last executing test programs: 1m55.430841009s ago: executing program 32 (id=80): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m49.876760443s ago: executing program 33 (id=164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) unshare(0x2040400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2}) 1m24.126784276s ago: executing program 34 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r3, 0x0, &(0x7f00000005c0)=""/32}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) 1m11.372347189s ago: executing program 2 (id=1004): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000440)="64e99d93", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 1m11.307229634s ago: executing program 2 (id=1005): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m10.993434015s ago: executing program 2 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 1m10.714599425s ago: executing program 2 (id=1011): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 1m10.613438392s ago: executing program 2 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) 1m10.290963964s ago: executing program 2 (id=1021): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20044000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m10.290799644s ago: executing program 35 (id=1021): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20044000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 54.740605781s ago: executing program 7 (id=1365): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\x9b}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x120, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 54.662406486s ago: executing program 7 (id=1368): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 54.60244593s ago: executing program 7 (id=1369): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000300)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) 54.501647007s ago: executing program 7 (id=1373): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 54.446595531s ago: executing program 7 (id=1375): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 54.066928527s ago: executing program 7 (id=1385): mmap(&(0x7f0000758000/0x2000)=nil, 0x2000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x7, 0x9, 0x1, 0x0, 0x9, 0x6600000000, 0x4, 0x10, 0x1ff}}, 0x43) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 54.066685598s ago: executing program 36 (id=1385): mmap(&(0x7f0000758000/0x2000)=nil, 0x2000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x7, 0x9, 0x1, 0x0, 0x9, 0x6600000000, 0x4, 0x10, 0x1ff}}, 0x43) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 45.749648693s ago: executing program 5 (id=1530): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x81) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x16) lseek(r2, 0x102, 0x0) getdents(r2, 0x0, 0x416d) 45.731990764s ago: executing program 5 (id=1532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYBLOB="5ac569480d9e409fa8108234098156a91fcc7bc2fc874d0e2a37184dfc976ac073470fcb84d51a16bd2bbb48073bc933eadf5ad51fa049b44bd446b7a6484983004364b59be3ab760151906b64a2ca81a31ebe7d4dd4f10ac77c64f759fd0f3cef3bd1a18214b8a8a21804411d57"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 45.717071565s ago: executing program 5 (id=1533): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xc, @empty, 0x7}, 0x2f) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b"], 0x48}}, 0x20000084) 45.568391795s ago: executing program 5 (id=1544): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 45.480437012s ago: executing program 5 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 45.345369071s ago: executing program 6 (id=1538): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) fchdir(r2) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 45.329382942s ago: executing program 5 (id=1539): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.328833002s ago: executing program 6 (id=1540): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xe, 0x10}, {0x0, 0x2}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.301636144s ago: executing program 37 (id=1539): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.254858567s ago: executing program 6 (id=1542): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee00, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x0, 0x7f, 0x401, 0x28af, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r0 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 45.240618738s ago: executing program 6 (id=1543): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000976000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ebe000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 45.117130707s ago: executing program 6 (id=1545): socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 44.594926223s ago: executing program 6 (id=1548): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x250, 0x2f0, 0x250, 0x2f0, 0x98, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf7, 0x4, @ipv4=@loopback, 0x4e23}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback, 0xfffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x80005, @mcast1}, 0x1c) 44.589703623s ago: executing program 38 (id=1548): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x250, 0x2f0, 0x250, 0x2f0, 0x98, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'bridge_slave_0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf7, 0x4, @ipv4=@loopback, 0x4e23}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback, 0xfffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x80005, @mcast1}, 0x1c) 22.661171191s ago: executing program 8 (id=1850): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@noprefix}, {@subsystem='pids'}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000240)={[{@errors_remount}, {@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x20000000000000e}}, {@data_journal}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) open(0x0, 0x66842, 0x21) fallocate(r0, 0x8, 0x4000, 0x4000) syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) 22.075417082s ago: executing program 8 (id=1856): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 22.001217647s ago: executing program 8 (id=1859): socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21.928674432s ago: executing program 8 (id=1861): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) 21.290451596s ago: executing program 8 (id=1866): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000000)={0x0, 0x2, '\b\x00', 0xff, 0x7b}) 20.583461755s ago: executing program 8 (id=1880): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x428a4}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x8000) 20.543063818s ago: executing program 39 (id=1880): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x428a4}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x8000) 7.386542009s ago: executing program 0 (id=2029): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(0x0, 0x42, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x4000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_notify(r0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) 7.203059532s ago: executing program 0 (id=2032): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x46e, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, 0x0, 0x80042, 0x4d) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x7) socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) 6.907875742s ago: executing program 0 (id=2045): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400"], 0x20, 0x6044}, 0x6) socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.047601142s ago: executing program 0 (id=2046): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$cgroup_devices(r0, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 5.510671989s ago: executing program 0 (id=2057): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x248}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 4.91139204s ago: executing program 0 (id=2071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x20, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.840430805s ago: executing program 40 (id=2071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x20, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.394593264s ago: executing program 1 (id=2092): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) 1.319182049s ago: executing program 3 (id=2095): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48) getdents(r2, &(0x7f0000000080)=""/39, 0x27) getdents(r2, 0xfffffffffffffffd, 0x58) 1.207031237s ago: executing program 3 (id=2099): socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc2842, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) close_range(r0, 0xffffffffffffffff, 0x0) 1.176411549s ago: executing program 1 (id=2100): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r0, 0x406, r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) 1.106429004s ago: executing program 1 (id=2102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x16, &(0x7f00000000c0)={@local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'o', "26739c"}}}}}, 0x0) 1.040905319s ago: executing program 3 (id=2104): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x2, r1, 0x0, 0x80000}) 1.0122035s ago: executing program 4 (id=2105): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x3e269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 976.196782ms ago: executing program 4 (id=2106): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000c40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 832.532863ms ago: executing program 4 (id=2107): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) rename(0x0, &(0x7f00000001c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) sendfile(r0, r0, 0x0, 0xe3aa6ea) 806.935005ms ago: executing program 9 (id=2108): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 803.222865ms ago: executing program 1 (id=2109): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 778.739036ms ago: executing program 1 (id=2110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 564.064442ms ago: executing program 4 (id=2111): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r0, 0x406, r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) 562.123911ms ago: executing program 1 (id=2120): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x4) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 534.176003ms ago: executing program 9 (id=2112): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0xd0, 0x0, 0xd0, 0x0, 0x270, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x6}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0xff], 'bridge0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x33, 0x1, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 473.837978ms ago: executing program 4 (id=2113): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) process_madvise(r1, 0x0, 0x0, 0x14, 0x0) 437.080041ms ago: executing program 9 (id=2114): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl1\x00', 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8804, 0x0, 0x0) 427.613391ms ago: executing program 4 (id=2115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x48045) 292.02246ms ago: executing program 9 (id=2116): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0x0) 266.785472ms ago: executing program 9 (id=2117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x40, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 218.017415ms ago: executing program 9 (id=2118): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r0 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8000200f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x25f1a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x65c, 0x0, 0x0) 171.474548ms ago: executing program 3 (id=2119): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 65.000236ms ago: executing program 3 (id=2121): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 0s ago: executing program 3 (id=2122): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) rename(0x0, &(0x7f00000001c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) sendfile(r0, r0, 0x0, 0xe3aa6ea) kernel console output (not intermixed with test programs): this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.730308][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.780503][ T5952] netlink: 'syz.5.787': attribute type 10 has an invalid length. [ 67.809755][ T5952] team0: Device xfrm0 is of different type [ 67.844815][ T5816] hsr_slave_0: entered promiscuous mode [ 67.856299][ T5816] hsr_slave_1: entered promiscuous mode [ 67.873132][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 67.889795][ T5816] Cannot create hsr debugfs directory [ 68.000025][ T5977] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 68.053897][ T5977] bond1: entered promiscuous mode [ 68.059564][ T5977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.080664][ T5977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.087877][ T5977] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 68.098463][ T5977] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 68.120869][ T5977] bond1: (slave vcan1): making interface the new active one [ 68.128262][ T5977] vcan1: entered promiscuous mode [ 68.147143][ T5977] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 68.265108][ T5816] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 68.271729][ T6007] set_capacity_and_notify: 4 callbacks suppressed [ 68.271747][ T6007] loop1: detected capacity change from 0 to 1024 [ 68.290011][ T5816] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 68.323964][ T5816] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 68.337210][ T6016] loop6: detected capacity change from 0 to 512 [ 68.355855][ T5816] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 68.370109][ T6007] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 68.384058][ T6016] EXT4-fs: Ignoring removed oldalloc option [ 68.408803][ T6016] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.807: invalid indirect mapped block 4294967295 (level 1) [ 68.418483][ T6007] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.433695][ T6016] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.433848][ T6016] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.807: invalid indirect mapped block 4294967295 (level 1) [ 