last executing test programs: 1m16.965309613s ago: executing program 32 (id=4344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 1m0.570626268s ago: executing program 33 (id=4676): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x1deb9000) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0x123) preadv2(r0, &(0x7f0000000980)=[{0x0}], 0x1, 0x8000, 0x9, 0x1b) 50.761636313s ago: executing program 34 (id=4854): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$TIOCSETD(r0, 0x5423, 0x0) 45.409346351s ago: executing program 35 (id=4996): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 38.526368782s ago: executing program 3 (id=5149): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x349}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x0, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 38.44289244s ago: executing program 3 (id=5154): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="cb000000010000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 38.402715254s ago: executing program 3 (id=5157): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x7fffffff, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x4, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 38.299174304s ago: executing program 3 (id=5160): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 38.230045811s ago: executing program 3 (id=5162): socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f00000012c0)=[{r1, 0x480}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x103100) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 38.163895268s ago: executing program 3 (id=5164): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) 38.163615538s ago: executing program 36 (id=5164): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) 27.275762491s ago: executing program 8 (id=5291): openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27.142546884s ago: executing program 8 (id=5292): ioperm(0x0, 0x1, 0x10001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 27.142386444s ago: executing program 8 (id=5293): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 27.133679645s ago: executing program 8 (id=5294): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 27.109990678s ago: executing program 8 (id=5295): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27.054482013s ago: executing program 8 (id=5296): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1f9, 0xffffffffffffffff, 0xfffffffa, 0x9}}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) timer_create(0x3, 0x0, &(0x7f00000004c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000540)) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@bridge_delvlan={0x6c, 0x71, 0x100, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000002c0)=0x24f8, 0x4) recvfrom$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) listen(r8, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) 27.015678227s ago: executing program 37 (id=5296): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1f9, 0xffffffffffffffff, 0xfffffffa, 0x9}}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) timer_create(0x3, 0x0, &(0x7f00000004c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000540)) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@bridge_delvlan={0x6c, 0x71, 0x100, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000002c0)=0x24f8, 0x4) recvfrom$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) listen(r8, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) 20.742619167s ago: executing program 6 (id=5502): io_uring_setup(0x3150, &(0x7f0000000200)={0x0, 0xc365, 0x10, 0x3, 0xb0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, [@alu={0x7, 0x1, 0x1, 0x5, 0x5, 0x0, 0xfffffffffffffff0}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20.428286589s ago: executing program 6 (id=5503): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd700000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec"], 0x28}}, 0x0) 19.91476333s ago: executing program 4 (id=5511): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000000c0)=0x8000, 0x3) 19.908877221s ago: executing program 4 (id=5512): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pidfd_send_signal(r0, 0x16, 0x0, 0x0) 19.842789337s ago: executing program 4 (id=5513): io_uring_setup(0x3150, &(0x7f0000000200)={0x0, 0xc365, 0x10, 0x3, 0xb0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, [@alu={0x7, 0x1, 0x1, 0x5, 0x5, 0x0, 0xfffffffffffffff0}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19.651811417s ago: executing program 4 (id=5514): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 19.585973873s ago: executing program 4 (id=5515): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r2, 0x0}]) 19.478705074s ago: executing program 4 (id=5517): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="7472796c6f636b206d658c"], 0xc) 19.455017976s ago: executing program 38 (id=5517): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="7472796c6f636b206d658c"], 0xc) 19.291100023s ago: executing program 6 (id=5524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x605, 0x70bd2c, 0x24dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0xffff, 0xfff1}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 18.81573825s ago: executing program 6 (id=5525): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 18.711847011s ago: executing program 6 (id=5528): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000280), 0x0}, 0x20) 18.146902678s ago: executing program 6 (id=5533): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="5b682fd900", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 18.146750588s ago: executing program 39 (id=5533): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="5b682fd900", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 7.672959019s ago: executing program 2 (id=5722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$eJzs3c1vXOW9B/DvGduJMSgJkMvlRkAm4SYY8HVs55LciMW9iT1JzPXLle1IRHdBKHGqKG5pSSsBqtQgVV0VtVKrLtod6qorJDZlU7Frd+2qi0oV/wLqKlIruToz43hsjz2O69gmfD7WzJyX33me33l9NOOZ84Qvl8WDK8YWF+uPLY5f+fUOZMwedmHs848+/rB8fHAn+9KVV4rfJL1Jqkl3kqeTntGxmenJDgXdSq4l+SwpkuxP43VTrqX4cR5bHv8sxS/Lete1b7Ml08kiX2m7ffwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeVIyODQ0NF/syPnXl9WpDUl1jdGxmusji4to5S8s0fFrv9bv4tGO9SVE+0tu71NX304eXZz+VpHo8zzTGnql3SJ7evP/oU4defbK7srT8etn8U/Zvvtjb771/682Fhfl3Hkgie9+l2tT47PT45PlLter47HT13JkzQ6cuX5ytXhyfqM1enZ2rTVZHZ2rn56Znqv2jL1aHz507Xa0NXp2+MnVpbHCitjTx7H+MDA2dqb42+H+18zOz01OnXhucHb08PjExPnWpHlPOLmPOlgfi/47PVedq5yer1Rs3F+ZPr8qpq350tUwog4Y7rUkZNNIpaGRoZGR4eGRk+INm79n3Jpx55dwrZ4eGuodWyci+VREP6KBlb3lk/d28/Rdx2KJKo/1PJjKeqVzJ69mXapu/0YxlJtP525lysbXzm5ba/xOnahvW29r+N1v57pbZR8qn43muOdq7TvvfNtOd/Lud9/J+buXNLGQh83ln1zPa2b9LqWUq45nNdMYzmfP1KdXmlGrO5UzOZChv5HKOZjbVXMx4JlLLbK5mNnOpZbJ+dM2klvOZy3RmUk1/RvNiqhnOuZzL6VRTy2CuZjpXMpVLGcv5eik3crO+3U9vkOO9oOHNBI1sELSmud9E+78yojwpdrQdYs/Z9ms4bNVis/3f1zm0f3QnEgIAAAC23b/9PgcOP/G7vyRFnq1/Ln9xfKI2tNtpAQAAANuo/nW9Z8qXnnLo2RTe/wMAAMDDpqj/xq5I0pejjaGlX0L5EAAAAAAeEvX//z+X4ujyBO//AQAA4CHT+R77HSOKgaXb/1avN16vNyMaY0XfxfGJ2uDo9MSrwzlZv8tA/ZcGa0rrSoqe+s8PXsqxRtSxvsZr33KJZZ29ZdTw4KvDeSnHmyvS/3z58nx/m8iRRuQLjcgXWiO7siLydBkJAA+74xu0x5tt/1/KQCNi4Ei9ye8+0qYNHtKyAsBecTy3m0PNLs3atP/NXnieW6/9/88N3v+XEU/kxtHGVwoG81bezkKuZyDNbxwcbVfqUm8Eja8hDHT4NKCv+ZWFP56tZGDN5wG999a1NXY+Ixlo+4lAS7lFeldsrK5t3vgAsEuOb9gOb679H+jw/n+5zd2/S2sJALS614N924FKM2qjmM4Du7yKAMAqWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfpu6gf8fTiYLC/PJ1u7/v7WB3vvJcOOBSjaI+fvOrM7ODHQl2a3a/zv3vVS5j/fKpjOwcmCXL0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsiCLpaje9kuxPMpTk1M5n9eDc2e0Etkt1a4sVd3M37+bAdqcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBV17z/fyWN10cbk9JdSU4kuZbk/3c7x+10d7cT2DXfqD+33P+/kvRksUh3Y7en6Bkdm5meLHd/sb+c//lHH39YPjqXvbZXhbKAsoYVnUs0a2iZ0rNyqcfrS/WNzd++9Z23v1Udu1A/MC/MXZwYm7w08z/LgU8VnzS6QKgWyxOX8v3eid/+pKXQfc3KPynXtL3V9V6s1zu2tt5/bbf0OvVuws2F+ZGyprna63Pf/ebNd1tmPZFjyfP9Sf/Kmr5ePtap6djq7blS8UXxw+JAfp5r9f1fbo1isSh30cH6+j9y4+bC/OBbby9cv5fT91fkdChHk1xPejef09EU6+VTP+oqPWWtQ/Wg8ulwh/I21FLi8Drb9fH6YdN3X+tQXX8d6jps92ZGp9tm9NNvP5mT972nT3aosa3ii+LPxeX8KT9o6f+jUu7/E2l7drYpoh7ZcqS0zltxelUakfU1H2md8cbqMtc9K+95pGMEm/WjfC3/dW//V1qu/819VTYLD/561FJj+/Miuf/z4lcH17Qoy+ot0uFVLVLz6rPeMs08Dzei1snzX/Jy0n3kvq4oL3e4ojyo8/8XRX/+mjv6/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPa+IulqN72SnEhyKMnBcryaLK6OubOF+ip9xVbS3DZbyfnLp1h3RYu7uZt3c2CnMwIAAAAAAADgwbgw9vlHH39YPur/j+/Kv1eac6pJd5JDxc96Rsdmpic7FNSTXFv6l37v/eVwrXx6bHn8s3Ls6Q4L7e7XBwDgS+0fAQAA//9T8Gpj") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000003040)=@generic={0x0, 0x9, 0xfffffffffffffff9}) 7.633845123s ago: executing program 2 (id=5723): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000580)={0x0, 0x7}, &(0x7f00000005c0)=0x8) 7.633685903s ago: executing program 2 (id=5724): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',s']) 7.633297303s ago: executing program 2 (id=5725): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x800, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00') 7.554631701s ago: executing program 2 (id=5726): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000003, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 7.554429261s ago: executing program 2 (id=5727): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 7.551742871s ago: executing program 40 (id=5727): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 4.134650505s ago: executing program 5 (id=5775): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02", @ANYRESOCT=0x0], 0x1, 0x260, &(0x7f0000000780)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) bind$unix(0xffffffffffffffff, 0x0, 0x0) close(0x3) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.090027819s ago: executing program 5 (id=5776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0xca, 0x0, 0x1000}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x74, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x2, 0xca, 0x0, 0x5, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @exp_fastopen={0xfe, 0x4}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x88}, @exp_fastopen={0xfe, 0xe, 0xf989, "f625cbd9ea8589ba2f65"}, @exp_fastopen={0xfe, 0x9, 0xf989, "079d22d696"}, @mptcp=@capable={0x1e, 0x14, 0x4, 0x1, 0x40, 0x8000001, [0x9]}]}}}}}}}, 0x0) 4.025072095s ago: executing program 5 (id=5777): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xa}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendfile(r4, r3, 0x0, 0x110003) 1.775750001s ago: executing program 7 (id=5843): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000300)=ANY=[]) 1.718984117s ago: executing program 7 (id=5844): unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r0 = socket(0x10, 0x803, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, 0x0, 0x0) 1.675927481s ago: executing program 7 (id=5848): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x3b) 1.562729302s ago: executing program 7 (id=5849): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 1.562302002s ago: executing program 7 (id=5851): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(0x0, 0x60840, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x21af6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.414196777s ago: executing program 1 (id=5856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x7fffffff, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x4, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 905.615579ms ago: executing program 5 (id=5865): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000d0808004149004001040800", 0x58}], 0x1) 904.912659ms ago: executing program 5 (id=5866): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x260, &(0x7f0000000780)="$eJzs2s9rHGUYB/BnYqWblHQj/qIF8UUP6mVocvbQIhHEgKJGqIJ0aia6ZtwNmSWwIiYnvfoneBaP3gTp0Usu/gUevOWSYw/iyGY3cRMKLdomofl8DrsP88539533XYZnl919/fsv11brfLXox1SWxdT12I67WczFVBzYjtdeufnbC+/f/OjtG0tLrfHRhZTS5Rd//fjrn16607/04c+Xf7kYO3Of7O4t/Lnz3M6V3b8/+LxTp06dur1+KtLtXq9f3K7KtNKp1/KU3q3Koi5Tp1uXG0fGV6ve+vogFd2V2Zn1jbKuU9EdpLVykPq91N8YpOKzotNNeZ6n2Zng/1j+8W7TxF7z5K1ommb6h7h0J2b/iHZkT6Xs6evZs7ey57ezK3tN0z4enT6dGfNw/ef957EwvqkvvpdSK6L6bnN5c3n0PBxtxY3V6EQVZVyL6fgrhh+TsVH95ltLi9fSvrn4ttoa57c2l5/Yf/3D/Hy0Y+7e+flRPh3kL0bE8HFmMr8Q7Xjm3vmFY/nR+7fi1Zcn8nm04/dPoxdVrMQwG1vjJVj8Zj6lN95ZOpa/un8eAMDjJk+Hhv3bsGk70r/l+ZHxif5olJ/oD9v36Q+P9VcX4uqF0712IurBV2tFVZUbwy94+8XhkfNaTE8uy4MUBz+FPLqJTR3Zs7OyUOe32D4b03ikRcQXp3JH4iT9u+n3PbV1IhMCAAAAAAAAAADggZzE3wlP+xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICz7Z8AAAD//w7awJA=") truncate(&(0x7f0000002540)='./file2\x00', 0xe) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 537.823376ms ago: executing program 9 (id=5872): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) 474.713042ms ago: executing program 0 (id=5875): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') preadv(r2, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/218, 0xda}], 0x1, 0x1000, 0xffffba6a) 474.512872ms ago: executing program 9 (id=5876): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000d0808004149004001040800", 0x58}], 0x1) 465.537553ms ago: executing program 0 (id=5877): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40805}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c0810) 465.075883ms ago: executing program 9 (id=5878): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="00c136b002", 0x5, 0x880, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 406.482968ms ago: executing program 1 (id=5879): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000340)=""/79, 0x4f) 405.845358ms ago: executing program 9 (id=5880): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x1) 405.599429ms ago: executing program 0 (id=5881): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000f00)=0x196, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x23c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 377.335932ms ago: executing program 5 (id=5882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) 356.872023ms ago: executing program 9 (id=5883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x0, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) 344.139125ms ago: executing program 1 (id=5884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 254.524524ms ago: executing program 0 (id=5885): socket$netlink(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 254.275264ms ago: executing program 9 (id=5886): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sched\x00') exit(0x100000000000035) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 254.016624ms ago: executing program 1 (id=5887): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) 199.900059ms ago: executing program 1 (id=5888): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r2, 0x25, 0x2, @val=@perf_event={0x1ff}}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r1}, 0x6) 150.396624ms ago: executing program 1 (id=5889): sigaltstack(0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = epoll_create1(0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) 100.57718ms ago: executing program 0 (id=5890): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 26.532907ms ago: executing program 0 (id=5891): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x7fffffff, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x4, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 0s ago: executing program 7 (id=5892): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x6, 0x364, &(0x7f0000000580)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6400) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) socket$caif_seqpacket(0x25, 0x5, 0x5) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$unix(0x1, 0x1, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) kernel console output (not intermixed with test programs): from 0 to 8192 [ 442.735814][T14756] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 443.005477][T14758] loop4: detected capacity change from 0 to 128 [ 443.027961][T14758] syz.4.3954: attempt to access beyond end of device [ 443.027961][T14758] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 443.041401][T14758] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 443.538718][T14799] loop4: detected capacity change from 0 to 128 [ 443.548243][T14798] loop1: detected capacity change from 0 to 1024 [ 443.554918][T14798] EXT4-fs: test_dummy_encryption option not supported [ 443.720193][T14804] bridge0: port 3(vlan2) entered blocking state [ 443.726480][T14804] bridge0: port 3(vlan2) entered disabled state [ 443.749358][T14804] vlan2: entered allmulticast mode [ 443.754491][T14804] bridge0: entered allmulticast mode [ 443.788668][T14804] vlan2: left allmulticast mode [ 443.793565][T14804] bridge0: left allmulticast mode [ 444.040274][ T29] audit: type=1400 audit(1763365174.326:919): avc: denied { read append } for pid=14839 comm="syz.2.3992" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 444.064416][ T29] audit: type=1400 audit(1763365174.326:920): avc: denied { open } for pid=14839 comm="syz.2.3992" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 444.089311][T14840] program syz.2.3992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.176662][T14854] bond3: option all_slaves_active: invalid value (61) [ 444.184517][T14854] bond3 (unregistering): Released all slaves [ 444.357666][ T29] audit: type=1326 audit(1763365174.636:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14867 comm="syz.4.4003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f272b29f6c9 code=0x0 [ 445.000790][T14884] bond1: option all_slaves_active: invalid value (61) [ 445.008309][T14884] bond1 (unregistering): Released all slaves [ 445.143670][ T29] audit: type=1400 audit(1763365175.426:922): avc: denied { read } for pid=14896 comm="syz.1.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.191419][T14903] loop1: detected capacity change from 0 to 1024 [ 445.198507][T14903] EXT4-fs: test_dummy_encryption option not supported [ 445.259111][T14909] bond2: option all_slaves_active: invalid value (61) [ 445.269289][T14909] bond2 (unregistering): Released all slaves [ 445.288861][T14903] bridge0: port 3(vlan2) entered blocking state [ 445.295213][T14903] bridge0: port 3(vlan2) entered disabled state [ 445.301708][T14903] vlan2: entered allmulticast mode [ 445.306817][T14903] bridge0: entered allmulticast mode [ 445.312791][T14903] vlan2: left allmulticast mode [ 445.317640][T14903] bridge0: left allmulticast mode [ 445.326257][ T29] audit: type=1326 audit(1763365175.606:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.2.4024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bcaf6f6c9 code=0x0 [ 445.577385][T14931] loop4: detected capacity change from 0 to 128 [ 445.587329][T14931] syz.4.4030: attempt to access beyond end of device [ 445.587329][T14931] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 445.602233][T14930] syz.4.4030: attempt to access beyond end of device [ 445.602233][T14930] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 446.112981][T14959] loop4: detected capacity change from 0 to 128 [ 446.125013][T14959] syz.4.4042: attempt to access beyond end of device [ 446.125013][T14959] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 446.138952][T14958] syz.4.4042: attempt to access beyond end of device [ 446.138952][T14958] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 446.403507][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'. [ 446.413193][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'. [ 446.422738][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'. [ 448.549057][T15022] program syz.4.4064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.702828][T15035] bond1: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 448.717027][T15035] bond1 (unregistering): Released all slaves [ 448.840480][T15050] program syz.3.4075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.383199][ T29] audit: type=1400 audit(1763365180.666:924): avc: denied { remount } for pid=15096 comm="syz.2.4093" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 450.404979][T15101] serio: Serial port ptm0 [ 450.417412][ T29] audit: type=1400 audit(1763365180.696:925): avc: denied { unmount } for pid=12005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 451.225988][ T29] audit: type=1400 audit(1763365181.506:926): avc: denied { associate } for pid=15147 comm="syz.1.4112" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 452.196538][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 452.238956][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 452.263086][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 452.569125][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4131'. [ 452.594183][T15192] bond3: option all_slaves_active: invalid value (61) [ 452.610087][T15192] bond3 (unregistering): Released all slaves [ 452.693846][T15199] loop3: detected capacity change from 0 to 128 [ 453.491908][T15217] program syz.3.4138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.556429][ T29] audit: type=1400 audit(1763365183.836:927): avc: denied { getopt } for pid=15218 comm="syz.3.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 453.643270][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4143'. [ 453.668236][T15229] bond3: option all_slaves_active: invalid value (61) [ 453.675928][T15233] loop1: detected capacity change from 0 to 128 [ 453.683520][T15229] bond3 (unregistering): Released all slaves [ 453.693213][ T29] audit: type=1400 audit(1763365183.976:928): avc: denied { remount } for pid=15232 comm="syz.1.4147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 453.776111][T15244] loop3: detected capacity change from 0 to 128 [ 455.636292][T15317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4180'. [ 455.650320][T15317] bond1: option all_slaves_active: invalid value (61) [ 455.665613][T15317] bond1 (unregistering): Released all slaves [ 455.739981][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'. [ 455.759599][T15331] loop3: detected capacity change from 0 to 164 [ 455.768018][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'. [ 455.790846][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'. [ 456.845968][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4196'. [ 456.911049][T15363] bond3: option all_slaves_active: invalid value (61) [ 456.939402][T15363] bond3 (unregistering): Released all slaves [ 456.970006][T15366] loop4: detected capacity change from 0 to 2048 [ 456.982799][T15367] loop3: detected capacity change from 0 to 164 [ 457.090048][ T29] audit: type=1400 audit(1763365187.376:929): avc: denied { setopt } for pid=15374 comm="syz.3.4202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 457.248737][T15366] loop4: p1 < > p4 [ 457.268648][T15366] loop4: p4 size 8388608 extends beyond EOD, truncated [ 457.346155][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 457.355710][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 457.365031][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 457.739060][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4211'. [ 457.808864][T15403] bond2: option all_slaves_active: invalid value (61) [ 457.825841][T15408] loop2: detected capacity change from 0 to 1024 [ 457.832675][T15408] EXT4-fs: Ignoring removed nobh option [ 457.844901][T15408] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 457.867487][T15403] bond2 (unregistering): Released all slaves [ 457.879222][T15408] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.4213: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 457.898163][T15408] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4213: couldn't read orphan inode 11 (err -117) [ 457.910625][T15408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.117814][T12005] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.491846][T15436] loop3: detected capacity change from 0 to 512 [ 460.630390][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4226'. [ 460.861813][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4226'. [ 460.873326][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4226'. [ 460.897933][T15432] loop2: detected capacity change from 0 to 2048 [ 461.021593][T15432] loop2: p1 < > p4 [ 461.052224][T15432] loop2: p4 size 8388608 extends beyond EOD, truncated [ 461.148567][ T29] audit: type=1400 audit(1763365191.426:930): avc: denied { write } for pid=15457 comm="syz.4.4232" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 461.172202][ T29] audit: type=1400 audit(1763365191.426:931): avc: denied { ioctl } for pid=15457 comm="syz.4.4232" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 461.235464][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4236'. [ 461.330715][T15473] program syz.2.4240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.344402][T15474] loop4: detected capacity change from 0 to 512 [ 461.355083][T15474] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 463.346929][T15494] loop2: detected capacity change from 0 to 2048 [ 463.408931][ T3913] loop2: p1 < > p4 [ 463.458687][ T3913] loop2: p4 size 8388608 extends beyond EOD, truncated [ 463.983846][T15494] loop2: p1 < > p4 [ 464.012012][T15494] loop2: p4 size 8388608 extends beyond EOD, truncated [ 464.048241][T15501] loop4: detected capacity change from 0 to 1024 [ 464.078756][T15501] EXT4-fs: test_dummy_encryption option not supported [ 464.084409][ T3003] loop2: p1 < > p4 [ 464.096315][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4249'. [ 464.115565][ T3003] loop2: p4 size 8388608 extends beyond EOD, truncated [ 464.318103][T12298] udevd[12298]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 464.331088][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 465.282573][ T29] audit: type=1400 audit(1763365195.566:932): avc: denied { append } for pid=15536 comm="syz.0.4259" name="file0" dev="tmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 465.305138][ T29] audit: type=1400 audit(1763365195.566:933): avc: denied { open } for pid=15536 comm="syz.0.4259" path="/184/file0" dev="tmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 465.334004][T15537] block device autoloading is deprecated and will be removed. [ 465.431323][ T29] audit: type=1400 audit(1763365195.646:934): avc: denied { read write } for pid=12630 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.454756][ T29] audit: type=1400 audit(1763365195.646:935): avc: denied { open } for pid=12630 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.477994][ T29] audit: type=1400 audit(1763365195.646:936): avc: denied { ioctl } for pid=12630 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1728 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.616256][T15547] loop0: detected capacity change from 0 to 2048 [ 465.778828][T15551] loop4: detected capacity change from 0 to 512 [ 465.813687][T15551] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4265: inode has both inline data and extents flags [ 465.847404][T15551] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4265: couldn't read orphan inode 15 (err -117) [ 465.877188][T15551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.985174][T15547] loop0: p1 < > p4 [ 465.989529][T15547] loop0: p4 size 8388608 extends beyond EOD, truncated [ 466.260045][T15557] loop3: detected capacity change from 0 to 1024 [ 466.278299][T15557] EXT4-fs: test_dummy_encryption option not supported [ 466.659867][T11733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.128136][T15588] loop2: detected capacity change from 0 to 2048 [ 467.205877][T15591] loop4: detected capacity change from 0 to 256 [ 467.649988][T15613] loop1: detected capacity change from 0 to 512 [ 467.688500][T15613] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4286: inode has both inline data and extents flags [ 467.702442][T15588] loop2: p1 < > p4 [ 467.706859][T15588] loop2: p4 size 8388608 extends beyond EOD, truncated [ 467.714302][T15613] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4286: couldn't read orphan inode 15 (err -117) [ 467.738933][ T3003] loop2: p1 < > p4 [ 467.743313][T15613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.755845][ T3003] loop2: p4 size 8388608 extends beyond EOD, truncated [ 467.871657][T12298] udevd[12298]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 467.904739][T12298] udevd[12298]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 467.951941][T15621] loop2: detected capacity change from 0 to 128 [ 468.274309][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 468.520828][T12409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.578867][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'. [ 468.628549][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'. [ 468.645378][ T29] audit: type=1400 audit(1763365198.926:937): avc: denied { read } for pid=15638 comm="syz.3.4295" name="file0" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.742005][T15643] loop3: detected capacity change from 0 to 1024 [ 468.758848][T15643] EXT4-fs: test_dummy_encryption option not supported [ 468.974980][T15645] loop1: detected capacity change from 0 to 2048 [ 469.029541][T15645] loop1: p1 < > p4 [ 469.034611][T15645] loop1: p4 size 8388608 extends beyond EOD, truncated [ 469.094189][T15665] loop3: detected capacity change from 0 to 164 [ 469.170065][ T29] audit: type=1400 audit(1763365199.456:938): avc: denied { read } for pid=15666 comm="syz.3.4306" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 469.192823][ T29] audit: type=1400 audit(1763365199.456:939): avc: denied { open } for pid=15666 comm="syz.3.4306" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 469.298113][ T29] audit: type=1400 audit(1763365199.576:940): avc: denied { name_connect } for pid=15672 comm="syz.3.4309" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 469.381046][T15687] loop3: detected capacity change from 0 to 164 [ 469.613243][T15689] loop4: detected capacity change from 0 to 2048 [ 469.623251][T15704] netlink: 'syz.1.4322': attribute type 3 has an invalid length. [ 469.631026][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'. [ 469.651514][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4323'. [ 469.668869][ T3913] loop4: p1 < > p4 [ 469.673375][ T3913] loop4: p4 size 8388608 extends beyond EOD, truncated [ 469.684042][T15689] loop4: p1 < > p4 [ 469.688498][T15689] loop4: p4 size 8388608 extends beyond EOD, truncated [ 469.747425][T15715] loop2: detected capacity change from 0 to 164 [ 