last executing test programs: 4m21.230481475s ago: executing program 32 (id=662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x2, 0x10000, 0x0, r2}, &(0x7f0000000100)=0x10) 3m58.854906893s ago: executing program 33 (id=1401): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) sendmmsg$inet(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f00000047c0)="eb5b1ed1fb0f5503061c60f543e001ce7a16a6e596e742f88f5b4d8646b01ea013e40ebe8fe6b882", 0x28}, {&(0x7f0000004840)="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", 0x59d}], 0x2}}], 0x5, 0x40000) 3m43.69353146s ago: executing program 34 (id=1811): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3m42.579224919s ago: executing program 35 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3m37.363159881s ago: executing program 36 (id=1960): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'veth0_to_bridge\x00', 0x2}, 0x18) 3m36.362626736s ago: executing program 37 (id=1981): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'vxcan1\x00'}) 3m32.894862556s ago: executing program 38 (id=2020): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) close(r1) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m55.335287912s ago: executing program 39 (id=2525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff02000000000000000000000000000104206558"], 0xfdef) 2m13.458862599s ago: executing program 40 (id=3894): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m48.342940692s ago: executing program 41 (id=4449): r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) keyctl$get_persistent(0x9, 0xffffffffffffffff, r0) 1m37.431110541s ago: executing program 42 (id=4646): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) unshare(0x26020480) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r1}}, 0x1c) 1m34.260915881s ago: executing program 9 (id=4720): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0xc}, 0x20) 1m34.222764103s ago: executing program 9 (id=4724): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) read(r0, &(0x7f0000000240)=""/28, 0xffd2) 1m34.157507275s ago: executing program 9 (id=4729): sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x400000, 0x1}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 1m34.02495087s ago: executing program 9 (id=4733): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) 1m33.943873122s ago: executing program 9 (id=4736): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc0100000400000000000000000000000000000004"], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 1m33.517956757s ago: executing program 9 (id=4744): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 1m33.490108588s ago: executing program 43 (id=4744): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 1m19.314563791s ago: executing program 6 (id=5091): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0xa}, 0x90) 1m18.443107362s ago: executing program 6 (id=5118): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x12, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1m18.442897072s ago: executing program 6 (id=5120): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2000}}, {@noquota}, {@barrier}, {@minixdf}, {@oldalloc}]}, 0x1, 0x5a5, &(0x7f0000000200)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4020000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8002028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000b"], 0x2f4}, 0x1, 0x0, 0x0, 0x4000001}, 0x404c004) 1m18.416871653s ago: executing program 6 (id=5122): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m18.386110504s ago: executing program 6 (id=5123): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1m18.282992907s ago: executing program 6 (id=5126): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1m18.282917787s ago: executing program 44 (id=5126): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1m2.533834395s ago: executing program 7 (id=5472): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000880}, 0x50) 1m2.495398946s ago: executing program 7 (id=5476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) 1m2.447013527s ago: executing program 7 (id=5478): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) 1m1.764220712s ago: executing program 7 (id=5494): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 1m1.689715174s ago: executing program 7 (id=5498): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1m1.481398701s ago: executing program 7 (id=5504): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000010840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x40000) r0 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m1.470258912s ago: executing program 45 (id=5504): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000010840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x40000) r0 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38.615511947s ago: executing program 5 (id=6084): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 38.593064117s ago: executing program 5 (id=6086): sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x14) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 38.459180342s ago: executing program 5 (id=6089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedade2531000000200001801400020076657468305f746f5f6272696467650008000100", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x28000}, 0x24000894) 38.438901703s ago: executing program 5 (id=6090): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 38.420569144s ago: executing program 5 (id=6091): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) 38.339235846s ago: executing program 5 (id=6092): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x100004, 0x2, 0xb, 0x0, "0c41920887e8d2b7624b14ff0abe080800006b", 0x2, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) 38.339105346s ago: executing program 46 (id=6092): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x100004, 0x2, 0xb, 0x0, "0c41920887e8d2b7624b14ff0abe080800006b", 0x2, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) 34.799890309s ago: executing program 4 (id=6151): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 34.741897521s ago: executing program 4 (id=6152): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc7) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, 0x0) timer_gettime(r0, &(0x7f0000000040)) 33.841374902s ago: executing program 4 (id=6188): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8947, &(0x7f0000000040)={'vlan0\x00', @random="90829d1f1036"}) 33.782188374s ago: executing program 4 (id=6190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 33.722009787s ago: executing program 4 (id=6192): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x10001, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00901900", [0x8, 0xffffffff9673e35d]}}) 33.424520127s ago: executing program 4 (id=6207): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) read(r0, &(0x7f0000000140)=""/166, 0xa6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) 33.365803659s ago: executing program 47 (id=6207): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) read(r0, &(0x7f0000000140)=""/166, 0xa6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) 5.685235132s ago: executing program 2 (id=6804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.638204733s ago: executing program 2 (id=6806): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000013c0)="dc03c5", 0x3}, {&(0x7f0000001800)="7dc6", 0x2}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 5.569761406s ago: executing program 2 (id=6810): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) 4.633744268s ago: executing program 2 (id=6823): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 4.59496803s ago: executing program 2 (id=6825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000104"], 