last executing test programs: 1m54.379479234s ago: executing program 3 (id=255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 1m54.329950472s ago: executing program 3 (id=257): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) readv(r0, &(0x7f0000000180)=[{0x0}], 0x1) 1m54.255260455s ago: executing program 3 (id=259): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7fffffff}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}}, 0x24040084) 1m54.203909593s ago: executing program 3 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 1m54.10403387s ago: executing program 3 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1m53.887845066s ago: executing program 3 (id=266): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) dup(r0) socket(0xa, 0x3, 0xff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x7f) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000000000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m53.880739887s ago: executing program 32 (id=266): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) dup(r0) socket(0xa, 0x3, 0xff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x7f) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000000000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m49.37580159s ago: executing program 0 (id=364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r0, 0x5428) 1m49.31509014s ago: executing program 0 (id=365): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2d01, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0x5, 0x7, 0xfff, 0xe94, 0x0, "c3e2d149d451a40203b47859cdab7001c66067", 0x6, 0x8000}) 1m49.31480235s ago: executing program 0 (id=367): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x22020600) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) 1m49.248660671s ago: executing program 0 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 1m49.219103686s ago: executing program 0 (id=371): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000002100)=0x4f, 0x12) 1m48.984049355s ago: executing program 0 (id=382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x0, @remote}}) 1m48.983954245s ago: executing program 33 (id=382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x0, @remote}}) 3.248003657s ago: executing program 5 (id=3679): clock_getres(0x2, 0x0) 3.23392821s ago: executing program 5 (id=3681): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.135978306s ago: executing program 5 (id=3682): prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 3.135820266s ago: executing program 5 (id=3683): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000003c0)=0x30000) 3.018930736s ago: executing program 5 (id=3686): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 2.958863386s ago: executing program 5 (id=3690): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, 0x0}, 0x4804) 1.311911191s ago: executing program 4 (id=3725): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 1.311549231s ago: executing program 4 (id=3727): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000c40)={@multicast, @local, @void, {@mpls_mc}}, 0x0) 1.279999256s ago: executing program 4 (id=3729): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0xf}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0xfffffffd, 0x8, 0x9, 0x9, 0x9, 0x20000f5, 0x200, 0x6, 0x5, 0x10001, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0xa, 0xff, 0x4, 0x8, 0x9, 0xe6c1, 0x2, 0x66, 0x6, 0x5, 0x73, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0xc, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x8, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x4, 0x60df8662, 0x2, 0x5, 0x6, 0xc6, 0x8, 0x7, 0xffffffea, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff3, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x3, 0x7, 0x5, 0x4, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xfffeffff, 0x4, 0x0, 0x7fffffff, 0x9, 0xb, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x4, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f89, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.19763194s ago: executing program 2 (id=3730): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10bf1a15448774f85810bb5276a5f49c64823fa5472ce8f93627cf3e8e24e23437c78443fdbf5127970b5b11290ccf407f1ebc06f0fe54a6770bfd5c806f22b890b75e2844cc77696eb115f1be20312044be6b0aeab130a9ce0abcbf038afdb2575cb3943d77d0e6c0f217730d8aec201b7d235d1ffb7608a3f1f73b72af1a58c709e420f5a882c9089df362e595e1bac2da54764ebe798db45e81e9b33878bdc0f7ecf1b657c2b8f4d1d2ed1e5dd05601326ec472bcb2a46cbadea8fd7e1d8fa41b7f908fc96eb20d7b0b07480208e5d9e2bbac061cac9429d04c973a0483ee181c0c6af8d736eadf0b5748cf8e8188c08cbda54a2404e061b1e28d075d9518dfcc503cb1735a26505c8799dff779cc168be1b4b08ab52a68785f040a5352105d69fafb28167e07e8965c8469c96733e3e3220354f7665794b1293c85e48cd87219b1bc2529217c394d80265227a688d4409ceeeb94c7e4cf2e5736", 0x21e}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 601.344669ms ago: executing program 6 (id=3750): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 536.207961ms ago: executing program 1 (id=3751): gettid() timer_create(0x1, 0x0, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_UNALIGN(0x6, 0xbdf39a44e3f6ab3e) 474.406751ms ago: executing program 1 (id=3752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0xfffffffffffffffe, &(0x7f0000000000)) 473.767111ms ago: executing program 6 (id=3753): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1116, &(0x7f0000005e40)=ANY=[], 0x0) 400.693203ms ago: executing program 1 (id=3754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000280), &(0x7f0000000480)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local}, {{0x8, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x0, 0x0, 0x8}}}}}}, 0x0) 400.486023ms ago: executing program 4 (id=3755): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x187}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b699f96c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214a476a818f64d287311e8828dfd3e3dd67efd6129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3265e6fc25e6c28d67e599c1dd33dff5d7b28f134bda4a29962", 0xb4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="ee", 0x1}], 0x1}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 400.233523ms ago: executing program 6 (id=3756): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 379.643267ms ago: executing program 1 (id=3757): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040d3}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 374.793467ms ago: executing program 4 (id=3758): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) clock_getres(0x2, 0x0) 367.156788ms ago: executing program 2 (id=3759): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x6}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xf81}], 0x3) 291.328791ms ago: executing program 6 (id=3760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000002c0)="bad330fbc9b55c4972e7a5ea0756", 0xe, 0x4880, 0x0, 0x0) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 291.093901ms ago: executing program 2 (id=3761): gettid() timer_create(0x1, 0x0, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_UNALIGN(0x6, 0xbdf39a44e3f6ab3e) 291.021251ms ago: executing program 4 (id=3762): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x200, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_getoverrun(0x0) 290.859731ms ago: executing program 1 (id=3763): set_mempolicy(0x3, &(0x7f0000000040)=0x4, 0xa) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x2, 0x100000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 203.916176ms ago: executing program 1 (id=3764): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0xf}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0xfffffffd, 0x8, 0x9, 0x9, 0x9, 0x20000f5, 0x200, 0x6, 0x5, 0x10001, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0xa, 0xff, 0x4, 0x8, 0x9, 0xe6c1, 0x2, 0x66, 0x6, 0x5, 0x73, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0xc, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x8, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x4, 0x60df8662, 0x2, 0x5, 0x6, 0xc6, 0x8, 0x7, 0xffffffea, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff3, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x3, 0x7, 0x5, 0x4, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xfffeffff, 0x4, 0x0, 0x7fffffff, 0x9, 0xb, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x4, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f89, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 203.733736ms ago: executing program 2 (id=3765): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e8) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v1={0x0, @aes128, 0x2, @desc3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x9d) execve(&(0x7f0000000500)='./file1/file4\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000005c0)=@v1={0x0, @aes128, 0x2, @desc3}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file1/file4\x00', 0x0) 196.129017ms ago: executing program 2 (id=3766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000002c0)="bad330fbc9b55c4972e7a5", 0xb, 0x4880, &(0x7f0000000380)={0x11, 0xf8, r6, 0x1, 0x79, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 139.959007ms ago: executing program 6 (id=3767): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0) syz_clone(0x880000, 0x0, 0x0, 0x0, 0x0, 0x0) getrusage(0xfffffffffffffffe, 0x0) 23.959846ms ago: executing program 2 (id=3768): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x21e}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 6 (id=3769): syz_open_procfs$namespace(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) kernel console output (not intermixed with test programs): eth6 [ 50.349566][ T4446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.421576][ T4446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.438861][ T4636] loop5: detected capacity change from 0 to 7 [ 50.493901][ T4446] team0: Port device team_slave_0 added [ 50.532695][ T4446] team0: Port device team_slave_1 added [ 50.576033][ T4446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.583581][ T4446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.620600][ T4446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.647471][ T4446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.655842][ T4446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.726748][ T4446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.841524][ T3038] 8021q: adding VLAN 0 to HW filter on device eth7 [ 50.892948][ T4678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.463'. [ 50.910067][ T4446] hsr_slave_0: entered promiscuous mode [ 50.924315][ T4446] hsr_slave_1: entered promiscuous mode [ 51.012101][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 51.012118][ T28] audit: type=1400 audit(1776307559.608:219): avc: denied { append } for pid=4690 comm="syz.2.469" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.060723][ T4696] loop5: detected capacity change from 0 to 7 [ 51.201415][ T4446] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.223403][ T4446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.237029][ T4446] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.254578][ T4446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.262787][ T3038] 8021q: adding VLAN 0 to HW filter on device eth8 [ 51.270556][ T4446] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.280266][ T4446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.288577][ T4446] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.297537][ T4446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.359382][ T4446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.392953][ T4446] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.407858][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.415090][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.445206][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.452428][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.480418][ T4738] loop1: detected capacity change from 0 to 128 [ 51.500041][ T4446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.532181][ T28] audit: type=1400 audit(1776307560.128:220): avc: denied { wake_alarm } for pid=4740 comm="syz.4.482" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.623419][ T4753] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 51.632534][ T4446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.680287][ T4753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.706624][ T4753] bond1: (slave veth3): Enslaving as an active interface with a down link [ 51.733610][ T4753] bond1: (slave gretap0): making interface the new active one [ 51.742681][ T4753] gretap0: entered promiscuous mode [ 51.748161][ T4753] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 51.781609][ T4753] syz.1.484 (4753) used greatest stack depth: 10208 bytes left [ 51.815196][ T4772] loop1: detected capacity change from 0 to 128 [ 51.830034][ T4776] loop5: detected capacity change from 0 to 7 [ 52.069406][ T4793] loop2: detected capacity change from 0 to 164 [ 52.074597][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 52.085675][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 52.103874][ T4793] ISOFS: Bad logical zone size 18350 [ 52.163257][ T4793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.186021][ T4446] veth0_vlan: entered promiscuous mode [ 52.205238][ T4446] veth1_vlan: entered promiscuous mode [ 52.227123][ T4806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4806 comm=syz.5.502 [ 52.239431][ T4446] veth0_macvtap: entered promiscuous mode [ 52.254205][ T4446] veth1_macvtap: entered promiscuous mode [ 52.270674][ T4810] loop1: detected capacity change from 0 to 128 [ 52.276812][ T4446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.301905][ T4446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.332616][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.347105][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.366845][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.379691][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.682355][ T4835] loop6: detected capacity change from 0 to 128 [ 52.854958][ T4839] syzkaller0: entered promiscuous mode [ 52.860845][ T4839] syzkaller0: entered allmulticast mode [ 52.955880][ T4844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'. [ 53.393257][ T4872] syzkaller0: entered promiscuous mode [ 53.398853][ T4872] syzkaller0: entered allmulticast mode [ 53.966501][ T4895] syzkaller0: entered promiscuous mode [ 53.972164][ T4895] syzkaller0: entered allmulticast mode [ 54.064480][ T4898] loop4: detected capacity change from 0 to 128 [ 54.130713][ T4899] syz.4.540: attempt to access beyond end of device [ 54.130713][ T4899] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 54.144423][ T4899] syz.4.540: attempt to access beyond end of device [ 54.144423][ T4899] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 54.165189][ T4899] syz.4.540: attempt to access beyond end of device [ 54.165189][ T4899] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 54.174502][ T4901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.541'. [ 54.193199][ T4899] syz.4.540: attempt to access beyond end of device [ 54.193199][ T4899] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 54.215668][ T4899] syz.4.540: attempt to access beyond end of device [ 54.215668][ T4899] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 54.236638][ T4899] syz.4.540: attempt to access beyond end of device [ 54.236638][ T4899] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 54.253414][ T4908] loop1: detected capacity change from 0 to 128 [ 54.254084][ T4899] syz.4.540: attempt to access beyond end of device [ 54.254084][ T4899] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 54.280271][ T4899] syz.4.540: attempt to access beyond end of device [ 54.280271][ T4899] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 54.283064][ T4908] syz.1.544: attempt to access beyond end of device [ 54.283064][ T4908] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 54.294107][ T4899] syz.4.540: attempt to access beyond end of device [ 54.294107][ T4899] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 54.318094][ T4908] loop2: detected capacity change from 0 to 7 [ 54.382020][ T116] Buffer I/O error on dev loop4, logical block 182, lost async page write [ 54.491896][ T4917] loop6: detected capacity change from 0 to 8192 [ 54.502549][ T4917] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.576487][ T4924] syzkaller0: entered promiscuous mode [ 54.588903][ T4924] syzkaller0: entered allmulticast mode [ 54.797137][ T4945] loop1: detected capacity change from 0 to 128 [ 55.179060][ T4972] loop2: detected capacity change from 0 to 128 [ 55.227193][ T4976] loop5: detected capacity change from 0 to 128 [ 55.384177][ T4991] syzkaller0: entered promiscuous mode [ 55.390019][ T4991] syzkaller0: entered allmulticast mode [ 55.708346][ T28] audit: type=1400 audit(1776307564.298:221): avc: denied { ioctl } for pid=5004 comm="syz.6.589" path="socket:[9824]" dev="sockfs" ino=9824 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.709107][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.589'. [ 55.759647][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.589'. [ 55.883182][ T5015] loop6: detected capacity change from 0 to 128 [ 55.975169][ T5022] loop1: detected capacity change from 0 to 8192 [ 55.984965][ T5022] ======================================================= [ 55.984965][ T5022] WARNING: The mand mount option has been deprecated and [ 55.984965][ T5022] and is ignored by this kernel. Remove the mand [ 55.984965][ T5022] option from the mount to silence this warning. [ 55.984965][ T5022] ======================================================= [ 56.024613][ T5022] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 56.032804][ T5022] FAT-fs (loop1): Filesystem has been set read-only [ 56.040215][ T5022] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 56.048878][ T5022] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 56.098620][ T28] audit: type=1400 audit(1776307564.688:222): avc: denied { read write } for pid=5034 comm="syz.6.598" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.136590][ T28] audit: type=1400 audit(1776307564.688:223): avc: denied { open } for pid=5034 comm="syz.6.598" path="/dev/vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.180326][ T5033] syzkaller0: entered promiscuous mode [ 56.189179][ T5033] syzkaller0: entered allmulticast mode [ 56.222235][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.603'. [ 56.336584][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 56.347398][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 56.423024][ T5072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.613'. [ 56.435751][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 56.541818][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'. [ 57.381234][ T5150] loop5: detected capacity change from 0 to 128 [ 57.399044][ T28] audit: type=1400 audit(1776307565.988:224): avc: denied { setopt } for pid=5151 comm="syz.6.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.702398][ T5182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5182 comm=syz.2.644 [ 57.717106][ T5182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5182 comm=syz.2.644 [ 57.854994][ T5195] syzkaller0: entered promiscuous mode [ 57.862378][ T5195] syzkaller0: entered allmulticast mode [ 57.949581][ T5200] vfat: Bad value for 'fmask' [ 58.116950][ T5218] __nla_validate_parse: 1 callbacks suppressed [ 58.116965][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 58.444824][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 58.585312][ T5271] netlink: 32 bytes leftover after parsing attributes in process `syz.6.680'. [ 58.816309][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 59.680893][ T5307] netlink: 32 bytes leftover after parsing attributes in process `syz.6.692'. [ 59.715491][ T5310] syzkaller0: entered promiscuous mode [ 59.722553][ T5310] syzkaller0: entered allmulticast mode [ 59.838160][ T5316] set_capacity_and_notify: 4 callbacks suppressed [ 59.838180][ T5316] loop2: detected capacity change from 0 to 7 [ 59.874867][ T5318] syzkaller0: entered promiscuous mode [ 59.880556][ T5318] syzkaller0: entered allmulticast mode [ 60.143272][ T5326] syzkaller0: entered promiscuous mode [ 60.149092][ T5326] syzkaller0: entered allmulticast mode [ 60.257023][ T5333] netlink: 20 bytes leftover after parsing attributes in process `syz.5.703'. [ 60.270049][ T5331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.704'. [ 60.317943][ T5338] syzkaller0: entered promiscuous mode [ 60.323775][ T5338] syzkaller0: entered allmulticast mode [ 60.381986][ T5343] syzkaller0: entered promiscuous mode [ 60.387651][ T5343] syzkaller0: entered allmulticast mode [ 60.437456][ T5345] loop5: detected capacity change from 0 to 8192 [ 60.447523][ T5345] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.507379][ T5349] syzkaller0: entered promiscuous mode [ 60.514368][ T5349] syzkaller0: entered allmulticast mode [ 60.548763][ T28] audit: type=1400 audit(1776307569.148:225): avc: denied { mount } for pid=5346 comm="syz.5.711" name="/" dev="ramfs" ino=12379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.587824][ T28] audit: type=1400 audit(1776307569.178:226): avc: denied { unmount } for pid=4080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.639806][ T28] audit: type=1400 audit(1776307569.238:227): avc: denied { create } for pid=5356 comm="syz.1.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 60.660640][ T28] audit: type=1400 audit(1776307569.238:228): avc: denied { bpf } for pid=5358 comm="syz.5.715" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.756567][ T5368] syzkaller0: entered promiscuous mode [ 60.762532][ T5368] syzkaller0: entered allmulticast mode [ 60.945260][ T5373] syzkaller0: entered promiscuous mode [ 60.950850][ T5373] syzkaller0: entered allmulticast mode [ 61.083495][ T5375] loop6: detected capacity change from 0 to 128 [ 61.094059][ T5374] bio_check_eod: 5 callbacks suppressed [ 61.094076][ T5374] syz.6.723: attempt to access beyond end of device [ 61.094076][ T5374] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 61.238496][ T5377] syzkaller0: entered promiscuous mode [ 61.244074][ T5377] syzkaller0: entered allmulticast mode [ 61.370081][ T28] audit: type=1400 audit(1776307569.968:229): avc: denied { perfmon } for pid=5384 comm="syz.6.728" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.439724][ T5395] netlink: 24 bytes leftover after parsing attributes in process `syz.6.731'. [ 61.470153][ T5395] netlink: 24 bytes leftover after parsing attributes in process `syz.6.731'. [ 61.492324][ T5401] syzkaller0: entered promiscuous mode [ 61.498547][ T5401] syzkaller0: entered allmulticast mode [ 61.544122][ T5409] syzkaller0: entered promiscuous mode [ 61.550219][ T5409] syzkaller0: entered allmulticast mode [ 62.433618][ T5457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.745'. [ 62.588188][ T28] audit: type=1400 audit(1776307571.178:230): avc: denied { wake_alarm } for pid=5475 comm="syz.1.754" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.670667][ T5480] loop6: detected capacity change from 0 to 8192 [ 62.888994][ T36] gretap0: left promiscuous mode [ 63.071459][ T28] audit: type=1400 audit(1776307571.668:231): avc: denied { module_request } for pid=5499 comm="syz.2.765" kmod="ipt_CLUSTERIP" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.122990][ T5522] __nla_validate_parse: 6 callbacks suppressed [ 63.123016][ T5522] netlink: 24 bytes leftover after parsing attributes in process `syz.6.770'. [ 63.153752][ T5522] netlink: 24 bytes leftover after parsing attributes in process `syz.6.770'. [ 63.242552][ T5528] syzkaller0: entered promiscuous mode [ 63.269533][ T5528] syzkaller0: entered allmulticast mode [ 63.327234][ T5538] loop1: detected capacity change from 0 to 164 [ 63.375117][ T28] audit: type=1400 audit(1776307571.968:232): avc: denied { ioctl } for pid=5534 comm="syz.1.774" path="socket:[11675]" dev="sockfs" ino=11675 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.417552][ T5548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.778'. [ 63.488132][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.781'. [ 63.516130][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.781'. [ 63.530914][ T5564] loop1: detected capacity change from 0 to 128 [ 63.616717][ T5570] syzkaller0: entered promiscuous mode [ 63.645295][ T5570] syzkaller0: entered allmulticast mode [ 63.710285][ T5582] syzkaller0: entered promiscuous mode [ 63.715894][ T5582] syzkaller0: entered allmulticast mode [ 63.976696][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.796'. [ 63.986050][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.796'. [ 64.015428][ T5603] loop6: detected capacity change from 0 to 128 [ 64.099747][ T5612] syzkaller0: entered promiscuous mode [ 64.111400][ T5612] syzkaller0: entered allmulticast mode [ 64.142928][ T5618] xt_connbytes: Forcing CT accounting to be enabled [ 64.167262][ T5620] loop1: detected capacity change from 0 to 256 [ 64.199251][ T5620] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.207207][ T5624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.807'. [ 64.250479][ T5629] syzkaller0: entered promiscuous mode [ 64.256184][ T5629] syzkaller0: entered allmulticast mode [ 64.361399][ T5635] loop6: detected capacity change from 0 to 128 [ 64.460925][ T5639] loop6: detected capacity change from 0 to 8192 [ 64.482450][ T5639] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.588136][ T5645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.815'. [ 64.879249][ T5665] set_capacity_and_notify: 1 callbacks suppressed [ 64.879267][ T5665] loop2: detected capacity change from 0 to 8192 [ 64.933386][ T5665] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.981914][ T5672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 65.063920][ T5673] loop5: detected capacity change from 0 to 8192 [ 65.079823][ T28] audit: type=1400 audit(1776307573.678:233): avc: denied { block_suspend } for pid=5676 comm="syz.4.830" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.991854][ T5699] loop2: detected capacity change from 0 to 8192 [ 65.999568][ T5699] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.391765][ T5720] syzkaller0: entered promiscuous mode [ 66.397375][ T5720] syzkaller0: entered allmulticast mode [ 66.566078][ T5727] loop6: detected capacity change from 0 to 8192 [ 66.779734][ T5736] loop4: detected capacity change from 0 to 128 [ 66.793086][ T5735] syz.4.855: attempt to access beyond end of device [ 66.793086][ T5735] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 66.983456][ T28] audit: type=1326 audit(1776307575.578:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.1.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c2d1c819 code=0x7fc00000 [ 67.284234][ T5750] loop4: detected capacity change from 0 to 8192 [ 67.294684][ T5750] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.429488][ T5757] loop4: detected capacity change from 0 to 8192 [ 67.783577][ T5765] loop2: detected capacity change from 0 to 256 [ 67.799438][ T5765] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.812340][ T5765] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 67.820733][ T5765] FAT-fs (loop2): Filesystem has been set read-only [ 67.827739][ T5765] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 67.934885][ T5767] loop1: detected capacity change from 0 to 128 [ 67.947573][ T5766] syz.1.867: attempt to access beyond end of device [ 67.947573][ T5766] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 68.089027][ T28] audit: type=1400 audit(1776307576.678:235): avc: denied { open } for pid=5777 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.108875][ T28] audit: type=1400 audit(1776307576.678:236): avc: denied { kernel } for pid=5777 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.129459][ T28] audit: type=1400 audit(1776307576.688:237): avc: denied { tracepoint } for pid=5777 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.156054][ T28] audit: type=1400 audit(1776307576.748:238): avc: denied { cpu } for pid=5777 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.433285][ T5794] netlink: 'syz.4.879': attribute type 5 has an invalid length. [ 68.850365][ T5808] __nla_validate_parse: 3 callbacks suppressed [ 68.850382][ T5808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.885'. [ 68.888073][ T5811] syzkaller0: entered promiscuous mode [ 68.894181][ T5811] syzkaller0: entered allmulticast mode [ 69.272924][ T5847] loop1: detected capacity change from 0 to 256 [ 69.307813][ T5847] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.339750][ T5854] netlink: 'syz.2.905': attribute type 5 has an invalid length. [ 69.477453][ T5867] syzkaller0: entered promiscuous mode [ 69.495245][ T5867] syzkaller0: entered allmulticast mode [ 69.508563][ T5869] syzkaller0: entered promiscuous mode [ 69.514280][ T5869] syzkaller0: entered allmulticast mode [ 69.642922][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 69.654828][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 69.872112][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 69.894875][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 69.918798][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.929'. [ 70.102944][ T5935] netlink: 'syz.1.940': attribute type 5 has an invalid length. [ 70.237908][ T5941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.944'. [ 70.446253][ T5958] netlink: 'syz.4.952': attribute type 5 has an invalid length. [ 70.464153][ T5961] loop6: detected capacity change from 0 to 256 [ 70.486513][ T5961] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.538976][ T5961] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 70.560448][ T5961] FAT-fs (loop6): Filesystem has been set read-only [ 70.577813][ T5961] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 70.586111][ T5961] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 70.594309][ T5961] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 70.635463][ T5976] pim6reg1: tun_chr_ioctl cmd 2147767511 [ 70.641421][ T5976] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 70.647161][ T5976] pim6reg1: persist enabled [ 70.730083][ T5984] bond0: entered promiscuous mode [ 70.740847][ T5984] bond_slave_0: entered promiscuous mode [ 70.749988][ T5984] bond_slave_1: entered promiscuous mode [ 70.756046][ T5984] bond0: entered allmulticast mode [ 70.775587][ T5984] bond_slave_0: entered allmulticast mode [ 70.784074][ T5984] bond_slave_1: entered allmulticast mode [ 71.038769][ T6012] netlink: 'syz.6.975': attribute type 5 has an invalid length. [ 71.326597][ T6049] loop6: detected capacity change from 0 to 256 [ 71.337934][ T6049] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.370606][ T6049] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 71.379060][ T6049] FAT-fs (loop6): Filesystem has been set read-only [ 71.385967][ T6049] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 71.400388][ T6049] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 71.408728][ T6049] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 71.432913][ T6056] syzkaller0: entered promiscuous mode [ 71.445920][ T6056] syzkaller0: entered allmulticast mode [ 71.687762][ T28] audit: type=1400 audit(1776307580.278:239): avc: denied { write } for pid=6089 comm="syz.5.