469.751556][T15716] tmpfs: Bad value for 'mpol' [ 469.866259][T15724] loop2: detected capacity change from 0 to 512 [ 469.918067][T15724] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 470.133579][T15742] loop1: detected capacity change from 0 to 164 [ 470.148287][T15744] loop0: detected capacity change from 0 to 1024 [ 470.168875][T15744] EXT4-fs: test_dummy_encryption option not supported [ 470.352760][ T29] audit: type=1400 audit(1763365200.636:941): avc: denied { execute } for pid=15753 comm="syz.0.4346" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 470.372055][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4347'. [ 470.463070][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4349'. [ 470.587257][T15759] chnl_net:caif_netlink_parms(): no params data found [ 470.621191][T15759] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.628293][T15759] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.635530][T15759] bridge_slave_0: entered allmulticast mode [ 470.641966][T15759] bridge_slave_0: entered promiscuous mode [ 470.649221][T15759] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.656252][T15759] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.663486][T15759] bridge_slave_1: entered allmulticast mode [ 470.670060][T15759] bridge_slave_1: entered promiscuous mode [ 470.686834][T15759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.697219][T15759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.716497][T15759] team0: Port device team_slave_0 added [ 470.723226][T15759] team0: Port device team_slave_1 added [ 470.740500][T15759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.747433][T15759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.773388][T15759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.785665][T15759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.792726][T15759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.818712][T15759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.943339][T15759] hsr_slave_0: entered promiscuous mode [ 470.949365][T15759] hsr_slave_1: entered promiscuous mode [ 470.956282][T15759] debugfs: 'hsr0' already exists in 'hsr' [ 470.962030][T15759] Cannot create hsr debugfs directory [ 471.014111][ T29] audit: type=1400 audit(1763365201.296:942): avc: denied { name_bind } for pid=15796 comm="syz.3.4357" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 471.072560][ T29] audit: type=1400 audit(1763365201.336:943): avc: denied { write } for pid=15799 comm="syz.3.4358" name="file0" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 471.219513][T15806] loop4: detected capacity change from 0 to 1024 [ 471.232715][T15806] EXT4-fs: test_dummy_encryption option not supported [ 471.305631][T15759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 471.319838][T15759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.329591][T15759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 471.356873][T15806] bridge0: port 4(vlan2) entered blocking state [ 471.363174][T15806] bridge0: port 4(vlan2) entered disabled state [ 471.400477][T15806] vlan2: entered allmulticast mode [ 471.405664][T15806] bridge0: entered allmulticast mode [ 471.438226][T15806] vlan2: left allmulticast mode [ 471.443134][T15806] bridge0: left allmulticast mode [ 471.472271][T15759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 471.580432][ T29] audit: type=1400 audit(1763365201.866:944): avc: denied { mount } for pid=15819 comm="syz.1.4364" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 471.686549][T15759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.716933][T15759] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.736479][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.743546][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.767405][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.774524][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.897754][T15759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.066069][T15860] loop0: detected capacity change from 0 to 1024 [ 472.076786][T15860] EXT4-fs: test_dummy_encryption option not supported [ 472.142955][T15759] veth0_vlan: entered promiscuous mode [ 472.166522][T15759] veth1_vlan: entered promiscuous mode [ 472.184718][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4376'. [ 472.199238][T15759] veth0_macvtap: entered promiscuous mode [ 472.210039][T15759] veth1_macvtap: entered promiscuous mode [ 472.240707][T15759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.251455][T15759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.267916][ T4453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.305412][ T29] audit: type=1400 audit(1763365202.586:945): avc: denied { mount } for pid=15759 comm="syz-executor" name="/" dev="gadgetfs" ino=5297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 472.313276][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4380'. [ 472.335378][ T4453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.346958][ T4453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.347193][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 472.373931][T15883] bond2: option all_slaves_active: invalid value (61) [ 472.382086][T15883] bond2 (unregistering): Released all slaves [ 472.398285][ T4453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.517964][T15887] loop5: detected capacity change from 0 to 2048 [ 472.559233][T15887] loop5: p1 < > p4 [ 472.567875][T15887] loop5: p4 size 8388608 extends beyond EOD, truncated [ 472.576382][T15908] loop4: detected capacity change from 0 to 1024 [ 472.583553][T15909] loop1: detected capacity change from 0 to 512 [ 472.595718][T15908] EXT4-fs: test_dummy_encryption option not supported [ 472.605676][T15909] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.695406][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4394'. [ 472.732094][T15908] bridge0: port 4(vlan2) entered blocking state [ 472.738450][T15908] bridge0: port 4(vlan2) entered disabled state [ 472.758856][T15908] vlan2: entered allmulticast mode [ 472.763982][T15908] bridge0: entered allmulticast mode [ 472.811910][T15908] vlan2: left allmulticast mode [ 472.816786][T15908] bridge0: left allmulticast mode [ 473.278605][T15947] loop5: detected capacity change from 0 to 512 [ 473.315600][T15947] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 473.541998][T15953] xt_TCPMSS: Only works on TCP SYN packets [ 473.936671][T15955] loop4: detected capacity change from 0 to 2048 [ 473.998808][ T3913] loop4: p1 < > p4 [ 474.007453][ T3913] loop4: p4 size 8388608 extends beyond EOD, truncated [ 474.117749][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4418'. [ 474.197954][T15955] loop4: p1 < > p4 [ 474.202723][T15955] loop4: p4 size 8388608 extends beyond EOD, truncated [ 474.249069][T15981] loop3: detected capacity change from 0 to 1024 [ 474.284585][T15981] EXT4-fs: test_dummy_encryption option not supported [ 474.321300][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 474.324025][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 474.363434][T15994] netlink: 'syz.4.4426': attribute type 3 has an invalid length. [ 474.371213][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4426'. [ 474.381615][T15996] loop1: detected capacity change from 0 to 128 [ 474.392026][T15996] tipc: Started in network mode [ 474.396879][T15996] tipc: Node identity 4, cluster identity 4711 [ 474.403121][T15996] tipc: Node number set to 4 [ 474.590807][T16015] loop3: detected capacity change from 0 to 2048 [ 474.676924][T16015] loop3: p1 < > p4 [ 474.681532][T16015] loop3: p4 size 8388608 extends beyond EOD, truncated [ 475.164808][T16031] loop1: detected capacity change from 0 to 1024 [ 475.171422][T16031] EXT4-fs: test_dummy_encryption option not supported [ 475.265782][T16031] bridge0: port 3(vlan2) entered blocking state [ 475.272190][T16031] bridge0: port 3(vlan2) entered disabled state [ 475.278962][T16031] vlan2: entered allmulticast mode [ 475.284118][T16031] bridge0: entered allmulticast mode [ 475.292407][T16031] vlan2: left allmulticast mode [ 475.297259][T16031] bridge0: left allmulticast mode [ 475.435328][T16044] loop4: detected capacity change from 0 to 2048 [ 475.505527][ T3913] loop4: p1 < > p4 [ 475.516839][ T3913] loop4: p4 size 8388608 extends beyond EOD, truncated [ 475.538950][T16044] loop4: p1 < > p4 [ 475.544941][T16044] loop4: p4 size 8388608 extends beyond EOD, truncated [ 475.585813][T16058] loop1: detected capacity change from 0 to 128 [ 475.715294][ T29] audit: type=1400 audit(1763365205.996:946): avc: denied { getopt } for pid=16070 comm="syz.3.4457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 475.874055][T16087] loop3: detected capacity change from 0 to 2048 [ 475.928795][ T3913] loop3: p1 < > p4 [ 475.933063][ T3913] loop3: p4 size 8388608 extends beyond EOD, truncated [ 475.942018][T16087] loop3: p1 < > p4 [ 475.946424][T16087] loop3: p4 size 8388608 extends beyond EOD, truncated [ 476.030337][T16092] bond2: option all_slaves_active: invalid value (61) [ 476.038012][T16092] bond2 (unregistering): Released all slaves [ 476.401614][T16121] loop1: detected capacity change from 0 to 512 [ 476.423728][T16121] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 476.918670][T16159] netlink: 'syz.4.4495': attribute type 1 has an invalid length. [ 476.931163][T16159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.939937][T16159] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 477.409052][T16179] __nla_validate_parse: 1 callbacks suppressed [ 477.409066][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4504'. [ 477.428328][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4504'. [ 477.438263][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4504'. [ 477.861089][T16225] loop5: detected capacity change from 0 to 1024 [ 477.867932][T16225] EXT4-fs: Ignoring removed nobh option [ 477.876249][T16225] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 477.959580][T16225] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.4515: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 477.979626][T16225] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4515: couldn't read orphan inode 11 (err -117) [ 477.993250][T16225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.903350][T16260] loop0: detected capacity change from 0 to 1024 [ 478.919091][T16260] EXT4-fs: test_dummy_encryption option not supported [ 479.196668][T15759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.441457][T16287] netlink: 'syz.0.4548': attribute type 3 has an invalid length. [ 479.449289][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4548'. [ 479.809108][T16296] xt_TCPMSS: Only works on TCP SYN packets [ 481.434864][T16316] loop1: detected capacity change from 0 to 512 [ 481.463957][ T29] audit: type=1326 audit(1763365211.066:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.487382][ T29] audit: type=1326 audit(1763365211.066:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.510848][ T29] audit: type=1326 audit(1763365211.076:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.534334][ T29] audit: type=1326 audit(1763365211.076:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.557755][ T29] audit: type=1326 audit(1763365211.076:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.581098][ T29] audit: type=1326 audit(1763365211.076:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.604507][ T29] audit: type=1326 audit(1763365211.076:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.627952][ T29] audit: type=1326 audit(1763365211.406:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.634577][T16323] loop5: detected capacity change from 0 to 128 [ 481.651346][ T29] audit: type=1326 audit(1763365211.406:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.665281][T16323] tipc: Started in network mode [ 481.680942][ T29] audit: type=1326 audit(1763365211.436:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.3.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f1e3fe7f6c9 code=0x7ffc0000 [ 481.685811][T16323] tipc: Node identity 4, cluster identity 4711 [ 481.715192][T16323] tipc: Node number set to 4 [ 481.784161][T16310] loop3: detected capacity change from 0 to 2048 [ 481.859212][T16310] loop3: p1 < > p4 [ 481.873100][T16310] loop3: p4 size 8388608 extends beyond EOD, truncated [ 481.939897][T16337] netlink: 'syz.4.4568': attribute type 3 has an invalid length. [ 481.947644][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4568'. [ 482.001555][T16341] syzkaller0: entered promiscuous mode [ 482.007034][T16341] syzkaller0: entered allmulticast mode [ 482.972159][T16380] syzkaller0: entered promiscuous mode [ 482.977657][T16380] syzkaller0: entered allmulticast mode [ 483.037286][T16376] loop4: detected capacity change from 0 to 2048 [ 483.103041][T16395] netlink: 'syz.1.4591': attribute type 3 has an invalid length. [ 483.110844][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4591'. [ 483.120450][T16376] loop4: p1 < > p4 [ 483.127508][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 483.129406][T16376] loop4: p4 size 8388608 extends beyond EOD, truncated [ 483.148799][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 483.159277][ T3003] loop4: p1 < > p4 [ 483.164964][ T3003] loop4: p4 size 8388608 extends beyond EOD, truncated [ 483.185204][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 483.243084][T16402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4594'. [ 483.278640][T16402] bond1: option all_slaves_active: invalid value (61) [ 483.299140][T16402] bond1 (unregistering): Released all slaves [ 483.555569][T16424] netlink: 'syz.1.4603': attribute type 3 has an invalid length. [ 483.563343][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 483.897465][T16444] loop1: detected capacity change from 0 to 2048 [ 483.958801][T12298] loop1: p1 < > p4 [ 483.968697][T12298] loop1: p4 size 8388608 extends beyond EOD, truncated [ 484.006381][T16444] loop1: p1 < > p4 [ 484.010861][T16444] loop1: p4 size 8388608 extends beyond EOD, truncated [ 484.240222][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4622'. [ 484.254330][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4622'. [ 484.263687][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4622'. [ 484.402095][T16484] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4629'. [ 484.516677][T16492] netlink: 'syz.0.4633': attribute type 3 has an invalid length. [ 484.586607][T16499] veth1_to_batadv: vlans aren't supported yet for dev_uc|mc_add() [ 484.946976][T16488] loop4: detected capacity change from 0 to 2048 [ 485.010459][T12298] loop4: p1 < > p4 [ 485.020110][T12298] loop4: p4 size 8388608 extends beyond EOD, truncated [ 485.453660][T16488] loop4: p1 < > p4 [ 485.463024][T16488] loop4: p4 size 8388608 extends beyond EOD, truncated [ 485.572193][T16527] netlink: 'syz.4.4646': attribute type 3 has an invalid length. [ 486.112568][T16554] loop0: detected capacity change from 0 to 2048 [ 486.166735][T16563] netlink: 'syz.5.4660': attribute type 3 has an invalid length. [ 486.178913][ T3913] loop0: p1 < > p4 [ 486.183743][ T3913] loop0: p4 size 8388608 extends beyond EOD, truncated [ 486.203179][T16554] loop0: p1 < > p4 [ 486.210917][T16554] loop0: p4 size 8388608 extends beyond EOD, truncated [ 486.402485][T16578] loop0: detected capacity change from 0 to 512 [ 486.428744][T16578] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 486.840946][T16619] loop5: detected capacity change from 0 to 512 [ 486.893074][ T6037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.940299][T16605] chnl_net:caif_netlink_parms(): no params data found [ 486.961726][ T6037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.987319][T16605] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.994359][T16605] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.001685][T16605] bridge_slave_0: entered allmulticast mode [ 487.007967][T16605] bridge_slave_0: entered promiscuous mode [ 487.014875][T16605] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.022010][T16605] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.034854][T16605] bridge_slave_1: entered allmulticast mode [ 487.041338][T16605] bridge_slave_1: entered promiscuous mode [ 487.061492][ T6037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.073825][T16605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.084560][T16605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.105324][T16605] team0: Port device team_slave_0 added [ 487.112305][T16605] team0: Port device team_slave_1 added [ 487.127525][ T6037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.149890][T16605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.156920][T16605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.182906][T16605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.214612][T16605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.221587][T16605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.247606][T16605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.303704][T16605] hsr_slave_0: entered promiscuous mode [ 487.310869][T16605] hsr_slave_1: entered promiscuous mode [ 487.325505][T16605] debugfs: 'hsr0' already exists in 'hsr' [ 487.331300][T16605] Cannot create hsr debugfs directory [ 487.351380][T16640] bridge1: entered allmulticast mode [ 487.358148][T16640] team0: Failed to send options change via netlink (err -105) [ 487.365647][T16640] team0: Port device bridge1 added [ 487.447644][T16647] xt_TCPMSS: Only works on TCP SYN packets [ 487.502181][ T6037] gretap0: left allmulticast mode [ 487.507237][ T6037] gretap0: left promiscuous mode [ 487.512350][ T6037] bridge0: port 3(gretap0) entered disabled state [ 487.565524][ T6037] bridge_slave_1: left allmulticast mode [ 487.571288][ T6037] bridge_slave_1: left promiscuous mode [ 487.576949][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.725375][T16653] xt_TCPMSS: Only works on TCP SYN packets [ 487.801633][ T6037] bridge_slave_0: left allmulticast mode [ 487.807349][ T6037] bridge_slave_0: left promiscuous mode [ 487.812995][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.127950][T16662] __nla_validate_parse: 10 callbacks suppressed [ 488.127967][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4696'. [ 488.146230][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.155925][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.167464][ T6037] bond0 (unregistering): Released all slaves [ 488.237684][T16663] bond3: option all_slaves_active: invalid value (61) [ 488.245435][T16663] bond3 (unregistering): Released all slaves [ 488.301124][T16605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 488.310832][T16605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 488.319982][T16605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 488.329055][T16605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 488.364398][T16605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.382075][T16605] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.391799][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.398889][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.436467][ T6037] hsr_slave_0: left promiscuous mode [ 488.442571][ T6037] hsr_slave_1: left promiscuous mode [ 488.448062][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.455458][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.463639][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.471146][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.481791][ T6037] team_slave_0: left promiscuous mode [ 488.487226][ T6037] team_slave_1: left promiscuous mode [ 488.495387][ T6037] veth1_macvtap: left promiscuous mode [ 488.502112][ T6037] veth0_macvtap: left promiscuous mode [ 488.507689][ T6037] veth1_vlan: left promiscuous mode [ 488.513241][ T6037] veth0_vlan: left promiscuous mode [ 488.581265][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 488.593096][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 488.635694][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.642775][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.659445][T16605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 488.669894][T16605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.727123][T16605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.878334][T16605] veth0_vlan: entered promiscuous mode [ 488.886372][T16605] veth1_vlan: entered promiscuous mode [ 488.908142][T16605] veth0_macvtap: entered promiscuous mode [ 488.929784][T16605] veth1_macvtap: entered promiscuous mode [ 488.947747][T16605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.957305][T16605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.967434][ T4982] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.976791][ T4982] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.986797][ T4982] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.996890][ T4982] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.225761][T16733] xt_TCPMSS: Only works on TCP SYN packets [ 489.549357][T16739] xt_TCPMSS: Only works on TCP SYN packets [ 489.555636][T16739] bridge0: port 3(gretap0) entered blocking state [ 489.562149][T16739] bridge0: port 3(gretap0) entered disabled state [ 489.568700][T16739] gretap0: entered allmulticast mode [ 489.574461][T16739] gretap0: entered promiscuous mode [ 489.579955][T16739] bridge0: port 3(gretap0) entered blocking state [ 489.586435][T16739] bridge0: port 3(gretap0) entered forwarding state [ 490.097061][T16747] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4721'. [ 490.184722][T16762] loop5: detected capacity change from 0 to 1024 [ 490.202556][T16762] EXT4-fs: test_dummy_encryption option not supported [ 490.628987][T16769] xt_TCPMSS: Only works on TCP SYN packets [ 490.654280][T16770] bridge0: port 3(vlan2) entered blocking state [ 490.660594][T16770] bridge0: port 3(vlan2) entered disabled state [ 490.739727][T16770] vlan2: entered allmulticast mode [ 490.744879][T16770] bridge0: entered allmulticast mode [ 490.782147][T16770] vlan2: left allmulticast mode [ 490.787054][T16770] bridge0: left allmulticast mode [ 491.565946][T16801] xt_TCPMSS: Only works on TCP SYN packets [ 492.334938][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4749'. [ 492.384094][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4749'. [ 492.425241][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4749'. [ 492.435555][T16824] loop5: detected capacity change from 0 to 128 [ 492.768821][T16845] loop6: detected capacity change from 0 to 1024 [ 492.787352][T16845] EXT4-fs: test_dummy_encryption option not supported [ 492.888714][T16845] bridge0: port 4(vlan2) entered blocking state [ 492.895055][T16845] bridge0: port 4(vlan2) entered disabled state [ 492.901837][T16845] vlan2: entered allmulticast mode [ 492.907025][T16845] bridge0: entered allmulticast mode [ 492.927215][T16845] vlan2: left allmulticast mode [ 492.932284][T16845] bridge0: left allmulticast mode [ 492.976154][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4765'. [ 493.480766][T16908] loop1: detected capacity change from 0 to 128 [ 493.762218][T16918] sctp: [Deprecated]: syz.4.4793 (pid 16918) Use of int in max_burst socket option. [ 493.762218][T16918] Use struct sctp_assoc_value instead [ 494.262307][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4801'. [ 494.825056][T16978] loop4: detected capacity change from 0 to 128 [ 495.019178][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 495.019293][ T29] audit: type=1400 audit(1763365225.306:962): avc: denied { unmount } for pid=12268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 495.688550][ T29] audit: type=1400 audit(1763365225.936:963): avc: denied { execute } for pid=17013 comm="syz.4.4835" path="/383/cpuacct.usage_sys" dev="tmpfs" ino=2013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 496.029539][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4846'. [ 496.224392][T17051] loop5: detected capacity change from 0 to 512 [ 496.230943][T17051] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 496.446517][T17062] loop1: detected capacity change from 0 to 128 [ 496.471605][ T6037] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.562264][ T6037] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.662808][ T6037] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.712629][ T6037] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.723761][T17066] chnl_net:caif_netlink_parms(): no params data found [ 496.761507][T17066] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.768602][T17066] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.775772][T17066] bridge_slave_0: entered allmulticast mode [ 496.782880][T17066] bridge_slave_0: entered promiscuous mode [ 496.817187][ T6037] bridge_slave_1: left allmulticast mode [ 496.822919][ T6037] bridge_slave_1: left promiscuous mode [ 496.828603][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.839345][ T6037] bridge_slave_0: left allmulticast mode [ 496.844982][ T6037] bridge_slave_0: left promiscuous mode [ 496.850777][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.930476][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.941016][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.951204][ T6037] bond0 (unregistering): Released all slaves [ 496.960544][T17066] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.967653][T17066] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.975517][T17066] bridge_slave_1: entered allmulticast mode [ 496.984105][T17066] bridge_slave_1: entered promiscuous mode [ 496.991459][ T6037] tipc: Left network mode [ 497.003900][ T6037] hsr_slave_0: left promiscuous mode [ 497.009625][ T6037] hsr_slave_1: left promiscuous mode [ 497.015180][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.022609][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.030330][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.037698][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.048597][ T6037] veth1_macvtap: left promiscuous mode [ 497.054089][ T6037] veth0_macvtap: left promiscuous mode [ 497.060531][ T6037] veth1_vlan: left promiscuous mode [ 497.065765][ T6037] veth0_vlan: left promiscuous mode [ 497.132513][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 497.142350][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 497.175453][T17066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.186283][T17066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.226356][T17090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4860'. [ 497.236946][T17066] team0: Port device team_slave_0 added [ 497.237024][ T29] audit: type=1400 audit(1763365227.526:964): avc: denied { ioctl } for pid=17089 comm="syz.1.4860" path="socket:[50297]" dev="sockfs" ino=50297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 497.243817][T17066] team0: Port device team_slave_1 added [ 497.285818][T17066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.292787][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.318879][T17066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.342652][T17066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.349632][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.375622][T17066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.433476][T17066] hsr_slave_0: entered promiscuous mode [ 497.441857][T17066] hsr_slave_1: entered promiscuous mode [ 497.447764][T17066] debugfs: 'hsr0' already exists in 'hsr' [ 497.453517][T17066] Cannot create hsr debugfs directory [ 497.545245][T17112] loop3: detected capacity change from 0 to 512 [ 497.556044][T17112] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 497.629881][ T29] audit: type=1400 audit(1763365227.916:965): avc: denied { connect } for pid=17116 comm="syz.1.4871" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 497.645294][T17066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 497.693351][T17066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 497.704708][T17066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 497.709926][T17066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 497.792344][T17066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.806623][T17066] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.823361][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.830506][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.857305][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.857341][ T4982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.963678][T17066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.189769][T17066] veth0_vlan: entered promiscuous mode [ 498.196297][T17066] veth1_vlan: entered promiscuous mode [ 498.220102][T17066] veth0_macvtap: entered promiscuous mode [ 498.226069][T17066] veth1_macvtap: entered promiscuous mode [ 498.237392][T17066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.241075][T17066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.244175][ T6037] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.244272][ T6037] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.244323][ T6037] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.244357][ T6037] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.319340][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4855'. [ 498.341321][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4855'. [ 498.341625][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4855'. [ 498.527814][T17166] loop7: detected capacity change from 0 to 512 [ 498.591396][T17172] loop7: detected capacity change from 0 to 128 [ 498.607145][T17172] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 498.626966][T17172] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 498.655049][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4888'. [ 498.679551][ T41] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 498.913778][T17207] loop6: detected capacity change from 0 to 764 [ 498.927448][T17207] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 499.135954][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4907'. [ 499.150249][T17229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.536953][T17250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.582560][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4918'. [ 499.759886][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4931'. [ 499.780830][T17283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.895572][T17300] loop3: detected capacity change from 0 to 128 [ 500.061535][T17314] loop7: detected capacity change from 0 to 8192 [ 500.079457][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4947'. [ 500.114709][T17320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.115042][T17325] program syz.4.4948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.138225][T17320] bond1: entered allmulticast mode [ 500.396536][ T29] audit: type=1400 audit(1763365230.676:966): avc: denied { mount } for pid=17356 comm="syz.7.4963" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 500.418855][ T29] audit: type=1400 audit(1763365230.676:967): avc: denied { mounton } for pid=17356 comm="syz.7.4963" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 500.440467][ T29] audit: type=1400 audit(1763365230.676:968): avc: denied { mounton } for pid=17356 comm="syz.7.4963" path="/" dev="ramfs" ino=50906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 500.462497][ T29] audit: type=1400 audit(1763365230.746:969): avc: denied { unmount } for pid=17066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 501.043161][T17376] loop1: detected capacity change from 0 to 512 [ 501.203636][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4984'. [ 501.222913][T17398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 501.232707][T17398] bond4: entered allmulticast mode [ 501.726122][ T4455] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.802445][ T4455] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.947655][ T4455] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.137074][ T4455] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.231333][ T29] audit: type=1400 audit(2000000001.029:970): avc: denied { kexec_image_load } for pid=17438 comm="syz.1.