68.443107][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 68.443126][ C0] EXT4-fs (loop6): initial error at time 1775850234: ext4_free_branches:1023: inode 11 [ 68.443156][ C0] EXT4-fs (loop6): last error at time 1775850234: ext4_free_branches:1023: inode 11 [ 68.446151][ T6007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.460261][ T6016] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.522118][ T6016] EXT4-fs (loop6): 2 truncates cleaned up [ 68.539071][ T6016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.661782][ T6006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.662095][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.694454][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.721715][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.728823][ T4700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.729719][ T3996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.746518][ T4700] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.753638][ T4700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.945992][ T6010] syz.5.805 (6010) used greatest stack depth: 9336 bytes left [ 68.979718][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.216018][ T5816] veth0_vlan: entered promiscuous mode [ 69.264798][ T5816] veth1_vlan: entered promiscuous mode [ 69.305545][ T5816] veth0_macvtap: entered promiscuous mode [ 69.313332][ T5816] veth1_macvtap: entered promiscuous mode [ 69.324208][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.388535][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.421705][ T4700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.445588][ T6119] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 69.449281][ T4700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.513196][ T4700] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.535355][ T4700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.809282][ T23] IPVS: starting estimator thread 0... [ 69.838229][ T6154] syzkaller1: entered promiscuous mode [ 69.852704][ T6154] syzkaller1: entered allmulticast mode [ 69.909125][ T6152] IPVS: using max 2304 ests per chain, 115200 per kthread [ 69.951182][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 69.951199][ T28] audit: type=1400 audit(1775850235.921:1186): avc: denied { map } for pid=6161 comm="syz.7.845" path="socket:[14511]" dev="sockfs" ino=14511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 69.994136][ T28] audit: type=1400 audit(1775850235.961:1187): avc: denied { mount } for pid=6164 comm="syz.1.846" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 70.147099][ T28] audit: type=1400 audit(1775850236.111:1188): avc: denied { accept } for pid=6186 comm="syz.7.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.195711][ T28] audit: type=1400 audit(1775850236.161:1189): avc: denied { setopt } for pid=6186 comm="syz.7.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.340655][ T28] audit: type=1326 audit(1775850236.311:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 70.367173][ T28] audit: type=1326 audit(1775850236.311:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 70.397357][ T28] audit: type=1326 audit(1775850236.311:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 70.421644][ T28] audit: type=1326 audit(1775850236.311:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 70.446397][ T28] audit: type=1326 audit(1775850236.311:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 70.473440][ T28] audit: type=1326 audit(1775850236.311:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 70.741783][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.864'. [ 71.155625][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.7.874'. [ 71.183953][ T6240] sctp: [Deprecated]: syz.7.875 (pid 6240) Use of int in max_burst socket option deprecated. [ 71.183953][ T6240] Use struct sctp_assoc_value instead [ 71.434567][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.882'. [ 71.751459][ T6261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6261 comm=syz.1.884 [ 71.764612][ T6261] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 71.784182][ T6261] bond2: (slave bridge1): making interface the new active one [ 71.792178][ T6261] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 71.818536][ T6264] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 71.833317][ T6264] bond3: entered promiscuous mode [ 71.838650][ T6264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.857011][ T6264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.864274][ T6264] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 71.874462][ T6264] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 71.885948][ T6264] bond3: (slave gre1): making interface the new active one [ 71.893280][ T6264] gre1: entered promiscuous mode [ 71.899964][ T6264] bond3: (slave gre1): Enslaving as an active interface with an up link [ 72.554703][ T6130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.618285][ T6306] loop2: detected capacity change from 0 to 512 [ 72.641845][ T6306] EXT4-fs: Ignoring removed orlov option [ 72.647545][ T6306] EXT4-fs: test_dummy_encryption option not supported [ 72.932974][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 73.155504][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.927'. [ 73.165257][ T6358] netlink: 48 bytes leftover after parsing attributes in process `syz.5.927'. [ 73.519783][ T6379] loop7: detected capacity change from 0 to 512 [ 73.544903][ T6379] EXT4-fs warning (device loop7): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.559965][ T6379] EXT4-fs (loop7): mount failed [ 73.638779][ T6387] loop7: detected capacity change from 0 to 1024 [ 73.648217][ T6387] EXT4-fs: Ignoring removed bh option [ 73.671619][ T6387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.691497][ T6387] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.743090][ T5816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.995000][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.945'. [ 74.093034][ T6407] loop7: detected capacity change from 0 to 512 [ 74.103251][ T6407] EXT4-fs: old and new quota format mixing [ 74.285978][ T6415] netlink: 'syz.7.949': attribute type 1 has an invalid length. [ 74.315161][ T6415] bond1: entered promiscuous mode [ 74.320627][ T6415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.342673][ T6415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.354286][ T6415] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 74.369102][ T6415] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 74.394164][ T6415] bond1: (slave gre1): making interface the new active one [ 74.415803][ T6415] gre1: entered promiscuous mode [ 74.441144][ T6415] bond1: (slave gre1): Enslaving as an active interface with an up link [ 74.530130][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.548849][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.613872][ T6432] loop5: detected capacity change from 0 to 512 [ 74.623050][ T6432] ext4: Unknown parameter 'bsddf"noblock_validity' [ 74.640648][ T6432] netlink: 28 bytes leftover after parsing attributes in process `syz.5.956'. [ 74.680749][ T6435] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 74.793827][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.960'. [ 74.819760][ T6441] 8021q: adding VLAN 0 to HW filter on device team1 [ 75.004526][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 75.004572][ T28] audit: type=1400 audit(1775850240.971:1272): avc: denied { create } for pid=6450 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.106842][ T28] audit: type=1400 audit(1775850240.971:1273): avc: denied { getopt } for pid=6450 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.130040][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.970'. [ 75.262667][ T6457] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 75.285564][ T6457] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 75.303932][ T6457] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 75.489699][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.508659][ T6459] bridge_slave_1 (unregistering): left allmulticast mode [ 75.519143][ T6459] bridge_slave_1 (unregistering): left promiscuous mode [ 75.526222][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.561801][ T6471] netlink: 'syz.7.975': attribute type 7 has an invalid length. [ 75.577856][ T6471] netlink: 'syz.7.975': attribute type 8 has an invalid length. [ 75.719924][ T6486] loop2: detected capacity change from 0 to 4096 [ 75.740080][ T6486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.849257][ T28] audit: type=1400 audit(1775850241.811:1274): avc: denied { execute } for pid=6485 comm="syz.2.982" path="/186/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.919601][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.195327][ T4700] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.272327][ T4700] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.296160][ T28] audit: type=1400 audit(1775850242.251:1275): avc: denied { create } for pid=6501 comm="syz.6.987" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.368461][ T4700] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.442660][ T4700] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.583013][ T4700] bridge_slave_1: left allmulticast mode [ 76.594369][ T4700] bridge_slave_1: left promiscuous mode [ 76.606416][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.629538][ T4700] bridge_slave_0: left allmulticast mode [ 76.638508][ T4700] bridge_slave_0: left promiscuous mode [ 76.645090][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.738386][ T4700] bond1 (unregistering): (slave gre1): Releasing backup interface [ 76.754185][ T4700] gre1 (unregistering): left promiscuous mode [ 76.815578][ T4700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.834913][ T4700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.859927][ T4700] bond0 (unregistering): Released all slaves [ 76.875447][ T4700] bond1 (unregistering): Released all slaves [ 76.955978][ T4700] hsr_slave_0: left promiscuous mode [ 76.971322][ T4700] hsr_slave_1: left promiscuous mode [ 76.984491][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.000126][ T4700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.016178][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.032967][ T4700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.057489][ T4700] veth1_macvtap: left promiscuous mode [ 77.079062][ T28] audit: type=1400 audit(1775850499.031:1276): avc: denied { unlink } for pid=3996 comm="syz-executor" name=01 dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.114118][ T4700] veth0_macvtap: left promiscuous mode [ 77.129163][ T4700] veth1_vlan: left promiscuous mode [ 77.134450][ T4700] veth0_vlan: left promiscuous mode [ 77.151489][ T28] audit: type=1400 audit(1775850499.091:1277): avc: denied { listen } for pid=6533 comm="syz.6.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.173784][ T28] audit: type=1400 audit(1775850499.091:1278): avc: denied { accept } for pid=6533 comm="syz.6.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.315256][ T4700] team0 (unregistering): Port device team_slave_1 removed [ 77.333558][ T4700] team0 (unregistering): Port device team_slave_0 removed [ 77.465278][ T28] audit: type=1326 audit(1775850499.421:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc0b6c819 code=0x7ffc0000 [ 77.501950][ T6508] chnl_net:caif_netlink_parms(): no params data found [ 77.512660][ T28] audit: type=1326 audit(1775850499.461:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc0b6c819 code=0x7ffc0000 [ 77.548744][ T28] audit: type=1326 audit(1775850499.461:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc0b6c819 code=0x7ffc0000 [ 77.588648][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.596086][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.603884][ T6508] bridge_slave_0: entered allmulticast mode [ 77.610685][ T6508] bridge_slave_0: entered promiscuous mode [ 77.617496][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.624855][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.634051][ T6508] bridge_slave_1: entered allmulticast mode [ 77.646159][ T6508] bridge_slave_1: entered promiscuous mode [ 77.680057][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.690865][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.711886][ T6508] team0: Port device team_slave_0 added [ 77.721351][ T6508] team0: Port device team_slave_1 added [ 77.750968][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.755088][ T4700] IPVS: stop unused estimator thread 0... [ 77.758004][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.800129][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.821692][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.838349][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.864677][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.900661][ T6508] hsr_slave_0: entered promiscuous mode [ 77.906878][ T6508] hsr_slave_1: entered promiscuous mode [ 77.952206][ T6508] debugfs: 'hsr0' already exists in 'hsr' [ 77.959443][ T6481] __nla_validate_parse: 2 callbacks suppressed [ 77.959460][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 77.969028][ T6508] Cannot create hsr debugfs directory [ 78.015947][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 78.363326][ T6508] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 78.382198][ T6508] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 78.401134][ T6508] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 78.412845][ T6508] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 78.546673][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.579802][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.619532][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.626795][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.654765][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.661955][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.872875][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.030510][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1007'. [ 79.068530][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1007'. [ 79.085003][ T6652] loop5: detected capacity change from 0 to 512 [ 79.100634][ T6652] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 