last executing test programs: 4.221484939s ago: executing program 2 (id=3580): syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x2, 0x8000016f}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2.413455382s ago: executing program 1 (id=3596): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4404c010) 2.346129366s ago: executing program 1 (id=3599): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_delete(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000100)={0x7, 0x5, 0x3ff, 0xfffffffe, 0xf, 0x2}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.170266086s ago: executing program 2 (id=3602): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', 0x0}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000010ffffffffffff00000000000086dd6900040000202c00fc020000"], 0x5a) 1.622578957s ago: executing program 2 (id=3606): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendto$packet(r3, &(0x7f0000000440)="bad330752181510000316f3a277f953286ddd1dc9119f98ce83de5", 0x1b, 0x20040c1, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.547170322s ago: executing program 4 (id=3608): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB=' '], 0x20, 0x80}, 0x1) 1.461463197s ago: executing program 2 (id=3609): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.455617367s ago: executing program 2 (id=3611): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0xc008744c, 0xf0ff1f00000000) socket$packet(0x11, 0xa, 0x300) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@noquota}, {@errors_remount}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nouid32}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x2, 0x510, &(0x7f0000000500)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r1, 0x0, 0xbf5, 0x2000402) r2 = socket(0x2, 0xa, 0x300) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x60, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast2, 0x6}, 0x1c) 1.429328298s ago: executing program 1 (id=3613): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.392806691s ago: executing program 3 (id=3614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x4, 0x10000004, 0xbbc1, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}], 0x1}, 0x5) 1.335531994s ago: executing program 1 (id=3615): r0 = syz_open_procfs(0x0, 0x0) eventfd2(0x7, 0x801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) syz_io_uring_setup(0x70ca, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x70bd2b, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x40084) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="4e4f137360dcdeb3", 0x8}], 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r0, &(0x7f0000000140)=""/164, 0xa4) 1.06550583s ago: executing program 3 (id=3618): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="01040000000000000000ff0000000000951a0000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.031276692s ago: executing program 3 (id=3621): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_open_dev$tty1(0xc, 0x4, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xfe6c}, 0x1, 0x0, 0x0, 0x4}, 0x400800c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ptrace$poke(0x5, r0, 0x0, 0x200000000001) 965.438855ms ago: executing program 3 (id=3622): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 948.698756ms ago: executing program 3 (id=3623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4404c010) 865.191761ms ago: executing program 0 (id=3625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendto$packet(r3, &(0x7f0000000440)="bad330752181510000316f3a277f953286dd", 0x12, 0x20040c1, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0xd8, 0x6, @remote}, 0x14) 795.270035ms ago: executing program 3 (id=3626): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x5, 0x10}, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x2, 0x200, 0xed4, 0x1}, 0x10) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) 717.7268ms ago: executing program 0 (id=3627): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200410c5}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x3, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x1, 0x5, 0x6, 0x9, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706", 0x11}], 0x1}, 0x4) 655.567923ms ago: executing program 4 (id=3628): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) 581.842057ms ago: executing program 0 (id=3629): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x68, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 581.456438ms ago: executing program 4 (id=3630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4404c010) 521.058101ms ago: executing program 0 (id=3631): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 511.746821ms ago: executing program 4 (id=3632): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010027bd7000000000000000", @ANYRES32=r2, @ANYBLOB="00411ffffffffffc14002b"], 0x50}}, 0x4008000) 427.953856ms ago: executing program 4 (id=3633): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 427.656126ms ago: executing program 0 (id=3634): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 313.150083ms ago: executing program 0 (id=3635): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe072171"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be176d378767821df88e0ab00d48f37bc797485bf", 0x28}], 0x1}}], 0x1, 0x20008000) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) recvfrom$l2tp(r3, &(0x7f000000bc80)=""/82, 0x52, 0x0, 0x0, 0x0) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f000000ba40)=[{{&(0x7f0000000040)=@in={0x2, 0xfff5, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x6, 0x9}, {0x68, 0x10b, 0x4, "4d51500cfca81598ad8875621b9d5c987b6d58211a0e7044be385cd6d245ea27bfb55d8c89b728ef2eb2ee92062e971a8b9a4e67f605ed0940a739e88f3fec4584107eafd2f192242408a04584544572346ae4b1"}, {0x30, 0x107, 0x855, "da2433cbff5672c61b8813f2ff0400f1ae5c7dfab851a806c3"}, {0x10, 0x110, 0xffff96e3}, {0x58, 0x115, 0x7, "902dfd8232cd015be0138c507247c5d15cf9277ef6b25977d07c6e2df16402aa8b06eb6260fd0f229c32278fc71aa720f4169e7082fe964b06ea141f162def41dd56840d7dd5ae"}, {0x10, 0x117, 0x492}, {0x10, 0x111, 0x6}], 0x130}}, {{0x0, 0x0, &(0x7f00000016c0)}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002a00)="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", 0x1000}], 0x1}}, {{&(0x7f0000003b40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003bc0)="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", 0x2e4}], 0x1, &(0x7f0000004c00)=[{0x40, 0x107, 0xa, "411783099acbfd8f0bbff4a16005aafdf389685f8ce9e72577a388b36aead5f9a200296fbe3642a1be57"}, {0x10, 0x6, 0x8}, {0x50, 0x111, 0xd6, "e4e0d2a8e49ef49b92928af675fb11a104a56db461b25c1be523335f53b9bba0365306832192a6266703400376f264c140270d9fa3c211232b397ae8349496"}, {0x30, 0x1, 0xd0e4, "ff51a879ae4671346024f78cc474f370ee2156fed21cfd31a79bf8a8"}], 0xd0}}, {{&(0x7f0000004e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x4, 0x0, 0x0, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000006580)=[{0x10, 0x103, 0x1}], 0x10}}, {{&(0x7f00000075c0)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000008940)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000a080), 0x0, &(0x7f000000a0c0)=[{0x48, 0x115, 0x6, "16112d42b16bdb73a86f88e2ad8735db9745137ef53c240eae9d10bef7418c4399b31261196e9f4ee832797b92deeb6faa0d4bab1c671705"}], 0x48}}], 0x8, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 254.496536ms ago: executing program 1 (id=3636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 161.384171ms ago: executing program 2 (id=3637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendto$packet(r3, &(0x7f0000000440)="bad330752181510000316f3a277f953286dd", 0x12, 0x20040c1, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0xd8, 0x6, @remote}, 0x14) 124.014473ms ago: executing program 4 (id=3638): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 1 (id=3639): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB=' '], 0x20, 0x80}, 0x1) kernel console output (not intermixed with test programs): ] tipc: Resetting bearer [ 288.701814][T11061] tipc: Resetting bearer [ 288.714371][T11061] tipc: Disabling bearer [ 288.785418][T11075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 288.810909][T11077] loop3: detected capacity change from 0 to 1024 [ 288.819838][T11077] EXT4-fs: inline encryption not supported [ 288.832831][T11077] EXT4-fs: Ignoring removed nobh option [ 288.838465][T11077] EXT4-fs: Ignoring removed bh option [ 289.009612][T11077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.034198][T11077] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2576: Allocating blocks 497-513 which overlap fs metadata [ 289.435907][T11077] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2576: Allocating blocks 497-513 which overlap fs metadata [ 289.526671][T11098] tipc: Enabling of bearer rejected, failed to enable media [ 289.543230][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.595842][T11102] syzkaller0: entered promiscuous mode [ 289.601484][T11102] syzkaller0: entered allmulticast mode [ 289.798381][ T29] audit: type=1400 audit(1769551869.218:387): avc: denied { mount } for pid=11114 comm="syz.3.2587" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 290.291466][T11142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11142 comm=syz.3.2596 [ 290.601665][T11144] ip6t_REJECT: ECHOREPLY is not supported [ 290.813246][T11146] tipc: Enabled bearer , priority 0 [ 290.838212][T11146] tipc: Resetting bearer [ 290.871566][T11145] tipc: Disabling bearer [ 291.883248][ T29] audit: type=1326 audit(1769551871.318:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.0.2604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba0e6baeb9 code=0x0 [ 291.898154][T11168] loop1: detected capacity change from 0 to 512 [ 291.931769][T11169] tipc: Enabling of bearer rejected, failed to enable media [ 291.974422][T11168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 292.063305][T11168] EXT4-fs (loop1): 1 truncate cleaned up [ 292.083658][T11168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.120276][ T29] audit: type=1326 audit(1769551871.548:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34871aeb9 code=0x7ffc0000 [ 292.143747][ T29] audit: type=1326 audit(1769551871.548:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34871aeb9 code=0x7ffc0000 [ 292.167749][ T29] audit: type=1326 audit(1769551871.548:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa34871aeb9 code=0x7ffc0000 [ 292.191315][ T29] audit: type=1326 audit(1769551871.548:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34871aeb9 code=0x7ffc0000 [ 292.214820][ T29] audit: type=1326 audit(1769551871.548:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34871aeb9 code=0x7ffc0000 [ 292.238433][ T29] audit: type=1326 audit(1769551871.548:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa34871aeb9 code=0x7ffc0000 [ 292.261818][ T29] audit: type=1326 audit(1769551871.548:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34871aeb9 code=0x7ffc0000 [ 292.285368][ T29] audit: type=1326 audit(1769551871.548:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.1.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34871aeb9 code=0x7ffc0000 [ 292.314817][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.468672][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2613'. [ 292.515218][T11191] geneve0: entered promiscuous mode [ 292.520660][T11191] geneve0: entered allmulticast mode [ 292.747407][T11205] tipc: Enabled bearer , priority 0 [ 292.767766][T11205] tipc: Resetting bearer [ 292.801637][T11203] tipc: Disabling bearer [ 293.038281][T11212] loop3: detected capacity change from 0 to 736 [ 293.055241][T11212] rock: directory entry would overflow storage [ 293.055255][T11212] rock: sig=0x3b10, size=4, remaining=3 [ 293.287858][T11220] loop3: detected capacity change from 0 to 512 [ 293.431853][T11220] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 293.537363][T11220] System zones: 0-2, 18-18, 34-34 [ 293.611917][T11220] EXT4-fs (loop3): orphan cleanup on readonly fs [ 293.629464][T11220] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2624: bad orphan inode 13 [ 293.639796][T11220] ext4_test_bit(bit=12, block=18) = 1 [ 293.645304][T11220] is_bad_inode(inode)=0 [ 293.649476][T11220] NEXT_ORPHAN(inode)=2130706432 [ 293.654383][T11220] max_ino=32 [ 293.657600][T11220] i_nlink=1 [ 293.717238][T11220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.097332][T11246] loop4: detected capacity change from 0 to 1024 [ 294.174282][T11246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.479509][T11220] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2624'. [ 294.509259][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.521434][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 294.831813][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.550501][ T29] audit: type=1400 audit(1769551874.608:397): avc: denied { write } for pid=11264 comm="syz.1.2640" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 295.927357][ T29] audit: type=1400 audit(1769551875.358:398): avc: denied { bind } for pid=11285 comm="syz.4.2648" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.973922][T11287] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2642'. [ 296.000364][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2649'. [ 296.024824][ T29] audit: type=1400 audit(1769551875.458:399): avc: denied { execute } for pid=11294 comm="syz.4.2651" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 296.836356][T11320] loop3: detected capacity change from 0 to 1024 [ 296.848392][T11321] netlink: 'syz.1.2659': attribute type 2 has an invalid length. [ 296.856196][T11321] netlink: 'syz.1.2659': attribute type 1 has an invalid length. [ 296.863996][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 296.930314][T11323] tipc: Enabled bearer , priority 0 [ 296.955655][T11323] syzkaller0: entered promiscuous mode [ 296.961240][T11323] syzkaller0: entered allmulticast mode [ 296.979478][T11320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.030836][T11323] tipc: Resetting bearer [ 297.067182][ T29] audit: type=1400 audit(1769551876.498:400): avc: denied { create } for pid=11319 comm="syz.3.2660" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 297.120942][T11322] tipc: Resetting bearer [ 297.141788][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.156660][T11322] tipc: Disabling bearer [ 297.174013][T11333] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2664'. [ 297.840653][T11369] tipc: Enabled bearer , priority 0 [ 297.847811][T11369] syzkaller0: entered promiscuous mode [ 297.853434][T11369] syzkaller0: entered allmulticast mode [ 297.863634][T11369] tipc: Resetting bearer [ 297.876330][T11368] tipc: Resetting bearer [ 297.963846][T11368] tipc: Disabling bearer [ 297.993247][T11373] loop3: detected capacity change from 0 to 1024 [ 298.008926][T11373] EXT4-fs: inline encryption not supported [ 298.028689][T11373] EXT4-fs: Ignoring removed nobh option [ 298.034335][T11373] EXT4-fs: Ignoring removed bh option [ 298.098415][T11373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.351086][ T29] audit: type=1400 audit(1769551877.758:401): avc: denied { read write } for pid=11380 comm="syz.0.2679" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 298.374575][ T29] audit: type=1400 audit(1769551877.758:402): avc: denied { open } for pid=11380 comm="syz.0.2679" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 298.590469][T11388] loop4: detected capacity change from 0 to 512 [ 298.638452][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.713171][T11390] No such timeout policy "syz1" [ 298.746098][T11388] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.2681: inode has both inline data and extents flags [ 298.843349][T11388] EXT4-fs (loop4): get root inode failed [ 298.849138][T11388] EXT4-fs (loop4): mount failed [ 298.927082][T11398] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2684'. [ 298.941760][T11398] loop1: detected capacity change from 0 to 512 [ 299.588801][T11398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.073491][T11417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2690'. [ 300.162300][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.377938][T11432] loop3: detected capacity change from 0 to 512 [ 300.418878][T11432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 300.546651][T11432] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2696: bad orphan inode 11862016 [ 300.576254][T11432] EXT4-fs (loop3): Remounting filesystem read-only [ 300.667857][T11432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 301.200947][T11432] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.488154][ T29] audit: type=1400 audit(1769551880.919:403): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 301.836497][T11470] loop1: detected capacity change from 0 to 1024 [ 301.919977][ T29] audit: type=1400 audit(1769551881.349:404): avc: denied { open } for pid=11472 comm="syz.4.