last executing test programs: 1m12.550357215s ago: executing program 32 (id=760): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x89, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}]}, &(0x7f0000000000)=0x10) shutdown(r0, 0x1) mlockall(0x1) syz_io_uring_setup(0x1b88, &(0x7f0000000000)={0x0, 0x3006, 0x10000, 0x2, 0x35f}, &(0x7f0000000080), &(0x7f00000000c0)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x8}, 0x8) 1m9.744981072s ago: executing program 1 (id=802): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m9.679519176s ago: executing program 1 (id=804): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x1000, 0x1, 0x69}, &(0x7f0000000500)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1m9.565656033s ago: executing program 1 (id=806): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000181) 1m9.043563883s ago: executing program 1 (id=820): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m8.950026509s ago: executing program 1 (id=822): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 1m8.668034896s ago: executing program 1 (id=829): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x3}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 1m8.638835877s ago: executing program 33 (id=829): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x3}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 50.38778618s ago: executing program 5 (id=1202): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 50.195868922s ago: executing program 5 (id=1207): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000007c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000080)=""/106, 0x6a}], 0x2}, 0xffffffff}], 0x1, 0x0, 0x0) 49.966843565s ago: executing program 5 (id=1209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffd, 0x4, @empty, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="3b651e0eba74c3a6ce", 0x9, 0x24000000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x99bcb88da02606f2, 0x0, 0x46) 49.944373437s ago: executing program 5 (id=1210): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x22fb88e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 49.821756414s ago: executing program 5 (id=1213): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KDSETMODE(r0, 0x5608, 0x1) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000106b1d010140000102030109028000030104c005090400000001060b09040100000102000009040101010102000007240102ba021009050109ff0300020707250180a50b000904020000010200000904020101010200000e240201070310027282915cd70c072401043c000009058209400000e7f607250177030100d4c9ae939d1fe34d4177771e368c18b7619e2e949485de7d8f9260d3a4664c6bd1f2"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 49.629175146s ago: executing program 5 (id=1220): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40008004) 49.562226759s ago: executing program 34 (id=1220): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40008004) 47.051631368s ago: executing program 0 (id=1263): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x9) setresgid(0x0, 0x0, r1) setfsgid(r1) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x9) setfsgid(r3) 46.972159653s ago: executing program 0 (id=1264): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010003400000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 46.885295338s ago: executing program 0 (id=1266): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 46.697570779s ago: executing program 0 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00') 46.610791855s ago: executing program 0 (id=1272): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 46.296169833s ago: executing program 0 (id=1276): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000100}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 46.270783824s ago: executing program 35 (id=1276): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000100}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 23.991068256s ago: executing program 8 (id=1662): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20) 23.940020919s ago: executing program 8 (id=1663): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 23.834024265s ago: executing program 8 (id=1664): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 22.957783307s ago: executing program 8 (id=1673): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) unshare(0x22020600) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ftruncate(0xffffffffffffffff, 0x2007ffb) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 22.699426573s ago: executing program 8 (id=1675): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x121042, 0x0) write$P9_RVERSION(r1, &(0x7f0000000780)=ANY=[], 0x15) splice(r0, 0x0, r4, 0x0, 0x50f5d137, 0xd) 21.765526208s ago: executing program 8 (id=1686): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='pagemap\x00') preadv(r2, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x60000000, 0x3) 21.713632092s ago: executing program 36 (id=1686): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='pagemap\x00') preadv(r2, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x60000000, 0x3) 11.435981961s ago: executing program 3 (id=1868): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x45a5, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20}) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 11.372572865s ago: executing program 3 (id=1870): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 11.227831373s ago: executing program 3 (id=1873): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) capset(0x0, &(0x7f0000000080)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) 10.997281737s ago: executing program 3 (id=1879): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) unshare(0x22020000) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 10.927939111s ago: executing program 3 (id=1881): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000600)=""/149, 0x95) 10.556929183s ago: executing program 3 (id=1887): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000004c0)={[{@sysvgroups}, {@noblock_validity}, {@jqfmt_vfsold}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'nat\x00', 0x0, [0x7f, 0x7, 0x20000004, 0x5, 0x100000c]}, &(0x7f0000000040)=0x54) 10.518192126s ago: executing program 37 (id=1887): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000004c0)={[{@sysvgroups}, {@noblock_validity}, {@jqfmt_vfsold}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'nat\x00', 0x0, [0x7f, 0x7, 0x20000004, 0x5, 0x100000c]}, &(0x7f0000000040)=0x54) 1.604274015s ago: executing program 2 (id=2019): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) 1.549299348s ago: executing program 6 (id=2025): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1.496075911s ago: executing program 4 (id=2027): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x8}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.495844871s ago: executing program 2 (id=2028): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() prlimit64(r0, 0x7, &(0x7f0000000040)={0x3, 0xfd}, 0x0) keyctl$session_to_parent(0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.430010495s ago: executing program 6 (id=2030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000180)='2', 0x1, 0xfecc) fallocate(r1, 0x10, 0x7, 0x10001) 1.401755777s ago: executing program 6 (id=2031): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001040)=0x1007) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 1.320155451s ago: executing program 2 (id=2032): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.319488831s ago: executing program 6 (id=2033): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) 1.16789989s ago: executing program 4 (id=2034): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e840", 0x32, 0x4000840, &(0x7f0000000000)={0x11, 0x3, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) 1.118572743s ago: executing program 4 (id=2035): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x28008815}, 0x881) r1 = dup(r0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r3, 0x11, "a98a18a00d4fe9a9cfa713643d11f291c5"}, &(0x7f00000000c0)=0x19) 848.969749ms ago: executing program 2 (id=2036): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 817.739731ms ago: executing program 2 (id=2037): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x306c5000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 671.67549ms ago: executing program 9 (id=2038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002140)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 564.314566ms ago: executing program 9 (id=2039): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x124, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf4, 0x2, {{0x1, 0x401, 0x3, 0x7, 0x4}, [@TCA_NETEM_LOSS={0xd8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x8, 0x2, 0xc003}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffff7, 0x6, 0xfff, 0x9, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40c, 0x6, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x8, 0x3, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x6, 0x8, 0x3}}, @NETEM_LOSS_GE={0x8, 0x2, {0x7fffffff, 0x3823, 0x3, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x60000, 0x6b, 0x72b5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x200, 0x6, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x5, 0x1, 0x7, 0xfff}}]}]}}}]}, 0x124}, 0x1, 0x0, 0x0, 0xc000041}, 0x20008000) 522.114548ms ago: executing program 7 (id=2040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 478.483931ms ago: executing program 9 (id=2041): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 421.302675ms ago: executing program 7 (id=2042): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001040)=0x1007) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 366.010598ms ago: executing program 7 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000180)='2', 0x1, 0xfecc) fallocate(r1, 0x10, 0x7, 0x10001) 365.486688ms ago: executing program 6 (id=2053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 309.390782ms ago: executing program 2 (id=2044): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 309.167702ms ago: executing program 6 (id=2045): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r3, 0x0, 0x2000000000000f, 0x8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) tee(r2, r4, 0x4e, 0x0) 308.853362ms ago: executing program 7 (id=2046): openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x401, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x37c17, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20040000) 256.270715ms ago: executing program 4 (id=2047): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setresgid(r2, r4, r5) 209.382138ms ago: executing program 9 (id=2048): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = gettid() timer_create(0x7, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) 198.350288ms ago: executing program 4 (id=2049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@delchain={0x94, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffdf5, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x35}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_U32_INDEV={0x0, 0x8, 'geneve0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x95}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg1\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa}, @TCA_U32_DIVISOR={0x8, 0x4, 0x53}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc075}, 0x0) 142.084591ms ago: executing program 9 (id=2050): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x4, 0xb}, 0x2, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) 87.926915ms ago: executing program 7 (id=2051): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000002c00000008005800000000000e0001006e657464657673696d0000000f0002"], 0x3c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 56.664066ms ago: executing program 4 (id=2052): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 280.5µs ago: executing program 9 (id=2054): socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pause() 0s ago: executing program 7 (id=2055): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): 387] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.171828][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.184347][ T8387] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.199271][ T8387] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.208687][ T9677] chnl_net:caif_netlink_parms(): no params data found [ 74.234102][ T8365] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.292246][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.299633][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.307424][ T9677] bridge_slave_0: entered allmulticast mode [ 74.314023][ T9677] bridge_slave_0: entered promiscuous mode [ 74.321407][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.328610][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.336730][ T9677] bridge_slave_1: entered allmulticast mode [ 74.343273][ T9677] bridge_slave_1: entered promiscuous mode [ 74.363353][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.375158][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.424176][ T9677] team0: Port device team_slave_0 added [ 74.431560][ T9677] team0: Port device team_slave_1 added [ 74.462743][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.469837][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.495867][ T9677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.508249][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.515323][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.541480][ T9677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.596272][ T9677] hsr_slave_0: entered promiscuous mode [ 74.603756][ T9677] hsr_slave_1: entered promiscuous