79.118900][ T6652] EXT4-fs (loop5): orphan cleanup on readonly fs [ 79.125496][ T6652] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1008: Invalid inode bitmap blk 4 in block_group 0 [ 79.138898][ T6652] loop5: lost filesystem error report for type 5 error -117 [ 79.138981][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 79.152778][ C0] EXT4-fs (loop5): initial error at time 1775850501: ext4_read_inode_bitmap:139 [ 79.161904][ C0] EXT4-fs (loop5): last error at time 1775850501: ext4_read_inode_bitmap:139 [ 79.189479][ T6652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.261214][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.261974][ T6508] veth0_vlan: entered promiscuous mode [ 79.313742][ T6508] veth1_vlan: entered promiscuous mode [ 79.319640][ T6680] loop5: detected capacity change from 0 to 512 [ 79.361420][ T6680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.382960][ T6680] EXT4-fs (loop5): shut down requested (0) [ 79.395792][ T6508] veth0_macvtap: entered promiscuous mode [ 79.407052][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.407759][ T6508] veth1_macvtap: entered promiscuous mode [ 79.433002][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.470578][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.482492][ T309] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.498404][ T309] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.524571][ T6706] loop6: detected capacity change from 0 to 1024 [ 79.530402][ T309] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.547356][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.579390][ T6706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.657420][ T309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.685040][ T309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.713774][ T3996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.754930][ T309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.785841][ T309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.813073][ T309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.823752][ T309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.872558][ T309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.883591][ T309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.990334][ T309] bridge_slave_1: left allmulticast mode [ 80.000973][ T309] bridge_slave_1: left promiscuous mode [ 80.006674][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.025481][ T309] bridge_slave_0: left allmulticast mode [ 80.042232][ T309] bridge_slave_0: left promiscuous mode [ 80.048641][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.161267][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.171362][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.181494][ T309] bond0 (unregistering): Released all slaves [ 80.189730][ T309] bond1 (unregistering): (slave lo): Releasing backup interface [ 80.197775][ T309] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 80.210706][ T309] bond1 (unregistering): Released all slaves [ 80.220774][ T309] bond2 (unregistering): Released all slaves [ 80.265265][ T6763] xt_hashlimit: size too large, truncated to 1048576 [ 80.312417][ T309] hsr_slave_0: left promiscuous mode [ 80.319416][ T6773] loop5: detected capacity change from 0 to 128 [ 80.330972][ T309] hsr_slave_1: left promiscuous mode [ 80.336737][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.351620][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.359715][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.367298][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.369618][ T6773] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.389864][ T28] kauditd_printk_skb: 424 callbacks suppressed [ 80.389880][ T28] audit: type=1400 audit(1775850502.351:1706): avc: denied { connect } for pid=6761 comm="syz.1.1030" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.407686][ T309] veth1_macvtap: left promiscuous mode [ 80.438263][ T309] veth0_macvtap: left promiscuous mode [ 80.443946][ T309] veth1_vlan: left promiscuous mode [ 80.449668][ T309] veth0_vlan: left promiscuous mode [ 80.548374][ T4700] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.557690][ T309] team0 (unregistering): Port device team_slave_1 removed [ 80.582169][ T309] team0 (unregistering): Port device team_slave_0 removed [ 80.687914][ T6719] chnl_net:caif_netlink_parms(): no params data found [ 80.807893][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.815813][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.823491][ T6719] bridge_slave_0: entered allmulticast mode [ 80.830547][ T6719] bridge_slave_0: entered promiscuous mode [ 80.841214][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.852338][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.866543][ T6719] bridge_slave_1: entered allmulticast mode [ 80.873358][ T6719] bridge_slave_1: entered promiscuous mode [ 80.887305][ T6813] loop6: detected capacity change from 0 to 1024 [ 80.894008][ T28] audit: type=1400 audit(1775850502.851:1707): avc: denied { mount } for pid=6806 comm="syz.5.1038" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 80.902234][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.932864][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.970199][ T6813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.973476][ T28] audit: type=1400 audit(1775850502.851:1708): avc: denied { search } for pid=6806 comm="syz.5.1038" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.986230][ T6719] team0: Port device team_slave_0 added [ 81.004230][ T28] audit: type=1400 audit(1775850502.881:1709): avc: denied { search } for pid=6806 comm="syz.5.1038" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 81.032777][ T28] audit: type=1400 audit(1775850502.881:1710): avc: denied { read open } for pid=6806 comm="syz.5.1038" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 81.056133][ T6813] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.081817][ T6719] team0: Port device team_slave_1 added [ 81.156851][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1043'. [ 81.171937][ T3996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.200366][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.235855][ T28] audit: type=1400 audit(1775850503.191:1711): avc: denied { write } for pid=6836 comm="syz.6.1044" path="socket:[16561]" dev="sockfs" ino=16561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.244267][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.260932][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1044'. [ 81.292547][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.393691][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.407107][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.434289][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.485466][ T6719] hsr_slave_0: entered promiscuous mode [ 81.507690][ T6719] hsr_slave_1: entered promiscuous mode [ 81.509030][ T28] audit: type=1400 audit(1775850503.461:1712): avc: denied { watch watch_reads } for pid=6851 comm="syz.6.1051" path="/162/file1" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.547355][ T6719] debugfs: 'hsr0' already exists in 'hsr' [ 81.570881][ T6719] Cannot create hsr debugfs directory [ 81.765982][ T6862] loop5: detected capacity change from 0 to 8192 [ 82.044560][ T28] audit: type=1400 audit(1775850504.001:1713): avc: denied { read } for pid=6882 comm="syz.6.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.144526][ T6719] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 82.167529][ T6719] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 82.196670][ T6719] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 82.235284][ T6719] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 82.353448][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1064'. [ 82.379331][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.424205][ T6719] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.445794][ T2354] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.452915][ T2354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.477205][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.484339][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.566654][ T6719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.619071][ T6719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.667288][ T6930] netlink: 'syz.7.1072': attribute type 1 has an invalid length. [ 82.710081][ T6930] gretap1: entered allmulticast mode [ 82.845869][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.850855][ T6936] netlink: 'syz.6.1071': attribute type 4 has an invalid length. [ 82.919270][ T6936] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1071'. [ 83.162945][ T6719] veth0_vlan: entered promiscuous mode [ 83.176100][ T6719] veth1_vlan: entered promiscuous mode [ 83.205171][ T6719] veth0_macvtap: entered promiscuous mode [ 83.216358][ T6719] veth1_macvtap: entered promiscuous mode [ 83.238903][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.250975][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.274481][ T2354] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.297092][ T2354] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.389301][ T2354] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.400862][ T2354] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.423408][ T28] audit: type=1400 audit(1775850505.381:1714): avc: denied { mount } for pid=6719 comm="syz-executor" name="/" dev="gadgetfs" ino=3802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.486833][ T28] audit: type=1400 audit(1775850505.441:1715): avc: denied { write } for pid=7009 comm="syz.8.1022" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.635462][ T7023] syz_tun: entered allmulticast mode [ 83.642049][ T7022] syz_tun: left allmulticast mode [ 84.055322][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1091'. [ 84.555605][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 84.568604][ T7098] erspan0: entered promiscuous mode [ 84.574320][ T7098] macvtap1: entered promiscuous mode [ 84.582784][ T7098] macvtap1: entered allmulticast mode [ 84.588385][ T7098] erspan0: entered allmulticast mode [ 84.607727][ T7098] macvtap1: left promiscuous mode [ 84.613480][ T7098] macvtap1: left allmulticast mode [ 84.618677][ T7098] erspan0: left allmulticast mode [ 84.707119][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 84.782055][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 84.792676][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 84.987552][ T7150] sctp: [Deprecated]: syz.1.1133 (pid 7150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.987552][ T7150] Use struct sctp_sack_info instead [ 85.097183][ T7160] netlink: 'syz.8.1134': attribute type 1 has an invalid length. [ 85.292383][ T7160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.439779][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1143'. [ 85.473376][ T50] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.483460][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1143'. [ 85.493105][ T50] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.520879][ T50] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.540948][ T50] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.048365][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 86.048384][ T28] audit: type=1400 audit(1775850508.001:1758): avc: denied { read } for pid=7291 comm="syz.7.1154" path="socket:[16323]" dev="sockfs" ino=16323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.327686][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1169'. [ 86.338337][ T7323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7323 comm=syz.8.1168 [ 86.364505][ T7323] netlink: 1195 bytes leftover after parsing attributes in process `syz.8.1168'. [ 86.382365][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1169'. [ 86.391926][ T7278] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.400514][ T7278] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.412157][ T7278] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.421897][ T7278] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.471826][ T7287] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.474500][ T28] audit: type=1400 audit(1775850508.431:1759): avc: denied { ioctl } for pid=7330 comm="syz.5.1173" path="socket:[18466]" dev="sockfs" ino=18466 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.628201][ T28] audit: type=1400 audit(1775850508.581:1760): avc: denied { write } for pid=7337 comm="syz.6.1175" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.188628][ T7357] loop6: detected capacity change from 0 to 1024 [ 87.195761][ T7357] EXT4-fs: Ignoring removed bh option [ 87.236209][ T7357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.260711][ T7315] syz.1.1165 (7315) used greatest stack depth: 5880 bytes left [ 87.303049][ T3996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.313915][ T7364] cgroup: noprefix used incorrectly [ 87.350107][ T7364] loop7: detected capacity change from 0 to 512 [ 87.391901][ T7364] ext4: Bad value for 'max_batch_time' [ 87.448582][ T7364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.460146][ T7364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.240034][ T28] audit: type=1400 audit(1775850510.201:1761): avc: denied { write } for pid=7411 comm="syz.8.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.293749][ T7418] netlink: 'syz.8.1208': attribute type 1 has an invalid length. [ 88.552201][ T4641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.583586][ T28] audit: type=1400 audit(1775850510.541:1762): avc: denied { read append } for pid=7432 comm="syz.5.1216" name="file0" dev="tmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.639492][ T7436] ref_ctr_offset mismatch. inode: 0x5e6 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 89.108365][ T7465] loop6: detected capacity change from 0 to 128 [ 89.150604][ T7465] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.189351][ T7465] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.276252][ T28] audit: type=1326 audit(1775850511.231:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.8.1223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64dafec819 code=0x0 [ 89.322919][ T28] audit: type=1400 audit(1775850511.281:1764): avc: denied { accept } for pid=7471 comm="syz.6.