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 502.254329][ T29] audit: type=1400 audit(2000000001.059:971): avc: denied { setattr } for pid=17443 comm="syz.1.5002" name="ns" dev="proc" ino=51154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 502.300710][ T4455] bridge_slave_1: left allmulticast mode [ 502.306375][ T4455] bridge_slave_1: left promiscuous mode [ 502.312084][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.461300][ T4455] bridge_slave_0: left allmulticast mode [ 502.466963][ T4455] bridge_slave_0: left promiscuous mode [ 502.472594][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.074152][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.086424][ T29] audit: type=1400 audit(2000000001.879:972): avc: denied { name_bind } for pid=17459 comm="syz.6.5007" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 503.116328][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.145552][ T4455] bond0 (unregistering): Released all slaves [ 503.345748][ T4455] hsr_slave_0: left promiscuous mode [ 503.372369][ T4455] hsr_slave_1: left promiscuous mode [ 503.384477][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.391974][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.418594][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.425986][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.462330][ T4455] veth1_macvtap: left promiscuous mode [ 503.484284][ T4455] veth0_macvtap: left promiscuous mode [ 503.490102][ T4455] veth1_vlan: left promiscuous mode [ 503.499969][ T4455] veth0_vlan: left promiscuous mode [ 503.575617][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 503.587168][ T4455] team0 (unregistering): Port device team_slave_0 removed [ 503.651180][T17433] chnl_net:caif_netlink_parms(): no params data found [ 503.695940][T17433] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.703035][T17433] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.718001][T17433] bridge_slave_0: entered allmulticast mode [ 503.738246][T17433] bridge_slave_0: entered promiscuous mode [ 503.753306][T17433] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.760446][T17433] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.774518][T17433] bridge_slave_1: entered allmulticast mode [ 503.781348][T17433] bridge_slave_1: entered promiscuous mode [ 503.802957][T17433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.813197][T17433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.834933][T17433] team0: Port device team_slave_0 added [ 503.841493][T17433] team0: Port device team_slave_1 added [ 503.860527][T17433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.867691][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.892113][ T29] audit: type=1400 audit(2000000002.699:973): avc: denied { setattr } for pid=17501 comm="syz.3.5022" name="raw6" dev="proc" ino=4026533577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 503.894005][T17433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.930216][T17433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.937170][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.963121][T17433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.996501][T17433] hsr_slave_0: entered promiscuous mode [ 504.003244][T17433] hsr_slave_1: entered promiscuous mode [ 504.009501][T17433] debugfs: 'hsr0' already exists in 'hsr' [ 504.015274][T17433] Cannot create hsr debugfs directory [ 504.070561][T17519] loop6: detected capacity change from 0 to 128 [ 504.077276][T17519] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 504.093557][T17519] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 504.135148][T17433] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 504.143890][T17433] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 504.152333][T17433] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 504.160512][T17433] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 504.182203][T17433] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.189281][T17433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.196588][T17433] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.203705][T17433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.241426][T17433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.253589][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.261693][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.273806][T17433] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.283434][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.290571][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.305033][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.312094][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.407423][T17537] xt_TCPMSS: Only works on TCP SYN packets [ 504.768016][T17433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.146927][T17578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5043'. [ 505.188319][T17433] veth0_vlan: entered promiscuous mode [ 505.203272][T17433] veth1_vlan: entered promiscuous mode [ 505.239914][T17433] veth0_macvtap: entered promiscuous mode [ 505.258246][T17433] veth1_macvtap: entered promiscuous mode [ 505.273323][T17433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.284008][T17433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.297185][T17550] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.328931][T17550] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.354993][T17550] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.384367][T17550] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.426747][T17592] loop3: detected capacity change from 0 to 1024 [ 505.443780][T17592] EXT4-fs: test_dummy_encryption option not supported [ 505.558349][T17606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5054'. [ 505.758836][T17623] loop8: detected capacity change from 0 to 128 [ 505.772448][T17623] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 505.790471][T17625] program syz.6.5063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.803113][T17623] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 505.862461][T17635] loop8: detected capacity change from 0 to 1024 [ 505.869579][T17635] EXT4-fs: test_dummy_encryption option not supported [ 505.904249][T17642] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5070'. [ 505.962146][T17635] bridge0: port 3(vlan2) entered blocking state [ 505.968513][T17635] bridge0: port 3(vlan2) entered disabled state [ 505.974942][T17635] vlan2: entered allmulticast mode [ 505.980079][T17635] bridge0: entered allmulticast mode [ 505.985829][T17635] vlan2: left allmulticast mode [ 505.990696][T17635] bridge0: left allmulticast mode [ 506.038102][T17651] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 506.038102][T17651] The task syz.4.5072 (17651) triggered the difference, watch for misbehavior. [ 506.129397][T17661] program syz.8.5078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.655807][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5081'. [ 506.679345][T17669] team0: No ports can be present during mode change [ 506.789250][T17676] program syz.4.5085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.836231][T17682] loop1: detected capacity change from 0 to 256 [ 506.904940][T17695] loop1: detected capacity change from 0 to 736 [ 506.957839][T17703] program syz.4.5098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.037353][ T29] audit: type=1400 audit(2000000000.939:974): avc: denied { execute_no_trans } for pid=17706 comm="syz.3.5100" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 507.569531][T17735] program syz.6.5112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.903781][T17753] loop4: detected capacity change from 0 to 128 [ 507.910665][T17753] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 507.923028][T17753] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.942262][ T4453] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.991207][T17761] program syz.4.5124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.013691][ T29] audit: type=1400 audit(2000000001.919:975): avc: denied { ioctl } for pid=17762 comm="syz.4.5125" path="socket:[53442]" dev="sockfs" ino=53442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.075008][T17767] loop4: detected capacity change from 0 to 1024 [ 508.081752][T17767] EXT4-fs: test_dummy_encryption option not supported [ 508.161984][T17767] bridge0: port 4(vlan2) entered blocking state [ 508.168289][T17767] bridge0: port 4(vlan2) entered disabled state [ 508.174727][T17767] vlan2: entered allmulticast mode [ 508.179856][T17767] bridge0: entered allmulticast mode [ 508.185501][T17767] vlan2: left allmulticast mode [ 508.190391][T17767] bridge0: left allmulticast mode [ 508.441133][T17780] loop4: detected capacity change from 0 to 128 [ 508.448076][T17780] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 508.460637][T17780] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 508.482242][ T4470] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 508.727570][T17811] loop3: detected capacity change from 0 to 128 [ 508.736153][T17811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5147'. [ 508.756462][ T29] audit: type=1400 audit(2000000002.659:976): avc: denied { setattr } for pid=17812 comm="syz.6.5148" name="event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 509.017166][ T29] audit: type=1400 audit(2000000002.919:977): avc: denied { mount } for pid=17841 comm="syz.3.5160" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 509.039271][ T29] audit: type=1400 audit(2000000002.919:978): avc: denied { mounton } for pid=17841 comm="syz.3.5160" path="/442/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 509.076591][ T29] audit: type=1400 audit(2000000002.979:979): avc: denied { unmount } for pid=12268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 509.295862][T17852] chnl_net:caif_netlink_parms(): no params data found [ 509.351086][T17852] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.358179][T17852] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.374700][T17852] bridge_slave_0: entered allmulticast mode [ 509.381498][T17852] bridge_slave_0: entered promiscuous mode [ 509.388204][T17852] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.395328][T17852] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.403595][T17852] bridge_slave_1: entered allmulticast mode [ 509.410469][T17852] bridge_slave_1: entered promiscuous mode [ 509.431306][T17852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.450128][T17852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.484586][ T29] audit: type=1326 audit(2000000003.379:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.4.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b29f6c9 code=0x7ffc0000 [ 509.508040][ T29] audit: type=1326 audit(2000000003.379:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.4.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b29f6c9 code=0x7ffc0000 [ 509.531420][ T29] audit: type=1326 audit(2000000003.389:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.4.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f272b29f6c9 code=0x7ffc0000 [ 509.555074][ T29] audit: type=1326 audit(2000000003.389:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.4.