mode [ 74.609788][ T9677] debugfs: 'hsr0' already exists in 'hsr' [ 74.615616][ T9677] Cannot create hsr debugfs directory [ 74.696285][ T9677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.773746][ T9677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.783734][ T9677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.795154][ T9677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.837837][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.845083][ T9677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.852514][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.859652][ T9677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.935716][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.963943][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.977708][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.001531][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.016149][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.023443][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.046831][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.054024][ T8369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.174665][ T9822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.792'. [ 75.192972][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.409647][ T9827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.418839][ T9677] veth0_vlan: entered promiscuous mode [ 75.444921][ T9827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.453804][ T9677] veth1_vlan: entered promiscuous mode [ 75.479448][ T9677] veth0_macvtap: entered promiscuous mode [ 75.508606][ T9677] veth1_macvtap: entered promiscuous mode [ 75.544959][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.564656][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.591402][ T8365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607310][ T8365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.620587][ T8365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.643675][ T29] audit: type=1400 audit(3917813531.774:542): avc: denied { mounton } for pid=9677 comm="syz-executor" path="/root/syzkaller.87xumm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.646516][ T8365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.740114][ T29] audit: type=1400 audit(3917813531.824:543): avc: denied { mount } for pid=9677 comm="syz-executor" name="/" dev="gadgetfs" ino=4577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.003752][ T9890] syzkaller0: entered promiscuous mode [ 76.009388][ T9890] syzkaller0: entered allmulticast mode [ 76.140376][ T9905] loop5: detected capacity change from 0 to 512 [ 76.206432][ T9905] msdos filesystem being mounted at /4/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 76.243678][ T9905] xt_hashlimit: size too large, truncated to 1048576 [ 76.661628][ T9932] netlink: 'syz.0.826': attribute type 18 has an invalid length. [ 76.669567][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 76.679631][ T9932] netlink: 'syz.0.826': attribute type 18 has an invalid length. [ 76.687501][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 76.758334][ T8387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.768734][ T8387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.845787][ T8387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.856414][ T8387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.916393][ T9947] loop4: detected capacity change from 0 to 512 [ 76.947849][ T9947] msdos filesystem being mounted at /178/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 76.969804][ T8387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.980232][ T8387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.998540][ T9947] xt_hashlimit: size too large, truncated to 1048576 [ 77.224229][ T8387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.234651][ T8387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.314593][ T29] audit: type=1400 audit(3917813533.444:544): avc: denied { bind } for pid=9965 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 77.377091][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 77.478207][ T8387] bridge_slave_1: left allmulticast mode [ 77.483989][ T8387] bridge_slave_1: left promiscuous mode [ 77.489815][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.498842][ T8387] bridge_slave_0: left allmulticast mode [ 77.504612][ T8387] bridge_slave_0: left promiscuous mode [ 77.510341][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.718739][ T3448] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.809790][ T8387] gretap0 (unregistering): left promiscuous mode [ 77.915912][ T8387] bond0 (unregistering): left promiscuous mode [ 77.922142][ T8387] bond_slave_0: left promiscuous mode [ 77.927681][ T8387] bond_slave_1: left promiscuous mode [ 77.936186][ T8387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.946778][ T8387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.956972][ T8387] bond0 (unregistering): Released all slaves [ 77.990209][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.997429][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.008068][ T9948] bridge_slave_0: entered allmulticast mode [ 78.014784][ T9948] bridge_slave_0: entered promiscuous mode [ 78.026124][ T8387] hsr_slave_0: left promiscuous mode [ 78.032970][ T8387] hsr_slave_1: left promiscuous mode [ 78.039326][ T8387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.047110][ T8387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.056100][ T8387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.063581][ T8387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.083638][ T8387] veth1_macvtap: left promiscuous mode [ 78.090640][ T8387] veth0_macvtap: left promiscuous mode [ 78.096522][ T8387] veth1_vlan: left promiscuous mode [ 78.101829][ T8387] veth0_vlan: left promiscuous mode [ 78.211542][ T8387] team0 (unregistering): Port device team_slave_1 removed [ 78.222886][ T8387] team0 (unregistering): Port device team_slave_0 removed [ 78.258200][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.265533][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.273737][ T9948] bridge_slave_1: entered allmulticast mode [ 78.280619][ T9948] bridge_slave_1: entered promiscuous mode [ 78.328299][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.340191][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.363445][ T9948] team0: Port device team_slave_0 added [ 78.370807][ T9948] team0: Port device team_slave_1 added [ 78.397586][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.404618][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.430613][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.449876][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.456910][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.482926][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.601444][ T9948] hsr_slave_0: entered promiscuous mode [ 78.611102][ T9948] hsr_slave_1: entered promiscuous mode [ 78.658894][ T8387] IPVS: stop unused estimator thread 0... [ 78.776454][T10066] netlink: 'syz.3.860': attribute type 6 has an invalid length. [ 78.875217][ T9948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.899159][ T9948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.929158][ T9948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.952517][ T1041] IPVS: starting estimator thread 0... [ 78.963762][ T9948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.054525][T10089] IPVS: using max 2256 ests per chain, 112800 per kthread [ 79.102411][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.133871][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.150419][T10114] loop4: detected capacity change from 0 to 1024 [ 79.157142][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.164339][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.214001][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.221177][ T8387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.323594][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.543865][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 79.648158][ T9948] veth0_vlan: entered promiscuous mode [ 79.656687][ T9948] veth1_vlan: entered promiscuous mode [ 79.673841][ T9948] veth0_macvtap: entered promiscuous mode [ 79.682646][ T9948] veth1_macvtap: entered promiscuous mode [ 79.694933][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.721976][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.735221][ T8365] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.758155][ T8365] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784490][ T8008] Bluetooth: hci0: command 0x1003 tx timeout [ 79.789284][ T7722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.791731][ T8365] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.800227][ T9996] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 79.825188][ T8365] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.902602][ T29] audit: type=1400 audit(3917813536.034:545): avc: denied { getopt } for pid=10169 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.099769][T10189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.142195][T10192] syzkaller1: entered promiscuous mode [ 80.147762][T10192] syzkaller1: entered allmulticast mode [ 80.185554][T10189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.262583][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 80.271680][T10213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.898'. [ 80.319132][T10189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.387883][T10189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.483325][ T8373] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.504778][ T8373] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.526464][ T8373] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.544872][ T8373] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.640414][T10228] loop4: detected capacity change from 0 to 1024 [ 80.677016][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.707020][T10218] loop3: detected capacity change from 0 to 32768 [ 80.713982][T10228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.725806][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.760877][T10228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #2: comm syz.4.904: missing EA_INODE flag [ 80.773702][T10228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.904: error while reading EA inode 2 err=-117 [ 80.798942][T10218] loop3: p1 p2 p3 < p5 p6 > [ 80.816259][T10218] loop3: p2 size 16775168 extends beyond EOD, truncated [ 80.852171][T10218] loop3: p5 start 4294970168 is beyond EOD, truncated [ 80.863583][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.003784][T10245] netlink: 'syz.3.909': attribute type 39 has an invalid length. [ 81.020522][T10245] hsr_slave_1 (unregistering): left promiscuous mode [ 81.139533][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 81.144060][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 81.155713][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 81.168167][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 81.216895][T10256] loop6: detected capacity change from 0 to 512 [ 81.245639][T10256] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.263403][T10256] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.913: bad orphan inode 131083 [ 81.274955][T10256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.301239][ T9948] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.395015][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.916'. [ 81.403956][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'. [ 81.418415][ T8387] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.418563][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.916'. [ 81.436056][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'. [ 81.444902][ T8387] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.456440][ T8387] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.477632][ T8387] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.713879][T10282] loop3: detected capacity change from 0 to 128 [ 81.737548][T10282] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.760309][T10282] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.771714][T10282] vfat filesystem being mounted at /210/bus supports timestamps until 2107-12-31 (0x10391447e) [ 81.858215][ T8365] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.907187][T10292] loop3: detected capacity change from 0 to 512 [ 81.952200][T10292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.977999][T10295] loop4: detected capacity change from 0 to 4096 [ 82.008565][T10295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.030967][T10292] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.126898][ T10] IPVS: starting estimator thread 0... [ 82.130143][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.144288][T10305] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.216214][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.224835][T10307] IPVS: using max 1824 ests per chain, 91200 per kthread [ 82.352087][ T29] audit: type=1400 audit(3917813538.484:546): avc: denied { mount } for pid=10319 comm="syz.6.938" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 82.415620][T10323] loop6: detected capacity change from 0 to 128 [ 82.436635][T10323] vfat filesystem being mounted at /17/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 82.815940][ T29] audit: type=1326 audit(3917813538.954:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 82.840431][ T29] audit: type=1326 audit(3917813538.954:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 82.863920][ T29] audit: type=1326 audit(3917813538.954:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 82.887228][ T29] audit: type=1326 audit(3917813538.954:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 82.910727][ T29] audit: type=1326 audit(3917813538.954:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 82.975123][ T29] audit: type=1326 audit(3917813539.114:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 82.999370][ T29] audit: type=1326 audit(3917813539.114:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 83.023042][ T29] audit: type=1326 audit(3917813539.114:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.6.