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 301.939542][ T29] audit: type=1400 audit(1769551881.349:405): avc: denied { kernel } for pid=11472 comm="syz.4.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 302.031502][T11470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.099805][ T29] audit: type=1326 audit(1769551881.429:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 302.123282][ T29] audit: type=1326 audit(1769551881.429:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 302.146891][ T29] audit: type=1326 audit(1769551881.429:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 302.170504][ T29] audit: type=1326 audit(1769551881.429:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 302.194256][ T29] audit: type=1326 audit(1769551881.429:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 302.313072][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.333134][ T29] audit: type=1400 audit(1769551881.679:411): avc: denied { execute_no_trans } for pid=11486 comm="syz.2.2710" path="/569/file0" dev="tmpfs" ino=2926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 302.356700][ T29] audit: type=1400 audit(1769551881.719:412): avc: denied { read } for pid=11486 comm="syz.2.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.450466][T11483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.461475][T11483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.516454][T11483] geneve0: left promiscuous mode [ 302.521508][T11483] geneve0: left allmulticast mode [ 302.536575][ T8490] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.558283][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.567670][T11439] chnl_net:caif_netlink_parms(): no params data found [ 302.589141][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.655954][ T8490] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.671445][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.683586][T11499] tipc: Enabling of bearer rejected, failed to enable media [ 302.692534][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.716969][ T8490] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.881899][T11439] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.889076][T11439] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.906363][T11439] bridge_slave_0: entered allmulticast mode [ 302.913299][T11439] bridge_slave_0: entered promiscuous mode [ 302.923696][ T8490] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.935669][T11439] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.942858][T11439] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.950354][T11439] bridge_slave_1: entered allmulticast mode [ 302.957082][T11439] bridge_slave_1: entered promiscuous mode [ 302.987616][T11439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.024015][T11439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.060099][ T8490] batadv1: left allmulticast mode [ 303.065271][ T8490] batadv1: left promiscuous mode [ 303.070476][ T8490] bridge0: port 3(batadv1) entered disabled state [ 303.090701][ T8490] bridge_slave_1: left allmulticast mode [ 303.096393][ T8490] bridge_slave_1: left promiscuous mode [ 303.102148][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.122157][ T8490] bridge_slave_0: left allmulticast mode [ 303.127857][ T8490] bridge_slave_0: left promiscuous mode [ 303.133770][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.264821][ T8490] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 303.341497][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 303.460365][ T8490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.493574][ T8490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.538527][ T8490] bond0 (unregistering): Released all slaves [ 303.582640][ T8490] bond1 (unregistering): Released all slaves [ 303.656232][ T8490] bond2 (unregistering): Released all slaves [ 303.756599][ T8490] bond3 (unregistering): Released all slaves [ 303.807259][ T8490] bond4 (unregistering): Released all slaves [ 303.861554][ T8490] bond5 (unregistering): Released all slaves [ 303.904075][ T8490] bond6 (unregistering): Released all slaves [ 303.950883][ T8490] bond7 (unregistering): Released all slaves [ 303.996429][ T8490] bond8 (unregistering): Released all slaves [ 304.250650][ T8490] tipc: Left network mode [ 304.342200][ T8490] hsr_slave_0: left promiscuous mode [ 304.355092][T11544] loop3: detected capacity change from 0 to 1024 [ 304.372996][ T8490] hsr_slave_1: left promiscuous mode [ 304.380508][T11544] EXT4-fs: inline encryption not supported [ 304.386762][T11544] EXT4-fs: Ignoring removed nobh option [ 304.392527][T11544] EXT4-fs: Ignoring removed bh option [ 304.403870][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.411320][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.443592][T11544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.456843][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.464367][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.503264][ T8490] veth1_macvtap: left promiscuous mode [ 304.509006][ T8490] veth0_macvtap: left promiscuous mode [ 304.537415][ T8490] veth1_vlan: left promiscuous mode [ 304.546297][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.555171][ T8490] veth0_vlan: left promiscuous mode [ 304.596658][T11562] sctp: [Deprecated]: syz.2.2723 (pid 11562) Use of int in maxseg socket option. [ 304.596658][T11562] Use struct sctp_assoc_value instead [ 304.727063][T11572] loop3: detected capacity change from 0 to 512 [ 304.747654][T11572] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 304.786082][T11572] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2724: bad orphan inode 11862016 [ 304.806103][T11572] EXT4-fs (loop3): Remounting filesystem read-only [ 304.822062][T11572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 304.835427][ T8490] team0 (unregistering): Port device vlan0 removed [ 304.867991][T11572] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.913447][ T8490] team0 (unregistering): Port device team_slave_1 removed [ 304.945677][ T8490] team0 (unregistering): Port device team_slave_0 removed [ 305.051401][T11439] team0: Port device team_slave_0 added [ 305.058103][T11439] team0: Port device team_slave_1 added [ 305.076990][T11576] tipc: Enabled bearer , priority 0 [ 305.099683][T11579] syzkaller0: entered promiscuous mode [ 305.105215][T11579] syzkaller0: entered allmulticast mode [ 305.138963][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 305.177539][T11439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.184603][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.210557][T11439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.276811][T11573] tipc: Resetting bearer [ 305.287588][T11439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.294735][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.320803][T11439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.358563][T11589] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 305.385509][T11570] tipc: Resetting bearer [ 305.392804][T11570] tipc: Disabling bearer [ 305.491479][T11439] hsr_slave_0: entered promiscuous mode [ 305.519543][T11439] hsr_slave_1: entered promiscuous mode [ 305.536838][T11439] debugfs: 'hsr0' already exists in 'hsr' [ 305.542689][T11439] Cannot create hsr debugfs directory [ 305.782575][ T9] hid_parser_main: 16 callbacks suppressed [ 305.782599][ T9] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 305.796350][ T9] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 305.849086][ T9] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 305.856685][ T9] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 305.864165][ T9] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 305.871641][ T9] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 305.879131][ T9] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 305.944898][ T9] hid-generic 0103:0004:0000.0004: hidraw0: HID v0.02 Device [syz0] on syz1 [ 306.041028][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 306.109345][T11439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.156121][T11439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.263989][T11439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.303512][T11439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.818399][T11653] netlink: 'syz.1.2739': attribute type 10 has an invalid length. [ 306.884505][T11661] syzkaller0: entered promiscuous mode [ 306.890053][T11661] syzkaller0: entered allmulticast mode [ 306.903753][T11653] veth1_vlan: entered allmulticast mode [ 306.956558][T11653] team0: Device veth1_vlan failed to register rx_handler [ 307.038753][T11439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.261159][T11439] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.280995][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.288215][ T8501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.354181][T11439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.364788][T11439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.435645][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.442803][ T8501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.479628][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 307.479647][ T29] audit: type=1326 audit(1769551886.899:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58da3aaeb9 code=0x0 [ 307.512715][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2745'. [ 307.723090][T11439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.945320][ T29] audit: type=1400 audit(1769551887.379:426): avc: denied { tracepoint } for pid=11727 comm="syz.4.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 308.001437][T11439] veth0_vlan: entered promiscuous mode [ 308.008170][ T29] audit: type=1400 audit(1769551887.409:427): avc: denied { getopt } for pid=11727 comm="syz.4.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.054096][T11439] veth1_vlan: entered promiscuous mode [ 308.140227][T11439] veth0_macvtap: entered promiscuous mode [ 308.175734][T11439] veth1_macvtap: entered promiscuous mode [ 308.244895][T11439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.299244][T11439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.385167][ T2636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.442218][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.468558][ T29] audit: type=1400 audit(1769551887.889:428): avc: denied { mounton } for pid=11439 comm="syz-executor" path="/root/syzkaller.e3ZYz9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 308.525746][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.569380][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.633936][T11750] loop4: detected capacity change from 0 to 512 [ 308.652948][ T29] audit: type=1400 audit(1769551887.939:429): avc: denied { mounton } for pid=11439 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 308.676065][ T29] audit: type=1400 audit(1769551887.939:430): avc: denied { mount } for pid=11439 comm="syz-executor" name="/" dev="gadgetfs" ino=4893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 308.735539][T11750] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 308.803956][T11766] syzkaller0: entered promiscuous mode [ 308.809536][T11766] syzkaller0: entered allmulticast mode [ 308.817219][T11750] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2759: bad orphan inode 11862016 [ 308.872958][T11750] EXT4-fs (loop4): Remounting filesystem read-only [ 308.909933][T11750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 308.963004][T11750] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.191886][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 309.596332][ T29] audit: type=1326 audit(1769551889.029:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.4.2768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a31caeb9 code=0x0 [ 309.623577][T11823] tipc: Enabling of bearer rejected, failed to enable media [ 309.653771][T11702] syz.1.2745 (11702) used greatest stack depth: 8808 bytes left [ 309.801737][T11697] syz.1.2745 (11697) used greatest stack depth: 7232 bytes left [ 310.027787][T11852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11852 comm=syz.2.2776 [ 310.122910][T11857] netlink: 'syz.2.2778': attribute type 1 has an invalid length. [ 310.311717][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'. [ 310.464021][ T29] audit: type=1326 audit(1769551889.889:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58da3aaeb9 code=0x7ffc0000 [ 310.487610][ T29] audit: type=1326 audit(1769551889.889:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58da3aaeb9 code=0x7ffc0000 [ 310.511216][ T29] audit: type=1326 audit(1769551889.889:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.3.