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.711748][ T6094] syzkaller0: entered promiscuous mode [ 71.721222][ T6094] syzkaller0: entered allmulticast mode [ 72.111701][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.119028][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.128145][ T6135] bridge0: entered allmulticast mode [ 72.139645][ T6135] bridge_slave_1: left allmulticast mode [ 72.145486][ T6135] bridge_slave_1: left promiscuous mode [ 72.151241][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.159089][ T6135] bridge_slave_0: left allmulticast mode [ 72.164822][ T6135] bridge_slave_0: left promiscuous mode [ 72.170583][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.547633][ T6155] syzkaller0: entered promiscuous mode [ 72.554528][ T6155] syzkaller0: entered allmulticast mode [ 72.903805][ T6185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'. [ 73.593891][ T4446] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 73.607662][ T4446] CPU: 1 UID: 0 PID: 4446 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.607695][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 73.607766][ T4446] Call Trace: [ 73.607773][ T4446] [ 73.607783][ T4446] __dump_stack+0x1d/0x30 [ 73.607816][ T4446] dump_stack_lvl+0x95/0xd0 [ 73.607877][ T4446] dump_stack+0x15/0x1b [ 73.607898][ T4446] dump_header+0x80/0x240 [ 73.607920][ T4446] oom_kill_process+0x295/0x350 [ 73.607955][ T4446] out_of_memory+0x97d/0xb80 [ 73.608013][ T4446] try_charge_memcg+0x62f/0xa10 [ 73.608047][ T4446] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 73.608083][ T4446] __swap_cache_prepare_and_add+0x69/0x4a0 [ 73.608170][ T4446] ? alloc_pages_mpol+0x217/0x260 [ 73.608199][ T4446] swap_cache_alloc_folio+0xa2/0x120 [ 73.608244][ T4446] swap_cluster_readahead+0x25f/0x3c0 [ 73.608276][ T4446] swapin_readahead+0xde/0x840 [ 73.608363][ T4446] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 73.608395][ T4446] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 73.608424][ T4446] ? __rcu_read_unlock+0x4e/0x70 [ 73.608456][ T4446] ? swap_cache_get_folio+0x1e0/0x1f0 [ 73.608480][ T4446] do_swap_page+0x31e/0x2180 [ 73.608537][ T4446] ? __schedule+0x936/0xd20 [ 73.608561][ T4446] ? __rcu_read_lock+0x36/0x50 [ 73.608581][ T4446] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 73.608604][ T4446] handle_mm_fault+0xb2e/0x2e70 [ 73.608671][ T4446] ? vma_start_read+0x1c7/0x2c0 [ 73.608708][ T4446] do_user_addr_fault+0x62f/0x1050 [ 73.608808][ T4446] ? trace_page_fault_user+0x1f/0xa0 [ 73.608845][ T4446] exc_page_fault+0x62/0xa0 [ 73.608877][ T4446] asm_exc_page_fault+0x26/0x30 [ 73.608941][ T4446] RIP: 0033:0x7f1557127997 [ 73.608957][ T4446] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 73.608973][ T4446] RSP: 002b:00007ffff7be07f0 EFLAGS: 00010202 [ 73.608989][ T4446] RAX: 0000000000000000 RBX: 000055557ebc0500 RCX: 00007f1557127997 [ 73.609034][ T4446] RDX: 00007ffff7be0830 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.609117][ T4446] RBP: 00007ffff7be089c R08: 0000000000000000 R09: 0000000000000000 [ 73.609129][ T4446] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 73.609141][ T4446] R13: 00000000000927c0 R14: 0000000000011cd0 R15: 00007ffff7be08f0 [ 73.609162][ T4446] [ 73.849687][ T4446] memory: usage 307200kB, limit 307200kB, failcnt 293 [ 73.856709][ T4446] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 73.869273][ T4446] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 73.877179][ T28] audit: type=1326 audit(1776307582.468:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.5.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47ed6c819 code=0x7fc00000 [ 73.905229][ T4446] Memory cgroup stats for /syz6: [ 73.905798][ T4446] cache 0 [ 73.914613][ T4446] rss 0 [ 73.917448][ T4446] shmem 0 [ 73.920533][ T4446] mapped_file 0 [ 73.924102][ T4446] dirty 0 [ 73.927297][ T4446] writeback 0 [ 73.930966][ T4446] workingset_refault_anon 18 [ 73.939598][ T4446] workingset_refault_file 0 [ 73.945219][ T4446] swap 176128 [ 73.950694][ T4446] swapcached 258048 [ 73.955285][ T4446] pgpgin 13856 [ 73.958998][ T4446] pgpgout 13854 [ 73.962614][ T4446] pgfault 23682 [ 73.966122][ T4446] pgmajfault 10 [ 73.970099][ T4446] inactive_anon 8192 [ 73.974058][ T4446] active_anon 0 [ 73.977619][ T4446] inactive_file 0 [ 73.981649][ T4446] active_file 0 [ 73.999165][ T4446] unevictable 0 [ 74.003637][ T4446] hierarchical_memory_limit 314572800 [ 74.015632][ T4446] hierarchical_memsw_limit 9223372036854771712 [ 74.023761][ T4446] total_cache 0 [ 74.028082][ T4446] total_rss 0 [ 74.031761][ T4446] total_shmem 0 [ 74.035382][ T4446] total_mapped_file 0 [ 74.040165][ T4446] total_dirty 0 [ 74.043766][ T4446] total_writeback 0 [ 74.063444][ T4446] total_workingset_refault_anon 18 [ 74.069004][ T4446] total_workingset_refault_file 0 [ 74.072987][ T6231] syzkaller0: entered promiscuous mode [ 74.074217][ T4446] total_swap 176128 [ 74.079794][ T6231] syzkaller0: entered allmulticast mode [ 74.083926][ T4446] total_swapcached 258048 [ 74.093608][ T4446] total_pgpgin 13856 [ 74.097643][ T4446] total_pgpgout 13854 [ 74.102277][ T4446] total_pgfault 23682 [ 74.107942][ T4446] total_pgmajfault 10 [ 74.114476][ T4446] total_inactive_anon 8192 [ 74.119255][ T4446] total_active_anon 0 [ 74.123335][ T4446] total_inactive_file 0 [ 74.127544][ T4446] total_active_file 0 [ 74.131974][ T4446] total_unevictable 0 [ 74.136046][ T4446] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1054,pid=6190,uid=0 [ 74.151195][ T4446] Memory cgroup out of memory: Killed process 6190 (syz.6.1054) total-vm:94032kB, anon-rss:1228kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 74.171981][ T6192] syz.6.1054 (6192) used greatest stack depth: 9552 bytes left [ 74.273002][ T28] audit: type=1400 audit(1776307582.868:241): avc: denied { create } for pid=6244 comm="syz.5.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.431606][ T6258] syzkaller0: entered promiscuous mode [ 74.437492][ T6258] syzkaller0: entered allmulticast mode [ 74.859313][ T6285] syzkaller0: entered promiscuous mode [ 74.865026][ T6285] syzkaller0: entered allmulticast mode [ 74.937982][ T28] audit: type=1400 audit(1776307583.528:242): avc: denied { bind } for pid=6293 comm="syz.5.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.021289][ T28] audit: type=1400 audit(1776307583.618:243): avc: denied { map } for pid=6304 comm="syz.5.1106" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.046112][ T28] audit: type=1400 audit(1776307583.618:244): avc: denied { read write } for pid=6304 comm="syz.5.1106" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.165695][ T28] audit: type=1326 audit(1776307583.758:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0497c819 code=0x7fc00000 [ 75.274249][ T6318] loop6: detected capacity change from 0 to 8192 [ 75.306584][ T6320] syzkaller0: entered promiscuous mode [ 75.318380][ T6320] syzkaller0: entered allmulticast mode [ 75.353640][ T28] audit: type=1400 audit(1776307583.948:246): avc: denied { create } for pid=6321 comm="syz.6.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.631147][ T28] audit: type=1400 audit(1776307584.228:247): avc: denied { bind } for pid=6357 comm="syz.2.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.683977][ T28] audit: type=1400 audit(1776307584.248:248): avc: denied { write } for pid=6357 comm="syz.2.1130" name="ptype" dev="proc" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.752851][ T6370] 9p: Bad value for 'rfdno' [ 75.855721][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1140'. [ 75.883649][ T6341] loop6: detected capacity change from 0 to 32768 [ 75.941039][ T6341] loop6: p2 p3 < p5 p6 > [ 75.946816][ T6341] loop6: p2 size 16775168 extends beyond EOD, truncated [ 75.967163][ T6341] loop6: p5 start 4294970168 is beyond EOD, truncated [ 76.136064][ T3574] udevd[3574]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 76.136785][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 76.158603][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 76.893147][ T6435] syzkaller0: entered promiscuous mode [ 76.899244][ T6435] syzkaller0: entered allmulticast mode [ 76.944255][ T6441] loop6: detected capacity change from 0 to 256 [ 76.953001][ T6441] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.965656][ T6441] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 76.973986][ T6441] FAT-fs (loop6): Filesystem has been set read-only [ 76.981889][ T6441] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 77.196634][ T6463] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 77.209608][ T6463] xt_hashlimit: size too large, truncated to 1048576 [ 77.937381][ T28] audit: type=1400 audit(1776307586.528:249): avc: denied { watch } for pid=6472 comm="syz.4.1180" path="/244" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.014406][ T6481] loop6: detected capacity change from 0 to 256 [ 78.033369][ T6481] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.065412][ T6481] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 78.075635][ T6481] FAT-fs (loop6): Filesystem has been set read-only [ 78.075879][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 78.082713][ T6481] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 78.168623][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1189'. [ 78.316092][ T6502] syzkaller0: entered promiscuous mode [ 78.326858][ T6502] syzkaller0: entered allmulticast mode [ 78.437436][ T6523] loop4: detected capacity change from 0 to 256 [ 78.446688][ T6523] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.460194][ T6523] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 78.468658][ T6523] FAT-fs (loop4): Filesystem has been set read-only [ 78.475465][ T6523] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 78.637953][ T6530] netlink: 'syz.4.1205': attribute type 4 has an invalid length. [ 79.079405][ T6540] loop1: detected capacity change from 0 to 128 [ 79.158524][ T6546] syzkaller0: entered promiscuous mode [ 79.164179][ T6546] syzkaller0: entered allmulticast mode [ 79.188518][ T6548] loop5: detected capacity change from 0 to 256 [ 79.197060][ T6548] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.262266][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 79.262282][ T28] audit: type=1400 audit(1776307587.858:254): avc: denied { append } for pid=6553 comm="syz.1.1216" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.298846][ T6554] usb usb2: usbfs: process 6554 (syz.1.1216) did not claim interface 0 before use [ 79.446478][ T28] audit: type=1400 audit(1776307588.018:255): avc: denied { write } for pid=6567 comm="syz.6.1223" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 80.102492][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1230'. [ 80.126497][ T6589] vlan2: entered allmulticast mode [ 80.144672][ T6589] vlan0: entered allmulticast mode [ 80.234052][ T6589] veth0_vlan: entered allmulticast mode [ 80.348358][ T28] audit: type=1400 audit(1776307588.848:256): avc: denied { connect } for pid=6591 comm="syz.6.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.413480][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1239'. [ 80.519202][ T28] audit: type=1400 audit(1776307589.118:257): avc: denied { create } for pid=6618 comm="syz.2.1245" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.012390][ T28] audit: type=1400 audit(1776307589.608:258): avc: denied { listen } for pid=6633 comm="syz.6.1251" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.077783][ T6638] syzkaller0: entered promiscuous mode [ 81.083979][ T6638] syzkaller0: entered allmulticast mode [ 81.293467][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1261'. [ 81.370298][ T28] audit: type=1400 audit(1776307589.968:259): avc: denied { unlink } for pid=3318 comm="syz-executor" name="file0" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.413953][ T6668] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1266'. [ 81.420078][ T6666] syzkaller0: entered promiscuous mode [ 81.429063][ T6666] syzkaller0: entered allmulticast mode [ 81.437974][ T6668] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1266'. [ 81.467892][ T6670] loop2: detected capacity change from 0 to 256 [ 81.476969][ T6670] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.502951][ T6670] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 81.517426][ T6670] FAT-fs (loop2): Filesystem has been set read-only [ 81.524266][ T6670] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 81.532280][ T6670] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 81.550469][ T6670] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 81.648983][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1277'. [ 81.835034][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1289'. [ 81.838634][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1291'. [ 81.857473][ T6719] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1291'. [ 81.877963][ T6722] loop4: detected capacity change from 0 to 256 [ 81.884714][ T28] audit: type=1400 audit(1776307590.468:260): avc: denied { bind } for pid=6721 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.892180][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1291'. [ 81.910709][ T28] audit: type=1400 audit(1776307590.468:261): avc: denied { node_bind } for pid=6721 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 81.923601][ T6719] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1291'. [ 81.953442][ T6722] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.995477][ T6720] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 82.019627][ T6720] FAT-fs (loop4): Filesystem has been set read-only [ 82.026753][ T6720] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 82.035071][ T6720] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 82.050972][ T6720] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 82.109777][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1304'. [ 82.378909][ T6783] loop4: detected capacity change from 0 to 256 [ 82.408393][ T6783] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.457145][ T6782] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 82.465551][ T6782] FAT-fs (loop4): Filesystem has been set read-only [ 82.472655][ T6782] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 83.641158][ T28] audit: type=1400 audit(1776307592.228:262): avc: denied { create } for pid=6846 comm="syz.5.