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272b29f6c9 code=0x7ffc0000 [ 509.596162][T17852] team0: Port device team_slave_0 added [ 509.602697][T17852] team0: Port device team_slave_1 added [ 509.620493][T17852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.627478][T17852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.653418][T17852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.664782][T17852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.671760][T17852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.697672][T17852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.731531][T17890] loop4: detected capacity change from 0 to 512 [ 509.738153][T17852] hsr_slave_0: entered promiscuous mode [ 509.753297][T17852] hsr_slave_1: entered promiscuous mode [ 509.760226][T17852] debugfs: 'hsr0' already exists in 'hsr' [ 509.765975][T17852] Cannot create hsr debugfs directory [ 509.885341][T17852] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 509.896754][T17852] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 509.905450][T17852] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 509.914865][T17852] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 509.965582][T17900] xt_TCPMSS: Only works on TCP SYN packets [ 510.033893][T17900] bridge0: port 3(gretap0) entered blocking state [ 510.040391][T17900] bridge0: port 3(gretap0) entered disabled state [ 510.046964][T17900] gretap0: entered allmulticast mode [ 510.053191][T17900] gretap0: entered promiscuous mode [ 510.058597][T17900] bridge0: port 3(gretap0) entered blocking state [ 510.065015][T17900] bridge0: port 3(gretap0) entered forwarding state [ 510.266060][T17852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.371644][T17852] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.442906][T17550] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.449975][T17550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.484697][T17916] program syz.6.5183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.533815][T17550] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.540945][T17550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.698080][T17852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.708502][T17852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.292312][T17852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.098501][T17953] loop1: detected capacity change from 0 to 128 [ 513.268518][T17958] xt_TCPMSS: Only works on TCP SYN packets [ 513.708754][T17960] program syz.4.5196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.740143][T17962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5197'. [ 514.327230][T17978] loop4: detected capacity change from 0 to 128 [ 514.346922][T17978] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 514.373623][T17978] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 514.384581][T17978] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 514.393127][T17978] FAT-fs (loop4): Filesystem has been set read-only [ 514.459040][T17986] loop8: detected capacity change from 0 to 764 [ 514.468224][T17986] rock: directory entry would overflow storage [ 514.474513][T17986] rock: sig=0x4654, size=5, remaining=4 [ 514.493528][T17987] loop4: detected capacity change from 0 to 128 [ 514.635726][T17852] veth0_vlan: entered promiscuous mode [ 514.645673][T17852] veth1_vlan: entered promiscuous mode [ 514.664357][T17852] veth0_macvtap: entered promiscuous mode [ 514.671762][T17852] veth1_macvtap: entered promiscuous mode [ 514.682470][T17852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.693633][T17852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.704754][ T4982] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.736501][ T4982] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.745802][ T4982] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.755591][ T4982] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.854712][T18004] loop9: detected capacity change from 0 to 736 [ 514.959229][T18008] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5213'. [ 515.526598][T18024] loop4: detected capacity change from 0 to 2048 [ 515.696809][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5225'. [ 516.009678][T18036] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5225'. [ 516.024791][T18024] loop4: p1 p3 p4 [ 516.039647][T18024] loop4: p4 size 589824 extends beyond EOD, truncated [ 516.559766][T18038] loop8: detected capacity change from 0 to 128 [ 516.577770][T18038] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 516.619019][ T3003] loop4: p1 p3 p4 [ 516.633935][ T3003] loop4: p4 size 589824 extends beyond EOD, truncated [ 516.664476][T18038] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 516.692280][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 516.717933][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 516.729378][T12298] udevd[12298]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 516.776758][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5234'. [ 516.792771][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 516.803687][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 516.816856][T12298] udevd[12298]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 516.828135][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5234'. [ 516.847678][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5234'. [ 516.919046][ T4460] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 517.040618][T18065] loop8: detected capacity change from 0 to 2048 [ 517.055731][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 517.055745][ T29] audit: type=1400 audit(2000000001.919:987): avc: denied { watch watch_reads } for pid=18068 comm="syz.6.5240" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 517.157019][T18078] loop1: detected capacity change from 0 to 512 [ 517.166898][T18078] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 517.288586][ T29] audit: type=1400 audit(2000000002.119:988): avc: denied { mounton } for pid=18076 comm="syz.1.5243" path="/413/file1/file0" dev="loop1" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 517.518428][T18092] loop6: detected capacity change from 0 to 736 [ 517.658224][ T3913] loop8: p1 < > p4 [ 517.663612][ T3913] loop8: p4 size 8388608 extends beyond EOD, truncated [ 518.067920][T18065] loop8: p1 < > p4 [ 518.076883][T18065] loop8: p4 size 8388608 extends beyond EOD, truncated [ 518.195219][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 518.205800][T12298] udevd[12298]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 518.240744][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 518.251647][T12298] udevd[12298]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 518.283356][T18114] loop8: detected capacity change from 0 to 8192 [ 518.388728][T18118] program syz.1.5260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.426009][T18114] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.492427][ T29] audit: type=1400 audit(2000000001.019:989): avc: denied { watch watch_reads } for pid=18113 comm="syz.8.5258" path="/36/file1" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 518.565909][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5265'. [ 518.646836][T18139] loop1: detected capacity change from 0 to 2048 [ 518.711631][T18139] loop1: p1 < > p4 [ 518.738371][T18139] loop1: p4 size 8388608 extends beyond EOD, truncated [ 518.757440][ T3003] loop1: p1 < > p4 [ 518.771423][ T3003] loop1: p4 size 8388608 extends beyond EOD, truncated [ 518.871513][ T3003] loop1: p1 < > p4 [ 518.892024][ T3003] loop1: p4 size 8388608 extends beyond EOD, truncated [ 519.020542][T18159] xt_TCPMSS: Only works on TCP SYN packets [ 519.027140][T18159] bridge0: port 3(gretap0) entered blocking state [ 519.033586][T18159] bridge0: port 3(gretap0) entered disabled state [ 519.040333][T18159] gretap0: entered allmulticast mode [ 519.046424][T18159] gretap0: entered promiscuous mode [ 519.051941][T18159] bridge0: port 3(gretap0) entered blocking state [ 519.058358][T18159] bridge0: port 3(gretap0) entered forwarding state [ 519.517607][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5277'. [ 519.578520][ T29] audit: type=1400 audit(2000000002.089:990): avc: denied { write } for pid=18163 comm="syz.6.5281" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 519.602704][ T29] audit: type=1400 audit(2000000002.089:991): avc: denied { open } for pid=18163 comm="syz.6.5281" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 519.703746][ T29] audit: type=1400 audit(2000000002.219:992): avc: denied { setopt } for pid=18169 comm="syz.6.5283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 520.041455][ T29] audit: type=1400 audit(2000000000.259:993): avc: denied { read } for pid=18192 comm="syz.8.5291" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 520.064523][ T29] audit: type=1400 audit(2000000000.259:994): avc: denied { open } for pid=18192 comm="syz.8.5291" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 520.222159][ T6036] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.353375][ T6036] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.424422][ T6036] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.447250][T18219] loop4: detected capacity change from 0 to 128 [ 520.515364][ T6036] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.641533][ T6036] gretap0: left allmulticast mode [ 520.646586][ T6036] gretap0: left promiscuous mode [ 520.651691][ T6036] bridge0: port 3(gretap0) entered disabled state [ 520.669123][ T6036] bridge_slave_1: left allmulticast mode [ 520.674821][ T6036] bridge_slave_1: left promiscuous mode [ 520.680475][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.703883][ T6036] bridge_slave_0: left allmulticast mode [ 520.709570][ T6036] bridge_slave_0: left promiscuous mode [ 520.715247][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.763259][T18243] loop4: detected capacity change from 0 to 128 [ 520.870809][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.879488][T18252] loop4: detected capacity change from 0 to 8192 [ 520.886150][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.887774][T18252] msdos: Unknown parameter 'flush [ 520.887774][T18252] appraise_type' [ 520.907417][ T6036] bond0 (unregistering): Released all slaves [ 520.966806][ T6036] hsr_slave_0: left promiscuous mode [ 520.972668][ T6036] hsr_slave_1: left promiscuous mode [ 520.978972][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.986351][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.994098][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.001560][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.019030][ T6036] veth1_macvtap: left promiscuous mode [ 521.024517][ T6036] veth0_macvtap: left promiscuous mode [ 521.032511][ T6036] veth1_vlan: left promiscuous mode [ 521.037765][ T6036] veth0_vlan: left promiscuous mode [ 521.049322][T18266] loop4: detected capacity change from 0 to 256 [ 521.079291][T18266] FAT-fs (loop4): Directory bread(block 64) failed [ 521.085898][T18266] FAT-fs (loop4): Directory bread(block 65) failed [ 521.093016][T18266] FAT-fs (loop4): Directory bread(block 66) failed [ 521.099561][T18266] FAT-fs (loop4): Directory bread(block 67) failed [ 521.106159][T18266] FAT-fs (loop4): Directory bread(block 68) failed [ 521.113994][T18266] FAT-fs (loop4): Directory bread(block 69) failed [ 521.120673][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 521.120694][T18266] FAT-fs (loop4): Directory bread(block 70) failed [ 521.134420][T18266] FAT-fs (loop4): Directory bread(block 71) failed [ 521.134596][ T6036] team0 (unregistering): Port device team_slave_0 removed [ 521.141097][T18266] FAT-fs (loop4): Directory bread(block 72) failed [ 521.154909][T18266] FAT-fs (loop4): Directory bread(block 73) failed [ 521.184624][T18204] chnl_net:caif_netlink_parms(): no params data found [ 521.240735][T18204] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.247823][T18204] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.250252][T18276] program syz.4.5322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.255346][T18204] bridge_slave_0: entered allmulticast mode [ 521.271231][T18204] bridge_slave_0: entered promiscuous mode [ 521.277884][T18204] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.285121][T18204] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.292645][T18204] bridge_slave_1: entered allmulticast mode [ 521.299517][T18204] bridge_slave_1: entered promiscuous mode [ 521.313491][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5323'. [ 521.332166][T18204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.346844][T18204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.370850][T18204] team0: Port device team_slave_0 added [ 521.377715][T18204] team0: Port device team_slave_1 added [ 521.396253][T18204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.403227][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.429251][T18204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.447380][T18204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.449940][T18286] xt_hashlimit: size too large, truncated to 1048576 [ 521.454370][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.486914][T18204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.497697][T18287] loop1: detected capacity change from 0 to 512 [ 521.515690][T18204] hsr_slave_0: entered promiscuous mode [ 521.521863][T18204] hsr_slave_1: entered promiscuous mode [ 521.527812][T18204] debugfs: 'hsr0' already exists in 'hsr' [ 521.533557][T18204] Cannot create hsr debugfs directory [ 521.582706][T18287] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 521.619311][T18292] loop4: detected capacity change from 0 to 1764 [ 521.648958][T18292] ISOFS: unable to read i-node block [ 521.683528][T18204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.733529][T18300] program syz.1.5332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.746228][T18204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.811052][T18204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.833757][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5338'. [ 521.861579][T18204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.913563][T18325] program syz.4.5343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.942710][T18204] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 521.965312][T18204] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 521.973560][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5346'. [ 521.974464][T18204] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 521.982521][T18331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5346'. [ 522.001253][T18204] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 522.026676][T18204] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.033856][T18204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.041181][T18204] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.048253][T18204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.073421][T18204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.088328][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.096367][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.109107][T18204] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.118872][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.125925][ T4982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.135843][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.142962][ T4982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.197194][T18204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.249845][T18204] veth0_vlan: entered promiscuous mode [ 522.257221][T18204] veth1_vlan: entered promiscuous mode [ 522.271735][T18204] veth0_macvtap: entered promiscuous mode [ 522.278975][T18204] veth1_macvtap: entered promiscuous mode [ 522.289178][T18204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.299499][T18204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.310186][ T4453] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.319069][ T4453] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.331042][ T6036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.340155][ T6036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.823037][T18386] ucma_write: process 1068 (syz.1.5362) changed security contexts after opening file descriptor, this is not allowed. [ 522.856447][T18390] 9pnet_fd: Insufficient options for proto=fd [ 522.914758][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5369'. [ 522.971240][T18408] batadv_slave_1: entered promiscuous mode [ 523.047642][T18414] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5376'. [ 523.101190][ T29] audit: type=1326 audit(2000000003.319:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18407 comm="syz.6.5373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6ec4bf6c9 code=0x0 [ 523.136007][T18418] 9pnet_fd: Insufficient options for proto=fd [ 523.211350][T18416] loop6: detected capacity change from 0 to 128 [ 523.227731][T18416] FAT-fs (loop6): Directory bread(block 32) failed [ 523.244830][T18416] FAT-fs (loop6): Directory bread(block 33) failed [ 523.248006][T18432] program syz.2.5384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.260744][T18416] FAT-fs (loop6): Directory bread(block 34) failed [ 523.275823][T18416] FAT-fs (loop6): Directory bread(block 35) failed [ 523.284000][T18416] FAT-fs (loop6): Directory bread(block 36) failed [ 523.291105][T18416] FAT-fs (loop6): Directory bread(block 37) failed [ 523.297847][T18416] FAT-fs (loop6): Directory bread(block 38) failed [ 523.309332][T18416] FAT-fs (loop6): Directory bread(block 39) failed [ 523.316407][ T29] audit: type=1400 audit(2000000003.529:996): avc: denied { map } for pid=18434 comm="syz.1.5385" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 523.345739][T18416] FAT-fs (loop6): Directory bread(block 40) failed [ 523.361577][T18416] FAT-fs (loop6): Directory bread(block 41) failed [ 523.379350][T18443] 9pnet_fd: Insufficient options for proto=fd [ 523.399672][ T29] audit: type=1400 audit(2000000003.619:997): avc: denied { read } for pid=18445 comm="syz.4.5391" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 523.436571][T18416] batadv_slave_1: left promiscuous mode [ 523.499729][T18461] program syz.4.5398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.563102][ T29] audit: type=1326 audit(2000000003.779:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18472 comm="syz.9.5404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03cfe5f6c9 code=0x0 [ 523.615071][ T29] audit: type=1326 audit(2000000003.829:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.1.