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f58da3aaeb9 code=0x7ffc0000 [ 310.659339][T11893] loop4: detected capacity change from 0 to 2048 [ 310.714677][T11893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.882529][T11901] tipc: Started in network mode [ 310.887467][T11901] tipc: Node identity de1508455ff3, cluster identity 4711 [ 310.894774][T11901] tipc: Enabled bearer , priority 0 [ 310.942382][T11902] tipc: Resetting bearer [ 311.091523][T11900] tipc: Disabling bearer [ 311.526420][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.572413][T11874] chnl_net:caif_netlink_parms(): no params data found [ 311.688688][ C0] hrtimer: interrupt took 28077 ns [ 311.739519][T11891] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2785'. [ 311.790948][T11874] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.798228][T11874] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.854263][T11874] bridge_slave_0: entered allmulticast mode [ 311.878651][T11874] bridge_slave_0: entered promiscuous mode [ 311.913098][T11891] bridge1: entered promiscuous mode [ 311.918491][T11891] bridge1: entered allmulticast mode [ 311.991253][T11874] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.998463][T11874] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.024756][T11874] bridge_slave_1: entered allmulticast mode [ 312.054945][T11874] bridge_slave_1: entered promiscuous mode [ 312.114050][T11874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.141068][T11874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.159339][T11919] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 312.186965][T11919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.368575][T11919] bond4: (slave ip6gretap2): making interface the new active one [ 312.423769][T11919] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 312.442778][T11874] team0: Port device team_slave_0 added [ 312.486053][T11874] team0: Port device team_slave_1 added [ 312.737762][T11874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.744868][T11874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.770908][T11874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.134319][T11939] syzkaller0: entered promiscuous mode [ 313.139950][T11939] syzkaller0: entered allmulticast mode [ 313.197251][T11874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.204420][T11874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.230617][T11874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.576853][T11874] hsr_slave_0: entered promiscuous mode [ 313.621961][T11874] hsr_slave_1: entered promiscuous mode [ 313.647472][T11874] debugfs: 'hsr0' already exists in 'hsr' [ 313.653322][T11874] Cannot create hsr debugfs directory [ 313.685253][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 313.685268][ T29] audit: type=1400 audit(1769551893.119:522): avc: denied { ioctl } for pid=11960 comm="syz.0.2805" path="socket:[31894]" dev="sockfs" ino=31894 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.716697][T11961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2805'. [ 313.860285][T11966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2805'. [ 314.051297][T11874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.123730][T11874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.172228][T11874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.208994][ T29] audit: type=1326 audit(1769551893.639:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.0.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.234037][ T29] audit: type=1326 audit(1769551893.639:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.0.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.257824][ T29] audit: type=1326 audit(1769551893.669:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.0.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.283831][ T29] audit: type=1326 audit(1769551893.669:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.0.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.307584][ T29] audit: type=1326 audit(1769551893.669:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.0.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.333545][T11874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.400546][T11874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.412013][T11874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.419306][T11974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11974 comm=syz.1.2809 [ 314.434863][T11974] netlink: 'syz.1.2809': attribute type 1 has an invalid length. [ 314.465474][T11974] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.477363][T11874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.494590][T11874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.515266][T11974] bond5: (slave veth0_virt_wifi): making interface the new active one [ 314.535083][T11974] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 314.654417][T11874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.654975][T11988] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2812'. [ 314.716811][T11874] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.739687][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.746986][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.769463][T11994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11994 comm=syz.4.2815 [ 314.792919][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.800045][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.846744][T11994] netlink: 'syz.4.2815': attribute type 1 has an invalid length. [ 314.881307][ T29] audit: type=1326 audit(1769551894.319:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12003 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.904871][ T29] audit: type=1326 audit(1769551894.319:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12003 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.928395][ T29] audit: type=1326 audit(1769551894.319:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12003 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.952065][ T29] audit: type=1326 audit(1769551894.319:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12003 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 314.978384][T11994] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.031860][T11997] bond9: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 315.043077][T11874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.057404][T12012] program syz.0.2819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.205141][T11874] veth0_vlan: entered promiscuous mode [ 315.224833][T11874] veth1_vlan: entered promiscuous mode [ 315.257968][T11874] veth0_macvtap: entered promiscuous mode [ 315.292038][T11874] veth1_macvtap: entered promiscuous mode [ 315.334512][T11874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.363800][T11874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.375811][ T3473] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.385063][ T3473] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.423058][ T3473] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.451636][ T3473] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.484053][T12041] loop2: detected capacity change from 0 to 512 [ 315.503910][T12041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 315.513875][T12041] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.522984][T12041] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 315.613083][T12043] program syz.2.2828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.660014][T12046] syzkaller0: entered promiscuous mode [ 315.665561][T12046] syzkaller0: entered allmulticast mode [ 315.764630][T12047] syzkaller1: entered promiscuous mode [ 315.770259][T12047] syzkaller1: entered allmulticast mode [ 316.116852][T12058] loop3: detected capacity change from 0 to 512 [ 316.155177][T12058] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 316.311370][T12058] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2834: bad orphan inode 11862016 [ 316.435851][T12058] EXT4-fs (loop3): Remounting filesystem read-only [ 316.464300][T12069] loop4: detected capacity change from 0 to 128 [ 316.521440][T12058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 316.584746][T12069] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2837'. [ 316.660749][T12058] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.758407][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2837'. [ 316.792721][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 316.925204][T12082] program syz.2.2842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.775590][T12104] loop1: detected capacity change from 0 to 512 [ 317.818213][T12104] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.828311][T12104] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 317.837506][T12104] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 317.918152][T12106] 9p: Bad value for 'wfdno' [ 318.186660][T12121] syzkaller0: entered promiscuous mode [ 318.192310][T12121] syzkaller0: entered allmulticast mode [ 318.212184][T12123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12123 comm=syz.4.2860 [ 318.271691][T12123] netlink: 'syz.4.2860': attribute type 1 has an invalid length. [ 318.348077][T12123] 8021q: adding VLAN 0 to HW filter on device bond10 [ 318.493152][T12131] bond9: (slave veth0_virt_wifi): Releasing active interface [ 318.752903][T12131] bond10: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 319.088326][T12149] syzkaller0: entered promiscuous mode [ 319.093905][T12149] syzkaller0: entered allmulticast mode [ 319.303558][T12171] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 319.348108][T12177] netlink: 'syz.4.2876': attribute type 1 has an invalid length. [ 319.364166][T12177] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.470181][T12184] program syz.3.2878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.566604][T12194] loop3: detected capacity change from 0 to 1024 [ 319.575712][T12194] EXT4-fs: inline encryption not supported [ 319.589666][T12194] EXT4-fs: Ignoring removed nobh option [ 319.595434][T12194] EXT4-fs: Ignoring removed bh option [ 319.614945][T12194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.652473][T12199] syzkaller0: entered promiscuous mode [ 319.658131][T12199] syzkaller0: entered allmulticast mode [ 319.672232][T12194] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2883: Allocating blocks 497-513 which overlap fs metadata [ 319.690142][T12194] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2883: Allocating blocks 497-513 which overlap fs metadata [ 319.724861][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.793221][T12203] syzkaller0: entered promiscuous mode [ 319.798876][T12203] syzkaller0: entered allmulticast mode [ 319.892075][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'. [ 320.037168][T12208] tipc: Enabling of bearer rejected, failed to enable media [ 320.161092][T12218] loop1: detected capacity change from 0 to 512 [ 320.194677][T12218] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 320.242837][T12218] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2889: bad orphan inode 11862016 [ 320.264314][T12218] EXT4-fs (loop1): Remounting filesystem read-only [ 320.272492][T12218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 320.285280][T12218] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.381713][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 320.452857][T12232] program syz.1.2893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.579220][T12245] program syz.0.2900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.815879][T12253] team0 (unregistering): Port device team_slave_0 removed [ 320.842189][T12253] team0 (unregistering): Port device team_slave_1 removed [ 320.944976][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 320.945030][ T29] audit: type=1326 audit(1769551900.380:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.3.2904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58da3aaeb9 code=0x0 [ 322.134212][T12276] program syz.1.2910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.256771][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.294157][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.328043][ T29] audit: type=1326 audit(1769551901.760:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.0.2912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26ab37aeb9 code=0x0 [ 322.470408][T12288] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2915'. [ 324.323036][T12318] netlink: 'syz.0.2924': attribute type 1 has an invalid length. [ 324.345443][T12319] loop2: detected capacity change from 0 to 256 [ 324.394829][T12318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.492939][T12319] FAT-fs (loop2): codepage cp932 not found [ 324.505599][T12323] bond1: (slave ip6gretap1): making interface the new active one [ 324.539786][T12323] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 324.720529][T12327] loop2: detected capacity change from 0 to 512 [ 324.728925][T12327] EXT4-fs: Ignoring removed bh option [ 324.740237][T12327] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 324.780892][T12331] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2927'. [ 325.553708][T12327] EXT4-fs (loop2): 1 truncate cleaned up [ 325.867468][T12327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.938225][T12353] program syz.4.2933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.016639][ T29] audit: type=1326 audit(1769551905.450:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58da3aaeb9 code=0x7ffc0000 [ 326.080158][ T29] audit: type=1326 audit(1769551905.450:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58da3aaeb9 code=0x7ffc0000 [ 326.103821][ T29] audit: type=1326 audit(1769551905.450:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f58da3aaeb9 code=0x7ffc0000 [ 326.209359][ T29] audit: type=1326 audit(1769551905.640:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58da3aaeb9 code=0x7ffc0000 [ 326.233259][ T29] audit: type=1326 audit(1769551905.640:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12355 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58da3aaeb9 code=0x7ffc0000 [ 326.529170][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.568053][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.590923][T11874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.055152][T12409] tipc: Enabling of bearer rejected, failed to enable media [ 328.164876][T12413] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 328.389113][T12420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.407707][T12420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.755807][T12398] loop4: detected capacity change from 0 to 65536 [ 328.875490][ T29] audit: type=1326 audit(1769551908.310:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.4.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 328.937505][T12433] program syz.3.2960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.965001][ T29] audit: type=1326 audit(1769551908.340:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.4.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72a316c2d9 code=0x7ffc0000 [ 328.988487][ T29] audit: type=1326 audit(1769551908.340:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.4.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 329.011975][ T29] audit: type=1326 audit(1769551908.340:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.4.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 329.035537][ T29] audit: type=1326 audit(1769551908.340:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.4.