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.673728][ T6852] macvtap0: entered promiscuous mode [ 83.686895][ T28] audit: type=1400 audit(1776307592.258:263): avc: denied { bind } for pid=6846 comm="syz.5.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.711780][ T6852] veth0_macvtap: left promiscuous mode [ 83.728486][ T6852] macvtap0 (unregistering): left promiscuous mode [ 85.026288][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 85.026316][ T28] audit: type=1400 audit(1776307593.618:268): avc: denied { setopt } for pid=6929 comm="syz.6.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.111366][ T28] audit: type=1400 audit(1776307593.618:269): avc: denied { name_bind } for pid=6929 comm="syz.6.1380" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 85.129218][ T2961] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 86.211559][ T6996] netlink: 'syz.6.1404': attribute type 9 has an invalid length. [ 86.229838][ T6996] netlink: 'syz.6.1404': attribute type 6 has an invalid length. [ 86.329687][ T6980] loop1: detected capacity change from 0 to 32768 [ 86.388738][ T6980] loop1: p1 p3 < > [ 86.531001][ T3574] udevd[3574]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 86.531585][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 86.624472][ T7033] syzkaller0: entered promiscuous mode [ 86.635412][ T7033] syzkaller0: entered allmulticast mode [ 86.805142][ T28] audit: type=1400 audit(1776307595.398:270): avc: denied { accept } for pid=7044 comm="syz.1.1422" lport=37301 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.833658][ T28] audit: type=1400 audit(1776307595.398:271): avc: denied { setopt } for pid=7044 comm="syz.1.1422" lport=37301 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 87.264052][ T7056] __nla_validate_parse: 11 callbacks suppressed [ 87.264071][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1426'. [ 87.544272][ T7066] loop6: detected capacity change from 0 to 128 [ 87.552877][ T7068] capability: warning: `syz.4.1432' uses 32-bit capabilities (legacy support in use) [ 87.722812][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1441'. [ 87.744310][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1441'. [ 87.994316][ T28] audit: type=1400 audit(1776307596.588:272): avc: denied { bind } for pid=7117 comm="syz.6.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.663132][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 88.710563][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 88.741251][ T7131] netlink: 'syz.5.1457': attribute type 9 has an invalid length. [ 88.749451][ T7131] netlink: 'syz.5.1457': attribute type 7 has an invalid length. [ 88.758777][ T7131] netlink: 'syz.5.1457': attribute type 8 has an invalid length. [ 88.830646][ T28] audit: type=1400 audit(1776307597.428:273): avc: denied { create } for pid=7141 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.831081][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 88.854996][ T28] audit: type=1400 audit(1776307597.428:274): avc: denied { write } for pid=7141 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.942333][ T3638] kernel write not supported for file [eventfd] (pid: 3638 comm: kworker/0:4) [ 88.992466][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 89.003253][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 89.318325][ T28] audit: type=1400 audit(1776307597.908:275): avc: denied { create } for pid=7175 comm="syz.1.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 89.340390][ T28] audit: type=1400 audit(1776307597.938:276): avc: denied { sys_admin } for pid=7175 comm="syz.1.1476" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 89.477389][ T28] audit: type=1400 audit(1776307598.058:277): avc: denied { mount } for pid=7177 comm="syz.4.1477" name="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 89.932940][ T7197] loop2: detected capacity change from 0 to 1764 [ 89.946196][ T7203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1488'. [ 89.970193][ T7197] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 90.205099][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 90.205174][ T28] audit: type=1400 audit(1776307598.798:281): avc: denied { execute } for pid=7223 comm="syz.1.1498" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 91.002561][ T7240] loop2: detected capacity change from 0 to 128 [ 91.015601][ T7240] syz.2.1503: attempt to access beyond end of device [ 91.015601][ T7240] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 91.031296][ T28] audit: type=1326 audit(1776307599.628:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.6.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155716c819 code=0x7fc00000 [ 91.031650][ T7240] syz.2.1503: attempt to access beyond end of device [ 91.031650][ T7240] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 91.068928][ T7240] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 91.072184][ T7244] netlink: 'syz.4.1506': attribute type 3 has an invalid length. [ 91.077722][ T7240] syz.2.1503: attempt to access beyond end of device [ 91.077722][ T7240] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 91.099103][ T7240] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 91.142899][ T7240] syz.2.1503: attempt to access beyond end of device [ 91.142899][ T7240] loop2: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 91.261996][ T28] audit: type=1400 audit(1776307599.858:283): avc: denied { create } for pid=7266 comm="syz.6.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.316982][ T7274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7274 comm=syz.2.1516 [ 91.329811][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1517'. [ 91.346995][ T7274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7274 comm=syz.2.1516 [ 91.810082][ T7303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7303 comm=syz.5.1530 [ 91.823931][ T7303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7303 comm=syz.5.1530 [ 92.227360][ T28] audit: type=1326 audit(1776307600.818:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0497c819 code=0x7fc00000 [ 92.260567][ T7325] mmap: syz.5.1540 (7325) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.313598][ T7328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7328 comm=syz.6.1541 [ 92.328176][ T7328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7328 comm=syz.6.1541 [ 92.483162][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1547'. [ 92.539987][ T7358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7358 comm=syz.2.1555 [ 92.554309][ T7358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7358 comm=syz.2.1555 [ 92.641081][ T7372] loop6: detected capacity change from 0 to 128 [ 92.653955][ T28] audit: type=1400 audit(1776307601.248:285): avc: denied { watch } for pid=7371 comm="syz.6.1560" path="/234/file0" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 92.706395][ T28] audit: type=1400 audit(1776307601.298:286): avc: denied { getopt } for pid=7373 comm="syz.2.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.190226][ T7388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7388 comm=syz.5.1567 [ 93.204279][ T7388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7388 comm=syz.5.1567 [ 93.251680][ T7392] loop5: detected capacity change from 0 to 128 [ 93.261811][ T7392] syz.5.1569: attempt to access beyond end of device [ 93.261811][ T7392] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 93.275803][ T7392] syz.5.1569: attempt to access beyond end of device [ 93.275803][ T7392] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 93.289454][ T7392] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 93.298059][ T7392] syz.5.1569: attempt to access beyond end of device [ 93.298059][ T7392] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 93.312205][ T7392] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 93.323696][ T7392] syz.5.1569: attempt to access beyond end of device [ 93.323696][ T7392] loop5: rw=0, sector=154, nr_sectors = 2 limit=128 [ 93.797222][ T7455] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1597'. [ 93.815488][ T7455] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1597'. [ 93.840334][ T7459] capability: warning: `syz.2.1599' uses deprecated v2 capabilities in a way that may be insecure [ 95.093961][ T28] audit: type=1400 audit(1776307603.688:287): avc: denied { bind } for pid=7513 comm="syz.2.1622" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.136673][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1623'. [ 95.158090][ T28] audit: type=1400 audit(1776307603.688:288): avc: denied { name_bind } for pid=7513 comm="syz.2.1622" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 95.168369][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1624'. [ 95.198285][ T28] audit: type=1400 audit(1776307603.688:289): avc: denied { node_bind } for pid=7513 comm="syz.2.1622" saddr=ff01::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 95.266918][ T28] audit: type=1326 audit(1776307603.818:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7494 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47ed6c819 code=0x7fc00000 [ 95.617738][ T7541] syzkaller0: entered promiscuous mode [ 95.623881][ T7541] syzkaller0: entered allmulticast mode [ 95.711185][ T7553] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1636'. [ 95.722005][ T7553] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1636'. [ 96.086056][ T7581] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1647'. [ 96.103541][ T7581] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1647'. [ 96.156038][ T28] audit: type=1400 audit(1776307604.748:291): avc: denied { getopt } for pid=7583 comm="syz.6.1649" lport=55017 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 96.377349][ T28] audit: type=1400 audit(1776307604.968:292): avc: denied { read } for pid=7600 comm="syz.6.1657" laddr=172.20.20.170 lport=13429 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.779449][ T7636] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1670'. [ 96.815700][ T28] audit: type=1400 audit(1776307605.408:293): avc: denied { create } for pid=7633 comm="syz.2.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.847615][ T28] audit: type=1400 audit(1776307605.438:294): avc: denied { mount } for pid=7640 comm="syz.5.1673" name="/" dev="hugetlbfs" ino=19026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 96.888715][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.895972][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.020025][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.032609][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.072294][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.092191][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.121533][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.143138][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.192094][ T28] audit: type=1400 audit(1776307605.788:295): avc: denied { unmount } for pid=4080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.231906][ T7662] syzkaller0: entered promiscuous mode [ 97.258476][ T7662] syzkaller0: entered allmulticast mode [ 97.784074][ T7742] __nla_validate_parse: 7 callbacks suppressed [ 97.784092][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'. [ 97.809378][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1720'. [ 97.839299][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 98.050551][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1728'. [ 98.104209][ T28] audit: type=1400 audit(1776307606.698:296): avc: denied { getopt } for pid=7770 comm="syz.4.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.163648][ T7774] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 98.211396][ T7774] bond2: (slave gretap1): making interface the new active one [ 98.229062][ T7774] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 98.271323][ T7774] macvlan2: entered promiscuous mode [ 98.294587][ T7774] macvlan2: entered allmulticast mode [ 98.310687][ T7774] bond2: entered promiscuous mode [ 98.326428][ T7774] gretap1: entered promiscuous mode [ 98.341884][ T7774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.366147][ T7774] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 98.409715][ T7774] bond2: left promiscuous mode [ 98.421624][ T7774] gretap1: left promiscuous mode [ 98.566304][ T7774] syz.4.1733 (7774) used greatest stack depth: 9000 bytes left [ 98.595321][ T7779] loop6: detected capacity change from 0 to 128 [ 98.644273][ T28] audit: type=1400 audit(1776307607.238:297): avc: denied { remount } for pid=7778 comm="syz.6.1736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 98.775470][ T28] audit: type=1400 audit(1776307607.368:298): avc: denied { watch_reads } for pid=7790 comm="syz.4.1742" path="/389/file0" dev="tmpfs" ino=2015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.003463][ T28] audit: type=1400 audit(1776307607.598:299): avc: denied { execute } for pid=7811 comm="syz.5.1751" path="/249/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.053986][ T7816] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1753'. [ 99.065461][ T7816] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1753'. [ 99.261757][ T7835] usb usb2: usbfs: process 7835 (syz.5.1761) did not claim interface 0 before use [ 99.347877][ T7843] loop5: detected capacity change from 0 to 2048 [ 99.388697][ T7843] loop5: p2 p4 [ 99.398335][ T7843] loop5: p2 size 851968 extends beyond EOD, truncated [ 99.419496][ T7843] loop5: p4 size 722688 extends beyond EOD, truncated [ 99.507419][ T7855] syzkaller0: entered promiscuous mode [ 99.521454][ T7855] syzkaller0: entered allmulticast mode [ 99.768607][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1779'. [ 99.948775][ T7885] cgroup: Need name or subsystem set [ 99.971027][ T7885] IPv6: NLM_F_REPLACE set, but no existing node found! [ 100.049247][ T7891] syzkaller0: entered promiscuous mode [ 100.058939][ T7891] syzkaller0: entered allmulticast mode [ 100.148427][ T7914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7914 comm=syz.2.1796 [ 100.161041][ T7916] bridge0: entered promiscuous mode [ 100.164656][ T7914] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 100.170776][ T7916] bridge0: entered allmulticast mode [ 100.190044][ T7918] x_tables: ip_tables: osf match: only valid for protocol 6 [ 100.259471][ T7914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.310175][ T7919] bond2: (slave dummy0): making interface the new active one [ 100.333330][ T7919] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 100.548773][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 100.594316][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 100.594381][ T28] audit: type=1400 audit(1776307609.188:304): avc: denied { name_bind } for pid=7953 comm="syz.1.1812" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 100.640163][ T7956] loop5: detected capacity change from 0 to 256 [ 100.762466][ T7956] syz.5.1813: attempt to access beyond end of device [ 100.762466][ T7956] loop5: rw=0, sector=272, nr_sectors = 4 limit=256 [ 100.792565][ T7956] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 100.800976][ T7956] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 100.812131][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 100.828999][ T28] audit: type=1400 audit(1776307609.418:305): avc: denied { mount } for pid=7973 comm="syz.1.1821" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.870000][ T28] audit: type=1326 audit(1776307609.468:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.6.