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.470097][ T7481] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1236'. [ 89.489445][ T7479] netlink: 'syz.1.1235': attribute type 13 has an invalid length. [ 89.704795][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'. [ 89.775577][ T7502] loop8: detected capacity change from 0 to 512 [ 89.802733][ T7502] EXT4-fs (loop8): 1 truncate cleaned up [ 89.809477][ T7502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.988112][ T7512] EXT4-fs (loop8): shut down requested (2) [ 90.101297][ T6719] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.366184][ T7530] loop6: detected capacity change from 0 to 4096 [ 90.422249][ T7530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.510138][ T3996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.632747][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1259'. [ 90.643265][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.662915][ T7536] bridge_slave_1 (unregistering): left allmulticast mode [ 90.671239][ T7536] bridge_slave_1 (unregistering): left promiscuous mode [ 90.678423][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.894315][ T7555] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1267'. [ 90.918938][ T7557] loop7: detected capacity change from 0 to 512 [ 90.921509][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'. [ 90.963504][ T7557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.980026][ T7557] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.096852][ T6508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.133618][ T28] audit: type=1326 audit(1775850513.071:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 91.163009][ T28] audit: type=1326 audit(1775850513.071:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 91.186873][ T28] audit: type=1326 audit(1775850513.071:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 91.218413][ T28] audit: type=1326 audit(1775850513.071:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33d33c819 code=0x7ffc0000 [ 91.326098][ T28] audit: type=1326 audit(1775850513.281:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dafec819 code=0x7ffc0000 [ 91.385924][ T28] audit: type=1326 audit(1775850513.281:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dafec819 code=0x7ffc0000 [ 91.416539][ T28] audit: type=1326 audit(1775850513.281:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dafec819 code=0x7ffc0000 [ 91.441807][ T28] audit: type=1326 audit(1775850513.281:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dafec819 code=0x7ffc0000 [ 91.465960][ T28] audit: type=1326 audit(1775850513.281:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64dafec819 code=0x7ffc0000 [ 91.492330][ T28] audit: type=1326 audit(1775850513.281:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7584 comm="syz.8.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dafec819 code=0x7ffc0000 [ 91.888758][ T7597] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.909564][ T7597] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 91.926954][ T7597] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 92.106709][ T7615] loop7: detected capacity change from 0 to 512 [ 92.192779][ T7615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.358381][ T7615] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.479252][ T7615] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.523019][ T7615] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 92.567476][ T7615] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.679746][ T7634] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.696523][ T7640] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.729614][ T7634] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 92.729741][ T7640] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 92.755982][ T7615] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 92.756923][ T7634] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.765942][ T7615] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.802308][ T7640] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.831394][ T7640] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.852550][ T7615] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 92.863451][ T7640] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 92.884284][ T7634] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1292: corrupted xattr block 33: invalid ea_ino [ 92.902623][ T7634] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 92.978439][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881039e1a00: rx timeout, send abort [ 92.992138][ T6508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.421158][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1314'. [ 93.431530][ T7675] netlink: 'syz.6.1314': attribute type 7 has an invalid length. [ 93.439963][ T7675] netlink: 'syz.6.1314': attribute type 8 has an invalid length. [ 93.448094][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1314'. [ 93.478482][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881039e1400: rx timeout, send abort [ 93.486785][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881039e1a00: abort rx timeout. Force session deactivation [ 93.577235][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 93.726291][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'. [ 93.822057][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1330'. [ 93.856521][ T7710] team1: entered promiscuous mode [ 93.869985][ T7710] team1: entered allmulticast mode [ 93.872406][ T7716] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1333'. [ 93.875403][ T7710] 8021q: adding VLAN 0 to HW filter on device team1 [ 93.986751][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881039e1400: abort rx timeout. Force session deactivation [ 94.054243][ T7733] loop7: detected capacity change from 0 to 128 [ 94.061539][ T7733] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.131181][ T30] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.209563][ T7740] loop7: detected capacity change from 0 to 1024 [ 94.221029][ T7740] EXT4-fs: Ignoring removed bh option [ 94.246542][ T7740] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.278173][ T6508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.340609][ T7747] syzkaller0: entered promiscuous mode [ 94.346345][ T7747] syzkaller0: entered allmulticast mode [ 94.431555][ T7749] xt_hashlimit: size too large, truncated to 1048576 [ 94.793890][ T7773] netlink: 'syz.7.1350': attribute type 3 has an invalid length. [ 94.827019][ T7773] netlink: 'syz.7.1350': attribute type 1 has an invalid length. [ 94.862185][ T7773] netlink: 198116 bytes leftover after parsing attributes in process `syz.7.1350'. [ 95.738356][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1378'. [ 95.843114][ T30] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.858160][ T30] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.923931][ T30] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.938994][ T30] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.949545][ T7897] loop8: detected capacity change from 0 to 4096 [ 95.963078][ T7897] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 95.971548][ T7897] System zones: 0-5 [ 95.976173][ T7897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.028036][ T30] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.038428][ T30] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.064476][ T6719] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.082701][ T30] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.097383][ T30] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.197708][ T7913] io-wq is not configured for unbound workers [ 96.234470][ T7916] netlink: 'syz.8.1391': attribute type 4 has an invalid length. [ 96.249176][ T7916] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1391'. [ 96.261147][ T30] bridge_slave_1: left allmulticast mode [ 96.268074][ T30] bridge_slave_1: left promiscuous mode [ 96.277476][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.285886][ T30] bridge_slave_0: left allmulticast mode [ 96.291803][ T30] bridge_slave_0: left promiscuous mode [ 96.297563][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.411663][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.421841][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.431936][ T30] bond0 (unregistering): Released all slaves [ 96.442761][ T7916] .`: renamed from bond0 (while UP) [ 96.452777][ T7898] chnl_net:caif_netlink_parms(): no params data found [ 96.483852][ T30] hsr_slave_0: left promiscuous mode [ 96.489871][ T30] hsr_slave_1: left promiscuous mode [ 96.495509][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.503318][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.534293][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.543381][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.588446][ T30] veth1_macvtap: left promiscuous mode [ 96.595016][ T30] veth0_macvtap: left promiscuous mode [ 96.601462][ T30] veth1_vlan: left promiscuous mode [ 96.609135][ T30] veth0_vlan: left promiscuous mode [ 96.709911][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 96.709929][ T28] audit: type=1326 audit(1775850518.671:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.740058][ T28] audit: type=1326 audit(1775850518.711:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.785326][ T28] audit: type=1326 audit(1775850518.711:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.810799][ T28] audit: type=1326 audit(1775850518.711:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.849877][ T28] audit: type=1326 audit(1775850518.711:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.877802][ T28] audit: type=1326 audit(1775850518.711:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.902339][ T30] team0 (unregistering): Port device team_slave_1 removed [ 96.902484][ T28] audit: type=1326 audit(1775850518.711:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.936861][ T28] audit: type=1326 audit(1775850518.711:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.936892][ T30] team0 (unregistering): Port device team_slave_0 removed [ 96.969211][ T28] audit: type=1326 audit(1775850518.711:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 96.993229][ T28] audit: type=1326 audit(1775850518.711:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.5.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0a7957c819 code=0x7ffc0000 [ 97.041815][ T7953] veth0: entered promiscuous mode [ 97.063807][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.071258][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.078540][ T7898] bridge_slave_0: entered allmulticast mode [ 97.085381][ T7898] bridge_slave_0: entered promiscuous mode [ 97.092645][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.099936][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.107169][ T7898] bridge_slave_1: entered allmulticast mode [ 97.113789][ T7898] bridge_slave_1: entered promiscuous mode [ 97.131953][ T7898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.142767][ T7898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.164770][ T7898] team0: Port device team_slave_0 added [ 97.171903][ T7898] team0: Port device team_slave_1 added [ 97.189094][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.196250][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.228239][ T7898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.276374][ T7952] veth0: left promiscuous mode [ 97.282020][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.308456][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.378870][ T7898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.420635][ T7898] hsr_slave_0: entered promiscuous mode [ 97.433201][ T7898] hsr_slave_1: entered promiscuous mode [ 97.455257][ T7898] debugfs: 'hsr0' already exists in 'hsr' [ 97.481172][ T7898] Cannot create hsr debugfs directory [ 97.816479][ T7898] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 97.845809][ T7898] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 97.874412][ T7898] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 97.909213][ T7898] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 98.098537][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1414'. [ 98.400903][ T7898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.425151][ T7898] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.443821][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.450928][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.520767][ T7898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.539022][ T7898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.654956][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.662140][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.745629][ T7898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.787246][ T8060] pimreg: entered allmulticast mode [ 98.829247][ T8060] pimreg: left allmulticast mode [ 99.012103][ T7898] veth0_vlan: entered promiscuous mode [ 99.021768][ T7898] veth1_vlan: entered promiscuous mode [ 99.064280][ T7898] veth0_macvtap: entered promiscuous mode [ 99.088316][ T7898] veth1_macvtap: entered promiscuous mode [ 99.099920][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.113379][ T7898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.124613][ T30] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.133685][ T30] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.150467][ T30] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.168915][ T30] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.329710][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1436'. [ 99.570037][ T8127] loop8: detected capacity change from 0 to 8192 [ 99.688581][ T6719] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 99.706376][ T6719] FAT-fs (loop8): Filesystem has been set read-only [ 99.765287][ T8129] loop8: detected capacity change from 0 to 512 [ 99.794449][ T8129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.839275][ T8129] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.905460][ T6719] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.916681][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1446'. [ 