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 83.088949][T10359] loop4: detected capacity change from 0 to 512 [ 83.096087][T10359] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.118142][T10359] vfat filesystem being mounted at /212/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 83.205989][T10369] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 83.345217][T10381] loop4: detected capacity change from 0 to 512 [ 83.356702][T10381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.483369][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.494268][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 83.709811][T10410] loop3: detected capacity change from 0 to 2364 [ 83.986349][ T8369] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.150773][T10437] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.987'. [ 84.162494][T10437] netlink: zone id is out of range [ 84.167712][T10437] netlink: zone id is out of range [ 84.174594][T10437] netlink: zone id is out of range [ 84.189622][T10437] netlink: set zone limit has 8 unknown bytes [ 84.411124][T10449] loop6: detected capacity change from 0 to 512 [ 84.473163][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.997'. [ 84.498131][T10449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.512256][T10449] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.607722][ T9948] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.779924][T10478] ALSA: seq fatal error: cannot create timer (-16) [ 84.887865][T10483] loop6: detected capacity change from 0 to 512 [ 84.897639][T10483] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1005: iget: bad i_size value: -4294967286 [ 84.897945][T10483] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1005: couldn't read orphan inode 15 (err -117) [ 84.898598][T10483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.967061][ T9948] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.104027][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 85.104125][ T29] audit: type=1400 audit(3917813541.234:583): avc: denied { write } for pid=10490 comm="syz.5.1008" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.256874][T10497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.257025][T10497] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.287052][ T29] audit: type=1400 audit(3917813541.424:584): avc: denied { setattr } for pid=10496 comm="syz.5.1011" path="/29/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.329952][ T9677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.389270][T10506] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 85.392354][T10505] IPVS: stopping master sync thread 10506 ... [ 85.547992][T10513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.024693][ T7722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.024721][T10487] Bluetooth: hci0: command 0x1003 tx timeout [ 86.184468][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.605826][T10567] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 86.761127][T10576] set_capacity_and_notify: 1 callbacks suppressed [ 86.761159][T10576] loop5: detected capacity change from 0 to 1024 [ 86.805760][T10576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.818093][T10576] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.858005][T10576] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1027: bg 0: block 112: padding at end of block bitmap is not set [ 86.896792][ T29] audit: type=1326 audit(3917813543.034:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 86.920558][T10576] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 56 with error 117 [ 86.933111][T10576] EXT4-fs (loop5): This should not happen!! Data will be lost [ 86.933111][T10576] [ 86.943221][ T29] audit: type=1326 audit(3917813543.034:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 86.966812][ T29] audit: type=1326 audit(3917813543.034:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 86.990413][ T29] audit: type=1326 audit(3917813543.034:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 87.014125][ T29] audit: type=1326 audit(3917813543.034:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 87.036016][T10596] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 87.037653][ T29] audit: type=1326 audit(3917813543.034:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 87.068963][ T7722] Bluetooth: hci1: command 0x1003 tx timeout [ 87.068997][ T29] audit: type=1326 audit(3917813543.034:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 87.076059][ T8008] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 87.098380][ T29] audit: type=1326 audit(3917813543.034:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 87.155784][T10596] bond1: entered promiscuous mode [ 87.166413][T10596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.181685][T10596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.199200][T10596] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 87.209491][T10596] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 87.226195][T10596] bond1: (slave vti0): making interface the new active one [ 87.233491][T10596] vti0: entered promiscuous mode [ 87.240847][T10596] bond1: (slave vti0): Enslaving as an active interface with an up link [ 87.286623][ T9677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 87.420986][T10628] sctp: [Deprecated]: syz.3.1042 (pid 10628) Use of int in max_burst socket option. [ 87.420986][T10628] Use struct sctp_assoc_value instead [ 87.514529][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 87.588486][T10633] xfrm1: entered promiscuous mode [ 87.593580][T10633] xfrm1: entered allmulticast mode [ 87.605636][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 87.706425][T10651] netlink: 'syz.0.1053': attribute type 4 has an invalid length. [ 87.774476][T10655] netlink: 'syz.0.1053': attribute type 4 has an invalid length. [ 87.851701][T10661] loop6: detected capacity change from 0 to 1024 [ 87.867715][T10661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.882793][T10661] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.923731][T10661] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.1056: lblock 0 mapped to illegal pblock 0 (length 4) [ 87.938245][T10661] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 87.950798][T10661] EXT4-fs (loop6): This should not happen!! Data will be lost [ 87.950798][T10661] [ 87.962881][T10661] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.1056: lblock 0 mapped to illegal pblock 0 (length 1) [ 87.983376][T10661] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.1056: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.003009][T10661] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.1056: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.023356][T10661] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.1056: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.057123][T10661] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.1056: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 88.094731][ T3448] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:7: lblock 4 mapped to illegal pblock 4 (length 1) [ 88.138151][ T3448] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 88.150543][ T3448] EXT4-fs (loop6): This should not happen!! Data will be lost [ 88.150543][ T3448] [ 88.161839][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 88.170880][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 88.196711][ T9948] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.393667][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1068'. [ 88.434845][T10692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.535690][T10692] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 88.773004][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.780469][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.916850][T10702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.943190][T10702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.046639][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.075958][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.084361][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.174433][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.584682][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1083'. [ 90.103878][T10764] loop3: detected capacity change from 0 to 512 [ 90.113495][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 90.113510][ T29] audit: type=1400 audit(3917813546.244:679): avc: denied { write } for pid=10766 comm="syz.6.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.114915][T10764] EXT4-fs: Ignoring removed bh option [ 90.125342][ T29] audit: type=1400 audit(3917813546.264:680): avc: denied { read } for pid=10766 comm="syz.6.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.179713][T10764] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 90.195006][T10764] EXT4-fs (loop3): 1 truncate cleaned up [ 90.238662][T10764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.336530][ T29] audit: type=1400 audit(3917813546.474:681): avc: denied { execute } for pid=10776 comm="syz.5.1096" path="/44/blkio.bfq.io_wait_time_recursive" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.392564][T10779] tipc: Started in network mode [ 90.397591][T10779] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 90.404878][T10779] tipc: Enabled bearer , priority 18 [ 90.423105][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.547578][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1093'. [ 90.636444][T10793] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1101'. [ 90.683063][ T29] audit: type=1400 audit(3917813546.814:682): avc: denied { create } for pid=10797 comm="syz.6.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.711440][T10793] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1101'. [ 90.746208][ T29] audit: type=1400 audit(3917813546.864:683): avc: denied { read } for pid=10797 comm="syz.6.1102" path="socket:[15964]" dev="sockfs" ino=15964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.822889][ T29] audit: type=1400 audit(3917813546.954:684): avc: denied { create } for pid=10804 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.870805][ T29] audit: type=1400 audit(3917813546.984:685): avc: denied { bind } for pid=10804 comm="syz.0.1103" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.891370][ T29] audit: type=1400 audit(3917813546.984:686): avc: denied { node_bind } for pid=10804 comm="syz.0.1103" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 90.913223][ T29] audit: type=1400 audit(3917813546.984:687): avc: denied { connect } for pid=10804 comm="syz.0.1103" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.935575][ T29] audit: type=1400 audit(3917813546.984:688): avc: denied { write } for pid=10804 comm="syz.0.1103" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.959609][T10809] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1102'. [ 90.976313][T10811] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 90.984118][T10811] netlink: 'syz.0.1104': attribute type 4 has an invalid length. [ 91.323149][T10830] netlink: 'syz.5.1111': attribute type 5 has an invalid length. [ 91.414417][ T10] tipc: Node number set to 10463914 [ 92.163095][T10840] loop4: detected capacity change from 0 to 1024 [ 92.206578][T10840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.254046][T10840] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1115: Allocating blocks 497-513 which overlap fs metadata [ 92.287248][T10840] EXT4-fs (loop4): pa ffff88810759e2a0: logic 16, phys. 129, len 24 [ 92.295493][T10840] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 92.460088][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.556864][T10900] loop6: detected capacity change from 0 to 1024 [ 92.576346][T10900] EXT4-fs: Ignoring removed orlov option [ 92.582129][T10900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.644843][T10900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.850764][ T9948] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.910704][T10927] __nla_validate_parse: 2 callbacks suppressed [ 92.910775][T10927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1133'. [ 93.097416][T10938] loop3: detected capacity change from 0 to 128 [ 93.116126][T10938] vfat filesystem being mounted at /264/file0 (deleted) supports timestamps until 2107-12-31 (0x1039063ba) [ 93.274158][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.285962][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.300970][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.324705][T10949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1144'. [ 93.333726][T10949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1144'. [ 93.334534][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.342932][T10949] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1144'. [ 93.404716][T10951] syzkaller0: entered promiscuous mode [ 93.410273][T10951] syzkaller0: entered allmulticast mode [ 93.449660][T10948] netlink: 566 bytes leftover after parsing attributes in process `syz.6.1145'. [ 93.521410][T10962] geneve2: entered promiscuous mode [ 93.526834][T10962] geneve2: entered allmulticast mode [ 93.534068][ T3448] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.543427][ T3448] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.563161][ T3448] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.580382][ T3448] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.935397][T10987] loop5: detected capacity change from 0 to 512 [ 93.955990][T10987] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.965146][T10987] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 94.012625][T10987] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 94.044681][T10987] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 94.052838][T10987] System zones: 0-2, 18-18, 34-35 [ 94.098508][T10987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.137262][T10987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.232562][T11013] IPv6: sit1: Disabled Multicast RS [ 94.307127][T11019] loop5: detected capacity change from 0 to 1024 [ 94.321691][T11019] EXT4-fs: Ignoring removed orlov option [ 94.337030][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 94.385446][T11019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.450659][ T9677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.608923][T11047] loop4: detected capacity change from 0 to 512 [ 94.632868][ T3408] IPVS: starting estimator thread 0... [ 94.659247][T11047] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.668380][T11047] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 94.702343][T11047] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 94.711987][T11047] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 94.724574][T11048] IPVS: using max 1728 ests per chain, 86400 per kthread [ 94.736792][T11047] System zones: 0-2, 18-18, 34-35 [ 94.743094][T11047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.779128][T11047] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.846294][T11063] all: renamed from bridge_slave_0 (while UP) [ 94.870719][T11066] program syz.0.