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155716c819 code=0x7fc00000 [ 100.902348][ T7984] sctp: [Deprecated]: syz.4.1825 (pid 7984) Use of int in max_burst socket option deprecated. [ 100.902348][ T7984] Use struct sctp_assoc_value instead [ 100.943579][ T28] audit: type=1400 audit(1776307609.528:307): avc: denied { lock } for pid=7989 comm="syz.6.1826" path="socket:[19428]" dev="sockfs" ino=19428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.014128][ T28] audit: type=1400 audit(1776307609.608:308): avc: denied { unmount } for pid=7998 comm="syz.4.1830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.265931][ T8039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8039 comm=syz.2.1847 [ 101.296757][ T8042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.361960][ T8052] syzkaller0: entered promiscuous mode [ 101.367508][ T8052] syzkaller0: entered allmulticast mode [ 101.477132][ T8054] 9p: Bad value for 'debug' [ 101.486265][ T28] audit: type=1400 audit(1776307610.068:309): avc: denied { mounton } for pid=8043 comm="syz.2.1851" path="/362/file0" dev="tmpfs" ino=1873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.022250][ T28] audit: type=1400 audit(1776307610.618:310): avc: denied { sqpoll } for pid=8066 comm="syz.1.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.044815][ T8070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8070 comm=syz.5.1861 [ 102.216921][ T28] audit: type=1400 audit(1776307610.808:311): avc: denied { setopt } for pid=8090 comm="syz.1.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.347036][ T8086] loop5: detected capacity change from 0 to 32768 [ 102.389570][ T8086] loop5: p1 p3 < > [ 102.398244][ T28] audit: type=1400 audit(1776307610.988:312): avc: denied { mounton } for pid=8073 comm="syz.5.1863" path="/proc/638/task" dev="proc" ino=20563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 102.514957][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 102.515688][ T3574] udevd[3574]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 102.663889][ T8113] ip6tnl1: entered allmulticast mode [ 102.886408][ T8119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.894733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.904679][ T8119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.914848][ T8118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.924106][ T8118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.978618][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.250779][ T8142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8142 comm=syz.2.1890 [ 103.287746][ T28] audit: type=1400 audit(1776307611.878:313): avc: denied { unmount } for pid=4446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 103.290044][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 103.514372][ T8173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8173 comm=syz.1.1902 [ 103.940443][ T8226] syzkaller0: entered promiscuous mode [ 103.953381][ T8226] syzkaller0: entered allmulticast mode [ 104.019327][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.390101][ T8280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1951'. [ 104.416704][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 104.440980][ T8280] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 104.450079][ T8280] bridge1: entered promiscuous mode [ 104.455418][ T8280] bridge1: entered allmulticast mode [ 104.828467][ T3638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.058917][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.438558][ T8351] xt_connbytes: Forcing CT accounting to be enabled [ 106.874592][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 106.874659][ T28] audit: type=1400 audit(1776307615.468:321): avc: denied { mount } for pid=8473 comm="syz.1.2031" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.912901][ T8401] net_ratelimit: 47 callbacks suppressed [ 106.912921][ T8401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.971959][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2030'. [ 107.189176][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.207516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.224820][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.244624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.274562][ T8478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.283174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.307047][ T8478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.394711][ T28] audit: type=1326 audit(1776307615.988:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742b4ec819 code=0x7fc00000 [ 107.435534][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.498955][ T8491] syzkaller0: entered promiscuous mode [ 107.504538][ T8491] syzkaller0: entered allmulticast mode [ 107.807401][ T8537] Illegal XDP return value 4294967282 on prog (id 110) dev syz_tun, expect packet loss! [ 107.815618][ T8539] netlink: 'syz.1.2055': attribute type 4 has an invalid length. [ 107.825844][ T8539] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2055'. [ 107.858358][ T3638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.665406][ T8655] syzkaller0: entered promiscuous mode [ 108.671381][ T8655] syzkaller0: entered allmulticast mode [ 109.217311][ T8702] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 109.228160][ T8702] bridge1: entered allmulticast mode [ 109.283415][ T8712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2129'. [ 109.465014][ T8737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2141'. [ 109.542516][ T28] audit: type=1400 audit(1776307618.138:323): avc: denied { name_bind } for pid=8751 comm="syz.1.2146" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 109.739706][ T8767] loop5: detected capacity change from 0 to 8192 [ 109.749134][ T8767] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.841998][ T8779] bridge_slave_1: left allmulticast mode [ 109.847792][ T8779] bridge_slave_1: left promiscuous mode [ 109.854454][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.863371][ T8779] bridge_slave_0: left allmulticast mode [ 109.869226][ T8779] bridge_slave_0: left promiscuous mode [ 109.874993][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.061378][ T8790] syzkaller0: entered promiscuous mode [ 110.067129][ T8790] syzkaller0: entered allmulticast mode [ 110.092903][ T8796] loop5: detected capacity change from 0 to 256 [ 110.156401][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2170'. [ 110.197599][ T8806] netlink: 'syz.5.2171': attribute type 4 has an invalid length. [ 110.205835][ T8806] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2171'. [ 110.371899][ T8828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2182'. [ 110.422374][ T8836] netlink: 'syz.4.2186': attribute type 4 has an invalid length. [ 110.430426][ T8836] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2186'. [ 111.063039][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.076336][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2195'. [ 111.076824][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.116580][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.127684][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.144332][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.164552][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.302923][ T8886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2206'. [ 111.442717][ T8906] netlink: 'syz.2.2212': attribute type 4 has an invalid length. [ 111.451757][ T8906] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2212'. [ 111.606018][ T8928] loop6: detected capacity change from 0 to 128 [ 112.500217][ T3638] net_ratelimit: 21 callbacks suppressed [ 112.500295][ T3638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.590893][ T28] audit: type=1400 audit(1776307621.188:324): avc: denied { ioctl } for pid=9033 comm="syz.6.2261" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.660242][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.667501][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.674954][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.992334][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.040605][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.257056][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.290788][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.337107][ T9051] syzkaller0: entered promiscuous mode [ 113.342774][ T9051] syzkaller0: entered allmulticast mode [ 113.349651][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.358872][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.699035][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.778382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.272317][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.418674][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.518938][ T28] audit: type=1400 audit(1776307623.118:325): avc: denied { unmount } for pid=4080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 115.091281][ T9156] loop6: detected capacity change from 0 to 128 [ 115.276893][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.994364][ T9253] ip6tnl2: entered allmulticast mode [ 116.338449][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.479365][ T9299] netlink: 'syz.6.2361': attribute type 4 has an invalid length. [ 116.487172][ T9299] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2361'. [ 116.562531][ T9303] syzkaller0: entered promiscuous mode [ 116.568233][ T9303] syzkaller0: entered allmulticast mode [ 116.671353][ T9313] syzkaller0: entered promiscuous mode [ 116.677108][ T9313] syzkaller0: entered allmulticast mode [ 117.378424][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.449583][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.618960][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.766008][ T9361] loop5: detected capacity change from 0 to 128 [ 117.787213][ T9361] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.815186][ T9361] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.850460][ T9372] netlink: 'syz.1.2387': attribute type 7 has an invalid length. [ 117.863110][ T9372] netlink: 'syz.1.2387': attribute type 8 has an invalid length. [ 118.078616][ T3440] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.103279][ T9400] netlink: 'syz.1.2397': attribute type 4 has an invalid length. [ 118.120861][ T9400] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2397'. [ 118.247688][ T9423] bridge_slave_1: left allmulticast mode [ 118.270295][ T9423] bridge_slave_1: left promiscuous mode [ 118.287647][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.312003][ T9423] bridge_slave_0: left allmulticast mode [ 118.317830][ T9423] bridge_slave_0: left promiscuous mode [ 118.318583][ T9437] netlink: 'syz.2.2412': attribute type 4 has an invalid length. [ 118.323778][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.333925][ T9437] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2412'. [ 118.399688][ T9433] syzkaller0: entered promiscuous mode [ 118.416134][ T9433] syzkaller0: entered allmulticast mode [ 118.421829][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.793108][ T9513] syzkaller0: entered promiscuous mode [ 118.817896][ T9513] syzkaller0: entered allmulticast mode [ 119.414715][ T9599] syzkaller0: entered promiscuous mode [ 119.424682][ T9599] syzkaller0: entered allmulticast mode [ 119.432312][ T9606] netlink: 'syz.1.2481': attribute type 4 has an invalid length. [ 119.440293][ T9606] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2481'. [ 119.458647][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.723380][ T28] audit: type=1326 audit(1776307628.318:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9526 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742b4ec819 code=0x7fc00000 [ 119.794415][ T9661] syzkaller0: entered promiscuous mode [ 119.800654][ T9661] syzkaller0: entered allmulticast mode [ 119.906484][ T9674] netlink: 'syz.5.2510': attribute type 4 has an invalid length. [ 119.914651][ T9674] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2510'. [ 120.098303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.148179][ T9712] netlink: 'syz.6.2524': attribute type 4 has an invalid length. [ 120.156900][ T9712] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2524'. [ 120.211625][ T9722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.220657][ T9722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.229224][ T9722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.238091][ T9722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.246808][ T9722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.255120][ T9722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.733632][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2534'. [ 120.744883][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2534'. [ 120.866945][ T9745] syzkaller0: entered promiscuous mode [ 120.872600][ T9745] syzkaller0: entered allmulticast mode [ 120.925629][ T9756] loop5: detected capacity change from 0 to 128 [ 120.933654][ T9756] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.952141][ T9756] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.004388][ T36] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.111259][ T9779] netlink: 'syz.4.2550': attribute type 4 has an invalid length. [ 121.143582][ T9779] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2550'. [ 121.197998][ T9787] loop5: detected capacity change from 0 to 128 [ 121.531116][ T9822] netlink: 'syz.2.2564': attribute type 4 has an invalid length. [ 121.549841][ T9822] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2564'. [ 121.753919][ T9855] netlink: 'syz.2.2579': attribute type 4 has an invalid length. [ 121.762222][ T9855] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2579'. [ 122.318880][ T28] audit: type=1400 audit(1776307630.868:327): avc: denied { lock } for pid=9874 comm="syz.5.2585" path="socket:[25609]" dev="sockfs" ino=25609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 122.376438][ T28] audit: type=1400 audit(1776307630.968:328): avc: denied { accept } for pid=9876 comm="syz.4.