99.930119][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1446'. [ 100.990461][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1459'. [ 101.123232][ T8178] netlink: 'syz.5.1460': attribute type 1 has an invalid length. [ 101.307463][ T8178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.444262][ T8183] loop5: detected capacity change from 0 to 4096 [ 101.496979][ T8183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.569235][ T8183] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 101.579810][ T8186] loop9: detected capacity change from 0 to 1024 [ 101.635655][ T8186] EXT4-fs: Ignoring removed nobh option [ 101.644429][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.659717][ T8186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.703910][ T8186] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.726720][ T28] kauditd_printk_skb: 307 callbacks suppressed [ 101.726737][ T28] audit: type=1326 audit(1775850523.681:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43889bd04e code=0x7ffc0000 [ 101.779035][ T28] audit: type=1326 audit(1775850523.711:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43889bd04e code=0x7ffc0000 [ 101.802993][ T28] audit: type=1326 audit(1775850523.711:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43889fc819 code=0x7ffc0000 [ 101.826802][ T28] audit: type=1326 audit(1775850523.721:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43889fc819 code=0x7ffc0000 [ 101.850477][ T28] audit: type=1326 audit(1775850523.721:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43889fc819 code=0x7ffc0000 [ 101.874224][ T28] audit: type=1326 audit(1775850523.721:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f43889fc819 code=0x7ffc0000 [ 101.898174][ T28] audit: type=1326 audit(1775850523.721:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43889fc819 code=0x7ffc0000 [ 101.929839][ T28] audit: type=1326 audit(1775850523.721:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43889fc819 code=0x7ffc0000 [ 101.957757][ T28] audit: type=1326 audit(1775850523.721:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43889fc819 code=0x7ffc0000 [ 102.008617][ T28] audit: type=1326 audit(1775850523.721:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.9.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43889fc819 code=0x7ffc0000 [ 102.046248][ T7898] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.302233][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1477'. [ 102.322082][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.588863][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.624573][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.624851][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.634274][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.649347][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.696307][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.729288][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.737806][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.757161][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.766163][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.774885][ T8233] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 102.906230][ T8239] syzkaller1: entered promiscuous mode [ 102.923745][ T8239] syzkaller1: entered allmulticast mode [ 103.058597][ T8246] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.078668][ T8246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.086026][ T8246] IPv6: NLM_F_CREATE should be set when creating new route [ 103.124608][ T8246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.131903][ T8246] IPv6: NLM_F_CREATE should be set when creating new route [ 103.217115][ T8252] loop8: detected capacity change from 0 to 1024 [ 103.249408][ T8252] EXT4-fs: inline encryption not supported [ 103.267084][ T8252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.301305][ T8252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 103.323670][ T8252] System zones: 0-1, 3-36 [ 103.338653][ T8252] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.380309][ T8252] EXT4-fs (loop8): shut down requested (0) [ 103.434795][ T8261] only policy match revision 0 supported [ 103.434844][ T8261] unable to load match [ 103.449649][ T6719] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.565584][ T8278] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 103.586835][ T8278] netlink: 'syz.1.1500': attribute type 4 has an invalid length. [ 103.598517][ T8278] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1500'. [ 103.644843][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 103.654792][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 103.766117][ T8302] netlink: 'syz.1.1508': attribute type 39 has an invalid length. [ 103.835354][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1514'. [ 103.893627][ T8316] SELinux: failed to load policy [ 104.026925][ T8318] loop5: detected capacity change from 0 to 128 [ 104.168251][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1527'. [ 104.246612][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1533'. [ 104.391406][ T8355] loop5: detected capacity change from 0 to 2048 [ 104.396540][ T8357] netlink: 'syz.6.1534': attribute type 1 has an invalid length. [ 104.439131][ T8355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.466471][ T3679] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 104.487719][ T8357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.535385][ T7641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.580362][ T7278] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.630945][ T7278] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.660160][ T7278] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.713989][ T8379] loop6: detected capacity change from 0 to 512 [ 104.720820][ T7278] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.740484][ T8379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.753486][ T8379] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.805857][ T7278] bridge_slave_1: left allmulticast mode [ 104.811298][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.812684][ T7278] bridge_slave_1: left promiscuous mode [ 104.829392][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.832557][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.848846][ T7278] bridge_slave_0: left allmulticast mode [ 104.854382][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.854692][ T7278] bridge_slave_0: left promiscuous mode [ 104.866658][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.882803][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.883602][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.902142][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.916642][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.939387][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.966267][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 104.978227][ T3996] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 105.011165][ T7278] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 105.027338][ T7278] bridge1 (unregistering): left promiscuous mode [ 105.041486][ T4537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.076145][ T7278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.088532][ T7278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.097870][ T7278] bond0 (unregistering): Released all slaves [ 105.106214][ T7278] bond1 (unregistering): (slave bond2): Releasing backup interface [ 105.114632][ T7278] bond1 (unregistering): Released all slaves [ 105.123798][ T7278] bond2 (unregistering): Released all slaves [ 105.132636][ T7278] bond3 (unregistering): Released all slaves [ 105.141601][ T7278] bond4 (unregistering): Released all slaves [ 105.185881][ T7278] hsr_slave_0: left promiscuous mode [ 105.191575][ T7278] hsr_slave_1: left promiscuous mode [ 105.197263][ T7278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.205919][ T7278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.260999][ T7278] team0 (unregistering): Port device team_slave_1 removed [ 105.271821][ T7278] team0 (unregistering): Port device team_slave_0 removed [ 105.425668][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 105.531424][ T7278] IPVS: stop unused estimator thread 0... [ 105.537355][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.568734][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.602022][ T8375] bridge_slave_0: entered allmulticast mode [ 105.633754][ T8375] bridge_slave_0: entered promiscuous mode [ 105.658272][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.697312][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.709144][ T8375] bridge_slave_1: entered allmulticast mode [ 105.728857][ T8375] bridge_slave_1: entered promiscuous mode [ 105.785366][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.811285][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.860496][ T8375] team0: Port device team_slave_0 added [ 105.886725][ T8375] team0: Port device team_slave_1 added [ 105.933507][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.949424][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.017420][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.069608][ T7278] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.131825][ T7278] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.158322][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.174177][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.203809][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.234567][ T7278] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.251466][ T7278] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.318063][ T7278] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.336058][ T7278] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.357289][ T8375] hsr_slave_0: entered promiscuous mode [ 106.371328][ T8375] hsr_slave_1: entered promiscuous mode [ 106.392704][ T8496] loop9: detected capacity change from 0 to 512 [ 106.402141][ T7278] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.417776][ T7278] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.440420][ T8496] EXT4-fs (loop9): 1 orphan inode deleted [ 106.446754][ T8496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.469294][ T30] EXT4-fs error (device loop9): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 1 [ 106.481108][ T8496] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.535440][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 106.543400][ T7898] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.716307][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.724721][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.732380][ T8414] bridge_slave_0: entered allmulticast mode [ 106.739288][ T8414] bridge_slave_0: entered promiscuous mode [ 106.746265][ T7278] bridge_slave_0: left allmulticast mode [ 106.752457][ T7278] bridge_slave_0: left promiscuous mode [ 106.758181][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.076027][ T8531] xt_hashlimit: size too large, truncated to 1048576 [ 107.141540][ T7278] bond1 (unregistering): (slave lo): Releasing backup interface [ 107.149628][ T7278] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 107.162710][ T7278] bond1 (unregistering): Released all slaves [ 107.185493][ T7278] bond0 (unregistering): Released all slaves [ 107.203455][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.216573][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.226142][ T8414] bridge_slave_1: entered allmulticast mode [ 107.232784][ T8414] bridge_slave_1: entered promiscuous mode [ 107.275326][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.285904][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.306359][ T7278] hsr_slave_0: left promiscuous mode [ 107.315400][ T7278] hsr_slave_1: left promiscuous mode [ 107.337571][ T7278] veth1_macvtap: left promiscuous mode [ 107.346567][ T7278] veth0_macvtap: left promiscuous mode [ 107.363584][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 107.363602][ T28] audit: type=1400 audit(1775850529.321:2184): avc: denied { read write } for pid=8550 comm="syz.8.1578" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.365051][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.377696][ T28] audit: type=1400 audit(1775850529.321:2185): avc: denied { open } for pid=8550 comm="syz.8.1578" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.401249][ T3394] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.434054][ T8553] loop9: detected capacity change from 0 to 1024 [ 107.434859][ T7278] veth1_vlan: left promiscuous mode [ 107.442668][ T8553] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 107.445723][ T7278] veth0_vlan: left promiscuous mode [ 107.520995][ T7278] team0 (unregistering): Port device team_slave_1 removed [ 107.533044][ T7278] team0 (unregistering): Port device team_slave_0 removed [ 107.577239][ T8554] fido_id[8554]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.627128][ T8414] team0: Port device team_slave_0 added [ 107.642923][ T8414] team0: Port device team_slave_1 added [ 107.678140][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.679492][ T8565] loop8: detected capacity change from 0 to 1024 [ 107.685233][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.720016][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.736162][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.744401][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.770865][ T8565] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.799003][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.823154][ T28] audit: type=1400 audit(1775850529.781:2186): avc: denied { map } for pid=8563 comm="syz.8.1582" path="/107/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.835886][ T8414] hsr_slave_0: entered promiscuous mode [ 107.846283][ T28] audit: type=1400 audit(1775850529.781:2187): avc: denied { execute } for pid=8563 comm="syz.8.1582" path="/107/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.883197][ T8414] hsr_slave_1: entered promiscuous mode [ 107.889419][ T8414] debugfs: 'hsr0' already exists in 'hsr' [ 107.895653][ T8414] Cannot create hsr debugfs directory [ 107.915801][ T6719] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.022006][ T7278] IPVS: stop unused