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 523.640820][ T29] audit: type=1326 audit(2000000003.829:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.1.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 523.664460][ T29] audit: type=1326 audit(2000000003.859:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.1.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 523.687971][ T29] audit: type=1326 audit(2000000003.859:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.1.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 523.714300][ T29] audit: type=1326 audit(2000000003.859:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18480 comm="syz.1.5408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 523.763716][T18496] program syz.1.5414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.801818][T18498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5415'. [ 523.988641][T18530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5429'. [ 524.285359][T18559] loop6: detected capacity change from 0 to 128 [ 524.293821][T18559] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 524.316172][T18559] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 524.327405][T18561] tmpfs: Unsupported parameter 'huge' [ 524.335165][ T4460] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 524.493398][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5453'. [ 524.686839][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5469'. [ 524.732124][T18628] ipvlan2: entered promiscuous mode [ 524.765066][T18635] program syz.6.5475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.964417][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5483'. [ 525.493977][ T29] audit: type=1400 audit(2000000005.709:1004): avc: denied { create } for pid=18660 comm="syz.1.5486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 525.985978][T18674] program syz.6.5492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.422681][T18693] xt_TCPMSS: Only works on TCP SYN packets [ 526.519489][T18695] loop4: detected capacity change from 0 to 764 [ 526.589280][T18695] Symlink component flag not implemented [ 526.595000][T18695] Symlink component flag not implemented [ 526.675963][T18695] Symlink component flag not implemented (129) [ 526.682174][T18695] Symlink component flag not implemented (6) [ 526.756421][T18695] rock: directory entry would overflow storage [ 526.762672][T18695] rock: sig=0x4f50, size=4, remaining=3 [ 526.768202][T18695] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 526.970678][T18705] program syz.4.5504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.236731][T18712] loop9: detected capacity change from 0 to 1764 [ 527.431522][T18723] loop9: detected capacity change from 0 to 128 [ 527.824469][ T4453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.899116][ T4453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.981043][ T4453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.044333][ T4453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.159274][ T4453] gretap0: left allmulticast mode [ 528.164319][ T4453] gretap0: left promiscuous mode [ 528.169428][ T4453] bridge0: port 3(gretap0) entered disabled state [ 528.181767][ T4453] bridge_slave_1: left allmulticast mode [ 528.187430][ T4453] bridge_slave_1: left promiscuous mode [ 528.193273][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.222843][ T4453] bridge_slave_0: left allmulticast mode [ 528.228648][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.402119][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.413055][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.423129][ T4453] bond0 (unregistering): Released all slaves [ 528.433211][ T4453] bond1 (unregistering): Released all slaves [ 528.443813][ T4453] bond2 (unregistering): Released all slaves [ 528.453851][ T4453] bond3 (unregistering): Released all slaves [ 528.466571][ T4453] bond4 (unregistering): Released all slaves [ 528.558198][ T4453] tipc: Left network mode [ 528.601012][ T4453] hsr_slave_0: left promiscuous mode [ 528.645242][ T4453] hsr_slave_1: left promiscuous mode [ 528.655070][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.662520][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.670804][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.678216][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.689801][ T4453] veth1_macvtap: left promiscuous mode [ 528.695357][ T4453] veth0_macvtap: left promiscuous mode [ 528.703496][ T4453] veth1_vlan: left promiscuous mode [ 528.708851][ T4453] veth0_vlan: left promiscuous mode [ 528.864596][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 528.874771][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 528.936060][T18738] chnl_net:caif_netlink_parms(): no params data found [ 529.008146][T18738] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.015362][T18738] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.022974][T18738] bridge_slave_0: entered allmulticast mode [ 529.029744][T18738] bridge_slave_0: entered promiscuous mode [ 529.038262][T18738] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.045412][T18738] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.054862][T18738] bridge_slave_1: entered allmulticast mode [ 529.062062][T18738] bridge_slave_1: entered promiscuous mode [ 529.080064][T18738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.097133][T18738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.149607][T18738] team0: Port device team_slave_0 added [ 529.161805][T18738] team0: Port device team_slave_1 added [ 529.182678][T18779] loop1: detected capacity change from 0 to 764 [ 529.213867][T18738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.220855][T18738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.246867][T18738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.332954][T18738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.339951][T18738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.365895][T18738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.427527][T18738] hsr_slave_0: entered promiscuous mode [ 529.433717][T18738] hsr_slave_1: entered promiscuous mode [ 529.439790][T18738] debugfs: 'hsr0' already exists in 'hsr' [ 529.445514][T18738] Cannot create hsr debugfs directory [ 529.453842][ T4453] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.579202][T18798] xt_TCPMSS: Only works on TCP SYN packets [ 529.687295][T18800] loop2: detected capacity change from 0 to 128 [ 529.734359][T18800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5539'. [ 530.110477][ T4453] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.146620][T18798] bridge0: port 3(gretap0) entered blocking state [ 530.153144][T18798] bridge0: port 3(gretap0) entered disabled state [ 530.159844][T18798] gretap0: entered allmulticast mode [ 530.165858][T18798] gretap0: entered promiscuous mode [ 530.171237][T18798] bridge0: port 3(gretap0) entered blocking state [ 530.177707][T18798] bridge0: port 3(gretap0) entered forwarding state [ 530.234901][ T4453] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.321068][T18780] chnl_net:caif_netlink_parms(): no params data found [ 530.845936][ T4453] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.958602][T18780] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.965749][T18780] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.043847][T18780] bridge_slave_0: entered allmulticast mode [ 531.131535][T18780] bridge_slave_0: entered promiscuous mode [ 531.177758][T18780] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.184842][T18780] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.224286][ T29] audit: type=1326 audit(2000000011.439:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 531.247845][ T29] audit: type=1326 audit(2000000011.439:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 531.271370][ T29] audit: type=1326 audit(2000000011.439:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 531.294864][ T29] audit: type=1326 audit(2000000011.439:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 531.318426][ T29] audit: type=1326 audit(2000000011.439:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670ac1f6c9 code=0x7ffc0000 [ 531.342957][T18780] bridge_slave_1: entered allmulticast mode [ 531.352958][T18780] bridge_slave_1: entered promiscuous mode [ 531.382217][T18842] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5553'. [ 531.392646][ T4453] gretap0: left allmulticast mode [ 531.397675][ T4453] gretap0: left promiscuous mode [ 531.402812][ T4453] bridge0: port 3(gretap0) entered disabled state [ 531.428057][ T4453] bridge_slave_1: left allmulticast mode [ 531.433743][ T4453] bridge_slave_1: left promiscuous mode [ 531.433835][T18846] loop1: detected capacity change from 0 to 128 [ 531.439412][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.470313][ T4453] bridge_slave_0: left allmulticast mode [ 531.475996][ T4453] bridge_slave_0: left promiscuous mode [ 531.481712][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.751302][T18851] xt_TCPMSS: Only works on TCP SYN packets [ 532.371932][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.382158][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.399699][ T4453] bond0 (unregistering): Released all slaves [ 532.424895][ T4453] bond1 (unregistering): Released all slaves [ 532.454959][T18780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.479338][T18780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.516002][ T4453] hsr_slave_0: left promiscuous mode [ 532.526377][ T4453] hsr_slave_1: left promiscuous mode [ 532.533317][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.540762][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.558626][T18859] loop2: detected capacity change from 0 to 256 [ 532.573168][T18859] FAT-fs (loop2): Directory bread(block 64) failed [ 532.582973][T18859] FAT-fs (loop2): Directory bread(block 65) failed [ 532.589935][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.597299][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.607495][T18859] FAT-fs (loop2): Directory bread(block 66) failed [ 532.614183][ T4453] veth1_macvtap: left promiscuous mode [ 532.619966][ T4453] veth0_macvtap: left promiscuous mode [ 532.625481][ T4453] veth1_vlan: left promiscuous mode [ 532.630923][T18859] FAT-fs (loop2): Directory bread(block 67) failed [ 532.637472][T18859] FAT-fs (loop2): Directory bread(block 68) failed [ 532.645553][ T4453] veth0_vlan: left promiscuous mode [ 532.651109][T18859] FAT-fs (loop2): Directory bread(block 69) failed [ 532.657687][T18859] FAT-fs (loop2): Directory bread(block 70) failed [ 532.686138][T18859] FAT-fs (loop2): Directory bread(block 71) failed [ 532.699471][T18859] FAT-fs (loop2): Directory bread(block 72) failed [ 532.710590][T18859] FAT-fs (loop2): Directory bread(block 73) failed [ 532.746777][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 532.795325][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 532.884571][T18780] team0: Port device team_slave_0 added [ 532.909724][T18738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.929118][T18780] team0: Port device team_slave_1 added [ 532.935212][T18738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 532.970434][T18738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 532.999656][T18738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.012755][T18780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.019723][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.045665][T18780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.069197][T18780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.076137][T18780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.102182][T18780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.125380][ T29] audit: type=1400 audit(2000000013.339:1010): avc: denied { unmount } for pid=18871 comm="syz.1.5565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 533.154130][T18780] hsr_slave_0: entered promiscuous mode [ 533.160416][T18780] hsr_slave_1: entered promiscuous mode [ 533.166220][T18780] debugfs: 'hsr0' already exists in 'hsr' [ 533.171961][T18780] Cannot create hsr debugfs directory [ 533.236617][T18738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.259381][T18738] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.269463][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.276607][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.289326][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.296479][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.343916][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5572'. [ 533.385725][T18738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.407072][ T29] audit: type=1326 audit(2000000013.619:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18906 comm="syz.2.5574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f798af6c9 code=0x0 [ 533.467752][T18738] veth0_vlan: entered promiscuous mode [ 533.476739][T18738] veth1_vlan: entered promiscuous mode [ 533.505362][T18738] veth0_macvtap: entered promiscuous mode [ 533.520898][T18780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 533.529829][T18738] veth1_macvtap: entered promiscuous mode [ 533.536143][T18780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 533.550097][T18738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.559795][T18780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 533.568879][T18780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 533.579211][T18738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.592591][ T4453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.620032][ T4453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.647183][T18780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.654899][ T4453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.675096][T18780] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.691134][ T4453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.707666][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.714726][ T4453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.724675][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.731777][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.773675][T18780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.784121][T18780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.854481][T18780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.968690][T18966] netlink: 'syz.0.5590': attribute type 3 has an invalid length. [ 533.975208][T18780] veth0_vlan: entered promiscuous mode [ 534.003216][T18780] veth1_vlan: entered promiscuous mode [ 534.019618][T18780] veth0_macvtap: entered promiscuous mode [ 534.026988][T18780] veth1_macvtap: entered promiscuous mode [ 534.037886][T18780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.049821][T18780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.060791][ T6036] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.071763][ T6036] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.082524][ T4453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.091965][ T4453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.166201][T18986] loop5: detected capacity change from 0 to 128 [ 534.172846][T18986] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 534.186080][T18986] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 534.309345][T19002] tmpfs: Bad value for 'mpol' [ 534.547443][ T29] audit: type=1326 audit(2000000014.759:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19026 comm="syz.5.