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.494980][ T9893] netlink: 'syz.4.2593': attribute type 4 has an invalid length. [ 122.514778][ T9893] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2593'. [ 122.592827][ T28] audit: type=1400 audit(1776307631.188:329): avc: denied { remount } for pid=9908 comm="syz.4.2600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.699723][ T9911] syzkaller0: entered promiscuous mode [ 122.710200][ T9911] syzkaller0: entered allmulticast mode [ 123.064884][ T9970] netlink: 'syz.4.2625': attribute type 4 has an invalid length. [ 123.587109][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 123.678218][T10058] syzkaller0: entered promiscuous mode [ 123.683889][T10058] syzkaller0: entered allmulticast mode [ 124.395229][T10083] netlink: 'syz.4.2673': attribute type 4 has an invalid length. [ 124.411574][T10085] syzkaller0: entered promiscuous mode [ 124.411821][T10083] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2673'. [ 124.417981][T10085] syzkaller0: entered allmulticast mode [ 124.604562][T10121] netlink: 'syz.2.2690': attribute type 4 has an invalid length. [ 124.612534][T10121] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2690'. [ 124.682070][T10128] loop5: detected capacity change from 0 to 128 [ 124.699133][T10128] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.713189][T10128] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.759527][ T8614] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.812304][T10150] netlink: 'syz.4.2703': attribute type 4 has an invalid length. [ 124.820332][T10150] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2703'. [ 125.084235][T10160] chnl_net:caif_netlink_parms(): no params data found [ 125.128912][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.136195][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.143831][T10160] bridge_slave_0: entered allmulticast mode [ 125.150527][T10160] bridge_slave_0: entered promiscuous mode [ 125.157432][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.164948][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.172309][T10160] bridge_slave_1: entered allmulticast mode [ 125.181237][T10160] bridge_slave_1: entered promiscuous mode [ 125.199377][T10160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.210553][T10160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.231936][T10160] team0: Port device team_slave_0 added [ 125.239058][T10160] team0: Port device team_slave_1 added [ 125.255607][T10160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.262463][T10218] netlink: 'syz.2.2726': attribute type 4 has an invalid length. [ 125.262676][T10160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.270965][T10218] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2726'. [ 125.296627][T10160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.316992][T10160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.324030][T10160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.350510][T10160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.393215][T10160] hsr_slave_0: entered promiscuous mode [ 125.403496][T10160] hsr_slave_1: entered promiscuous mode [ 125.410282][T10160] debugfs: 'hsr0' already exists in 'hsr' [ 125.416169][T10160] Cannot create hsr debugfs directory [ 125.774379][T10160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.783498][T10160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.791679][T10160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.801335][T10160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.809134][T10160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.819366][T10160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.827261][T10160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.836542][T10160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.910929][T10160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.927467][T10160] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.938248][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.945378][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.973878][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.981017][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.103173][T10298] syzkaller0: entered promiscuous mode [ 126.109950][T10298] syzkaller0: entered allmulticast mode [ 126.155669][T10160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.373842][T10160] veth0_vlan: entered promiscuous mode [ 126.382681][T10160] veth1_vlan: entered promiscuous mode [ 126.411147][T10160] veth0_macvtap: entered promiscuous mode [ 126.420926][T10160] veth1_macvtap: entered promiscuous mode [ 126.437584][T10160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.457313][T10160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.470601][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.480368][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.495257][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.511977][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.718006][T10381] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 126.741419][T10381] bond3: entered promiscuous mode [ 126.747407][T10381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.774137][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'. [ 126.783963][T10381] bond3: entered allmulticast mode [ 127.092646][ T28] audit: type=1326 audit(1776307635.688:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47ed6c819 code=0x7fc00000 [ 127.427510][T10385] chnl_net:caif_netlink_parms(): no params data found [ 127.520668][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.533057][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.542637][T10385] bridge_slave_0: entered allmulticast mode [ 127.551592][T10385] bridge_slave_0: entered promiscuous mode [ 127.559341][T10385] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.566552][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.574374][T10385] bridge_slave_1: entered allmulticast mode [ 127.582261][T10385] bridge_slave_1: entered promiscuous mode [ 127.603308][T10385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.615673][T10385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.646582][T10385] team0: Port device team_slave_0 added [ 127.659581][T10385] team0: Port device team_slave_1 added [ 127.677647][T10385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.685063][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.713035][T10385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.726538][T10385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.733235][T10445] loop4: detected capacity change from 0 to 8192 [ 127.733777][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.767082][T10385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.807816][T10385] hsr_slave_0: entered promiscuous mode [ 127.814081][T10385] hsr_slave_1: entered promiscuous mode [ 127.821138][T10385] debugfs: 'hsr0' already exists in 'hsr' [ 127.826893][T10385] Cannot create hsr debugfs directory [ 127.908543][T10385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.975912][T10385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.074498][T10385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.117612][T10385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.199992][T10385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 128.209288][T10385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.217118][T10385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.227008][T10385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.234813][T10461] netlink: 'syz.4.2812': attribute type 12 has an invalid length. [ 128.242831][T10461] netlink: 'syz.4.2812': attribute type 29 has an invalid length. [ 128.251001][T10461] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2812'. [ 128.260723][T10385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.273250][T10385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.283043][T10385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 128.292776][T10385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.352903][T10385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.372020][T10385] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.401957][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.409197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.409289][T10480] loop5: detected capacity change from 0 to 128 [ 128.425182][T10480] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.444541][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.446850][T10480] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.451673][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.468738][ T261] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.517736][T10486] netlink: 'syz.6.2823': attribute type 12 has an invalid length. [ 128.534939][T10486] netlink: 'syz.6.2823': attribute type 29 has an invalid length. [ 128.550327][T10486] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2823'. [ 128.607210][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2829'. [ 128.614078][T10385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.673520][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2833'. [ 128.726782][T10385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.846603][T10528] loop6: detected capacity change from 0 to 8192 [ 128.928712][T10528] loop6: p1 p2 < > p3 [ 128.932837][T10528] loop6: partition table partially beyond EOD, truncated [ 128.940136][T10528] loop6: p1 start 16777216 is beyond EOD, truncated [ 128.946776][T10528] loop6: p2 start 268435456 is beyond EOD, truncated [ 128.953653][T10528] loop6: p3 size 60489728 extends beyond EOD, truncated [ 128.985838][ T2999] loop6: p1 p2 < > p3 [ 129.007523][ T2999] loop6: partition table partially beyond EOD, truncated [ 129.048904][ T2999] loop6: p1 start 16777216 is beyond EOD, truncated [ 129.072517][ T2999] loop6: p2 start 268435456 is beyond EOD, truncated [ 129.096292][ T2999] loop6: p3 size 60489728 extends beyond EOD, truncated [ 129.393572][T10385] veth0_vlan: entered promiscuous mode [ 129.405425][T10385] veth1_vlan: entered promiscuous mode [ 129.434675][T10385] veth0_macvtap: entered promiscuous mode [ 129.447757][T10385] veth1_macvtap: entered promiscuous mode [ 129.464674][T10385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.488460][T10385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.503242][T10537] loop4: detected capacity change from 0 to 8192 [ 129.516043][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.528797][ T261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.562903][T10537] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.588863][ T3440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.618932][ T3440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.674101][ T28] audit: type=1400 audit(1776307638.268:331): avc: denied { watch watch_reads } for pid=10555 comm="syz.6.2845" path="/proc/1040" dev="proc" ino=27277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 129.842580][T10567] syzkaller0: entered promiscuous mode [ 129.848793][T10567] syzkaller0: entered allmulticast mode [ 131.246176][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2892'. [ 131.285145][T10678] loop6: detected capacity change from 0 to 128 [ 131.308957][T10678] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.337014][T10678] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.375183][ T49] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.843308][T10839] syzkaller0: entered promiscuous mode [ 132.852920][T10839] syzkaller0: entered allmulticast mode [ 133.093306][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'. [ 133.183646][T10877] syzkaller0: entered promiscuous mode [ 133.198233][T10877] syzkaller0: entered allmulticast mode [ 133.362829][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'. [ 133.443940][T10914] loop2: detected capacity change from 0 to 128 [ 133.451386][T10914] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.480440][T10914] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.510136][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.547494][T10924] syzkaller0: entered promiscuous mode [ 133.555386][T10924] syzkaller0: entered allmulticast mode [ 133.651861][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2988'. [ 133.980501][T10960] syzkaller0: entered promiscuous mode [ 133.994391][T10960] syzkaller0: entered allmulticast mode [ 134.204675][T10947] chnl_net:caif_netlink_parms(): no params data found [ 134.371637][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.387484][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3010'. [ 134.398434][T10947] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.406314][T10947] bridge_slave_0: entered allmulticast mode [ 134.413031][T10947] bridge_slave_0: entered promiscuous mode [ 134.422942][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.433878][T10947] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.441486][T10947] bridge_slave_1: entered allmulticast mode [ 134.450929][T10947] bridge_slave_1: entered promiscuous mode [ 134.482535][T10947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.527467][T10947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.578008][T10947] team0: Port device team_slave_0 added [ 134.597441][T10947] team0: Port device team_slave_1 added [ 134.620735][T10947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.627924][T10947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.654436][T10947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.671462][T10947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.682292][T10947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.712584][T10947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.750472][T10947] hsr_slave_0: entered promiscuous mode [ 134.761611][T10947] hsr_slave_1: entered promiscuous mode [ 134.773392][T10947] debugfs: 'hsr0' already exists in 'hsr' [ 134.774526][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3026'. [ 134.788549][T10947] Cannot create hsr debugfs directory [ 135.079410][T10947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.088046][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.097814][T10947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.106926][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.115107][T10947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.124645][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.137729][T10947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.142768][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3037'. [ 