estimator thread 0... [ 108.147044][ T8375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.164135][ T8375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.175394][ T8375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.184584][ T8375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.230182][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.246862][ T8375] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.258106][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.265390][ T7281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.310347][ T28] audit: type=1400 audit(1775850530.271:2188): avc: denied { open } for pid=8624 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.336564][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.343674][ T2354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.352077][ T28] audit: type=1400 audit(1775850530.271:2189): avc: denied { kernel } for pid=8624 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.379112][ T28] audit: type=1400 audit(1775850530.301:2190): avc: denied { write } for pid=8624 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.414437][ T8375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.513837][ T8414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.523039][ T8414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.532217][ T8414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.542007][ T8414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.561309][ T8375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.651091][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.664738][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.685121][ T2354] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.692265][ T2354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.717329][ T8414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.736083][ T8414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.759314][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.766468][ T2354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.821277][ T8375] veth0_vlan: entered promiscuous mode [ 108.861332][ T8375] veth1_vlan: entered promiscuous mode [ 108.920281][ T8375] veth0_macvtap: entered promiscuous mode [ 108.943668][ T8375] veth1_macvtap: entered promiscuous mode [ 108.978050][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.011134][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.026935][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.046055][ T7278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.104102][ T7278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.134923][ T7278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.164291][ T7278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.339834][ T28] audit: type=1400 audit(1775850531.291:2191): avc: denied { watch watch_reads } for pid=8734 comm="syz.8.1598" path="/" dev="ramfs" ino=28839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 109.491658][ T28] audit: type=1400 audit(1775850531.451:2192): avc: denied { cmd } for pid=8751 comm="syz.1.1601" path="socket:[27636]" dev="sockfs" ino=27636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.544097][ T8414] veth0_vlan: entered promiscuous mode [ 109.571781][ T8414] veth1_vlan: entered promiscuous mode [ 109.591270][ T28] audit: type=1400 audit(1775850531.551:2193): avc: denied { mount } for pid=8763 comm="syz.8.1605" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.625438][ T8414] veth0_macvtap: entered promiscuous mode [ 109.671122][ T8414] veth1_macvtap: entered promiscuous mode [ 109.679340][ T8773] sctp: [Deprecated]: syz.8.1608 (pid 8773) Use of int in maxseg socket option. [ 109.679340][ T8773] Use struct sctp_assoc_value instead [ 109.692399][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.725094][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.755484][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.781720][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.823723][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.843554][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.039372][ T8806] lo: Caught tx_queue_len zero misconfig [ 110.455218][ T8847] netlink: 'syz.9.1622': attribute type 12 has an invalid length. [ 110.468941][ T8847] netlink: 'syz.9.1622': attribute type 29 has an invalid length. [ 110.493646][ T8847] __nla_validate_parse: 2 callbacks suppressed [ 110.493665][ T8847] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1622'. [ 111.048461][ T8924] raw_sendmsg: syz.9.1631 forgot to set AF_INET. Fix it! [ 111.527292][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1637'. [ 111.544127][ T8961] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1637'. [ 111.562828][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1637'. [ 111.581538][ T8961] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1637'. [ 111.844983][ T8994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.995978][ T9010] netlink: 136 bytes leftover after parsing attributes in process `syz.9.1643'. [ 112.005679][ T9010] net_ratelimit: 1014 callbacks suppressed [ 112.005694][ T9010] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 112.227860][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1648'. [ 112.632607][ T9086] loop9: detected capacity change from 0 to 256 [ 112.827839][ T9119] vcan0: tx address claim with different name [ 113.316168][ T9210] netlink: 'syz.8.1670': attribute type 3 has an invalid length. [ 113.329134][ T9210] netlink: 'syz.8.1670': attribute type 1 has an invalid length. [ 113.342715][ T9210] netlink: 198116 bytes leftover after parsing attributes in process `syz.8.1670'. [ 113.673544][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 113.684714][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1693'. [ 114.396355][ T9351] vcan0: tx address claim with different name [ 114.841602][ T9384] loop4: detected capacity change from 0 to 4096 [ 114.890725][ T9384] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 114.914054][ T9384] System zones: 0-5 [ 114.938174][ T9384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.209019][ T8414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.782741][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 115.782759][ T28] audit: type=1326 audit(1775850537.741:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 115.902867][ T9482] loop4: detected capacity change from 0 to 512 [ 115.937456][ T28] audit: type=1326 audit(1775850537.771:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.000354][ T28] audit: type=1326 audit(1775850537.771:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.029447][ T9482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.039252][ T28] audit: type=1326 audit(1775850537.781:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.066063][ T28] audit: type=1326 audit(1775850537.781:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.102092][ T28] audit: type=1326 audit(1775850537.781:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.102325][ T9482] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.136585][ T28] audit: type=1326 audit(1775850537.781:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.163410][ T28] audit: type=1326 audit(1775850537.781:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.241875][ T28] audit: type=1326 audit(1775850537.781:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.312320][ T28] audit: type=1326 audit(1775850537.781:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.0.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 116.392736][ T8414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.791513][ T9561] hub 8-0:1.0: USB hub found [ 116.812054][ T9561] hub 8-0:1.0: 8 ports detected [ 117.689581][ T9600] syzkaller0: entered promiscuous mode [ 117.702824][ T9600] syzkaller0: entered allmulticast mode [ 117.724418][ T9600] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 118.711223][ T9728] loop0: detected capacity change from 0 to 256 [ 119.971322][ T9764] pimreg: entered allmulticast mode [ 119.989431][ T9764] pimreg: left allmulticast mode [ 122.953095][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 122.953112][ T28] audit: type=1400 audit(1775850544.911:2269): avc: denied { unmount } for pid=6719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 123.211552][ T9828] syzkaller1: entered promiscuous mode [ 123.227374][ T9828] syzkaller1: entered allmulticast mode [ 123.438604][ T9835] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.457993][ T9835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.465255][ T9835] IPv6: NLM_F_CREATE should be set when creating new route [ 123.502552][ T9835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.509902][ T9835] IPv6: NLM_F_CREATE should be set when creating new route [ 123.615519][ T9842] __nla_validate_parse: 2 callbacks suppressed [ 123.615537][ T9842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1808'. [ 123.864981][ T9847] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 124.199839][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 124.210359][ T9874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.224155][ T9874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.355814][ T28] audit: type=1400 audit(1775850546.311:2270): avc: denied { read write } for pid=9882 comm="syz.8.1825" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.394183][ T28] audit: type=1400 audit(1775850546.311:2271): avc: denied { open } for pid=9882 comm="syz.8.1825" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.498501][ T28] audit: type=1400 audit(1775850546.451:2272): avc: denied { read } for pid=9887 comm="syz.8.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 125.324527][ T9914] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.349081][ T9912] netlink: 'syz.8.1832': attribute type 1 has an invalid length. [ 125.349677][ T9914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.358169][ T9912] netlink: 'syz.8.1832': attribute type 4 has an invalid length. [ 125.364112][ T9914] IPv6: NLM_F_CREATE should be set when creating new route [ 125.379557][ T9912] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1832'. [ 125.402724][ T7288] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.408418][ T9914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.416369][ T9914] IPv6: NLM_F_CREATE should be set when creating new route [ 126.342055][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1838'. [ 126.363067][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1838'. [ 126.438461][ T9937] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 126.551732][ T9946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1846'. [ 127.290211][ T9953] cgroup: noprefix used incorrectly [ 127.299242][ T9953] loop8: detected capacity change from 0 to 512 [ 127.305906][ T9953] ext4: Bad value for 'max_batch_time' [ 127.322089][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.334187][ T9955] loop0: detected capacity change from 0 to 512 [ 127.343051][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.364910][ T9955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.378545][ T9955] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.405036][ T8375] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.429006][ T4641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.042125][ T9997] loop8: detected capacity change from 0 to 512 [ 128.104558][ T9997] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1861: inode has both inline data and extents flags [ 128.148633][ T9997] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.148771][ T9997] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1861: couldn't read orphan inode 15 (err -117) [ 128.158062][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 128.158085][ C1] EXT4-fs (loop8): initial error at time 1775850550: ext4_orphan_get:1397: inode 15 [ 128.158119][ C1] EXT4-fs (loop8): last error at time 1775850550: ext4_orphan_get:1397: inode 15 [ 128.195075][ T9997] loop8: lost filesystem error report for type 5 error -117 [ 128.209556][ T9997] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.331100][ T28] audit: type=1400 audit(1775850550.291:2273): avc: denied { mounton } for pid=9996 comm="syz.8.1861" path="/167/file0/bus" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.440717][ T9997] loop8: detected capacity change from 512 to 0 [ 128.447405][ C0] I/O error, dev loop8, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2 [ 128.457372][ C0] I/O error, dev loop8, sector 20 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2 [ 128.467106][ C0] I/O error, dev loop8, sector 18 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 128.487222][T10011] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4920: inode #18: block 9: comm syz.8.1861: unable to read itable block [ 128.589034][T10011] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 128.597582][T10011] EXT4-fs (loop8): I/O error while writing superblock [ 128.636932][ T6719] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 128.715570][ T2354] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4920: inode #2: block 5: comm kworker/u8:7: unable to read itable block [ 128.741776][ T2354] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 128.767827][ T2354] EXT4-fs (loop8): I/O error while writing superblock [ 128.789328][ T7934] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.849222][ T28] audit: type=1400 audit(1775850550.811:2274): avc: denied { bind } for pid=10017 comm="syz.0.