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 329.661826][T12443] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 329.772325][T12443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.805254][T12455] program syz.0.2966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.853653][T12453] macvlan2: entered promiscuous mode [ 329.859118][T12453] macvlan2: entered allmulticast mode [ 329.928000][T12460] tipc: Enabling of bearer rejected, failed to enable media [ 330.106056][T12471] program syz.0.2970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.227839][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2971'. [ 330.305324][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2971'. [ 330.456259][T12483] program syz.3.2974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.657934][T12493] program syz.3.2977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.058793][T12504] program syz.3.2981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.159547][T12507] loop4: detected capacity change from 0 to 256 [ 331.274716][T12510] syzkaller0: entered promiscuous mode [ 331.280405][T12510] syzkaller0: entered allmulticast mode [ 331.288955][T12507] FAT-fs (loop4): codepage cp932 not found [ 331.345665][T12512] tipc: Enabled bearer , priority 0 [ 331.375009][T12507] loop4: detected capacity change from 0 to 512 [ 331.404261][T12512] syzkaller0: entered promiscuous mode [ 331.409860][T12512] syzkaller0: entered allmulticast mode [ 331.422531][T12507] EXT4-fs: Ignoring removed bh option [ 331.459625][T12507] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 331.498747][T12512] tipc: Resetting bearer [ 331.518663][T12507] EXT4-fs (loop4): 1 truncate cleaned up [ 331.541887][T12511] tipc: Resetting bearer [ 331.561462][T12507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.593122][T12511] tipc: Disabling bearer [ 331.626954][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 331.626973][ T29] audit: type=1400 audit(1769551911.060:631): avc: denied { write } for pid=12505 comm="syz.4.2982" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 331.717776][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.747126][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.754365][T12521] netlink: 'syz.0.2987': attribute type 1 has an invalid length. [ 331.768551][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.829909][T12525] program syz.4.2988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.841021][T12521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.930083][T12521] bond2: (slave gretap1): making interface the new active one [ 331.984077][T12521] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 332.005095][T12470] loop1: detected capacity change from 0 to 65536 [ 332.045850][T12531] program syz.4.2990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.126450][T12535] tipc: Enabling of bearer rejected, failed to enable media [ 332.152776][T12535] syzkaller0: entered promiscuous mode [ 332.158375][T12535] syzkaller0: entered allmulticast mode [ 332.296292][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2994'. [ 332.326946][T12542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.342749][T12542] batadv_slave_0: entered promiscuous mode [ 332.942092][T12552] program syz.1.2998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.026101][T12554] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2999'. [ 333.049951][T12559] program syz.4.3001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.126501][ T29] audit: type=1326 audit(1769551912.560:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.150019][ T29] audit: type=1326 audit(1769551912.560:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.180859][ T29] audit: type=1326 audit(1769551912.570:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.206374][T12566] loop1: detected capacity change from 0 to 256 [ 333.298517][ T29] audit: type=1326 audit(1769551912.640:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.322442][ T29] audit: type=1326 audit(1769551912.660:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.346429][ T29] audit: type=1326 audit(1769551912.660:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.370002][ T29] audit: type=1326 audit(1769551912.660:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.393487][ T29] audit: type=1326 audit(1769551912.660:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.417538][ T29] audit: type=1326 audit(1769551912.660:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12560 comm="syz.4.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 333.457610][T12566] bio_check_eod: 3 callbacks suppressed [ 333.457630][T12566] syz.1.3004: attempt to access beyond end of device [ 333.457630][T12566] loop1: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 333.669020][T12581] program syz.1.3010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.024954][T12596] program syz.0.3013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.195873][T12598] tipc: Enabled bearer , priority 0 [ 334.210241][T12598] syzkaller0: entered promiscuous mode [ 334.215926][T12598] syzkaller0: entered allmulticast mode [ 334.244120][T12598] tipc: Resetting bearer [ 334.257443][T12597] tipc: Resetting bearer [ 334.269320][T12597] tipc: Disabling bearer [ 334.396928][T12602] program syz.0.3016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.477264][T12604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.508915][T12604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.557021][T12606] netlink: 'syz.4.3018': attribute type 1 has an invalid length. [ 334.649798][T12606] 8021q: adding VLAN 0 to HW filter on device bond12 [ 334.662656][T12613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12613 comm=syz.1.3020 [ 334.728933][T12613] netlink: 'syz.1.3020': attribute type 1 has an invalid length. [ 334.747963][T12606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12606 comm=syz.4.3018 [ 334.787753][T12617] bond5: (slave veth0_virt_wifi): Releasing active interface [ 334.819752][T12619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.847148][T12619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.853019][T12613] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.978265][T12629] program syz.3.3025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.091821][T12636] netlink: 'syz.1.3028': attribute type 1 has an invalid length. [ 335.129014][T12636] 8021q: adding VLAN 0 to HW filter on device bond8 [ 336.028180][T12653] syzkaller0: entered promiscuous mode [ 336.033883][T12653] syzkaller0: entered allmulticast mode [ 336.189693][T12655] loop1: detected capacity change from 0 to 256 [ 336.244563][T12655] FAT-fs (loop1): codepage cp932 not found [ 336.436623][T12663] loop1: detected capacity change from 0 to 512 [ 336.479095][T12663] EXT4-fs: Ignoring removed bh option [ 336.503607][T12666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 336.513194][T12663] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 336.544247][T12663] EXT4-fs (loop1): 1 truncate cleaned up [ 336.568368][T12663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.718252][T12672] program syz.4.3039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.786959][T12674] program syz.4.3040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.842441][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3041'. [ 337.082039][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.385960][T12691] syzkaller0: entered promiscuous mode [ 337.391621][T12691] syzkaller0: entered allmulticast mode [ 337.533509][T12697] netlink: 'syz.3.3048': attribute type 1 has an invalid length. [ 337.566263][T12697] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.593168][T12697] macvlan2: entered promiscuous mode [ 337.598611][T12697] macvlan2: entered allmulticast mode [ 337.618041][T12697] bond5: (slave macvlan2): Opening slave failed [ 337.710824][T12701] program syz.3.3049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.793672][T12703] syzkaller0: entered promiscuous mode [ 337.799245][T12703] syzkaller0: entered allmulticast mode [ 337.945559][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3052'. [ 338.231983][T12727] program syz.1.3060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.248614][T12728] loop3: detected capacity change from 0 to 128 [ 338.255400][T12728] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 338.324961][T12728] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 338.325253][T12730] syzkaller0: entered promiscuous mode [ 338.339614][T12730] syzkaller0: entered allmulticast mode [ 338.352038][T12734] loop1: detected capacity change from 0 to 128 [ 338.365818][T12735] loop2: detected capacity change from 0 to 512 [ 338.380036][T12734] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3064'. [ 338.410168][T12735] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 338.419207][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 338.419223][ T29] audit: type=1400 audit(1769551917.851:700): avc: denied { getopt } for pid=12733 comm="syz.1.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 338.550203][T12735] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3063: bad orphan inode 11862016 [ 338.562544][T12735] EXT4-fs (loop2): Remounting filesystem read-only [ 338.611939][T12735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 338.675659][T12735] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.915950][T12750] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3068'. [ 339.860021][T12757] program syz.1.3071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.461448][ T2636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.551709][ T2636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.654072][ T2636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.699118][ T2636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.880306][ T2636] bridge_slave_1: left allmulticast mode [ 340.886008][ T2636] bridge_slave_1: left promiscuous mode [ 340.891825][ T2636] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.921872][T12778] program syz.4.3075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.016419][ T2636] bridge_slave_0: left allmulticast mode [ 341.022516][ T2636] bridge_slave_0: left promiscuous mode [ 341.028251][ T2636] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.087803][ T2636] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 341.168250][ T2636] bond3 (unregistering): (slave geneve0): Releasing backup interface [ 341.224589][ T2636] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 341.291547][ T2636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.303917][T11874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 341.320267][ T2636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.342904][ T2636] bond0 (unregistering): Released all slaves [ 341.376362][ T2636] bond1 (unregistering): Released all slaves [ 341.401622][ T2636] bond2 (unregistering): Released all slaves [ 341.424271][ T2636] bond3 (unregistering): Released all slaves [ 341.432845][T12801] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 341.452155][ T2636] bond4 (unregistering): Released all slaves [ 341.470797][ T2636] bond5 (unregistering): Released all slaves [ 341.494880][T12766] chnl_net:caif_netlink_parms(): no params data found [ 341.512642][T12783] syzkaller0: entered promiscuous mode [ 341.518241][T12783] syzkaller0: entered allmulticast mode [ 341.549554][T12801] 8021q: adding VLAN 0 to HW filter on device bond9 [ 341.561367][T12803] macvlan3: entered promiscuous mode [ 341.566749][T12803] macvlan3: entered allmulticast mode [ 341.618509][T12803] bond9: entered promiscuous mode [ 341.623873][T12803] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 341.632265][T12803] bond9: left promiscuous mode [ 341.647466][ T2636] tipc: Left network mode [ 341.648639][T12804] syzkaller0: entered promiscuous mode [ 341.657346][T12804] syzkaller0: entered allmulticast mode [ 341.724019][ T2636] hsr_slave_0: left promiscuous mode [ 341.731012][ T2636] hsr_slave_1: left promiscuous mode [ 341.736807][ T2636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.755816][ T2636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.780682][T12817] loop1: detected capacity change from 0 to 128 [ 341.828662][ T2636] team0 (unregistering): Port device team_slave_1 removed [ 341.840846][ T2636] team0 (unregistering): Port device team_slave_0 removed [ 342.010981][T12827] loop4: detected capacity change from 0 to 512 [ 342.043096][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.050260][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.097275][T12827] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 342.121750][T12766] bridge_slave_0: entered allmulticast mode [ 342.153412][T12766] bridge_slave_0: entered promiscuous mode [ 342.161584][T12827] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3087: bad orphan inode 11862016 [ 342.175393][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.182779][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.201001][T12827] EXT4-fs (loop4): Remounting filesystem read-only [ 342.214756][T12827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 342.227692][T12827] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.239090][T12766] bridge_slave_1: entered allmulticast mode [ 342.245672][T12766] bridge_slave_1: entered promiscuous mode [ 342.282239][T12853] loop2: detected capacity change from 0 to 2048 [ 342.307350][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.327987][ T3301] loop2: p1 < > p4 [ 342.334724][ T3301] loop2: p4 size 722688 extends beyond EOD, truncated [ 342.343451][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.365317][T12853] loop2: p1 < > p4 [ 342.380156][T12766] team0: Port device team_slave_0 added [ 342.397311][T12853] loop2: p4 size 722688 extends beyond EOD, truncated [ 342.402780][T12766] team0: Port device team_slave_1 added [ 342.454969][ T29] audit: type=1400 audit(1769551921.891:701): avc: denied { connect } for pid=12850 comm="syz.2.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 342.509491][T12766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.516925][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.543125][T12766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.559205][T12766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.566211][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.592294][T12766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.604533][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 342.615799][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 342.688366][T12766] hsr_slave_0: entered promiscuous mode [ 342.700990][T12766] hsr_slave_1: entered promiscuous mode [ 342.799031][T12874] netlink: 'syz.1.3094': attribute type 1 has an invalid length. [ 342.850752][T12874] 8021q: adding VLAN 0 to HW filter on device bond10 [ 342.891449][T12882] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 343.077910][ T29] audit: type=1326 audit(1769551922.521:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.141607][ T29] audit: type=1326 audit(1769551922.541:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.165169][ T29] audit: type=1326 audit(1769551922.551:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.188692][ T29] audit: type=1326 audit(1769551922.551:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.212436][ T29] audit: type=1326 audit(1769551922.551:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.236016][ T29] audit: type=1326 audit(1769551922.551:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.259575][ T29] audit: type=1326 audit(1769551922.551:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.283178][ T29] audit: type=1326 audit(1769551922.551:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.327681][T12902] loop1: detected capacity change from 0 to 256 [ 343.351753][T12902] FAT-fs (loop1): codepage cp932 not found [ 343.422631][T12907] syzkaller0: entered promiscuous mode [ 343.428206][T12907] syzkaller0: entered allmulticast mode [ 343.436182][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 343.436199][ T29] audit: type=1326 audit(1769551922.581:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.466336][ T29] audit: type=1326 audit(1769551922.741:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.0.