135.156217][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.213659][T10947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.230582][T10947] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.241608][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.248841][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.262039][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.269224][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.284547][T11093] syzkaller0: entered promiscuous mode [ 135.290152][T11093] syzkaller0: entered allmulticast mode [ 135.331476][T10947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.366213][T11098] loop4: detected capacity change from 0 to 128 [ 135.373310][T11098] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.391885][T11098] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.434044][T10947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.447461][ T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.574088][T11122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3048'. [ 135.628825][T10947] veth0_vlan: entered promiscuous mode [ 135.639944][T10947] veth1_vlan: entered promiscuous mode [ 135.675565][T10947] veth0_macvtap: entered promiscuous mode [ 135.685106][T10947] veth1_macvtap: entered promiscuous mode [ 135.698814][T10947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.712567][T10947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.724567][ T116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.734930][ T116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.747747][ T116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.761942][ T116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.811405][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 135.905710][T11162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3063'. [ 136.274063][T11197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3077'. [ 136.301467][T11199] loop1: detected capacity change from 0 to 128 [ 136.308493][T11199] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.320893][T11199] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.341405][ T116] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.524940][T11211] syzkaller0: entered promiscuous mode [ 136.530685][T11211] syzkaller0: entered allmulticast mode [ 136.622718][T11221] loop6: detected capacity change from 0 to 128 [ 136.632952][T11221] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.668594][T11221] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.745225][ T116] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.757122][T11237] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 136.829944][T11247] syzkaller0: entered promiscuous mode [ 136.836332][T11247] syzkaller0: entered allmulticast mode [ 137.112226][T11294] loop6: detected capacity change from 0 to 128 [ 137.119373][T11294] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.132639][T11294] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.141879][T11290] loop1: detected capacity change from 0 to 8192 [ 137.152670][T11290] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.163808][ T36] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.247102][ T28] audit: type=1400 audit(1776307645.838:332): avc: denied { audit_read } for pid=11299 comm="syz.1.3123" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.550554][T11350] loop1: detected capacity change from 0 to 256 [ 138.042480][T11413] team0 (unregistering): Port device team_slave_0 removed [ 138.067657][T11413] team0 (unregistering): Port device team_slave_1 removed [ 138.269903][T11453] __nla_validate_parse: 6 callbacks suppressed [ 138.269921][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3193'. [ 138.757332][T11505] syzkaller0: entered promiscuous mode [ 138.770610][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 138.771508][T11505] syzkaller0: entered allmulticast mode [ 138.933849][T11527] loop2: detected capacity change from 0 to 256 [ 139.346501][T11542] loop1: detected capacity change from 0 to 256 [ 139.433482][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 139.477898][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.477898][ T116] loop1: rw=1, sector=256, nr_sectors = 32 limit=256 [ 139.494678][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.494678][ T116] loop1: rw=1, sector=320, nr_sectors = 32 limit=256 [ 139.508685][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.508685][ T116] loop1: rw=1, sector=384, nr_sectors = 32 limit=256 [ 139.522865][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.522865][ T116] loop1: rw=1, sector=448, nr_sectors = 32 limit=256 [ 139.536863][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.536863][ T116] loop1: rw=1, sector=512, nr_sectors = 32 limit=256 [ 139.558473][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.558473][ T116] loop1: rw=1, sector=640, nr_sectors = 32 limit=256 [ 139.576097][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.576097][ T116] loop1: rw=1, sector=704, nr_sectors = 32 limit=256 [ 139.592523][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.592523][ T116] loop1: rw=1, sector=768, nr_sectors = 32 limit=256 [ 139.606527][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.606527][ T116] loop1: rw=1, sector=832, nr_sectors = 32 limit=256 [ 139.620541][ T116] kworker/u8:5: attempt to access beyond end of device [ 139.620541][ T116] loop1: rw=1, sector=896, nr_sectors = 32 limit=256 [ 140.245097][T11590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11590 comm=syz.5.3248 [ 140.535026][T11622] syzkaller0: entered promiscuous mode [ 140.547023][T11622] syzkaller0: entered allmulticast mode [ 140.756367][T11659] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3277'. [ 140.810677][T11666] syzkaller0: entered promiscuous mode [ 140.816310][T11666] syzkaller0: entered allmulticast mode [ 141.174305][T11689] syzkaller0: entered promiscuous mode [ 141.180010][T11689] syzkaller0: entered allmulticast mode [ 141.307119][T11699] syzkaller0: entered promiscuous mode [ 141.313806][T11699] syzkaller0: entered allmulticast mode [ 141.889691][T11729] syzkaller0: entered promiscuous mode [ 141.939938][T11729] syzkaller0: entered allmulticast mode [ 142.207460][T11757] netlink: 'syz.1.3322': attribute type 12 has an invalid length. [ 142.215617][T11757] netlink: 'syz.1.3322': attribute type 29 has an invalid length. [ 142.233065][T11757] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3322'. [ 142.335398][T11770] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 142.418574][T11782] netlink: 'syz.6.3333': attribute type 12 has an invalid length. [ 142.426710][T11782] netlink: 'syz.6.3333': attribute type 29 has an invalid length. [ 142.435087][T11782] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3333'. [ 142.450682][ T28] audit: type=1400 audit(1776307651.048:333): avc: denied { write } for pid=11783 comm="syz.1.3334" lport=43024 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.505591][T11790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3337'. [ 142.603214][T11806] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 142.781317][T11836] x_tables: ip_tables: osf match: only valid for protocol 6 [ 143.223831][T11861] syzkaller0: entered promiscuous mode [ 143.230147][T11861] syzkaller0: entered allmulticast mode [ 143.331229][T11888] netlink: 'syz.5.3376': attribute type 1 has an invalid length. [ 143.352655][T11888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.367044][T11890] netlink: 'syz.4.3377': attribute type 12 has an invalid length. [ 143.375179][T11890] netlink: 'syz.4.3377': attribute type 29 has an invalid length. [ 143.383228][T11890] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3377'. [ 143.402465][T11888] bond1: (slave gretap1): making interface the new active one [ 143.411052][T11888] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.420061][T11895] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 143.422457][T11888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11888 comm=syz.5.3376 [ 143.687047][ T28] audit: type=1400 audit(1776307652.278:334): avc: denied { setopt } for pid=11903 comm="syz.4.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.752670][T11918] syzkaller0: entered promiscuous mode [ 143.758471][T11918] syzkaller0: entered allmulticast mode [ 144.049551][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 144.059345][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 144.147921][T11947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3401'. [ 144.229349][T11951] syzkaller0: entered promiscuous mode [ 144.235037][T11951] syzkaller0: entered allmulticast mode [ 144.687121][T11977] syzkaller0: entered promiscuous mode [ 144.706928][T11977] syzkaller0: entered allmulticast mode [ 144.742313][T11979] team0 (unregistering): Port device team_slave_0 removed [ 144.769883][T11979] team0 (unregistering): Port device team_slave_1 removed [ 144.891974][T12004] syzkaller0: entered promiscuous mode [ 144.912969][T12004] syzkaller0: entered allmulticast mode [ 145.033830][ T28] audit: type=1400 audit(1776307653.628:335): avc: denied { watch watch_reads } for pid=12021 comm="syz.5.3434" path="/538/file1" dev="tmpfs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.192793][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3445'. [ 145.199770][T12049] syzkaller0: entered promiscuous mode [ 145.213376][T12049] syzkaller0: entered allmulticast mode [ 145.374752][T12076] loop4: detected capacity change from 0 to 128 [ 145.385093][T12076] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.398603][T12064] syzkaller0: entered promiscuous mode [ 145.404744][T12064] syzkaller0: entered allmulticast mode [ 145.416647][T12076] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.475039][ T261] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.766614][ T28] audit: type=1400 audit(1776307654.358:336): avc: denied { read } for pid=12119 comm="syz.2.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.789937][T12116] syzkaller0: entered promiscuous mode [ 145.795457][T12116] syzkaller0: entered allmulticast mode [ 146.081576][ T28] audit: type=1326 audit(1776307654.678:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.4.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb66ac819 code=0x7ffc0000 [ 146.134282][ T28] audit: type=1326 audit(1776307654.678:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.4.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb66ac819 code=0x7ffc0000 [ 146.174181][ T28] audit: type=1326 audit(1776307654.678:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.4.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb66ac819 code=0x7ffc0000 [ 146.207393][ T28] audit: type=1326 audit(1776307654.678:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.4.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb66ac819 code=0x7ffc0000 [ 146.231512][ T28] audit: type=1326 audit(1776307654.678:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.4.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0eb66ac819 code=0x7ffc0000 [ 146.233956][T12129] chnl_net:caif_netlink_parms(): no params data found [ 146.255479][ T28] audit: type=1326 audit(1776307654.678:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.4.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb66ac819 code=0x7ffc0000 [ 146.326281][T12129] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.333640][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.341908][T12129] bridge_slave_0: entered allmulticast mode [ 146.348939][T12129] bridge_slave_0: entered promiscuous mode [ 146.356075][T12129] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.363402][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.370961][T12129] bridge_slave_1: entered allmulticast mode [ 146.377550][T12129] bridge_slave_1: entered promiscuous mode [ 146.397890][T12129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.408984][T12129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.433590][T12129] team0: Port device team_slave_0 added [ 146.441112][T12129] team0: Port device team_slave_1 added [ 146.458697][T12129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.465804][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.506232][T12129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.518472][T12129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.525526][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.553462][T12129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.582442][T12129] hsr_slave_0: entered promiscuous mode [ 146.588815][T12129] hsr_slave_1: entered promiscuous mode [ 146.594899][T12129] debugfs: 'hsr0' already exists in 'hsr' [ 146.600830][T12129] Cannot create hsr debugfs directory [ 146.680292][T12129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.750297][T12129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.833354][T12129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.887777][T12129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.995024][T12129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.024834][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.033316][T12129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.046901][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.062958][T12129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.087421][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.175595][T12189] syzkaller0: entered promiscuous mode [ 147.186570][T12189] syzkaller0: entered allmulticast mode [ 147.205491][T12129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.223792][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.416621][T12235] syzkaller0: entered promiscuous mode [ 147.437940][T12235] syzkaller0: entered allmulticast mode [ 147.478845][T12129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.519788][T12129] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.543620][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.550880][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.581666][T12129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.594308][T12129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.611169][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.618376][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.672198][T12261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12261 comm=syz.2.3524 [ 147.724849][T12129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.062811][T12129] veth0_vlan: entered promiscuous mode [ 148.071882][T12129] veth1_vlan: entered promiscuous mode [ 148.092325][T12129] veth0_macvtap: entered promiscuous mode [ 148.100789][T12129] veth1_macvtap: entered promiscuous mode [ 