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.869262][ T7934] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 128.877535][ T7934] EXT4-fs (loop8): I/O error while writing superblock [ 129.427679][ T28] audit: type=1326 audit(1775850551.381:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 129.489035][ T28] audit: type=1326 audit(1775850551.421:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 129.514709][ T28] audit: type=1326 audit(1775850551.421:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 129.538577][ T28] audit: type=1326 audit(1775850551.421:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 129.595561][ T28] audit: type=1326 audit(1775850551.421:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 129.630111][ T28] audit: type=1326 audit(1775850551.421:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 129.677420][ T28] audit: type=1326 audit(1775850551.421:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 129.701176][ T28] audit: type=1326 audit(1775850551.421:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10063 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f34bcc819 code=0x7ffc0000 [ 130.020236][T10070] chnl_net:caif_netlink_parms(): no params data found [ 130.238821][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.254902][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.266829][T10070] bridge_slave_0: entered allmulticast mode [ 130.279416][T10070] bridge_slave_0: entered promiscuous mode [ 130.286572][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.293955][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.301506][T10070] bridge_slave_1: entered allmulticast mode [ 130.307990][T10070] bridge_slave_1: entered promiscuous mode [ 130.327402][T10070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.342185][T10070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.363565][T10070] team0: Port device team_slave_0 added [ 130.383773][T10070] team0: Port device team_slave_1 added [ 130.434615][T10070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.457278][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.505339][T10070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.549539][T10070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.579358][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.625843][T10070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.641199][T10142] veth1_to_bond: entered allmulticast mode [ 130.667796][T10070] hsr_slave_0: entered promiscuous mode [ 130.691740][T10070] hsr_slave_1: entered promiscuous mode [ 130.697910][T10070] debugfs: 'hsr0' already exists in 'hsr' [ 130.704315][T10070] Cannot create hsr debugfs directory [ 130.751307][T10149] veth1_to_bond: left allmulticast mode [ 134.132335][T10070] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.141541][T10070] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.150771][T10070] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.161335][T10070] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.217541][T10070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.231172][T10070] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.242162][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.249267][ T7288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.268159][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.275295][ T2354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.354347][T10070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.435199][T10070] veth0_vlan: entered promiscuous mode [ 134.447045][T10070] veth1_vlan: entered promiscuous mode [ 134.469914][T10070] veth0_macvtap: entered promiscuous mode [ 134.478509][T10070] veth1_macvtap: entered promiscuous mode [ 134.491065][T10070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.503508][T10070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.515441][ T4700] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.524348][ T4700] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.539656][ T4700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.564285][ T4700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.504101][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 135.504131][ T28] audit: type=1400 audit(1775850557.461:2285): avc: denied { shutdown } for pid=10391 comm="syz.4.1931" laddr=fe80::b lport=54748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.550981][ T28] audit: type=1400 audit(1775850557.471:2286): avc: denied { read write } for pid=8375 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.575753][ T28] audit: type=1400 audit(1775850557.471:2287): avc: denied { open } for pid=8375 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.624299][ T28] audit: type=1400 audit(1775850557.471:2288): avc: denied { ioctl } for pid=8375 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.650247][ T28] audit: type=1400 audit(1775850557.491:2289): avc: denied { create } for pid=10391 comm="syz.4.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.675981][ T28] audit: type=1400 audit(1775850557.491:2290): avc: denied { getopt } for pid=10391 comm="syz.4.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.695875][ T28] audit: type=1400 audit(1775850557.491:2291): avc: denied { connect } for pid=10391 comm="syz.4.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.748466][ T28] audit: type=1400 audit(1775850557.491:2292): avc: denied { name_connect } for pid=10391 comm="syz.4.1931" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 135.771222][ T28] audit: type=1400 audit(1775850557.501:2293): avc: denied { prog_load } for pid=10387 comm="syz.3.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.790722][ T28] audit: type=1400 audit(1775850557.511:2294): avc: denied { map_create } for pid=10387 comm="syz.3.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.825741][T10411] bridge_slave_0: left allmulticast mode [ 135.832476][T10411] bridge_slave_0: left promiscuous mode [ 135.838142][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.844536][T10414] loop3: detected capacity change from 0 to 128 [ 135.860434][T10411] bridge_slave_1: left allmulticast mode [ 135.868544][T10411] bridge_slave_1: left promiscuous mode [ 135.881530][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.897116][T10411] bond0: (slave bond_slave_0): Releasing backup interface [ 135.907018][T10411] bond0: (slave bond_slave_1): Releasing backup interface [ 135.921286][T10411] team0: Port device team_slave_0 removed [ 135.929901][T10411] team0: Port device team_slave_1 removed [ 135.936572][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.944358][T10411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.972815][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.001801][T10411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.018801][T10411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.421767][T10472] veth1_to_bond: entered allmulticast mode [ 137.549389][T10475] veth1_to_bond: left allmulticast mode [ 137.613508][T10478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10478 comm=syz.4.1953 [ 137.721549][T10485] loop3: detected capacity change from 0 to 1024 [ 137.747394][T10485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.781106][T10070] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.074574][T10531] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.095688][T10531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 139.128092][T10534] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1974'. [ 139.208377][T10534] bond0 (unregistering): Released all slaves [ 139.292460][T10541] loop9: detected capacity change from 0 to 8192 [ 139.367278][T10562] loop3: detected capacity change from 0 to 1024 [ 139.375390][T10562] EXT4-fs: Ignoring removed bh option [ 139.384950][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 139.395221][T10562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.412612][T10564] team1: entered promiscuous mode [ 139.417679][T10564] team1: entered allmulticast mode [ 139.423578][T10564] 8021q: adding VLAN 0 to HW filter on device team1 [ 139.431813][T10070] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.474426][T10568] loop0: detected capacity change from 0 to 512 [ 139.509264][T10568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.517740][T10568] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.1990: corrupted inode contents [ 139.530379][T10568] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.530582][T10568] EXT4-fs (loop0): Remounting filesystem read-only [ 139.539822][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 139.539845][ C0] EXT4-fs (loop0): initial error at time 1775850561: ext4_do_update_inode:5602: inode 15 [ 139.539890][ C0] EXT4-fs (loop0): last error at time 1775850561: ext4_do_update_inode:5602: inode 15 [ 139.572633][T10568] EXT4-fs (loop0): 1 orphan inode deleted [ 139.578788][T10568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.650257][ T8375] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.234520][T10590] loop9: detected capacity change from 0 to 8192 [ 140.556409][ T7898] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 140.594805][ T7898] FAT-fs (loop9): Filesystem has been set read-only [ 140.629186][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 140.629203][ T28] audit: type=1400 audit(1775850562.571:2379): avc: denied { name_bind } for pid=10596 comm="syz.4.2002" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 140.733832][ T28] audit: type=1400 audit(1775850562.581:2380): avc: denied { unmount } for pid=7898 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 140.774767][T10605] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 140.991167][ T28] audit: type=1400 audit(1775850562.951:2381): avc: denied { ioctl } for pid=10620 comm="syz.1.2011" path="socket:[33073]" dev="sockfs" ino=33073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.039613][ T28] audit: type=1400 audit(1775850562.991:2382): avc: denied { create } for pid=10620 comm="syz.1.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.039775][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2011'. [ 141.083589][ T28] audit: type=1400 audit(1775850563.001:2383): avc: denied { write } for pid=10620 comm="syz.1.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.122058][ T28] audit: type=1400 audit(1775850563.001:2384): avc: denied { nlmsg_write } for pid=10620 comm="syz.1.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.327977][ T28] audit: type=1400 audit(1775850563.281:2385): avc: denied { wake_alarm } for pid=10630 comm="syz.9.2015" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.218526][T10647] loop9: detected capacity change from 0 to 512 [ 142.277615][T10647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.299092][T10647] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.319997][T10647] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.445332][ T28] audit: type=1400 audit(1775850564.401:2386): avc: denied { create } for pid=10653 comm="syz.4.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.465179][T10647] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 142.501861][T10647] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.501923][T10656] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.545437][T10655] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.580523][T10647] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 142.583423][T10656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 142.590021][T10655] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 142.608340][ T28] audit: type=1400 audit(1775850564.571:2387): avc: denied { kexec_image_load } for pid=10660 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 142.660984][T10647] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.668979][ T28] audit: type=1400 audit(1775850564.621:2388): avc: denied { read write } for pid=10645 comm="syz.9.2022" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.676626][T10655] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.723348][T10647] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 142.752341][T10667] loop0: detected capacity change from 0 to 512 [ 142.764080][T10667] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 142.787730][T10656] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.802741][T10667] EXT4-fs (loop0): 1 truncate cleaned up [ 142.809091][T10667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.823352][T10656] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.852555][T10656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 142.875258][T10655] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.2022: corrupted xattr block 33: invalid ea_ino [ 142.909730][T10655] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 142.942289][ T8375] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.059910][ T7898] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.914693][T10707] loop0: detected capacity change from 0 to 1024 [ 143.968199][T10707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 144.229253][T10707] loop0: detected capacity change from 1024 to 64 [ 144.252001][T10710] syz.0.2046: attempt to access beyond end of device [ 144.252001][T10710] loop0: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 144.292901][ T4834] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.300453][T10710] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 128) [ 144.322647][ T4834] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.343125][T10710] Buffer I/O error on device loop0, logical block 128 [ 144.353216][ T3393] IPVS: starting estimator thread 0... [ 144.449070][T10728] IPVS: using max 2544 ests per chain, 127200 per kthread [ 144.588325][ T7285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.877002][ T7285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.918988][ T8375] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 144.937856][T10708] kmmpd-loop0: attempt to access beyond end of device [ 144.937856][T10708] loop0: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 144.972448][ T7285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.989355][T10708] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 145.043196][ T7285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.228706][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 145.244688][ T7285] bridge_slave_1: left allmulticast mode [ 145.250523][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2075'. [ 145.259773][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 145.268736][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2075'. [ 145.273099][ T7285] bridge_slave_1: left promiscuous mode [ 145.299357][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.318025][ T7285] bridge_slave_0: left allmulticast mode [ 145.329533][ T7285] bridge_slave_0: left promiscuous mode [ 145.340804][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.335628][T10784] loop3: detected capacity change from 0 to 1024 [ 146.346946][T10784] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 146.346946][T10784] [ 146.384301][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 146.384320][ T28] audit: type=1400 audit(1775850568.341:2423): avc: denied { mounton } for pid=10783 comm="syz.3.2079" path="/42/bus" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.368798][T10790] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2082'. [ 147.450343][T10797] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2082'. [ 148.338656][ T28] audit: type=1400 audit(1775850570.291:2424): avc: denied { bind } for pid=10800 comm="syz.9.