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x7ffc0000 [ 343.516316][T12766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.519730][T12909] loop1: detected capacity change from 0 to 512 [ 343.543132][T12766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.597915][T12909] EXT4-fs: Ignoring removed bh option [ 343.676824][T12766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.688003][T12766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.717151][T12909] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 343.797674][T12909] EXT4-fs (loop1): 1 truncate cleaned up [ 343.838543][T12766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.851516][T12766] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.862027][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.869184][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.888983][T12766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.899670][T12766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.912826][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.917387][T12909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.919925][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.951283][ T29] audit: type=1400 audit(1769551923.391:734): avc: denied { append } for pid=12934 comm="syz.2.3105" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 343.957957][T12933] loop7: detected capacity change from 7 to 0 [ 344.077154][T12766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.087981][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 344.129288][T12949] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 344.165808][T12949] 8021q: adding VLAN 0 to HW filter on device bond13 [ 344.179874][T12949] macvlan2: entered promiscuous mode [ 344.185289][T12949] macvlan2: entered allmulticast mode [ 344.192516][T12949] bond13: entered promiscuous mode [ 344.198026][T12949] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 344.268724][T12949] bond13: left promiscuous mode [ 344.274292][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.398008][T12766] veth0_vlan: entered promiscuous mode [ 344.426828][T12766] veth1_vlan: entered promiscuous mode [ 344.495026][T12766] veth0_macvtap: entered promiscuous mode [ 344.516107][T12766] veth1_macvtap: entered promiscuous mode [ 344.550587][T12979] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3111'. [ 344.572335][T12766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.606680][T12766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.641195][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.677740][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.722318][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.756186][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.203782][T13007] program syz.3.3074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.261852][T13009] loop2: detected capacity change from 0 to 512 [ 345.287770][T13014] syzkaller0: entered promiscuous mode [ 345.293440][T13014] syzkaller0: entered allmulticast mode [ 345.310544][T13009] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 345.370202][T13009] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3116: bad orphan inode 11862016 [ 345.397902][T13009] EXT4-fs (loop2): Remounting filesystem read-only [ 345.408239][T13009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 345.427086][T13009] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.608611][T13035] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3118'. [ 345.872040][T13044] program syz.4.3122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.960170][ T29] audit: type=1326 audit(1769551925.401:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 346.003024][ T29] audit: type=1326 audit(1769551925.421:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 346.026574][ T29] audit: type=1326 audit(1769551925.421:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 346.050084][ T29] audit: type=1326 audit(1769551925.421:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 346.073823][ T29] audit: type=1326 audit(1769551925.421:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 346.097514][ T29] audit: type=1326 audit(1769551925.431:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 346.120971][ T29] audit: type=1326 audit(1769551925.431:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a31caeb9 code=0x7ffc0000 [ 346.181704][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.273491][T13063] program syz.0.3127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.298384][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.366574][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.413732][T13041] chnl_net:caif_netlink_parms(): no params data found [ 346.426308][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.481442][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.488692][T13041] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.774994][T11874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 346.922355][T13041] bridge_slave_0: entered allmulticast mode [ 346.929053][T13041] bridge_slave_0: entered promiscuous mode [ 346.936729][T13041] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.943847][T13041] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.951096][T13041] bridge_slave_1: entered allmulticast mode [ 346.957951][T13041] bridge_slave_1: entered promiscuous mode [ 347.025269][ T57] bridge_slave_1: left allmulticast mode [ 347.031156][ T57] bridge_slave_1: left promiscuous mode [ 347.036870][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.077748][ T57] bridge_slave_0: left allmulticast mode [ 347.083453][ T57] bridge_slave_0: left promiscuous mode [ 347.089241][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.145806][ T57] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 347.222321][ T57] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 347.436295][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.510144][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.592414][ T57] bond0 (unregistering): Released all slaves [ 347.633761][ T57] bond1 (unregistering): Released all slaves [ 347.669291][ T57] bond2 (unregistering): Released all slaves [ 347.711764][ T57] bond3 (unregistering): Released all slaves [ 347.756796][ T57] bond4 (unregistering): Released all slaves [ 347.793813][ T57] bond5 (unregistering): Released all slaves [ 347.840305][ T57] bond6 (unregistering): Released all slaves [ 347.872371][ T57] bond7 (unregistering): Released all slaves [ 347.913026][ T57] bond8 (unregistering): Released all slaves [ 347.949917][ T57] bond9 (unregistering): Released all slaves [ 347.980777][ T57] bond10 (unregistering): Released all slaves [ 348.062569][T13041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.094630][ T57] tipc: Disabling bearer [ 348.100073][ T57] tipc: Left network mode [ 348.130437][T13041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.142138][ T57] hsr_slave_0: left promiscuous mode [ 348.154786][ T57] hsr_slave_1: left promiscuous mode [ 348.169436][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.176955][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.208091][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.215563][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.247102][T13110] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3136'. [ 348.270060][ T57] veth1_macvtap: left promiscuous mode [ 348.286418][ T57] veth0_macvtap: left promiscuous mode [ 348.304851][ T57] veth0_vlan: left promiscuous mode [ 348.463254][ T57] team0 (unregistering): Port device team_slave_1 removed [ 348.478786][ T57] team0 (unregistering): Port device team_slave_0 removed [ 348.572734][T13041] team0: Port device team_slave_0 added [ 348.579664][T13124] syzkaller0: entered promiscuous mode [ 348.585267][T13124] syzkaller0: entered allmulticast mode [ 348.616796][T13041] team0: Port device team_slave_1 added [ 348.665753][T13041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.672932][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.699120][T13041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.745856][T13130] syzkaller0: entered promiscuous mode [ 348.751422][T13130] syzkaller0: entered allmulticast mode [ 348.764945][T13041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.772054][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.798418][T13041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.812344][T13136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13136 comm=syz.0.3144 [ 348.872578][T13041] hsr_slave_0: entered promiscuous mode [ 348.887341][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 348.887359][ T29] audit: type=1400 audit(1769551928.321:769): avc: denied { ioctl } for pid=13140 comm="syz.4.3146" path="socket:[34426]" dev="sockfs" ino=34426 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 348.896964][T13136] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 348.944528][T13041] hsr_slave_1: entered promiscuous mode [ 348.958859][T13041] debugfs: 'hsr0' already exists in 'hsr' [ 348.964656][T13041] Cannot create hsr debugfs directory [ 349.020003][T13136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.073904][T13139] bond3: (slave veth0_virt_wifi): making interface the new active one [ 349.094492][T13139] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 349.116573][T13155] tipc: Started in network mode [ 349.121640][T13155] tipc: Node identity 1244e1e87676, cluster identity 4711 [ 349.128891][T13155] tipc: Enabled bearer , priority 0 [ 349.169921][T13163] syzkaller0: entered promiscuous mode [ 349.175606][T13163] syzkaller0: entered allmulticast mode [ 349.235682][T13151] tipc: Resetting bearer [ 349.250001][T13151] tipc: Disabling bearer [ 349.400238][T13175] program syz.2.3154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.431518][T13178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13178 comm=syz.3.3155 [ 349.624884][T13185] program syz.2.3158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.650869][T13189] program syz.0.3159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.719365][T13194] program syz.0.3160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.750690][T13197] netlink: 'syz.3.3162': attribute type 1 has an invalid length. [ 349.761900][T13041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.794983][T13041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.836152][T13041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.863283][T13202] syzkaller0: entered promiscuous mode [ 349.869060][T13202] syzkaller0: entered allmulticast mode [ 349.916945][T13041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.053324][T13041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.112231][T13041] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.158643][ T5605] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 350.166230][ T5605] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 350.175713][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.182866][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.199892][T13232] program syz.0.3169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.200963][ T5605] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 350.216663][ T5605] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 350.224383][ T5605] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 350.232081][ T5605] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 350.239773][ T5605] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 350.251308][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.258397][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.303451][T13237] program syz.4.3170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.312534][T13041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.323115][T13041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.361285][ T5605] hid-generic 0103:0004:0000.0005: hidraw0: HID v0.02 Device [syz0] on syz1 [ 350.410078][T13245] program syz.4.3172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.423482][T13242] fido_id[13242]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 350.618232][T13041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.656765][T13275] program syz.0.3181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.782554][T13291] syzkaller1: entered promiscuous mode [ 350.788233][T13291] syzkaller1: entered allmulticast mode [ 350.815683][ T3401] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 350.823213][ T3401] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 350.834407][ T3401] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 350.849643][T13041] veth0_vlan: entered promiscuous mode [ 350.864804][ T3401] hid-generic 0103:0004:0000.0006: hidraw0: HID v0.02 Device [syz0] on syz1 [ 350.884203][T13041] veth1_vlan: entered promiscuous mode [ 350.946164][T13041] veth0_macvtap: entered promiscuous mode [ 350.964845][T13041] veth1_macvtap: entered promiscuous mode [ 351.004219][T13041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.026186][T13041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.058106][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.074735][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.107840][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.142755][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.294283][ T29] audit: type=1326 audit(1769551930.721:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.1.3119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa64611aeb9 code=0x0 [ 351.659126][T13343] loop3: detected capacity change from 0 to 128 [ 351.788643][T13347] syzkaller0: entered promiscuous mode [ 351.794195][T13347] syzkaller0: entered allmulticast mode [ 352.103571][T13361] netlink: 'syz.1.3195': attribute type 1 has an invalid length. [ 352.177496][ T37] bridge_slave_1: left allmulticast mode [ 352.183214][ T37] bridge_slave_1: left promiscuous mode [ 352.189162][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.198117][ T37] bridge_slave_0: left allmulticast mode [ 352.203808][ T37] bridge_slave_0: left