148.124157][T12129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.147142][T12129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.166102][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.187198][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.221869][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.242333][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.612680][T12345] syzkaller0: entered promiscuous mode [ 148.638333][T12345] syzkaller0: entered allmulticast mode [ 148.645367][T12347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12347 comm=syz.2.3551 [ 148.764441][T12354] syzkaller0: entered promiscuous mode [ 148.780061][T12354] syzkaller0: entered allmulticast mode [ 148.948001][T12376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12376 comm=syz.1.3564 [ 149.016131][T12382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12382 comm=syz.2.3567 [ 149.247904][T12398] team0 (unregistering): Port device team_slave_0 removed [ 149.279960][T12398] team0 (unregistering): Port device team_slave_1 removed [ 150.617637][T12481] syzkaller0: entered promiscuous mode [ 150.627638][T12481] syzkaller0: entered allmulticast mode [ 150.915494][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 150.915512][ T28] audit: type=1400 audit(1776307659.508:347): avc: denied { read } for pid=12488 comm="syz.1.3615" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.112506][T12517] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3626'. [ 151.235027][T12528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12528 comm=syz.6.3631 [ 152.460175][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3656'. [ 152.534101][ T28] audit: type=1400 audit(1776307661.128:348): avc: denied { shutdown } for pid=12592 comm="syz.1.3657" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.618095][T12646] syzkaller0: entered promiscuous mode [ 153.636018][T12646] syzkaller0: entered allmulticast mode [ 154.048675][T12679] syzkaller0: entered promiscuous mode [ 154.061595][T12679] syzkaller0: entered allmulticast mode [ 154.424819][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 154.523794][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.535245][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.544947][ T12] bond0 (unregistering): Released all slaves [ 154.552981][ T12] bond1 (unregistering): Released all slaves [ 154.562424][T12675] chnl_net:caif_netlink_parms(): no params data found [ 154.582558][ T28] audit: type=1400 audit(1776307663.178:349): avc: denied { read } for pid=3038 comm="dhcpcd" name="n33" dev="tmpfs" ino=11659 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.614418][ T12] hsr_slave_0: left promiscuous mode [ 154.615684][ T28] audit: type=1400 audit(1776307663.178:350): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=11659 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.645875][ T12] hsr_slave_1: left promiscuous mode [ 154.654313][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.657554][ T28] audit: type=1400 audit(1776307663.178:351): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=11659 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.685390][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.733495][ T12] team0 (unregistering): Port device team_slave_1 removed [ 154.778623][ T12] team0 (unregistering): Port device team_slave_0 removed [ 154.814127][ T28] audit: type=1400 audit(1776307663.408:352): avc: denied { create } for pid=12710 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.856972][ T28] audit: type=1400 audit(1776307663.408:353): avc: denied { write } for pid=12710 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=11683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.884250][ T28] audit: type=1400 audit(1776307663.408:354): avc: denied { append } for pid=12710 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=11683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.931175][ T28] audit: type=1400 audit(1776307663.478:355): avc: denied { unlink } for pid=12734 comm="rm" name="resolv.conf.eth9.link" dev="tmpfs" ino=11683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.969390][ T3038] 8021q: adding VLAN 0 to HW filter on device eth9 [ 154.992870][T12732] syzkaller0: entered promiscuous mode [ 154.999775][T12732] syzkaller0: entered allmulticast mode [ 155.017452][T12675] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.034028][T12747] loop4: detected capacity change from 0 to 256 [ 155.034498][T12675] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.070289][T12675] bridge_slave_0: entered allmulticast mode [ 155.085220][T12675] bridge_slave_0: entered promiscuous mode [ 155.116122][T12675] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.127540][T12675] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.135113][T12675] bridge_slave_1: entered allmulticast mode [ 155.142202][T12675] bridge_slave_1: entered promiscuous mode [ 155.162038][T12675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.175559][T12675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.208863][T12675] team0: Port device team_slave_0 added [ 155.218009][T12675] team0: Port device team_slave_1 added [ 155.254998][T12675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.265254][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.328298][T12675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.363579][T12675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.380304][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.428534][T12675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.506786][ T3038] 8021q: adding VLAN 0 to HW filter on device eth10 [ 155.523021][T12675] hsr_slave_0: entered promiscuous mode [ 155.537671][T12675] hsr_slave_1: entered promiscuous mode [ 155.552411][T12675] debugfs: 'hsr0' already exists in 'hsr' [ 155.558731][T12675] Cannot create hsr debugfs directory [ 155.566510][T12796] syzkaller0: entered promiscuous mode [ 155.572617][T12796] syzkaller0: entered allmulticast mode [ 155.831766][T12846] syzkaller0: entered promiscuous mode [ 155.837397][T12846] syzkaller0: entered allmulticast mode [ 155.881542][T12675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.890669][T12675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.900283][T12675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.912072][T12675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.926775][T12675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.936681][T12675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.947721][T12675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.960219][T12675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.997835][T12675] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.004986][T12675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.012394][T12675] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.019735][T12675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.057118][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.076428][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.180941][T12895] syzkaller0: entered promiscuous mode [ 156.193789][T12895] syzkaller0: entered allmulticast mode [ 156.204742][T12675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.239804][T12675] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.242603][T12902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12902 comm=syz.6.3750 [ 156.259914][T12675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.277700][T12675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.291137][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.298303][ T8614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.310767][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.317964][ T8614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.475977][T12675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.563877][T12941] syzkaller0: entered promiscuous mode [ 156.579781][T12941] syzkaller0: entered allmulticast mode [ 156.649857][T12957] syzkaller0: entered promiscuous mode [ 156.655669][T12957] syzkaller0: entered allmulticast mode [ 156.794886][T12675] veth0_vlan: entered promiscuous mode [ 156.815322][T12675] veth1_vlan: entered promiscuous mode [ 156.828394][ T3373] ================================================================== [ 156.836501][ T3373] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 156.843620][ T3373] [ 156.846042][ T3373] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3420 on cpu 0: [ 156.854115][ T3373] wq_worker_running+0x9b/0x120 [ 156.858970][ T3373] schedule_timeout+0xca/0x180 [ 156.863732][ T3373] msleep+0x4f/0x90 [ 156.867539][ T3373] nsim_fib_event+0x3e32/0x4d70 [ 156.872406][ T3373] nsim_fib_event_work+0x13d/0x210 [ 156.877518][ T3373] process_scheduled_works+0x4f0/0x9c0 [ 156.883078][ T3373] worker_thread+0x58a/0x780 [ 156.887667][ T3373] kthread+0x22a/0x280 [ 156.891760][ T3373] ret_from_fork+0x146/0x330 [ 156.896371][ T3373] ret_from_fork_asm+0x1a/0x30 [ 156.901139][ T3373] [ 156.903565][ T3373] read to 0xffff888237c2a8e4 of 4 bytes by task 3373 on cpu 1: [ 156.911094][ T3373] kick_pool+0x49/0x2d0 [ 156.915241][ T3373] __queue_work+0x899/0xaa0 [ 156.919732][ T3373] queue_work_on+0xa9/0x140 [ 156.924321][ T3373] wg_packet_encrypt_worker+0xbf3/0xd70 [ 156.929952][ T3373] process_scheduled_works+0x4f0/0x9c0 [ 156.935419][ T3373] worker_thread+0x58a/0x780 [ 156.940008][ T3373] kthread+0x22a/0x280 [ 156.944096][ T3373] ret_from_fork+0x146/0x330 [ 156.948686][ T3373] ret_from_fork_asm+0x1a/0x30 [ 156.953448][ T3373] [ 156.955864][ T3373] value changed: 0x00000000 -> 0x00000001 [ 156.961594][ T3373] [ 156.963923][ T3373] Reported by Kernel Concurrency Sanitizer on: [ 156.970070][ T3373] CPU: 1 UID: 0 PID: 3373 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 156.979442][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.989577][ T3373] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 156.996088][ T3373] ================================================================== [ 157.025082][T12675] veth0_macvtap: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.043680][T12675] veth1_macvtap: entered promiscuous mode [ 157.126447][T12675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.404631][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.520792][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.600634][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.670846][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.757118][ T52] bridge_slave_1: left allmulticast mode [ 157.762867][ T52] bridge_slave_1: left promiscuous mode [ 157.768640][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.776599][ T52] bridge_slave_0: left allmulticast mode [ 157.782645][ T52] bridge_slave_0: left promiscuous mode [ 157.788775][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.880070][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.890293][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.899932][ T52] bond0 (unregistering): Released all slaves [ 157.924435][ T52] hsr_slave_0: left promiscuous mode [ 157.930538][ T52] hsr_slave_1: left promiscuous mode [ 157.936419][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.945273][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.952968][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.960742][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.972272][ T52] veth1_macvtap: left promiscuous mode [ 157.977904][ T52] veth0_macvtap: left promiscuous mode [ 157.983468][ T52] veth1_vlan: left promiscuous mode [ 157.988851][ T52] veth0_vlan: left promiscuous mode [ 158.060052][ T52] team0 (unregistering): Port device team_slave_1 removed [ 158.069623][ T52] team0 (unregistering): Port device team_slave_0 removed [ 158.102666][ T3038] 8021q: adding VLAN 0 to HW filter on device eth9 [ 158.203948][ T3038] 8021q: adding VLAN 0 to HW filter on device eth10 [ 158.304167][ T3038] 8021q: adding VLAN 0 to HW filter on device eth11 [ 158.404182][ T3038] 8021q: adding VLAN 0 to HW filter on device eth12 [ 158.414285][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.491082][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.582124][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.621178][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.700902][ T52] bridge_slave_1: left allmulticast mode [ 158.706585][ T52] bridge_slave_1: left promiscuous mode [ 158.712497][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.720471][ T52] bridge_slave_0: left allmulticast mode [ 158.726123][ T52] bridge_slave_0: left promiscuous mode [ 158.731895][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.783925][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.794103][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.803630][ T52] bond0 (unregistering): Released all slaves [ 158.857496][ T52] hsr_slave_0: left promiscuous mode [ 158.868719][ T52] hsr_slave_1: left promiscuous mode [ 158.874486][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.881954][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.889787][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.897374][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.909500][ T52] veth1_macvtap: left promiscuous mode [ 158.921006][ T52] veth0_macvtap: left promiscuous mode [ 158.926680][ T52] veth1_vlan: left promiscuous mode [ 158.931991][ T52] veth0_vlan: left promiscuous mode [ 159.023405][ T3038] 8021q: adding VLAN 0 to HW filter on device eth13 [ 159.128406][ T3038] 8021q: adding VLAN 0 to HW filter on device eth14 [ 159.233159][ T3038] 8021q: adding VLAN 0 to HW filter on device eth15 [ 159.332645][ T3038] 8021q: adding VLAN 0 to HW filter on device eth16 [ 160.433746][ T52] bridge_slave_1: left allmulticast mode [ 160.439610][ T52] bridge_slave_1: left promiscuous mode [ 160.445398][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.453440][ T52] bridge_slave_0: left allmulticast mode [ 160.459332][ T52] bridge_slave_0: left promiscuous mode [ 160.465160][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.531877][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.542394][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.551894][ T52] bond0 (unregistering): Released all slaves [ 160.573559][ T52] hsr_slave_0: left promiscuous mode [ 160.579498][ T52] hsr_slave_1: left promiscuous mode [ 160.585312][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.593264][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.601057][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.612855][ T52] veth1_macvtap: left promiscuous mode [ 160.618721][ T52] veth0_macvtap: left promiscuous mode [ 160.624470][ T52] veth1_vlan: left promiscuous mode [ 160.630213][ T52] veth0_vlan: left promiscuous mode [ 160.699914][ T52] team0 (unregistering): Port device team_slave_1 removed [ 160.711352][ T52] team0 (unregistering): Port device team_slave_0 removed [ 160.744507][ T3038] 8021q: adding VLAN 0 to HW filter on device eth17 [ 160.849723][ T3038] 8021q: adding VLAN 0 to HW filter on device eth18 [ 160.951186][ T3038] 8021q: adding VLAN 0 to HW filter on device eth19 [ 161.054968][ T3038] 8021q: adding VLAN 0 to HW filter on device eth20