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.358833][ T28] audit: type=1400 audit(1775850570.321:2425): avc: denied { listen } for pid=10800 comm="syz.9.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.402024][ T7285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.404905][T10804] loop4: detected capacity change from 0 to 512 [ 148.423922][T10804] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 148.436195][ T7285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.455532][ T7285] bond0 (unregistering): Released all slaves [ 148.464084][T10804] EXT4-fs (loop4): 1 truncate cleaned up [ 148.470907][ T7285] bond1 (unregistering): Released all slaves [ 148.481865][T10790] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.489082][T10790] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.505066][T10804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.587567][ T28] audit: type=1400 audit(1775850570.541:2426): avc: denied { read open } for pid=10828 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.662343][ T8414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.671554][ T7285] hsr_slave_0: left promiscuous mode [ 148.677616][ T28] audit: type=1400 audit(1775850570.571:2427): avc: denied { getattr } for pid=10828 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.707656][ T7285] hsr_slave_1: left promiscuous mode [ 148.721916][ T7285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.729586][ T7285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.736828][ T28] audit: type=1400 audit(1775850570.621:2428): avc: denied { mount } for pid=10832 comm="syz.3.2095" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 148.771348][ T28] audit: type=1400 audit(1775850570.621:2429): avc: denied { search } for pid=10832 comm="syz.3.2095" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.795908][ T7285] veth1_macvtap: left promiscuous mode [ 148.803337][ T7285] veth0_macvtap: left promiscuous mode [ 148.814687][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2101'. [ 148.826779][ T7285] veth1_vlan: left promiscuous mode [ 148.835503][ T28] audit: type=1400 audit(1775850570.621:2430): avc: denied { search } for pid=10832 comm="syz.3.2095" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.857819][ T7285] veth0_vlan: left promiscuous mode [ 148.880383][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 148.909774][ T28] audit: type=1400 audit(1775850570.621:2431): avc: denied { read open } for pid=10832 comm="syz.3.2095" path="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.953843][ T28] audit: type=1400 audit(1775850570.821:2432): avc: denied { add_name } for pid=10825 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.014425][ T7285] team0 (unregistering): Port device team_slave_1 removed [ 149.025318][ T7285] team0 (unregistering): Port device team_slave_0 removed [ 149.060005][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2101'. [ 149.073451][ T2354] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.082418][ T2354] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.092058][ T2354] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.129103][ T2354] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.143450][T10873] loop4: detected capacity change from 0 to 512 [ 149.173248][T10873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.201461][T10873] EXT4-fs (loop4): 1 truncate cleaned up [ 149.210690][T10873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.253952][T10773] chnl_net:caif_netlink_parms(): no params data found [ 149.301478][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.308906][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.316229][T10773] bridge_slave_0: entered allmulticast mode [ 149.343255][T10773] bridge_slave_0: entered promiscuous mode [ 149.350531][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.359067][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.372289][T10773] bridge_slave_1: entered allmulticast mode [ 149.386259][ T8414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.397595][T10773] bridge_slave_1: entered promiscuous mode [ 149.449037][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.480415][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.530731][T10916] ipvlan2: entered promiscuous mode [ 149.536715][T10916] bridge0: port 1(ipvlan2) entered blocking state [ 149.543477][T10916] bridge0: port 1(ipvlan2) entered disabled state [ 149.550373][T10916] ipvlan2: entered allmulticast mode [ 149.555689][T10916] bridge0: entered allmulticast mode [ 149.561479][T10916] ipvlan2: left allmulticast mode [ 149.566632][T10916] bridge0: left allmulticast mode [ 149.585005][T10773] team0: Port device team_slave_0 added [ 149.592207][T10773] team0: Port device team_slave_1 added [ 149.609142][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.616184][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.642166][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.661386][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.668357][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.700922][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.738474][T10773] hsr_slave_0: entered promiscuous mode [ 149.744977][T10773] hsr_slave_1: entered promiscuous mode [ 149.942592][T10945] loop3: detected capacity change from 0 to 512 [ 149.949509][T10945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.999207][T10945] EXT4-fs (loop3): 1 truncate cleaned up [ 150.007774][T10945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.083094][T10955] ================================================================== [ 150.091331][T10955] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 150.098471][T10955] [ 150.100818][T10955] read-write to 0xffff888107f83470 of 8 bytes by task 10945 on cpu 0: [ 150.108988][T10955] xas_set_mark+0x82/0x140 [ 150.113449][T10955] __folio_start_writeback+0x17b/0x370 [ 150.118954][T10955] ext4_bio_write_folio+0x5ae/0xa00 [ 150.124184][T10955] mpage_process_page_bufs+0x4a1/0x620 [ 150.129655][T10955] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 150.135569][T10955] ext4_do_writepages+0x70f/0x2840 [ 150.140703][T10955] ext4_writepages+0x18f/0x320 [ 150.145489][T10955] do_writepages+0x1c6/0x310 [ 150.150091][T10955] file_write_and_wait_range+0x178/0x2f0 [ 150.155734][T10955] generic_buffers_fsync_noflush+0x45/0x130 [ 150.161642][T10955] ext4_sync_file+0x1e4/0x710 [ 150.166327][T10955] vfs_fsync_range+0xc5/0xe0 [ 150.170931][T10955] ext4_buffered_write_iter+0x34f/0x3c0 [ 150.176508][T10955] ext4_file_write_iter+0xbff/0xfa0 [ 150.181719][T10955] iter_file_splice_write+0x6c4/0xa80 [ 150.187108][T10955] direct_splice_actor+0x156/0x2a0 [ 150.192237][T10955] splice_direct_to_actor+0x311/0x670 [ 150.197626][T10955] do_splice_direct+0x119/0x1a0 [ 150.202487][T10955] do_sendfile+0x382/0x650 [ 150.206917][T10955] __x64_sys_sendfile64+0x105/0x150 [ 150.212147][T10955] x64_sys_call+0x2dc4/0x3020 [ 150.216854][T10955] do_syscall_64+0x12c/0x370 [ 150.221457][T10955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.227362][T10955] [ 150.229695][T10955] read to 0xffff888107f83470 of 8 bytes by task 10955 on cpu 1: [ 150.237332][T10955] xas_find_marked+0x213/0x620 [ 150.242113][T10955] filemap_get_folios_tag+0xfa/0x510 [ 150.247412][T10955] filemap_write_and_wait_range+0x1f5/0x370 [ 150.253321][T10955] kiocb_write_and_wait+0x7a/0x110 [ 150.258445][T10955] __iomap_dio_rw+0x5de/0x14c0 [ 150.263227][T10955] iomap_dio_rw+0x40/0x90 [ 150.267565][T10955] ext4_file_read_iter+0x20f/0x290 [ 150.272684][T10955] copy_splice_read+0x471/0x6c0 [ 150.277545][T10955] splice_direct_to_actor+0x28f/0x670 [ 150.282956][T10955] do_splice_direct+0x119/0x1a0 [ 150.287816][T10955] do_sendfile+0x382/0x650 [ 150.292340][T10955] __x64_sys_sendfile64+0x105/0x150 [ 150.297721][T10955] x64_sys_call+0x2dc4/0x3020 [ 150.302409][T10955] do_syscall_64+0x12c/0x370 [ 150.307096][T10955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.312994][T10955] [ 150.315332][T10955] value changed: 0x0000000000000000 -> 0x0000000f00000000 [ 150.322442][T10955] [ 150.324790][T10955] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.331030][T10955] CPU: 1 UID: 0 PID: 10955 Comm: syz.3.2122 Tainted: G W syzkaller #0 PREEMPT(full) [ 150.341974][T10955] Tainted: [W]=WARN [ 150.345789][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.355850][T10955] ================================================================== [ 150.598267][ T7288] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.609294][ T7288] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.662126][ T7288] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.678999][ T7288] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.707149][ T4371] bridge0: port 1(syz_tun) entered disabled state [ 150.715560][ T4371] syz_tun (unregistering): left allmulticast mode [ 150.722532][ T4371] syz_tun (unregistering): left promiscuous mode [ 150.729448][ T4371] bridge0: port 1(syz_tun) entered disabled state [ 150.774994][T10944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.787021][ T7288] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.801440][ T7288] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.868117][ T7288] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.879510][ T7288] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.103687][ T7288] hsr_slave_0: left promiscuous mode [ 151.109627][ T7288] hsr_slave_1: left promiscuous mode [ 151.118869][ T7288] veth1_macvtap: left promiscuous mode [ 151.124804][ T7288] veth0_macvtap: left promiscuous mode [ 151.131168][ T7288] veth1_vlan: left promiscuous mode [ 151.136493][ T7288] veth0_vlan: left promiscuous mode [ 151.451519][ T7288] IPVS: stop unused estimator thread 0... [ 151.523411][ T7288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.581923][ T7288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.631787][ T7288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.683931][ T7288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.759560][ T7288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.826272][ T7288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.862791][ T7288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.913546][ T7288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.998491][ T7288] bridge_slave_1: left allmulticast mode [ 152.004421][ T7288] bridge_slave_1: left promiscuous mode [ 152.010370][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.018190][ T7288] bridge_slave_0: left allmulticast mode [ 152.023976][ T7288] bridge_slave_0: left promiscuous mode [ 152.029656][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.037819][ T7288] bridge_slave_1: left allmulticast mode [ 152.043619][ T7288] bridge_slave_1: left promiscuous mode [ 152.049364][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.056820][ T7288] bridge_slave_0: left allmulticast mode [ 152.062615][ T7288] bridge_slave_0: left promiscuous mode [ 152.068306][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.077261][ T7288] bridge_slave_1: left allmulticast mode [ 152.082959][ T7288] bridge_slave_1: left promiscuous mode [ 152.088748][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.096344][ T7288] bridge_slave_0: left allmulticast mode [ 152.102037][ T7288] bridge_slave_0: left promiscuous mode [ 152.107722][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.231330][ T7288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.241376][ T7288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.250860][ T7288] bond0 (unregistering): Released all slaves [ 152.331265][ T7288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.341143][ T7288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.350529][ T7288] bond0 (unregistering): Released all slaves [ 152.381481][ T7288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.390998][ T7288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.400546][ T7288] bond0 (unregistering): Released all slaves [ 152.438708][ T7288] hsr_slave_0: left promiscuous mode [ 152.444597][ T7288] hsr_slave_1: left promiscuous mode [ 152.450470][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.457958][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.465544][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.473084][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.483088][ T7288] hsr_slave_0: left promiscuous mode [ 152.488839][ T7288] hsr_slave_1: left promiscuous mode [ 152.494674][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.502177][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.509867][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.517266][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.526512][ T7288] hsr_slave_0: left promiscuous mode [ 152.532185][ T7288] hsr_slave_1: left promiscuous mode [ 152.537689][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.545232][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.561029][ T7288] veth1_macvtap: left promiscuous mode [ 152.566569][ T7288] veth0_macvtap: left promiscuous mode [ 152.572372][ T7288] veth1_vlan: left promiscuous mode [ 152.577648][ T7288] veth0_vlan: left promiscuous mode [ 152.583481][ T7288] veth1_macvtap: left promiscuous mode [ 152.588999][ T7288] veth0_macvtap: left promiscuous mode [ 152.594597][ T7288] veth1_vlan: left promiscuous mode [ 152.599890][ T7288] veth0_vlan: left promiscuous mode [ 152.696928][ T7288] team0 (unregistering): Port device team_slave_1 removed [ 152.706476][ T7288] team0 (unregistering): Port device team_slave_0 removed [ 152.760334][ T7288] team0 (unregistering): Port device team_slave_1 removed [ 152.770552][ T7288] team0 (unregistering): Port device team_slave_0 removed [ 152.820140][ T7288] team0 (unregistering): Port device team_slave_1 removed [ 152.829134][ T7288] team0 (unregistering): Port device team_slave_0 removed