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.899710][T11069] loop5: detected capacity change from 0 to 512 [ 94.933493][T11066] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 94.954212][T11069] EXT4-fs (loop5): 1 orphan inode deleted [ 94.964934][ T3448] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 94.979224][T11069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.023055][T11069] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.065655][ T9677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.077690][ T3448] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 95.182883][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 95.182969][ T29] audit: type=1326 audit(3917813551.314:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1814dfaeb9 code=0x7ffc0000 [ 95.257275][ T29] audit: type=1326 audit(3917813551.344:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1814dfaeb9 code=0x7ffc0000 [ 95.280727][ T29] audit: type=1326 audit(3917813551.344:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1814dfaeb9 code=0x7ffc0000 [ 95.304170][ T29] audit: type=1326 audit(3917813551.344:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1814dfaeb9 code=0x7ffc0000 [ 95.327856][ T29] audit: type=1326 audit(3917813551.344:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1814dfaeb9 code=0x7ffc0000 [ 95.351305][ T29] audit: type=1326 audit(3917813551.344:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f1814dfaeb9 code=0x7ffc0000 [ 95.374848][ T29] audit: type=1326 audit(3917813551.344:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1814dfaeb9 code=0x7ffc0000 [ 95.398585][ T29] audit: type=1326 audit(3917813551.344:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm="syz.0.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1814dfaeb9 code=0x7ffc0000 [ 95.485144][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 95.505760][ T29] audit: type=1400 audit(3917813551.464:787): avc: denied { ioctl } for pid=11100 comm="syz.5.1207" path="socket:[16579]" dev="sockfs" ino=16579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.530894][ T29] audit: type=1400 audit(3917813551.484:788): avc: denied { associate } for pid=11102 comm="syz.4.1205" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.730279][T11124] veth3: entered promiscuous mode [ 95.822293][ T8365] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.832824][ T8365] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.843259][ T8365] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 95.867672][T11130] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1222'. [ 95.895813][T11130] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1222'. [ 95.938937][ T8365] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.949434][ T8365] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.959865][ T8365] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.021715][ T8365] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.032161][ T8365] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.042592][ T8365] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.084348][ T8365] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.094863][ T8365] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.105224][ T8365] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.137681][T11148] netlink: 'syz.6.1227': attribute type 10 has an invalid length. [ 96.161317][T11148] bond0: (slave bond_slave_0): Releasing backup interface [ 96.206791][ T8365] bridge_slave_1: left allmulticast mode [ 96.212772][ T8365] bridge_slave_1: left promiscuous mode [ 96.218538][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.227926][ T8365] bridge_slave_0: left allmulticast mode [ 96.233613][ T8365] bridge_slave_0: left promiscuous mode [ 96.239412][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.337197][ T8365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.347463][ T8365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.357799][ T8365] bond0 (unregistering): Released all slaves [ 96.400748][ T8365] hsr_slave_0: left promiscuous mode [ 96.407196][ T8365] hsr_slave_1: left promiscuous mode [ 96.413134][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.420693][ T8365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.428858][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.436375][ T8365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.449221][ T8365] veth1_macvtap: left promiscuous mode [ 96.454886][ T8365] veth0_macvtap: left promiscuous mode [ 96.460486][ T8365] veth1_vlan: left promiscuous mode [ 96.465964][ T8365] veth0_vlan: left promiscuous mode [ 96.597311][T11176] uprobe: syz.4.1233:11176 failed to unregister, leaking uprobe [ 96.610982][T11175] block device autoloading is deprecated and will be removed. [ 96.651852][ T8365] team0 (unregistering): Port device team_slave_1 removed [ 96.681029][ T8365] team0 (unregistering): Port device team_slave_0 removed [ 96.824920][T11135] chnl_net:caif_netlink_parms(): no params data found [ 96.932829][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.940219][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.949937][T11135] bridge_slave_0: entered allmulticast mode [ 96.956652][T11135] bridge_slave_0: entered promiscuous mode [ 96.973727][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.980958][T11135] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.988604][T11135] bridge_slave_1: entered allmulticast mode [ 96.995395][T11135] bridge_slave_1: entered promiscuous mode [ 97.024832][T11135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.041236][T11135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.076697][T11135] team0: Port device team_slave_0 added [ 97.093724][T11135] team0: Port device team_slave_1 added [ 97.145156][T11135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.152196][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.178558][T11135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.191899][T11226] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.1245'. [ 97.202189][T11226] netlink: zone id is out of range [ 97.208593][T11226] netlink: zone id is out of range [ 97.215458][T11226] netlink: zone id is out of range [ 97.221848][T11135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.228926][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.236178][T11226] netlink: del zone limit has 8 unknown bytes [ 97.254879][T11135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.287044][T11135] hsr_slave_0: entered promiscuous mode [ 97.295627][T11135] hsr_slave_1: entered promiscuous mode [ 97.301817][T11135] debugfs: 'hsr0' already exists in 'hsr' [ 97.307622][T11135] Cannot create hsr debugfs directory [ 97.427958][T11245] loop3: detected capacity change from 0 to 256 [ 97.503560][T11135] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 97.539618][T11135] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 97.564597][T11135] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 97.586718][T11135] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 97.647876][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.655148][T11135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.662479][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.669585][T11135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.795188][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.811212][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.840332][T11135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.862176][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.878938][T11294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11294 comm=syz.3.1258 [ 97.895846][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.902974][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.904155][T11294] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 97.955970][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.963103][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.008472][T11301] bond0: (slave bridge1): making interface the new active one [ 98.022230][T11301] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 98.199556][T11135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.222005][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 98.301981][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 98.332645][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 98.535404][T11135] veth0_vlan: entered promiscuous mode [ 98.591412][T11135] veth1_vlan: entered promiscuous mode [ 98.728223][T11135] veth0_macvtap: entered promiscuous mode [ 98.746415][T11135] veth1_macvtap: entered promiscuous mode [ 98.759548][T11135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.771672][T11135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.782059][ T8393] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.811409][ T8393] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.856931][ T8393] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.898186][ T8393] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.126295][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.136741][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.247834][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.258226][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.358123][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.368519][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.448683][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.459217][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.624888][ T31] bridge_slave_1: left allmulticast mode [ 99.630684][ T31] bridge_slave_1: left promiscuous mode [ 99.636446][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.647609][ T31] bridge_slave_0: left allmulticast mode [ 99.653583][ T31] bridge_slave_0: left promiscuous mode [ 99.659514][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.854702][ T31] bond1 (unregistering): (slave vti0): Releasing backup interface [ 99.862671][ T31] vti0 (unregistering): left promiscuous mode [ 99.938602][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.975045][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.037574][ T31] bond0 (unregistering): Released all slaves [ 100.069908][ T31] bond1 (unregistering): Released all slaves [ 100.139592][ T31] hsr_slave_0: left promiscuous mode [ 100.155463][ T31] hsr_slave_1: left promiscuous mode [ 100.178128][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.185635][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.216791][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.224236][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.270534][ T31] veth1_macvtap: left promiscuous mode [ 100.284989][ T31] veth0_macvtap: left promiscuous mode [ 100.301692][ T31] veth1_vlan: left promiscuous mode [ 100.320053][ T31] veth0_vlan: left promiscuous mode [ 100.469802][ T31] team0 (unregistering): Port device team_slave_1 removed [ 100.482251][ T31] team0 (unregistering): Port device team_slave_0 removed [ 100.508145][T11500] netlink: 'syz.6.1290': attribute type 4 has an invalid length. [ 100.552341][T11497] netlink: 'syz.6.1290': attribute type 4 has an invalid length. [ 100.567520][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 100.567539][ T29] audit: type=1400 audit(3917813556.704:831): avc: denied { create } for pid=11502 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.613854][ T29] audit: type=1400 audit(3917813556.704:832): avc: denied { bind } for pid=11502 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.633352][ T29] audit: type=1400 audit(3917813556.704:833): avc: denied { name_bind } for pid=11502 comm="syz.4.1292" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 100.654198][ T29] audit: type=1400 audit(3917813556.704:834): avc: denied { node_bind } for pid=11502 comm="syz.4.1292" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 100.699915][ T29] audit: type=1326 audit(3917813556.834:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 100.723635][ T29] audit: type=1326 audit(3917813556.834:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 100.758722][ T29] audit: type=1326 audit(3917813556.834:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 100.782222][ T29] audit: type=1326 audit(3917813556.884:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 100.813994][ T29] audit: type=1326 audit(3917813556.914:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 100.837634][ T29] audit: type=1326 audit(3917813556.914:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 100.898459][T11440] chnl_net:caif_netlink_parms(): no params data found [ 101.059067][T11440] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.066325][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.095934][T11440] bridge_slave_0: entered allmulticast mode [ 101.117534][T11440] bridge_slave_0: entered promiscuous mode [ 101.135390][T11440] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.142522][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.165976][T11440] bridge_slave_1: entered allmulticast mode [ 101.184917][T11440] bridge_slave_1: entered promiscuous mode [ 101.212304][ T31] IPVS: stop unused estimator thread 0... [ 101.278636][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 101.287726][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 101.300889][T11440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.318200][ T8380] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.328548][T11440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.337756][ T8380] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.380994][ T8380] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.398316][T11440] team0: Port device team_slave_0 added [ 101.416303][T11440] team0: Port device team_slave_1 added [ 101.476761][ T8380] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.491073][T11440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.498203][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.524219][T11440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.579483][T11440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.586603][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.612704][T11440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.644910][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.654285][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.707052][T11440] hsr_slave_0: entered promiscuous mode [ 101.715747][T11440] hsr_slave_1: entered promiscuous mode [ 101.721713][T11440] debugfs: 'hsr0' already exists in 'hsr' [ 101.727601][T11440] Cannot create hsr debugfs directory [ 101.929147][T11440] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 101.942229][T11440] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 101.957738][T11440] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 101.970483][T11440] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 102.027508][T11440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.046127][T11440] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.069860][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.077003][ T8380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.098387][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.105519][ T8366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.266409][T11440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.276869][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1319'. [ 102.290583][T11624] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.347875][T11624] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.407901][T11624] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.458296][T11624] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.479961][T11440] veth0_vlan: entered promiscuous mode [ 102.488729][T11440] veth1_vlan: entered promiscuous mode [ 102.516602][ T31] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.538690][T11440] veth0_macvtap: entered promiscuous mode [ 102.546693][T11440] veth1_macvtap: entered promiscuous mode [ 102.559124][T11440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.568499][T11440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.604680][ T8380] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.614313][ T8380] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.663812][ T8380] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.682092][ T8380] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.703799][ T8380] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.722356][ T8380] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.764508][ T8380] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.844854][T11652] loop7: detected capacity change from 0 to 128 [ 102.871018][T11652] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.894680][T11652] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.096364][T11135] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.388244][T11693] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1340'. [ 103.412785][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1341'. [ 103.534002][T11706] loop7: detected capacity change from 0 to 4096 [ 103.584413][T11706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.706102][T11716] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1348'. [ 103.925445][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 103.934552][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 104.342461][T11135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.371212][T11748] loop3: detected capacity change from 0 to 8192 [ 104.395567][T11748] vfat filesystem being mounted at /296/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 104.455699][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1359'. [ 104.489096][ T8369] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.497748][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1359'. [ 104.516549][ T8369] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.556636][ T8369] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.594347][ T8369] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.612075][T11758] loop3: detected capacity change from 0 to 512 [ 104.625415][T11758] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.651041][T11758] msdos filesystem being mounted at /297/. supports timestamps until 2107-12-31 (0x10391447e) [ 104.931903][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 105.258449][T11814] loop6: detected capacity change from 0 to 128 [ 105.285437][T11814] vfat filesystem being mounted at /114/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 105.421381][ T8379] bio_check_eod: 101 callbacks suppressed [ 105.421428][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.421428][ T8379] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 105.453490][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.453490][ T8379] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 105.467470][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.467470][ T8379] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 105.482553][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.482553][ T8379] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 105.497864][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.497864][ T8379] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 105.512677][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.512677][ T8379] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 105.526479][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.526479][ T8379] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 105.573027][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.573027][ T8379] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 105.586691][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.586691][ T8379] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 105.600567][ T8379] kworker/u8:18: attempt to access beyond end of device [ 105.600567][ T8379] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 105.820068][T11839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.841747][T11839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.081660][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 106.081680][ T29] audit: type=1400 audit(3917813562.214:916): avc: denied { name_bind } for pid=11846 comm="syz.6.1397" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 107.009562][T11870] geneve2: entered promiscuous mode [ 107.194048][ T29] audit: type=1400 audit(3917813563.324:917): avc: denied { create } for pid=11884 comm="syz.6.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.223471][ T29] audit: type=1400 audit(3917813563.354:918): avc: denied { bind } for pid=11884 comm="syz.6.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.245440][ T29] audit: type=1400 audit(3917813563.374:919): avc: denied { read } for pid=11884 comm="syz.6.1414" path="socket:[20111]" dev="sockfs" ino=20111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.291286][T11885] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 107.397218][ T8366] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.604074][ T29] audit: type=1400 audit(3917813563.734:920): avc: denied { associate } for pid=11908 comm="syz.4.1421" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 107.991191][T11931] loop7: detected capacity change from 0 to 2048 [ 108.022290][T11931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.046493][T11931] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 16: comm syz.7.1427: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=2048, size=2048 fake=1 [ 108.089785][T11135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.641505][T11967] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 108.649420][T11967] netlink: 'syz.3.1434': attribute type 4 has an invalid length. [ 108.657254][T11967] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1434'. [ 108.837617][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 108.875309][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 109.191046][ T29] audit: type=1400 audit(3917813565.324:921): avc: denied { create } for pid=12007 comm="syz.3.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.464466][ T7722] Bluetooth: hci0: command 0x1003 tx timeout [ 109.470826][ T8008] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.515551][T12024] ipip0: entered promiscuous mode [ 109.627142][ T29] audit: type=1326 audit(3917813565.764:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12033 comm="syz.6.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 109.650826][ T29] audit: type=1326 audit(3917813565.764:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12033 comm="syz.6.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 109.674326][ T29] audit: type=1326 audit(3917813565.764:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12033 comm="syz.6.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 109.697892][ T29] audit: type=1326 audit(3917813565.764:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12033 comm="syz.6.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 109.731558][T12030] loop7: detected capacity change from 0 to 8192 [ 109.760884][T12030] vfat filesystem being mounted at /34/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 110.436472][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1457'. [ 110.445510][T12054] netlink: 'syz.8.1457': attribute type 5 has an invalid length. [ 110.453294][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1457'. [ 110.517315][T12054] geneve2: entered promiscuous mode [ 110.522589][T12054] geneve2: entered allmulticast mode [ 110.550271][ T8379] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 110.581834][ T8379] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 110.616119][ T8379] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 110.644876][ T8379] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 110.691206][ T8379] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.796051][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1460'. [ 110.805121][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1460'. [ 110.814165][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1460'. [ 110.865403][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1460'. [ 110.874484][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1460'. [ 111.029045][T12070] loop8: detected capacity change from 0 to 1024 [ 111.061385][T12070] EXT4-fs: Ignoring removed oldalloc option [ 111.067463][T12070] EXT4-fs: Ignoring removed bh option [ 111.137367][T12070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.714333][T12093] loop7: detected capacity change from 0 to 32768 [ 111.775494][T12093] loop7: p1 p3 < p5 p6 > [ 111.779893][T12093] loop7: partition table partially beyond EOD, truncated [ 111.936479][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 111.936567][ T29] audit: type=1400 audit(3917813568.074:948): avc: denied { create } for pid=12112 comm="syz.4.