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d883f6c9 code=0x7ffc0000 [ 534.571134][ T29] audit: type=1326 audit(2000000014.759:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19026 comm="syz.5.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d883f6c9 code=0x7ffc0000 [ 534.576081][T19029] loop2: detected capacity change from 0 to 164 [ 534.594765][ T29] audit: type=1326 audit(2000000014.759:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19026 comm="syz.5.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f93d883f6c9 code=0x7ffc0000 [ 534.841414][T19042] loop5: detected capacity change from 0 to 128 [ 534.899111][T19044] xt_TCPMSS: Only works on TCP SYN packets [ 535.794937][T19042] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 535.817595][T19042] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 535.986596][T19074] loop5: detected capacity change from 0 to 128 [ 536.010665][T19074] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5633'. [ 536.028792][T19076] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5632'. [ 536.370423][T19103] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5645'. [ 536.434061][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 536.434075][ T29] audit: type=1400 audit(2000000016.649:1017): avc: denied { watch watch_reads } for pid=19108 comm="syz.9.5648" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 536.650009][T19118] xt_TCPMSS: Only works on TCP SYN packets [ 537.763329][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5665'. [ 537.811733][T19167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 537.939405][T19172] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5672'. [ 538.122205][T19188] 9pnet_fd: Insufficient options for proto=fd [ 538.398804][T19214] loop9: detected capacity change from 0 to 128 [ 538.707205][T19237] tmpfs: Bad value for 'mpol' [ 538.798554][T19239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5703'. [ 538.874055][T19244] loop0: detected capacity change from 0 to 764 [ 539.025388][T19248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5706'. [ 539.312225][T19264] program syz.9.5712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.398241][T19272] loop2: detected capacity change from 0 to 764 [ 539.675381][ T29] audit: type=1400 audit(2000000019.889:1018): avc: denied { mount } for pid=19290 comm="syz.2.5725" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 539.705153][ T29] audit: type=1400 audit(2000000019.919:1019): avc: denied { unmount } for pid=18204 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 539.736452][ T4455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.809358][ T4455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.861551][ T4455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.891244][T19313] loop5: detected capacity change from 0 to 1764 [ 539.909437][ T4455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.932710][T19319] loop0: detected capacity change from 0 to 128 [ 539.944509][T19319] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 539.973191][T19319] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 540.114967][T19342] loop5: detected capacity change from 0 to 764 [ 540.127590][ T4455] bridge_slave_1: left allmulticast mode [ 540.133263][ T4455] bridge_slave_1: left promiscuous mode [ 540.138953][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.147043][ T4455] bridge_slave_0: left allmulticast mode [ 540.152733][ T4455] bridge_slave_0: left promiscuous mode [ 540.158530][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.284398][T19355] program syz.5.5750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.321746][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.346750][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.356756][ T4455] bond0 (unregistering): Released all slaves [ 540.381293][T19357] bridge1: entered allmulticast mode [ 540.441574][T19298] chnl_net:caif_netlink_parms(): no params data found [ 540.470222][ T4455] hsr_slave_0: left promiscuous mode [ 540.496540][ T4455] hsr_slave_1: left promiscuous mode [ 540.546260][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.553666][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.607646][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.615146][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.667030][ T4455] veth1_macvtap: left promiscuous mode [ 540.672714][ T4455] veth0_macvtap: left promiscuous mode [ 540.679081][ T4455] veth1_vlan: left promiscuous mode [ 540.684362][ T4455] veth0_vlan: left promiscuous mode [ 540.776584][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 540.788031][ T4455] team0 (unregistering): Port device team_slave_0 removed [ 540.995144][T19298] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.002371][T19298] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.029577][T19298] bridge_slave_0: entered allmulticast mode [ 541.042754][T19298] bridge_slave_0: entered promiscuous mode [ 541.050281][T19380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5758'. [ 541.061334][T19298] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.068377][T19298] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.095660][T19298] bridge_slave_1: entered allmulticast mode [ 541.128608][T19298] bridge_slave_1: entered promiscuous mode [ 541.216675][T19298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.227309][T19298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.248690][T19298] team0: Port device team_slave_0 added [ 541.255471][T19298] team0: Port device team_slave_1 added [ 541.271676][T19298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.278647][T19298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.304546][T19298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.397572][T19387] xt_TCPMSS: Only works on TCP SYN packets [ 542.087641][T19298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.094640][T19298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.120583][T19298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.192224][T19298] hsr_slave_0: entered promiscuous mode [ 542.202645][T19298] hsr_slave_1: entered promiscuous mode [ 542.215414][T19298] debugfs: 'hsr0' already exists in 'hsr' [ 542.221177][T19298] Cannot create hsr debugfs directory [ 542.556159][T19408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5769'. [ 542.576440][T19298] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 542.605308][T19298] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 542.642074][T19298] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 542.693310][T19298] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 542.715507][T19414] team0: Port device vlan2 added [ 543.147875][T19423] loop5: detected capacity change from 0 to 128 [ 543.484629][T19298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.557202][T19298] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.565484][T19439] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5780'. [ 543.577988][ T4455] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.585065][ T4455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.609289][T19298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.619869][T19298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.680403][ T4455] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.687485][ T4455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.714133][T19441] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5781'. [ 543.783842][T19298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.925854][T19298] veth0_vlan: entered promiscuous mode [ 543.933861][T19298] veth1_vlan: entered promiscuous mode [ 543.951586][T19298] veth0_macvtap: entered promiscuous mode [ 543.959795][T19298] veth1_macvtap: entered promiscuous mode [ 543.970111][T19298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.983912][T19298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.994887][ T4455] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.006374][ T4455] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.029153][ T4455] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.043427][ T4455] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.071772][T19467] loop7: detected capacity change from 0 to 128 [ 544.081283][T19467] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5728'. [ 544.090278][T19467] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5728'. [ 544.102899][T19462] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5784'. [ 544.193911][T19484] loop9: detected capacity change from 0 to 128 [ 544.214588][T19484] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 544.233992][T19484] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 544.267691][T19494] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5797'. [ 544.311360][T19501] loop9: detected capacity change from 0 to 128 [ 544.316071][T19503] loop7: detected capacity change from 0 to 128 [ 544.333110][T19501] FAT-fs (loop9): Directory bread(block 524322) failed [ 544.340599][T19501] FAT-fs (loop9): Directory bread(block 524323) failed [ 544.340723][T19503] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5799'. [ 544.347481][T19501] FAT-fs (loop9): Directory bread(block 524324) failed [ 544.356434][T19503] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5799'. [ 544.364241][T19501] FAT-fs (loop9): Directory bread(block 524325) failed [ 544.379344][T19501] FAT-fs (loop9): Directory bread(block 524326) failed [ 544.386458][T19501] FAT-fs (loop9): Directory bread(block 524327) failed [ 544.393691][T19501] FAT-fs (loop9): Directory bread(block 524328) failed [ 544.400608][T19501] FAT-fs (loop9): Directory bread(block 524329) failed [ 544.421248][T19501] FAT-fs (loop9): Directory bread(block 524322) failed [ 544.428333][T19501] FAT-fs (loop9): Directory bread(block 524323) failed [ 545.124678][T19565] loop9: detected capacity change from 0 to 1764 [ 545.668497][ T29] audit: type=1400 audit(2000000025.879:1020): avc: denied { read } for pid=23 comm="kworker/1:0" lport=41402 faddr=::ffff:100.1.1.0 fport=20003 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 545.832670][ T29] audit: type=1400 audit(2000000026.049:1021): avc: denied { watch_reads } for pid=19632 comm="syz.1.5853" path="/566" dev="tmpfs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 546.262767][T19664] __nla_validate_parse: 11 callbacks suppressed [ 546.262782][T19664] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5862'. [ 546.345243][T19667] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5863'. [ 546.410078][T19673] loop5: detected capacity change from 0 to 128 [ 546.561731][T19670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5864'. [ 546.742796][T19691] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5872'. [ 546.847804][T19701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5877'. [ 547.032849][T19722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5887'. [ 547.317994][T19740] loop7: detected capacity change from 0 to 128 [ 547.335244][T19716] xt_TCPMSS: Only works on TCP SYN packets [ 547.346813][ T3913] ================================================================== [ 547.354892][ T3913] BUG: KCSAN: data-race in _copy_to_iter / fat_set_state [ 547.361915][ T3913] [ 547.364220][ T3913] write to 0xffff88810bcee041 of 1 bytes by task 19740 on cpu 0: [ 547.371921][ T3913] fat_set_state+0x16c/0x1e0 [ 547.376512][ T3913] fat_fill_super+0x1875/0x1ce0 [ 547.381356][ T3913] vfat_fill_super+0x24/0x30 [ 547.385947][ T3913] get_tree_bdev_flags+0x291/0x300 [ 547.391047][ T3913] get_tree_bdev+0x1f/0x30 [ 547.395459][ T3913] vfat_get_tree+0x1c/0x30 [ 547.399866][ T3913] vfs_get_tree+0x57/0x1d0 [ 547.404278][ T3913] do_new_mount+0x24d/0x660 [ 547.408768][ T3913] path_mount+0x4a5/0xb70 [ 547.413080][ T3913] __se_sys_mount+0x28c/0x2e0 [ 547.417742][ T3913] __x64_sys_mount+0x67/0x80 [ 547.422316][ T3913] x64_sys_call+0x2b51/0x3000 [ 547.426976][ T3913] do_syscall_64+0xd2/0x200 [ 547.431461][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.437338][ T3913] [ 547.439640][ T3913] read to 0xffff88810bcee000 of 512 bytes by task 3913 on cpu 1: [ 547.447334][ T3913] _copy_to_iter+0x130/0xe70 [ 547.451909][ T3913] copy_page_to_iter+0x18f/0x2d0 [ 547.456829][ T3913] filemap_read+0x407/0xa00 [ 547.461320][ T3913] blkdev_read_iter+0x22d/0x2e0 [ 547.466156][ T3913] vfs_read+0x64c/0x770 [ 547.470328][ T3913] ksys_read+0xda/0x1a0 [ 547.474471][ T3913] __x64_sys_read+0x40/0x50 [ 547.478959][ T3913] x64_sys_call+0x27c0/0x3000 [ 547.483619][ T3913] do_syscall_64+0xd2/0x200 [ 547.488102][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.493976][ T3913] [ 547.496280][ T3913] Reported by Kernel Concurrency Sanitizer on: [ 547.502411][ T3913] CPU: 1 UID: 0 PID: 3913 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 547.513245][ T3913] Tainted: [W]=WARN [ 547.517025][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.527058][ T3913] ================================================================== [ 547.573721][T19740] syz.7.5892: attempt to access beyond end of device [ 547.573721][T19740] loop7: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 547.587299][ T29] audit: type=1400 audit(2000000027.789:1022): avc: denied { create } for pid=19739 comm="syz.7.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1