promiscuous mode [ 352.209692][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.271308][ T37] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 352.306079][ T37] bond5 (unregistering): (slave geneve0): Releasing active interface [ 352.334880][ T37] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 352.367703][T13374] loop2: detected capacity change from 0 to 128 [ 352.419474][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.438693][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.458302][ T37] bond0 (unregistering): Released all slaves [ 352.479039][ T37] bond1 (unregistering): Released all slaves [ 352.506682][ T37] bond2 (unregistering): Released all slaves [ 352.524295][ T37] bond3 (unregistering): Released all slaves [ 352.552656][ T37] bond4 (unregistering): Released all slaves [ 352.571727][ T37] bond5 (unregistering): Released all slaves [ 352.589754][ T37] bond6 (unregistering): Released all slaves [ 352.607690][ T37] bond7 (unregistering): Released all slaves [ 352.628117][ T37] bond8 (unregistering): Released all slaves [ 352.655186][ T37] bond9 (unregistering): Released all slaves [ 352.674703][ T37] bond10 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 352.694731][ T37] bond10 (unregistering): Released all slaves [ 352.714301][ T37] bond11 (unregistering): Released all slaves [ 352.742031][ T37] bond12 (unregistering): Released all slaves [ 352.757950][ T37] bond13 (unregistering): Released all slaves [ 352.846219][ T37] tipc: Disabling bearer [ 352.851747][ T37] tipc: Left network mode [ 352.868447][ T29] audit: type=1326 audit(1769551932.291:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13389 comm="syz.2.3204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47831eaeb9 code=0x0 [ 352.912033][T13344] chnl_net:caif_netlink_parms(): no params data found [ 352.948520][ T37] hsr_slave_0: left promiscuous mode [ 352.967649][ T37] hsr_slave_1: left promiscuous mode [ 352.978667][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.996308][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.091383][ T37] team0 (unregistering): Port device team_slave_1 removed [ 353.111484][ T37] team0 (unregistering): Port device team_slave_0 removed [ 353.356635][T13344] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.363842][T13344] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.398359][T13344] bridge_slave_0: entered allmulticast mode [ 353.420758][T13344] bridge_slave_0: entered promiscuous mode [ 353.446439][T13344] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.453697][T13344] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.510838][T13344] bridge_slave_1: entered allmulticast mode [ 353.530344][T13344] bridge_slave_1: entered promiscuous mode [ 353.604722][T13344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.615161][T13433] syzkaller0: entered promiscuous mode [ 353.620805][T13433] syzkaller0: entered allmulticast mode [ 353.638208][T13344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.695716][T13344] team0: Port device team_slave_0 added [ 353.835807][ T29] audit: type=1326 audit(1769551933.271:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 353.891075][T13344] team0: Port device team_slave_1 added [ 353.922019][ T29] audit: type=1326 audit(1769551933.301:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 353.945744][ T29] audit: type=1326 audit(1769551933.301:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 353.969289][ T29] audit: type=1326 audit(1769551933.301:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 353.992725][ T29] audit: type=1326 audit(1769551933.301:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 354.016510][ T29] audit: type=1326 audit(1769551933.301:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 354.032404][T13344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.040129][ T29] audit: type=1326 audit(1769551933.301:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 354.047101][T13344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.070533][ T29] audit: type=1326 audit(1769551933.311:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 354.096436][T13344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.119800][ T29] audit: type=1326 audit(1769551933.311:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 354.156210][ T29] audit: type=1326 audit(1769551933.311:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 354.179534][ T29] audit: type=1326 audit(1769551933.311:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47831eaeb9 code=0x7ffc0000 [ 354.219482][T13344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.226485][T13344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.252532][T13344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.414040][ T3422] hid-generic 0103:0004:0000.0007: hidraw0: HID v0.02 Device [syz0] on syz1 [ 354.519019][T13344] hsr_slave_0: entered promiscuous mode [ 354.558092][T13344] hsr_slave_1: entered promiscuous mode [ 354.596253][T13344] debugfs: 'hsr0' already exists in 'hsr' [ 354.602163][T13344] Cannot create hsr debugfs directory [ 354.679185][T13472] program syz.1.3218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.908939][T13485] loop1: detected capacity change from 0 to 512 [ 355.200446][T13485] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.468454][T13496] program syz.3.3222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.564671][T13344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.652317][T13344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.695050][T13344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.748737][T13344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.833663][T13526] program syz.3.3230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.867242][T13532] loop5: detected capacity change from 0 to 7 [ 355.917571][T13344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.956676][T13344] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.007736][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.014884][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.024535][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.031725][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.102779][T13344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.113293][T13344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.196287][T13550] tipc: Started in network mode [ 356.201294][T13550] tipc: Node identity ae5762c1b216, cluster identity 4711 [ 356.208733][T13550] tipc: Enabled bearer , priority 0 [ 356.276860][T13546] syzkaller0: entered promiscuous mode [ 356.282413][T13546] syzkaller0: entered allmulticast mode [ 356.311334][T13546] tipc: Resetting bearer [ 356.356607][T13545] tipc: Resetting bearer [ 356.372950][T13545] tipc: Disabling bearer [ 356.405570][T13344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.547648][T13571] netlink: 75 bytes leftover after parsing attributes in process `syz.0.3236'. [ 357.128666][T13595] program syz.1.3241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.184567][T13344] veth0_vlan: entered promiscuous mode [ 357.220856][T13598] program syz.0.3242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.279545][T13344] veth1_vlan: entered promiscuous mode [ 357.395356][T13344] veth0_macvtap: entered promiscuous mode [ 357.459682][T13344] veth1_macvtap: entered promiscuous mode [ 357.661533][T13344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.670766][T13344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.693524][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.739864][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.776582][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.807945][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.824527][T13634] program syz.1.3253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.993372][T13647] netlink: 'syz.1.3256': attribute type 1 has an invalid length. [ 358.036584][T13647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3256'. [ 358.078515][T13647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13647 comm=syz.1.3256 [ 358.375354][T13672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13672 comm=syz.3.3262 [ 358.446710][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'. [ 358.467584][T13672] netlink: 'syz.3.3262': attribute type 1 has an invalid length. [ 358.526971][T13672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.548207][T13681] tipc: Cannot configure node identity twice [ 358.558096][T13686] bond1: (slave veth0_virt_wifi): making interface the new active one [ 358.608420][T13686] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 358.621685][T13688] tipc: Started in network mode [ 358.626736][T13688] tipc: Node identity 4, cluster identity 4711 [ 358.633055][T13688] tipc: Node number set to 4 [ 358.663616][T13700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3268'. [ 358.698406][T13690] tipc: Enabled bearer , priority 0 [ 358.705703][T13700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.726466][T13700] batadv_slave_0: entered promiscuous mode [ 358.763075][T13690] syzkaller0: entered promiscuous mode [ 358.768842][T13690] syzkaller0: entered allmulticast mode [ 358.827403][T13696] tipc: Resetting bearer [ 358.855028][T13689] tipc: Resetting bearer [ 358.898481][T13711] 9p: Could not find request transport: fd0x0000000000000003 [ 358.907808][T13689] tipc: Disabling bearer [ 358.993328][T13720] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 359.035674][T13724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3276'. [ 359.111866][T13726] program syz.0.3277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.204933][T13730] syzkaller0: entered promiscuous mode [ 359.210554][T13730] syzkaller0: entered allmulticast mode [ 359.407131][T13736] syzkaller0: entered promiscuous mode [ 359.412713][T13736] syzkaller0: entered allmulticast mode [ 359.543246][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 359.543265][ T29] audit: type=1326 audit(1769551938.982:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.574397][ T29] audit: type=1326 audit(1769551939.012:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.598020][ T29] audit: type=1326 audit(1769551939.012:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.621582][ T29] audit: type=1326 audit(1769551939.012:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.645111][ T29] audit: type=1326 audit(1769551939.012:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.668714][ T29] audit: type=1326 audit(1769551939.012:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.739774][ T29] audit: type=1326 audit(1769551939.012:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.763516][ T29] audit: type=1326 audit(1769551939.042:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.787166][ T29] audit: type=1326 audit(1769551939.042:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.810677][ T29] audit: type=1326 audit(1769551939.052:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.3.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 359.858602][T13752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3287'. [ 359.868044][T13752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3287'. [ 359.895725][T13754] program syz.3.3289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.922309][T13756] tipc: Started in network mode [ 359.927242][T13756] tipc: Node identity 4, cluster identity 4711 [ 359.933449][T13756] tipc: Node number set to 4 [ 360.010684][T13765] syzkaller0: entered promiscuous mode [ 360.016228][T13765] syzkaller0: entered allmulticast mode [ 360.197251][T13775] tipc: Cannot configure node identity twice [ 360.311541][T13782] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3300'. [ 360.370695][T13786] tipc: Enabled bearer , priority 0 [ 360.394037][T13786] syzkaller0: entered promiscuous mode [ 360.399729][T13786] syzkaller0: entered allmulticast mode [ 360.411333][T13786] tipc: Resetting bearer [ 360.418793][T13785] tipc: Resetting bearer [ 360.428033][T13785] tipc: Disabling bearer [ 360.480000][T13792] syzkaller0: entered promiscuous mode [ 360.485649][T13792] syzkaller0: entered allmulticast mode [ 361.028336][T13828] syzkaller0: entered promiscuous mode [ 361.034255][T13828] syzkaller0: entered allmulticast mode [ 361.047898][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3322'. [ 361.542206][T13858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13858 comm=syz.2.3333 [ 361.593313][T13863] netlink: 'syz.2.3333': attribute type 1 has an invalid length. [ 361.656087][T13863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.934605][T13888] program syz.1.3345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.383590][T13894] syzkaller0: entered promiscuous mode [ 362.389314][T13894] syzkaller0: entered allmulticast mode [ 362.675883][T13907] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 362.728519][T13907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.779006][T13914] macvlan2: entered promiscuous mode [ 362.784385][T13914] macvlan2: entered allmulticast mode [ 362.834031][T13914] bond4: entered promiscuous mode [ 362.861017][T13914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.872615][T13914] bond4: left promiscuous mode [ 362.890995][T13922] syzkaller0: entered promiscuous mode [ 362.896561][T13922] syzkaller0: entered allmulticast mode [ 363.128081][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104ef6600: rx timeout, send abort [ 363.191629][T13938] syzkaller1: entered promiscuous mode [ 363.197336][T13938] syzkaller1: entered allmulticast mode [ 363.628084][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104ef7200: rx timeout, send abort [ 363.636360][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104ef6600: abort rx timeout. Force session deactivation [ 364.083563][T13956] syzkaller0: entered promiscuous mode [ 364.089173][T13956] syzkaller0: entered allmulticast mode [ 364.136319][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104ef7200: abort rx timeout. Force session deactivation [ 364.354253][T13968] syzkaller0: entered promiscuous mode [ 364.359836][T13968] syzkaller0: entered allmulticast mode [ 364.465000][T13974] syzkaller0: entered promiscuous mode [ 364.470713][T13974] syzkaller0: entered allmulticast mode [ 364.549348][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 364.549365][ T29] audit: type=1326 audit(1769551943.992:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.576459][T13977] syzkaller0: entered promiscuous mode [ 364.584574][T13977] syzkaller0: entered allmulticast mode [ 364.654107][ T29] audit: type=1326 audit(1769551944.022:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.677701][ T29] audit: type=1326 audit(1769551944.022:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.701799][ T29] audit: type=1326 audit(1769551944.022:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.725739][ T29] audit: type=1326 audit(1769551944.022:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.749663][ T29] audit: type=1326 audit(1769551944.022:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.773662][ T29] audit: type=1326 