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 111.986327][T12117] loop7: detected capacity change from 0 to 128 [ 112.005552][T12117] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.049909][ T29] audit: type=1400 audit(3917813568.104:949): avc: denied { ioctl } for pid=12112 comm="syz.4.1475" path="socket:[20357]" dev="sockfs" ino=20357 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 112.081404][T12121] netlink: 'syz.6.1478': attribute type 1 has an invalid length. [ 112.093691][T12117] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.111533][T12117] vfat filesystem being mounted at /41/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 112.127524][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 112.127606][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 112.147329][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 112.149526][T12121] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.162160][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 112.173039][T12121] bond1: (slave batadv1): making interface the new active one [ 112.183763][T12121] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 112.208077][T12125] bond1 (unregistering): (slave batadv1): Releasing active interface [ 112.302005][T12125] bond1 (unregistering): Released all slaves [ 112.406160][T11440] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.511062][ T29] audit: type=1400 audit(3917813568.644:950): avc: denied { load_policy } for pid=12147 comm="syz.8.1484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.544208][T12148] SELinux: failed to load policy [ 112.594608][ T3422] Process accounting resumed [ 112.659600][T12154] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 112.749403][ T7722] Bluetooth: hci0: command 0x1003 tx timeout [ 112.755412][ T8008] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.827673][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.849794][T12176] bridge_slave_1: left allmulticast mode [ 112.855558][T12176] bridge_slave_1: left promiscuous mode [ 112.861395][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.886149][T12176] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 113.271373][T12221] geneve2: entered promiscuous mode [ 113.289392][ T8369] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.302450][ T29] audit: type=1400 audit(3917813569.424:951): avc: denied { mounton } for pid=12220 comm="syz.3.1501" path="/proc/736/task" dev="proc" ino=20480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.324835][ T8369] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.365381][ T8369] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397151][ T8369] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.453490][ T31] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.470007][ T31] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.511200][ T31] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.533390][ T31] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.354474][ T29] audit: type=1400 audit(3917813570.454:952): avc: denied { bind } for pid=12267 comm="syz.6.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.373804][ T29] audit: type=1400 audit(3917813570.454:953): avc: denied { setopt } for pid=12267 comm="syz.6.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.460342][T12284] ªªªªªª: renamed from vlan0 (while UP) [ 114.509686][T12288] netlink: 'syz.6.1521': attribute type 4 has an invalid length. [ 114.733820][T12298] syzkaller0: entered promiscuous mode [ 114.739468][T12298] syzkaller0: entered allmulticast mode [ 114.765729][ T29] audit: type=1400 audit(3917813570.904:954): avc: denied { append } for pid=12309 comm="syz.3.1528" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.235298][T12339] ipip0: entered promiscuous mode [ 116.157868][ T29] audit: type=1326 audit(3917813572.294:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 116.181550][ T29] audit: type=1326 audit(3917813572.294:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 116.287008][ T29] audit: type=1326 audit(3917813572.344:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 116.609099][T12389] loop3: detected capacity change from 0 to 128 [ 116.674731][T12389] msdos filesystem being mounted at /333/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 116.735900][T12391] xt_NFQUEUE: number of total queues is 0 [ 116.764510][T12389] bio_check_eod: 36 callbacks suppressed [ 116.764528][T12389] syz.3.1558: attempt to access beyond end of device [ 116.764528][T12389] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 116.849034][T12394] syz.3.1558: attempt to access beyond end of device [ 116.849034][T12394] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 116.901112][T12389] syz.3.1558: attempt to access beyond end of device [ 116.901112][T12389] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 116.915144][T12389] Buffer I/O error on dev loop3, logical block 77, async page read [ 116.939742][T12389] syz.3.1558: attempt to access beyond end of device [ 116.939742][T12389] loop3: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 116.953536][T12389] Buffer I/O error on dev loop3, logical block 78, async page read [ 117.000761][T12389] syz.3.1558: attempt to access beyond end of device [ 117.000761][T12389] loop3: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 117.014638][T12389] Buffer I/O error on dev loop3, logical block 79, async page read [ 117.024877][T12389] syz.3.1558: attempt to access beyond end of device [ 117.024877][T12389] loop3: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 117.038638][T12389] Buffer I/O error on dev loop3, logical block 80, async page read [ 117.047952][T12402] netlink: 'syz.7.1565': attribute type 1 has an invalid length. [ 117.087113][T12402] bond1: (slave geneve2): making interface the new active one [ 117.097988][T12389] syz.3.1558: attempt to access beyond end of device [ 117.097988][T12389] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 117.101527][T12402] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 117.112135][T12389] Buffer I/O error on dev loop3, logical block 77, async page read [ 117.149652][ T8366] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 117.164342][T12389] syz.3.1558: attempt to access beyond end of device [ 117.164342][T12389] loop3: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 117.178191][T12389] Buffer I/O error on dev loop3, logical block 78, async page read [ 117.181361][ T8366] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 117.213474][T12389] syz.3.1558: attempt to access beyond end of device [ 117.213474][T12389] loop3: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 117.220440][T12407] __nla_validate_parse: 11 callbacks suppressed [ 117.220495][T12407] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1564'. [ 117.227283][T12389] Buffer I/O error on dev loop3, logical block 79, async page read [ 117.270233][ T8366] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 117.291763][ T8366] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 117.294729][T12389] syz.3.1558: attempt to access beyond end of device [ 117.294729][T12389] loop3: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 117.313831][T12389] Buffer I/O error on dev loop3, logical block 80, async page read [ 117.693984][T12432] loop3: detected capacity change from 0 to 128 [ 117.706695][T12432] vfat filesystem being mounted at /337/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 117.821094][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 117.821113][ T29] audit: type=1400 audit(3917813829.953:965): avc: denied { ioctl } for pid=12440 comm="syz.8.1581" path="socket:[21776]" dev="sockfs" ino=21776 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.157200][ T29] audit: type=1400 audit(3917813830.293:966): avc: denied { mounton } for pid=12453 comm="syz.7.1587" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 118.183394][ T29] audit: type=1400 audit(3917813830.313:967): avc: denied { setopt } for pid=12453 comm="syz.7.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.204719][ T29] audit: type=1400 audit(3917813830.333:968): avc: denied { ioctl } for pid=12453 comm="syz.7.1587" path="socket:[21024]" dev="sockfs" ino=21024 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.292649][T12461] loop6: detected capacity change from 0 to 4096 [ 118.311082][T12461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.465593][ T29] audit: type=1400 audit(3917813830.593:969): avc: denied { setopt } for pid=12471 comm="syz.7.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.559994][ T29] audit: type=1400 audit(3917813830.693:970): avc: denied { write } for pid=12471 comm="syz.7.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.676642][ T8379] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.685281][ T8379] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.709888][ T8379] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.718395][ T8379] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.752453][ T8379] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.760979][ T8379] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.774567][ T8379] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.783134][ T8379] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.182736][T12461] syz.6.1590 (12461) used greatest stack depth: 7040 bytes left [ 119.191342][ T9948] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.638607][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1617'. [ 119.697914][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1618'. [ 119.730493][ T8366] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.741760][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1618'. [ 119.756593][ T8366] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.780430][ T8366] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.789577][ T8366] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.014428][T12562] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 120.021742][ T3373] IPVS: starting estimator thread 0... [ 120.114491][T12565] IPVS: using max 2160 ests per chain, 108000 per kthread [ 120.256792][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1635'. [ 120.272105][T12582] team1: entered promiscuous mode [ 120.277242][T12582] team1: entered allmulticast mode [ 120.291743][T12582] 8021q: adding VLAN 0 to HW filter on device team1 [ 120.418896][T12593] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 120.629318][ T29] audit: type=1400 audit(3917813832.763:971): avc: denied { create } for pid=12608 comm="syz.7.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.684818][ T29] audit: type=1400 audit(3917813832.783:972): avc: denied { bind } for pid=12608 comm="syz.7.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.704321][ T29] audit: type=1400 audit(3917813832.793:973): avc: denied { listen } for pid=12608 comm="syz.7.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.724145][ T29] audit: type=1400 audit(3917813832.793:974): avc: denied { connect } for pid=12608 comm="syz.7.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.937561][T12621] loop6: detected capacity change from 0 to 8192 [ 120.975899][T12621] vfat filesystem being mounted at /180/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 121.059389][ T9948] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 121.067335][ T9948] FAT-fs (loop6): Filesystem has been set read-only [ 121.577976][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1663'. [ 121.709315][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1664'. [ 122.024837][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.034290][T12658] loop3: detected capacity change from 0 to 32768 [ 122.530464][T12678] loop8: detected capacity change from 0 to 1024 [ 122.560697][T12678] EXT4-fs: Ignoring removed bh option [ 122.598748][T12678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.754091][T11440] EXT4-fs error (device loop8): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 122.783703][T11440] EXT4-fs error (device loop8): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 122.945575][T12688] loop7: detected capacity change from 0 to 128 [ 122.952481][T12688] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.005688][T12688] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.036798][T12688] vfat filesystem being mounted at /88/bus supports timestamps until 2107-12-31 (0x10391447e) [ 123.108840][ T8369] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.205095][T12693] sch_fq: defrate 7 ignored. [ 123.394708][T11744] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.663297][ T8393] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.673685][ T8393] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.684109][ T8393] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 123.791698][ T8393] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.802207][ T8393] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.812680][ T8393] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 123.872154][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 123.932167][T12713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.976420][ T8393] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.986802][ T8393] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.997219][ T8393] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 124.040172][T12720] bond1: entered allmulticast mode [ 124.088487][ T8393] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.098895][ T8393] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.109313][ T8393] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 124.294876][ T8393] bridge_slave_0: left allmulticast mode [ 124.300587][ T8393] bridge_slave_0: left promiscuous mode [ 124.306484][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.517141][ T8393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.545669][ T8393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.574960][ T8393] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 124.586412][ T8393] bond0 (unregistering): Released all slaves [ 124.612118][T12743] tipc: Enabling of bearer rejected, failed to enable media [ 124.662516][ T8393] hsr_slave_0: left promiscuous mode [ 124.681192][ T8393] hsr_slave_1: left promiscuous mode [ 124.688144][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.695734][ T8393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.707323][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.714951][ T8393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.727233][ T8393] veth1_macvtap: left promiscuous mode [ 124.738441][ T8393] veth0_macvtap: left promiscuous mode [ 124.745458][ T8393] veth1_vlan: left promiscuous mode [ 124.752684][ T8393] veth0_vlan: left promiscuous mode [ 124.862522][ T8393] team0 (unregistering): Port device team_slave_1 removed [ 124.883317][ T8393] team0 (unregistering): Port device team_slave_0 removed [ 124.981396][T12714] chnl_net:caif_netlink_parms(): no params data found [ 125.087853][T12714] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.095020][T12714] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.104647][T12714] bridge_slave_0: entered allmulticast mode [ 125.111277][T12714] bridge_slave_0: entered promiscuous mode [ 125.135116][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.142229][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.164526][T12714] bridge_slave_1: entered allmulticast mode [ 125.171052][T12714] bridge_slave_1: entered promiscuous mode [ 125.216155][T12714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.236051][T12714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.276901][T12714] team0: Port device team_slave_0 added [ 125.283951][T12714] team0: Port device team_slave_1 added [ 125.336793][T12714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.343791][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.369910][T12714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.445283][T12714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.452370][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.478409][T12714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.571160][T12714] hsr_slave_0: entered promiscuous mode [ 125.589483][T12714] hsr_slave_1: entered promiscuous mode [ 125.604702][T12714] debugfs: 'hsr0' already exists in 'hsr' [ 125.610515][T12714] Cannot create hsr debugfs directory [ 125.815006][T12714] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 125.837344][T12714] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 125.849998][T12714] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 125.870631][T12714] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 125.959957][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 125.959977][ T29] audit: type=1400 audit(3917813838.093:996): avc: denied { create } for pid=12833 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 126.001554][T12714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.008808][ T29] audit: type=1400 audit(3917813838.123:997): avc: denied { read } for pid=12833 comm="syz.3.1706" path="socket:[23679]" dev="sockfs" ino=23679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 126.039094][T12714] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.051669][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.058860][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.076677][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.083990][ T8393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.113995][T12714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.124603][T12714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.225267][T12714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.261671][T12856] netlink: 'syz.7.1711': attribute type 1 has an invalid length. [ 126.280267][T12856] bond2: entered promiscuous mode [ 126.294502][T12856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.315943][T12856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.323186][T12856] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 126.333830][T12856] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 126.372963][T12856] bond2: (slave xfrm1): making interface the new active one [ 126.380413][T12856] xfrm1: entered promiscuous mode [ 126.387769][T12856] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 126.542025][T12714] veth0_vlan: entered promiscuous mode [ 126.559505][T12714] veth1_vlan: entered promiscuous mode [ 126.578561][T12714] veth0_macvtap: entered promiscuous mode [ 126.590234][T12714] veth1_macvtap: entered promiscuous mode [ 126.602893][T12714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.612178][T12714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.639484][ T8379] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.654207][ T8379] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.665835][T12878] netlink: 'syz.4.1715': attribute type 10 has an invalid length. [ 126.675145][ T8379] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.691998][T12878] team0: Failed to send options change via netlink (err -105) [ 126.699738][T12878] team0: Port device dummy0 added [ 126.714517][ T8379] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.718225][T12878] netlink: 'syz.4.1715': attribute type 10 has an invalid length. [ 126.747671][T12878] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 126.760012][T12885] loop9: detected capacity change from 0 to 128 [ 126.775947][T12885] vfat filesystem being mounted at /0/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 126.788955][T12878] team0: Failed to send options change via netlink (err -105) [ 126.832767][T12878] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 126.842425][T12878] team0: Port device dummy0 removed [ 126.849765][T12878] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.864839][T12891] syz.9.1687: attempt to access beyond end of device [ 126.864839][T12891] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 126.894148][T12891] syz.9.1687: attempt to access beyond end of device [ 126.894148][T12891] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 126.922549][ T29] audit: type=1400 audit(3917813839.053:998): avc: denied { ioctl } for pid=12889 comm="syz.6.1718" path="socket:[22828]" dev="sockfs" ino=22828 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.958436][T12891] syz.9.1687: attempt to access beyond end of device [ 126.958436][T12891] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 126.980888][T12891] syz.9.1687: attempt to access beyond end of device [ 126.980888][T12891] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 126.996484][T12891] syz.9.1687: attempt to access beyond end of device [ 126.996484][T12891] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 127.010571][T12891] syz.9.1687: attempt to access beyond end of device [ 127.010571][T12891] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 127.025331][T12891] syz.9.1687: attempt to access beyond end of device [ 127.025331][T12891] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 127.039125][T12891] syz.9.1687: attempt to access beyond end of device [ 127.039125][T12891] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 127.053239][T12891] syz.9.1687: attempt to access beyond end of device [ 127.053239][T12891] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 127.069242][T12891] syz.9.1687: attempt to access beyond end of device [ 127.069242][T12891] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 127.450791][T12888] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.458221][T12888] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.856394][T12888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.259933][ T8379] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.269025][ T8379] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.279697][ T8379] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.288700][ T8379] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.337764][ T8379] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.346941][ T8379] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.392332][ T29] audit: type=1400 audit(3917813840.523:999): avc: denied { name_bind } for pid=12940 comm="syz.7.1728" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 128.431203][ T29] audit: type=1326 audit(3917813840.563:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.4.1730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6334aaeb9 code=0x0 [ 128.443559][ T8369] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.463354][ T8369] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.473995][T12943] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1729'. [ 128.560817][ T29] audit: type=1400 audit(3917813840.693:1001): avc: denied { firmware_load } for pid=12949 comm="syz.6.1732" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 129.105854][T12975] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1741'. [ 129.117414][T12975] netlink: 'syz.3.1741': attribute type 4 has an invalid length. [ 129.397111][T12989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'. [ 129.525505][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1752'. [ 129.547583][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1752'. [ 129.559679][T12980] loop7: detected capacity change from 0 to 512 [ 129.567941][ T29] audit: type=1326 audit(3917813841.703:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.9.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d993aeb9 code=0x7ffc0000 [ 129.591684][ T29] audit: type=1326 audit(3917813841.703:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.9.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d993aeb9 code=0x7ffc0000 [ 129.615286][ T29] audit: type=1326 audit(3917813841.703:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.9.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa8d993aeb9 code=0x7ffc0000 [ 129.615296][T12980] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 129.663950][ T29] audit: type=1326 audit(3917813841.723:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.9.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d993aeb9 code=0x7ffc0000 [ 129.875845][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1762'. [ 129.918446][T13036] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 130.181982][T13045] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1770'. [ 130.366800][T13061] netlink: 'syz.3.1775': attribute type 2 has an invalid length. [ 130.374648][T13061] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 130.536737][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.543979][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.601096][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.612425][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.674481][ T8391] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.700971][ T8391] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.723294][ T8391] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.753536][ T8391] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.829399][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.853298][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.242434][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 131.242453][ T29] audit: type=1400 audit(3917813843.373:1018): avc: denied { read } for pid=13108 comm="syz.6.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 131.317081][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1800'. [ 131.344822][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1800'. [ 131.379981][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 131.389044][T13118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1801'. [ 131.435542][ T29] audit: type=1400 audit(3917813843.573:1019): avc: denied { nlmsg_write } for pid=13122 comm="syz.6.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 131.704195][ T29] audit: type=1400 audit(3917813843.833:1020): avc: denied { accept } for pid=13141 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.740107][ T29] audit: type=1400 audit(3917813843.833:1021): avc: denied { write } for pid=13141 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.759871][ T29] audit: type=1400 audit(3917813843.833:1022): avc: denied { read } for pid=13141 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.473155][T13170] netlink: 'syz.7.1822': attribute type 10 has an invalid length. [ 132.505879][T13172] netlink: 'syz.3.1823': attribute type 7 has an invalid length. [ 132.533615][ T29] audit: type=1400 audit(3917813844.663:1023): avc: denied { read write } for pid=13174 comm="syz.3.1824" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 132.558082][ T29] audit: type=1400 audit(3917813844.663:1024): avc: denied { open } for pid=13174 comm="syz.3.1824" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 132.682645][ T29] audit: type=1326 audit(3917813844.793:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb76faeb9 code=0x7ffc0000 [ 132.706501][ T29] audit: type=1326 audit(3917813844.803:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb76faeb9 code=0x7ffc0000 [ 132.730459][ T29] audit: type=1326 audit(3917813844.803:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.3.