][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 99.167900][ T5901] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.175569][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.919'. [ 99.189586][ T5901] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.198585][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.919'. [ 99.199287][ T5901] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.216689][ T5901] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.226239][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.919'. [ 99.235373][ T5901] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.186379][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 100.197869][ T6802] hsr_slave_1 (unregistering): left promiscuous mode [ 101.180676][ T3587] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.208684][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.954'. [ 101.481371][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 101.653665][ T6866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.965'. [ 102.124850][ T6894] bond2: entered allmulticast mode [ 102.139109][ T6894] macvlan2: entered promiscuous mode [ 102.144859][ T6894] macvlan2: entered allmulticast mode [ 102.151037][ T6894] bond2: (slave macvlan2): Opening slave failed [ 102.481967][ T6930] netlink: 76 bytes leftover after parsing attributes in process `syz.1.992'. [ 103.466545][ T28] kauditd_printk_skb: 822 callbacks suppressed [ 103.466564][ T28] audit: type=1400 audit(1781099330.383:1464): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.511321][ T28] audit: type=1400 audit(1781099330.433:1465): avc: denied { execmem } for pid=6959 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 103.556246][ T28] audit: type=1400 audit(1781099330.453:1466): avc: denied { read write } for pid=5784 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.619019][ T28] audit: type=1400 audit(1781099330.503:1467): avc: denied { execmem } for pid=6961 comm="syz.6.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 103.669687][ T28] audit: type=1400 audit(1781099330.523:1468): avc: denied { read write } for pid=5784 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.738222][ T28] audit: type=1400 audit(1781099330.533:1469): avc: denied { create } for pid=6963 comm="syz.6.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 103.796202][ T28] audit: type=1400 audit(1781099330.533:1470): avc: denied { create } for pid=6963 comm="syz.6.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 103.847400][ T28] audit: type=1400 audit(1781099330.553:1471): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.905705][ T28] audit: type=1400 audit(1781099330.583:1472): avc: denied { read write } for pid=5784 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.961114][ T28] audit: type=1400 audit(1781099330.613:1473): avc: denied { read write } for pid=6967 comm="syz.6.1008" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.000548][ T6988] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 104.135669][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1019'. [ 104.352660][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 104.445468][ T7012] batman_adv: batadv0: Adding interface: dummy0 [ 104.451912][ T7012] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.478236][ T7012] batman_adv: batadv0: Interface activated: dummy0 [ 104.513093][ T7017] netlink: 'syz.5.1029': attribute type 1 has an invalid length. [ 104.528044][ T7017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 104.554804][ T7017] bond4: (slave geneve2): making interface the new active one [ 104.564446][ T7017] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 104.573537][ T5901] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.584315][ T5901] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.606914][ T5901] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.628521][ T5901] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.141030][ T7055] IPv6: sit1: Disabled Multicast RS [ 105.556893][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 105.883781][ T7056] ================================================================== [ 105.891922][ T7056] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 105.900554][ T7056] [ 105.902900][ T7056] write to 0xffff8881050530a0 of 8 bytes by task 7059 on cpu 0: [ 105.910560][ T7056] shmem_file_splice_read+0x40e/0x5a0 [ 105.915978][ T7056] splice_direct_to_actor+0x26e/0x670 [ 105.921408][ T7056] do_splice_direct+0x119/0x1a0 [ 105.926312][ T7056] do_sendfile+0x382/0x650 [ 105.930772][ T7056] __x64_sys_sendfile64+0x105/0x150 [ 105.936008][ T7056] x64_sys_call+0x2dc4/0x3020 [ 105.940723][ T7056] do_syscall_64+0x12c/0x3b0 [ 105.945369][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.951291][ T7056] [ 105.953648][ T7056] write to 0xffff8881050530a0 of 8 bytes by task 7056 on cpu 1: [ 105.961300][ T7056] shmem_file_splice_read+0x40e/0x5a0 [ 105.966720][ T7056] splice_direct_to_actor+0x26e/0x670 [ 105.972152][ T7056] do_splice_direct+0x119/0x1a0 [ 105.977058][ T7056] do_sendfile+0x382/0x650 [ 105.981528][ T7056] __x64_sys_sendfile64+0x105/0x150 [ 105.986765][ T7056] x64_sys_call+0x2dc4/0x3020 [ 105.991523][ T7056] do_syscall_64+0x12c/0x3b0 [ 105.996159][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.002091][ T7056] [ 106.004436][ T7056] value changed: 0x0000000000009a7a -> 0x0000000000009a7b [ 106.011565][ T7056] [ 106.013930][ T7056] Reported by Kernel Concurrency Sanitizer on: [ 106.020119][ T7056] CPU: 1 UID: 0 PID: 7056 Comm: syz.5.1043 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.029565][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.039654][ T7056] ==================================================================