audit(1769551944.022:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.797290][ T29] audit: type=1326 audit(1769551944.022:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.820863][ T29] audit: type=1326 audit(1769551944.032:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.844419][ T29] audit: type=1326 audit(1769551944.032:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13978 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x7ffc0000 [ 364.971412][T13991] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.978730][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.037104][T13991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.048462][T13991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.098468][T14000] syzkaller0: entered promiscuous mode [ 365.104000][T14000] syzkaller0: entered allmulticast mode [ 365.134868][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.143906][T13997] tipc: Enabled bearer , priority 0 [ 365.160771][T13997] syzkaller0: entered promiscuous mode [ 365.166339][T13997] syzkaller0: entered allmulticast mode [ 365.178172][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.218724][T13997] tipc: Resetting bearer [ 365.249334][T13996] tipc: Resetting bearer [ 365.267607][T13996] tipc: Disabling bearer [ 365.336251][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.346111][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.432601][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'. [ 365.442979][T14017] syzkaller0: entered promiscuous mode [ 365.448735][T14017] syzkaller0: entered allmulticast mode [ 365.602582][T14023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=14023 comm=syz.2.3391 [ 365.618385][ T10] hid_parser_main: 11 callbacks suppressed [ 365.618405][ T10] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 365.632231][ T10] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 365.670353][ T10] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 365.677863][ T10] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 365.685535][ T10] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 365.692992][ T10] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 365.700491][ T10] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 365.752865][T14030] syzkaller0: entered promiscuous mode [ 365.758486][T14030] syzkaller0: entered allmulticast mode [ 365.766397][ T10] hid-generic 0103:0004:0000.0008: hidraw0: HID v0.02 Device [syz0] on syz1 [ 365.803163][T14031] fido_id[14031]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 365.884409][T14033] syzkaller0: entered promiscuous mode [ 365.890217][T14033] syzkaller0: entered allmulticast mode [ 366.054070][T14039] tipc: Enabled bearer , priority 0 [ 366.067250][T14039] syzkaller0: entered promiscuous mode [ 366.072806][T14039] syzkaller0: entered allmulticast mode [ 366.090783][T14039] tipc: Resetting bearer [ 366.117607][T14038] tipc: Resetting bearer [ 366.133186][T14038] tipc: Disabling bearer [ 366.205364][T14043] program syz.3.3399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.276700][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3401'. [ 366.322395][T14049] syzkaller0: entered promiscuous mode [ 366.328169][T14049] syzkaller0: entered allmulticast mode [ 366.364654][T14051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=14051 comm=syz.0.3403 [ 366.438541][ T3519] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 366.446051][ T3519] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 366.468255][ T3519] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 366.498853][ T3519] hid-generic 0103:0004:0000.0009: hidraw0: HID v0.02 Device [syz0] on syz1 [ 366.522468][T14058] syzkaller0: entered promiscuous mode [ 366.528022][T14058] syzkaller0: entered allmulticast mode [ 366.581881][T14059] fido_id[14059]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.674501][T14067] tipc: Enabled bearer , priority 0 [ 366.683991][T14065] syzkaller0: entered promiscuous mode [ 366.689561][T14065] syzkaller0: entered allmulticast mode [ 366.710188][T14067] syzkaller0: entered promiscuous mode [ 366.715864][T14067] syzkaller0: entered allmulticast mode [ 366.743030][T14069] program syz.4.3411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.753329][T14067] tipc: Resetting bearer [ 366.783864][T14066] tipc: Resetting bearer [ 366.809981][T14071] program syz.3.3412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.835956][T14066] tipc: Disabling bearer [ 366.918571][T14079] syzkaller0: entered promiscuous mode [ 366.924161][T14079] syzkaller0: entered allmulticast mode [ 367.015264][T14089] syzkaller0: entered promiscuous mode [ 367.020921][T14089] syzkaller0: entered allmulticast mode [ 367.060173][ T10] hid-generic 0103:0004:0000.000A: hidraw0: HID v0.02 Device [syz0] on syz1 [ 367.089723][T14095] syzkaller1: entered promiscuous mode [ 367.095350][T14095] syzkaller1: entered allmulticast mode [ 367.385912][T14105] program syz.3.3425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.450814][T14107] syzkaller0: entered promiscuous mode [ 367.456426][T14107] syzkaller0: entered allmulticast mode [ 367.906517][T14120] syzkaller0: entered promiscuous mode [ 367.912126][T14120] syzkaller0: entered allmulticast mode [ 367.932398][T14122] syzkaller0: entered promiscuous mode [ 367.938112][T14122] syzkaller0: entered allmulticast mode [ 368.047157][T14126] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3433'. [ 368.639098][T14143] syzkaller0: entered promiscuous mode [ 368.644638][T14143] syzkaller0: entered allmulticast mode [ 369.134139][T14168] tipc: Enabled bearer , priority 0 [ 369.144101][T14168] syzkaller0: entered promiscuous mode [ 369.149691][T14168] syzkaller0: entered allmulticast mode [ 369.162787][T14168] tipc: Resetting bearer [ 369.169718][T14166] tipc: Resetting bearer [ 369.177975][T14166] tipc: Disabling bearer [ 369.267161][T14174] syzkaller0: entered promiscuous mode [ 369.272887][T14174] syzkaller0: entered allmulticast mode [ 369.323224][T14178] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.330519][T14178] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.384205][T14178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.453766][ T3473] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.466860][T14182] syzkaller0: entered promiscuous mode [ 369.472400][T14182] syzkaller0: entered allmulticast mode [ 369.493151][ T3473] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.526201][ T3473] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.546193][ T2636] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.643839][T14191] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.651090][T14191] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.731781][T14191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.780724][ T8506] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.792042][ T8506] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.817410][ T8506] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.870966][ T8506] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.369551][T14218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3469'. [ 371.115156][T14235] syzkaller0: entered promiscuous mode [ 371.120826][T14235] syzkaller0: entered allmulticast mode [ 371.191464][T14244] syzkaller0: entered promiscuous mode [ 371.197105][T14244] syzkaller0: entered allmulticast mode [ 371.340957][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'. [ 371.383890][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'. [ 371.468157][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 371.640242][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 371.640262][ T29] audit: type=1400 audit(1769551951.082:958): avc: denied { create } for pid=14280 comm="syz.0.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 372.423943][T13957] hid_parser_main: 11 callbacks suppressed [ 372.423987][T13957] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 372.437552][T13957] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 372.445394][T13957] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 372.453066][T13957] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 372.460583][T13957] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 372.468076][T13957] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 372.475539][T13957] hid-generic 0103:0004:0000.000B: unknown main item tag 0x0 [ 372.491448][T13957] hid-generic 0103:0004:0000.000B: hidraw0: HID v0.02 Device [syz0] on syz1 [ 372.579018][T14310] fido_id[14310]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 372.714475][T14321] tipc: Enabling of bearer rejected, failed to enable media [ 372.736275][T14321] syzkaller0: entered promiscuous mode [ 372.741818][T14321] syzkaller0: entered allmulticast mode [ 372.803226][T14325] syzkaller0: entered promiscuous mode [ 372.808900][T14325] syzkaller0: entered allmulticast mode [ 373.024852][T14346] netlink: 'syz.1.3515': attribute type 12 has an invalid length. [ 373.032854][T14346] netlink: 'syz.1.3515': attribute type 29 has an invalid length. [ 373.040762][T14346] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3515'. [ 373.050005][T14346] netlink: 'syz.1.3515': attribute type 2 has an invalid length. [ 373.057772][T14346] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3515'. [ 373.216087][ T5605] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 373.223575][ T5605] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 373.257129][T14359] syzkaller0: entered promiscuous mode [ 373.262735][T14359] syzkaller0: entered allmulticast mode [ 373.266421][ T5605] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0 [ 373.307801][ T5605] hid-generic 0103:0004:0000.000C: hidraw0: HID v0.02 Device [syz0] on syz1 [ 373.342592][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 373.374062][T14369] fido_id[14369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 373.756261][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3535'. [ 373.810242][T14329] syz.2.3513 (14329) used greatest stack depth: 6400 bytes left [ 373.906345][ T5605] hid-generic 0103:0004:0000.000D: hidraw0: HID v0.02 Device [syz0] on syz1 [ 373.995031][T14413] fido_id[14413]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 374.159511][T14427] tipc: Enabled bearer , priority 0 [ 374.196177][T14427] syzkaller0: entered promiscuous mode [ 374.201910][T14427] syzkaller0: entered allmulticast mode [ 374.248445][T14427] tipc: Resetting bearer [ 374.274627][T14426] tipc: Resetting bearer [ 374.297403][T14426] tipc: Disabling bearer [ 374.451554][T14448] syzkaller0: entered promiscuous mode [ 374.457248][T14448] syzkaller0: entered allmulticast mode [ 374.494751][T14453] syzkaller1: entered promiscuous mode [ 374.500367][T14453] syzkaller1: entered allmulticast mode [ 374.531326][T14455] syzkaller0: entered promiscuous mode [ 374.537082][T14455] syzkaller0: entered allmulticast mode [ 374.816448][T14475] syzkaller0: entered promiscuous mode [ 374.822272][T14475] syzkaller0: entered allmulticast mode [ 375.173313][T14495] syzkaller0: entered promiscuous mode [ 375.178921][T14495] syzkaller0: entered allmulticast mode [ 375.295362][T14500] tipc: Enabled bearer , priority 0 [ 375.323681][T14500] syzkaller0: entered promiscuous mode [ 375.329483][T14500] syzkaller0: entered allmulticast mode [ 375.384903][T14500] tipc: Resetting bearer [ 375.423817][T14498] tipc: Resetting bearer [ 375.436662][T14498] tipc: Disabling bearer [ 375.576254][T14507] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3572'. [ 375.664450][T14509] netlink: 'syz.2.3573': attribute type 12 has an invalid length. [ 375.672448][T14509] netlink: 'syz.2.3573': attribute type 29 has an invalid length. [ 375.680878][T14509] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3573'. [ 375.690016][T14509] netlink: 'syz.2.3573': attribute type 2 has an invalid length. [ 375.697849][T14509] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3573'. [ 375.958064][T14532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.046601][T14532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.084443][T14535] tipc: Enabling of bearer rejected, failed to enable media [ 376.123013][T14543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14543 comm=syz.1.3584 [ 376.137420][T14535] syzkaller0: entered promiscuous mode [ 376.143001][T14535] syzkaller0: entered allmulticast mode [ 376.653478][T14549] syzkaller0: entered promiscuous mode [ 376.659050][T14549] syzkaller0: entered allmulticast mode [ 376.901018][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3580'. [ 377.610303][T14585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14585 comm=syz.3.3595 [ 377.710346][T14585] bond1: (slave veth0_virt_wifi): Releasing active interface [ 377.935000][ T29] audit: type=1326 audit(1769551957.373:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.0.3600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26ab37aeb9 code=0x0 [ 378.540948][T14622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14622 comm=syz.3.3607 [ 378.709053][T14638] loop2: detected capacity change from 0 to 512 [ 378.727680][T14641] netlink: 'syz.1.3613': attribute type 25 has an invalid length. [ 378.740710][T14638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.774636][T14643] syzkaller0: entered promiscuous mode [ 378.780461][T14643] syzkaller0: entered allmulticast mode [ 378.796485][T14638] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3611: bad orphan inode 11862016 [ 378.921634][T14638] EXT4-fs (loop2): Remounting filesystem read-only [ 378.930822][T14638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 378.943591][T14638] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.136807][T14662] netlink: 'syz.3.3622': attribute type 25 has an invalid length. [ 379.312728][ T29] audit: type=1326 audit(1769551958.753:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.3.3626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba179aeb9 code=0x0 [ 379.648267][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3632'. [ 379.811809][T14692] syzkaller0: entered promiscuous mode [ 379.817421][T14692] syzkaller0: entered allmulticast mode [ 379.945720][T14703] syzkaller0: entered promiscuous mode [ 379.951297][T14703] syzkaller0: entered allmulticast mode [ 379.969994][T11874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 380.215502][T14707] ================================================================== [ 380.223676][T14707] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 380.233540][T14707] [ 380.235978][T14707] read-write to 0xffffffff86a09a00 of 8 bytes by interrupt on cpu 1: [ 380.244084][T14707] tick_do_update_jiffies64+0x113/0x1c0 [ 380.249674][T14707] tick_nohz_handler+0x8d/0x3d0 [ 380.254570][T14707] __hrtimer_run_queues+0x20f/0x590 [ 380.259817][T14707] hrtimer_interrupt+0x269/0x810 [ 380.264880][T14707] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 380.271192][T14707] sysvec_apic_timer_interrupt+0x6f/0x80 [ 380.276874][T14707] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.282895][T14707] __sanitizer_cov_trace_pc+0x0/0x70 [ 380.288314][T14707] ext4_es_lookup_extent+0x8a/0x540 [ 