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb76faeb9 code=0x7ffc0000 [ 132.985764][T13202] syzkaller0: entered promiscuous mode [ 132.991319][T13202] syzkaller0: entered allmulticast mode [ 133.082363][T13216] chnl_net:caif_netlink_parms(): no params data found [ 133.603761][T13265] loop3: detected capacity change from 0 to 512 [ 133.708418][T13266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.887294][T13265] vfat filesystem being mounted at /401/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 133.946340][T13274] loop9: detected capacity change from 0 to 1024 [ 133.986486][T13274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.223967][T12714] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.492570][T13313] loop9: detected capacity change from 0 to 136 [ 135.034968][T13339] __nla_validate_parse: 5 callbacks suppressed [ 135.034992][T13339] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1891'. [ 135.441556][T13332] chnl_net:caif_netlink_parms(): no params data found [ 135.597948][T13332] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.605158][T13332] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.623876][T13332] bridge_slave_0: entered allmulticast mode [ 135.645550][T13332] bridge_slave_0: entered promiscuous mode [ 135.651808][T13387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.682826][T13332] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.690087][T13332] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.702083][T13387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.713714][T13332] bridge_slave_1: entered allmulticast mode [ 135.720575][T13332] bridge_slave_1: entered promiscuous mode [ 135.753898][T13332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.775328][T13332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.799205][T13332] team0: Port device team_slave_0 added [ 135.806997][T13332] team0: Port device team_slave_1 added [ 135.825523][T13332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.832728][T13332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.858862][T13332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.870973][T13332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.878060][T13332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.904149][T13332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.936365][T13332] hsr_slave_0: entered promiscuous mode [ 135.942578][T13332] hsr_slave_1: entered promiscuous mode [ 135.948977][T13332] debugfs: 'hsr0' already exists in 'hsr' [ 135.954781][T13332] Cannot create hsr debugfs directory [ 136.036311][T13398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1911'. [ 136.286722][T13417] SELinux: failed to load policy [ 136.348782][T13422] netlink: 'syz.9.1915': attribute type 4 has an invalid length. [ 136.381182][T13332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.396098][T13332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.427544][T13332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.446201][T13332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.485632][T13332] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.492756][T13332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.500238][T13332] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.507360][T13332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.584046][T13332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.593125][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.627892][T13451] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.1920'. [ 136.637165][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1920'. [ 136.646562][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.707908][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 136.707926][ T29] audit: type=1326 audit(3917813848.843:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 136.711371][T13332] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.726180][ T29] audit: type=1326 audit(3917813848.843:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 136.768027][ T29] audit: type=1326 audit(3917813848.843:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 136.783230][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.791694][ T29] audit: type=1326 audit(3917813848.843:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 136.798651][ T8380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.822336][ T29] audit: type=1326 audit(3917813848.843:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 136.852945][ T29] audit: type=1326 audit(3917813848.843:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 136.876551][ T29] audit: type=1326 audit(3917813848.843:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 136.950861][T13332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.961346][T13332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.972095][ T29] audit: type=1326 audit(3917813849.053:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 136.995738][ T29] audit: type=1326 audit(3917813849.053:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 137.019367][ T29] audit: type=1326 audit(3917813849.053:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b084baeb9 code=0x7ffc0000 [ 137.044729][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.051892][ T8380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.178142][T13332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.214051][T13485] netlink: 'syz.4.1926': attribute type 8 has an invalid length. [ 137.221967][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 137.277134][T13485] bond0: entered promiscuous mode [ 137.282245][T13485] bond_slave_0: entered promiscuous mode [ 137.288063][T13485] bond_slave_1: entered promiscuous mode [ 137.317943][T13485] dummy0: entered promiscuous mode [ 137.355012][T13485] gretap0: entered promiscuous mode [ 137.373154][T13485] bond0: left promiscuous mode [ 137.378084][T13485] bond_slave_0: left promiscuous mode [ 137.383629][T13485] bond_slave_1: left promiscuous mode [ 137.393433][T13485] dummy0: left promiscuous mode [ 137.399507][T13485] gretap0: left promiscuous mode [ 137.450936][T13508] netlink: 'syz.7.1930': attribute type 1 has an invalid length. [ 137.527340][T13508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.586317][T13512] bond3: (slave ip6erspan0): making interface the new active one [ 137.600334][T13512] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 137.632816][T13332] veth0_vlan: entered promiscuous mode [ 137.684668][T13332] veth1_vlan: entered promiscuous mode [ 137.741151][T13332] veth0_macvtap: entered promiscuous mode [ 137.760428][T13332] veth1_macvtap: entered promiscuous mode [ 137.808128][T13530] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1933'. [ 137.811400][T13534] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 137.829900][T13332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.865786][T13534] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.882281][T13332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.923907][ T8393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.975654][T13534] bond3: (slave veth9): Enslaving as an active interface with a down link [ 137.997823][ T8393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.032748][ T8393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.078563][T13534] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.090867][T13534] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 138.114092][ T8379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.287825][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1941'. [ 138.373165][T13564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.425085][T13564] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.450644][T13564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.520324][T13582] netlink: 'syz.6.1945': attribute type 1 has an invalid length. [ 138.528288][T13582] netlink: 'syz.6.1945': attribute type 4 has an invalid length. [ 138.536197][T13582] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1945'. [ 138.556360][T13572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.580005][T13582] netlink: 'syz.6.1945': attribute type 1 has an invalid length. [ 138.587923][T13582] netlink: 'syz.6.1945': attribute type 4 has an invalid length. [ 138.595756][T13582] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1945'. [ 139.197502][T13617] netlink: 'syz.9.1954': attribute type 4 has an invalid length. [ 139.561137][T13642] netlink: 'syz.7.1958': attribute type 4 has an invalid length. [ 139.603265][T13642] netlink: 'syz.7.1958': attribute type 4 has an invalid length. [ 139.660913][T13645] netlink: 'syz.9.1959': attribute type 1 has an invalid length. [ 139.729522][T13645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.748429][T13649] netlink: 392 bytes leftover after parsing attributes in process `syz.7.1960'. [ 139.811207][T13650] bond1: (slave veth5): Enslaving as an active interface with a down link [ 139.868015][T13652] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 139.916804][T13652] bond1: (slave batadv1): making interface the new active one [ 139.959159][T13652] batadv1: entered promiscuous mode [ 139.992260][T13652] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 140.092644][T13675] __nla_validate_parse: 1 callbacks suppressed [ 140.092662][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1964'. [ 140.147107][T13669] syzkaller0: entered promiscuous mode [ 140.152762][T13669] syzkaller0: entered allmulticast mode [ 140.542609][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1972'. [ 140.587528][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1972'. [ 141.003818][T13742] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.1975'. [ 141.013081][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1975'. [ 141.185577][T13751] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1977'. [ 141.194899][T13751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1977'. [ 141.803312][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 141.803338][ T29] audit: type=1326 audit(3917813853.933:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="syz.7.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f554ae2aeb9 code=0x7ffc0000 [ 141.860100][T13810] syzkaller0: entered promiscuous mode [ 141.866130][T13810] syzkaller0: entered allmulticast mode [ 141.907948][T13810] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 142.080302][T13832] loop9: detected capacity change from 0 to 512 [ 142.145232][T13832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.201308][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1991'. [ 142.210624][T13832] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.241736][ T29] audit: type=1400 audit(3917813854.373:1134): avc: denied { link } for pid=13831 comm="syz.9.1989" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.276725][T12714] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.636126][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 142.645137][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1988'. [ 142.662018][T13829] geneve0: entered promiscuous mode [ 142.667511][T13829] geneve0: entered allmulticast mode [ 143.238964][T13900] vlan1: entered promiscuous mode [ 143.244254][T13900] dummy0: entered promiscuous mode [ 143.511376][ T29] audit: type=1400 audit(3917813855.643:1135): avc: denied { listen } for pid=13917 comm="syz.6.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.580126][ T29] audit: type=1326 audit(3917813855.713:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 143.604716][ T29] audit: type=1326 audit(3917813855.713:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 143.628826][ T29] audit: type=1326 audit(3917813855.713:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 143.652774][ T29] audit: type=1326 audit(3917813855.743:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 143.676792][ T29] audit: type=1326 audit(3917813855.743:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 143.700524][ T29] audit: type=1326 audit(3917813855.753:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 143.724286][ T29] audit: type=1326 audit(3917813855.753:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6334aaeb9 code=0x7ffc0000 [ 144.868927][T13985] netem: incorrect ge model size [ 144.874535][T13985] netem: change failed [ 145.275341][T14010] __nla_validate_parse: 6 callbacks suppressed [ 145.275424][T14010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2049'. [ 145.326826][T14010] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2049'. [ 145.448712][T14020] netlink: 'syz.7.2055': attribute type 1 has an invalid length. [ 145.465641][T13997] ================================================================== [ 145.473788][T13997] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 145.480784][T13997] [ 145.483138][T13997] read-write to 0xffff88811be2b2ac of 4 bytes by task 14005 on cpu 0: [ 145.491414][T13997] fifo_open+0x86/0x5d0 [ 145.495618][T13997] do_dentry_open+0x54b/0xa60 [ 145.500364][T13997] vfs_open+0x37/0x1e0 [ 145.504486][T13997] path_openat+0x1de9/0x23c0 [ 145.509128][T13997] do_filp_open+0x15d/0x280 [ 145.513681][T13997] do_sys_openat2+0xa6/0x150 [ 145.518318][T13997] __x64_sys_openat+0xf2/0x120 [ 145.523139][T13997] x64_sys_call+0x2b07/0x3000 [ 145.527873][T13997] do_syscall_64+0xc0/0x2a0 [ 145.532437][T13997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.538378][T13997] [ 145.540754][T13997] read to 0xffff88811be2b2ac of 4 bytes by task 13997 on cpu 1: [ 145.548418][T13997] wait_for_partner+0xd5/0x1e0 [ 145.553240][T13997] fifo_open+0x4b1/0x5d0 [ 145.557527][T13997] do_dentry_open+0x54b/0xa60 [ 145.562280][T13997] vfs_open+0x37/0x1e0 [ 145.566405][T13997] path_openat+0x1de9/0x23c0 [ 145.571058][T13997] do_filp_open+0x15d/0x280 [ 145.575621][T13997] do_sys_openat2+0xa6/0x150 [ 145.580250][T13997] __x64_sys_openat+0xf2/0x120 [ 145.585072][T13997] x64_sys_call+0x2b07/0x3000 [ 145.589796][T13997] do_syscall_64+0xc0/0x2a0 [ 145.594344][T13997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.600278][T13997] [ 145.602637][T13997] value changed: 0x00000001 -> 0x00000002 [ 145.608383][T13997] [ 145.610738][T13997] Reported by Kernel Concurrency Sanitizer on: [ 145.617028][T13997] CPU: 1 UID: 0 PID: 13997 Comm: syz.2.2044 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.626894][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.636991][T13997] ================================================================== [ 145.665727][T14020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.984544][ T8366] batadv1: left promiscuous mode