380.293569][T14707] ext4_map_blocks+0x112/0xd70 [ 380.298380][T14707] ext4_mpage_readpages+0x622/0xf70 [ 380.303621][T14707] ext4_readahead+0x98/0xb0 [ 380.308161][T14707] read_pages+0xa3/0x480 [ 380.312450][T14707] page_cache_ra_unbounded+0x34f/0x440 [ 380.318128][T14707] page_cache_ra_order+0x145/0x220 [ 380.323291][T14707] do_sync_mmap_readahead+0x33d/0x350 [ 380.328807][T14707] filemap_fault+0x362/0xbb0 [ 380.333433][T14707] __do_fault+0xbc/0x200 [ 380.337707][T14707] handle_mm_fault+0x11d7/0x3030 [ 380.342697][T14707] do_user_addr_fault+0x62f/0x1050 [ 380.347944][T14707] exc_page_fault+0x62/0xa0 [ 380.352489][T14707] asm_exc_page_fault+0x26/0x30 [ 380.357374][T14707] [ 380.359783][T14707] read to 0xffffffff86a09a00 of 8 bytes by task 14707 on cpu 0: [ 380.367457][T14707] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 380.373834][T14707] count_shadow_nodes+0x6a/0x230 [ 380.378809][T14707] do_shrink_slab+0x63/0x670 [ 380.383444][T14707] shrink_slab+0x538/0x880 [ 380.387915][T14707] shrink_node+0x6cb/0x2000 [ 380.392507][T14707] do_try_to_free_pages+0x404/0xcc0 [ 380.397766][T14707] try_to_free_mem_cgroup_pages+0x222/0x470 [ 380.403801][T14707] try_charge_memcg+0x37e/0xa10 [ 380.408729][T14707] obj_cgroup_charge_pages+0x23/0xc0 [ 380.414500][T14707] __memcg_kmem_charge_page+0x9e/0x170 [ 380.420110][T14707] __alloc_frozen_pages_noprof+0x18a/0x350 [ 380.426082][T14707] alloc_pages_mpol+0xb3/0x260 [ 380.430908][T14707] alloc_pages_noprof+0x8f/0x130 [ 380.435916][T14707] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 380.441863][T14707] __kvmalloc_node_noprof+0x471/0x680 [ 380.447327][T14707] ip_set_alloc+0x24/0x30 [ 380.451716][T14707] hash_netiface_create+0x282/0x740 [ 380.456961][T14707] ip_set_create+0x3cf/0x970 [ 380.461610][T14707] nfnetlink_rcv_msg+0x509/0x5d0 [ 380.466599][T14707] netlink_rcv_skb+0x123/0x220 [ 380.471433][T14707] nfnetlink_rcv+0x167/0x1720 [ 380.476162][T14707] netlink_unicast+0x5c0/0x690 [ 380.480973][T14707] netlink_sendmsg+0x5c8/0x6f0 [ 380.485778][T14707] ____sys_sendmsg+0x5af/0x600 [ 380.490573][T14707] ___sys_sendmsg+0x195/0x1e0 [ 380.495285][T14707] __x64_sys_sendmsg+0xd4/0x160 [ 380.500162][T14707] x64_sys_call+0x17ba/0x3000 [ 380.504886][T14707] do_syscall_64+0xc0/0x2a0 [ 380.509458][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 380.515390][T14707] [ 380.517741][T14707] value changed: 0x0000000100001f0f -> 0x0000000100001f10 [ 380.524876][T14707] [ 380.527396][T14707] Reported by Kernel Concurrency Sanitizer on: [ 380.533593][T14707] CPU: 0 UID: 0 PID: 14707 Comm: syz.4.3638 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.543441][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.553537][T14707] ================================================================== [ 380.601138][T14704] syz.4.3638 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 380.612212][T14704] CPU: 0 UID: 0 PID: 14704 Comm: syz.4.3638 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.612247][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.612276][T14704] Call Trace: [ 380.612296][T14704] [ 380.612307][T14704] __dump_stack+0x1d/0x30 [ 380.612367][T14704] dump_stack_lvl+0x95/0xd0 [ 380.612397][T14704] dump_stack+0x15/0x1b [ 380.612422][T14704] dump_header+0x80/0x240 [ 380.612477][T14704] oom_kill_process+0x295/0x350 [ 380.612505][T14704] out_of_memory+0x97d/0xb80 [ 380.612532][T14704] try_charge_memcg+0x62e/0xa10 [ 380.612566][T14704] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 380.612626][T14704] __read_swap_cache_async+0x17b/0x2d0 [ 380.612672][T14704] swap_cluster_readahead+0x262/0x3c0 [ 380.612718][T14704] swapin_readahead+0xde/0x840 [ 380.612785][T14704] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 380.612822][T14704] ? lruvec_stat_mod_folio+0xd2/0x110 [ 380.612855][T14704] ? __rcu_read_unlock+0x4e/0x70 [ 380.612920][T14704] ? swap_cache_get_folio+0x26f/0x280 [ 380.613037][T14704] do_swap_page+0x59b/0x2a50 [ 380.613076][T14704] ? __rcu_read_lock+0x36/0x50 [ 380.613105][T14704] ? __pfx_default_wake_function+0x10/0x10 [ 380.613236][T14704] handle_mm_fault+0xb40/0x3030 [ 380.613277][T14704] ? vma_start_read+0x1c7/0x2c0 [ 380.613316][T14704] do_user_addr_fault+0x62f/0x1050 [ 380.613349][T14704] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 380.613405][T14704] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 380.613523][T14704] ? irqentry_exit+0x3c/0x510 [ 380.613601][T14704] exc_page_fault+0x62/0xa0 [ 380.613632][T14704] asm_exc_page_fault+0x26/0x30 [ 380.613659][T14704] RIP: 0033:0x7fd964866083 [ 380.613699][T14704] Code: 25 00 03 00 00 e8 1d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ce f4 28 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 380.613718][T14704] RSP: 002b:00007ffc973e98a0 EFLAGS: 00010246 [ 380.613784][T14704] RAX: 0000000000000000 RBX: 000055558989c500 RCX: 0000000000000000 [ 380.613802][T14704] RDX: 00007ffc973e98e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.613819][T14704] RBP: 00007fd964b27da0 R08: 0000000000000000 R09: 0000000000000000 [ 380.613837][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005cf9a [ 380.613853][T14704] R13: 00007fd964b2609c R14: 000000000005cd0b R15: 00007fd964b26090 [ 380.613872][T14704] [ 380.613883][T14704] memory: usage 307200kB, limit 307200kB, failcnt 165 [ 380.853123][T14704] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 380.861068][T14704] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 380.868586][T14704] Memory cgroup stats for /syz4: [ 381.025069][T14704] cache 40960 [ 381.033669][T14704] rss 0 [ 381.036489][T14704] shmem 0 [ 381.039439][T14704] mapped_file 0 [ 381.042915][T14704] dirty 0 [ 381.045981][T14704] writeback 0 [ 381.049351][T14704] workingset_refault_anon 105 [ 381.054079][T14704] workingset_refault_file 1669 [ 381.058896][T14704] swap 356352 [ 381.062199][T14704] swapcached 24576 [ 381.065961][T14704] pgpgin 542912 [ 381.069500][T14704] pgpgout 542895 [ 381.073090][T14704] pgfault 514489 [ 381.076686][T14704] pgmajfault 65 [ 381.080238][T14704] inactive_anon 4096 [ 381.084162][T14704] active_anon 20480 [ 381.088015][T14704] inactive_file 45056 [ 381.092027][T14704] active_file 0 [ 381.095544][T14704] unevictable 0 [ 381.099069][T14704] hierarchical_memory_limit 314572800 [ 381.104456][T14704] hierarchical_memsw_limit 9223372036854771712 [ 381.110680][T14704] total_cache 40960 [ 381.114503][T14704] total_rss 0 [ 381.117831][T14704] total_shmem 0 [ 381.121309][T14704] total_mapped_file 0 [ 381.125307][T14704] total_dirty 0 [ 381.128813][T14704] total_writeback 0 [ 381.132641][T14704] total_workingset_refault_anon 105 [ 381.137955][T14704] total_workingset_refault_file 1669 [ 381.143265][T14704] total_swap 356352 [ 381.147279][T14704] total_swapcached 24576 [ 381.151538][T14704] total_pgpgin 543176 [ 381.155550][T14704] total_pgpgout 543159 [ 381.159744][T14704] total_pgfault 514636 [ 381.163836][T14704] total_pgmajfault 65 [ 381.167858][T14704] total_inactive_anon 4096 [ 381.172289][T14704] total_active_anon 20480 [ 381.176665][T14704] total_inactive_file 45056 [ 381.181202][T14704] total_active_file 0 [ 381.185243][T14704] total_unevictable 0 [ 381.189356][T14704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3638,pid=14704,uid=0 [ 381.204132][T14704] Memory cgroup out of memory: Killed process 14704 (syz.4.3638) total-vm:94132kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 381.632180][ T8506] bridge_slave_1: left allmulticast mode [ 381.638018][ T8506] bridge_slave_1: left promiscuous mode [ 381.643773][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.658669][ T8506] bridge_slave_0: left allmulticast mode [ 381.664529][ T8506] bridge_slave_0: left promiscuous mode [ 381.670285][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.738486][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.756531][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.776593][ T8506] bond0 (unregistering): Released all slaves [ 381.828233][ T8506] tipc: Left network mode [ 381.845644][ T8506] hsr_slave_0: left promiscuous mode [ 381.860589][ T8506] hsr_slave_1: left promiscuous mode [ 381.875110][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.896552][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.995598][ T8506] team0 (unregistering): Port device team_slave_1 removed [ 382.006038][ T8506] team0 (unregistering): Port device team_slave_0 removed [ 382.311942][ T8506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.368544][ T8506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.428568][ T8506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.488593][ T8506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.979187][ T8506] bridge_slave_1: left allmulticast mode [ 382.984897][ T8506] bridge_slave_1: left promiscuous mode [ 382.990767][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.999445][ T8506] bridge_slave_0: left allmulticast mode [ 383.005158][ T8506] bridge_slave_0: left promiscuous mode [ 383.010985][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.024067][ T8506] bridge_slave_1: left allmulticast mode [ 383.029798][ T8506] bridge_slave_1: left promiscuous mode [ 383.035604][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.043807][ T8506] bridge_slave_0: left allmulticast mode [ 383.049579][ T8506] bridge_slave_0: left promiscuous mode [ 383.055539][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.064587][ T8506] bridge_slave_1: left allmulticast mode [ 383.070313][ T8506] bridge_slave_1: left promiscuous mode [ 383.076051][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.083932][ T8506] bridge_slave_0: left allmulticast mode [ 383.089879][ T8506] bridge_slave_0: left promiscuous mode [ 383.095652][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.198891][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.209795][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.220017][ T8506] bond0 (unregistering): Released all slaves [ 383.229918][ T8506] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 383.249407][ T8506] bond2 (unregistering): (slave gretap1): Releasing active interface [ 383.317692][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.327043][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.336431][ T8506] bond0 (unregistering): Released all slaves [ 383.344404][ T8506] bond1 (unregistering): Released all slaves [ 383.354023][ T8506] bond2 (unregistering): Released all slaves [ 383.363115][ T8506] bond3 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 383.372677][ T8506] bond3 (unregistering): Released all slaves [ 383.381703][ T8506] bond4 (unregistering): Released all slaves [ 383.457901][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.467439][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.476752][ T8506] bond0 (unregistering): Released all slaves [ 383.484566][ T8506] bond1 (unregistering): Released all slaves [ 383.546247][ T8506] tipc: Left network mode [ 383.555902][ T8506] tipc: Left network mode [ 383.562542][ T8506] tipc: Left network mode [ 383.577641][ T8506] hsr_slave_0: left promiscuous mode [ 383.588933][ T8506] hsr_slave_1: left promiscuous mode [ 383.597690][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.605316][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.613058][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.620493][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.630526][ T8506] hsr_slave_0: left promiscuous mode [ 383.636949][ T8506] hsr_slave_1: left promiscuous mode [ 383.642725][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.650858][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.664705][ T8506] hsr_slave_0: left promiscuous mode [ 383.672877][ T8506] hsr_slave_1: left promiscuous mode [ 383.685628][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.698218][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.722967][ T8506] veth1_macvtap: left promiscuous mode [ 383.735315][ T8506] veth0_macvtap: left promiscuous mode [ 383.740873][ T8506] veth1_vlan: left promiscuous mode [ 383.755397][ T8506] veth0_vlan: left promiscuous mode [ 383.852194][ T8506] team0 (unregistering): Port device team_slave_1 removed [ 383.865130][ T8506] team0 (unregistering): Port device team_slave_0 removed [ 383.938583][ T8506] team0 (unregistering): Port device team_slave_1 removed [ 383.948834][ T8506] team0 (unregistering): Port device team_slave_0 removed [ 384.019720][ T8506] team0 (unregistering): Port device team_slave_1 removed [ 384.029742][ T8506] team0 (unregistering): Port device team_slave_0 removed [ 387.737905][ T12] bridge_slave_1: left allmulticast mode [ 387.743643][ T12] bridge_slave_1: left promiscuous mode [ 387.749494][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.758476][ T12] bridge_slave_0: left allmulticast mode [ 387.764265][ T12] bridge_slave_0: left promiscuous mode [ 387.770105][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.826878][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 387.887188][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.897826][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.908539][ T12] bond0 (unregistering): Released all slaves [ 387.916237][ T12] bond1 (unregistering): Released all slaves [ 387.925311][ T12] bond2 (unregistering): Released all slaves [ 387.934618][ T12] bond3 (unregistering): Released all slaves [ 387.944103][ T12] bond4 (unregistering): Released all slaves [ 387.954036][ T12] bond5 (unregistering): Released all slaves [ 387.963295][ T12] bond6 (unregistering): Released all slaves [ 387.972471][ T12] bond7 (unregistering): Released all slaves [ 388.028976][ T12] tipc: Left network mode [ 388.036113][ T12] hsr_slave_0: left promiscuous mode [ 388.041912][ T12] hsr_slave_1: left promiscuous mode [ 388.048305][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.055737][ T12] batadv0: mtu less than device minimum [ 388.061881][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.073018][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.084011][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.095038][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.106227][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.117122][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.128252][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.139376][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.150550][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.168037][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.176966][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.196548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.204706][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 388.211452][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 388.223725][ T12] veth1_macvtap: left promiscuous mode [ 388.229329][ T12] veth0_macvtap: left promiscuous mode [ 388.235165][ T12] veth1_vlan: left promiscuous mode [ 388.240443][ T12] veth0_vlan: left promiscuous mode [ 388.330817][ T12] team0 (unregistering): Port device team_slave_1 removed [ 388.340729][ T12] team0 (unregistering): Port device team_slave_0 removed [ 388.608242][ T12] IPVS: stop unused estimator thread 0...