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) 4.351200308s ago: executing program 2 (id=6834): getdents(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4.351061128s ago: executing program 48 (id=6834): getdents(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3.118192381s ago: executing program 3 (id=6863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40081}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4002c007eed", 0x2c}], 0x1}, 0x0) 3.094691252s ago: executing program 3 (id=6864): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 1.980360411s ago: executing program 3 (id=6879): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.851292085s ago: executing program 0 (id=6882): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000340)=0x9, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0) 1.603198734s ago: executing program 1 (id=6887): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.580768564s ago: executing program 1 (id=6889): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 982.665976ms ago: executing program 0 (id=6890): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 623.519118ms ago: executing program 8 (id=6891): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 582.013719ms ago: executing program 3 (id=6892): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="13", 0x1}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 581.461779ms ago: executing program 1 (id=6893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x4000, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x6558, 0x8}}}}}}, 0x2e) 562.23741ms ago: executing program 0 (id=6894): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040010000fa00000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 559.76223ms ago: executing program 8 (id=6895): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 439.803674ms ago: executing program 3 (id=6896): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setresuid(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010800000000000000000700000114000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a30000000001100030068e913c1a769702c6d61726b0000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) 439.312764ms ago: executing program 0 (id=6897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 386.904306ms ago: executing program 1 (id=6898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 386.557706ms ago: executing program 0 (id=6899): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d0000000800000002"], 0x48) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000100), &(0x7f0000000200)=@tcp6=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000380), 0x0}, 0x20) 376.523626ms ago: executing program 8 (id=6900): syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 359.597627ms ago: executing program 0 (id=6901): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 292.685069ms ago: executing program 3 (id=6902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x28031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 290.156369ms ago: executing program 8 (id=6903): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000300)="65f3", 0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) 223.201982ms ago: executing program 1 (id=6904): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0xee94}, &(0x7f00000000c0)=0xc) 170.384454ms ago: executing program 1 (id=6905): unshare(0x40200) r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) unshare(0x40400) 79.455287ms ago: executing program 8 (id=6906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24000054) close(0x3) 0s ago: executing program 8 (id=6907): sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) kernel console output (not intermixed with test programs): 00228: __ext4_iget:5393: inode 11: block 1 [ 274.104053][T10363] kworker/u8:15: attempt to access beyond end of device [ 274.104053][T10363] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 274.117624][T10363] kworker/u8:15: attempt to access beyond end of device [ 274.117624][T10363] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 274.131256][T10363] kworker/u8:15: attempt to access beyond end of device [ 274.131256][T10363] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 274.144862][T10363] kworker/u8:15: attempt to access beyond end of device [ 274.144862][T10363] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 274.182036][T19511] loop5: lost filesystem error report for type 5 error -117 [ 274.182782][T19511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.230107][T19511] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 274.305400][T19531] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5432'. [ 274.327092][T19540] loop8: detected capacity change from 0 to 512 [ 274.333745][T19540] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.352423][T16758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.383060][T19540] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.450768][T19540] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #2: block 4: comm syz.8.5433: lblock 0 mapped to illegal pblock 4 (length 1) [ 274.478704][T19540] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 274.478869][T19540] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.5433: error -117 reading directory block [ 274.488006][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 274.488024][ C1] EXT4-fs (loop8): initial error at time 2000000229: ext4_map_blocks:786: inode 2: block 4 [ 274.488063][ C1] EXT4-fs (loop8): last error at time 2000000229: ext4_map_blocks:786: inode 2: block 4 [ 274.527144][T19540] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 274.535848][T19540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.564576][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.762843][T19576] loop7: detected capacity change from 0 to 512 [ 274.776281][T19576] EXT4-fs: Ignoring removed orlov option [ 274.788412][T19576] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.802177][T19576] EXT4-fs: inline encryption not supported [ 274.811735][T19576] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.5447: corrupted in-inode xattr: e_value size too large [ 274.853906][T19576] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 274.854117][T19576] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5447: couldn't read orphan inode 15 (err -117) [ 274.863353][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 274.863376][ C0] EXT4-fs (loop7): initial error at time 2000000229: ext4_iget_extra_inode:5040: inode 15 [ 274.863414][ C0] EXT4-fs (loop7): last error at time 2000000229: ext4_iget_extra_inode:5040: inode 15 [ 274.954589][T19576] loop7: lost filesystem error report for type 5 error -117 [ 274.955499][T19576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.996182][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.027781][T16033] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.075340][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.118236][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.142280][T19618] loop5: detected capacity change from 0 to 256 [ 276.201163][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.755074][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.927222][T19650] GUP no longer grows the stack in syz.0.5479 (19650): 200000004000-20000000a000 (200000002000) [ 276.958927][T19650] CPU: 1 UID: 0 PID: 19650 Comm: syz.0.5479 Not tainted syzkaller #0 PREEMPT(full) [ 276.958956][T19650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.958969][T19650] Call Trace: [ 276.959052][T19650] [ 276.959059][T19650] __dump_stack+0x1d/0x30 [ 276.959093][T19650] dump_stack_lvl+0x95/0xd0 [ 276.959125][T19650] dump_stack+0x15/0x1b [ 276.959156][T19650] __get_user_pages+0x195b/0x1ea0 [ 276.959265][T19650] ? __rcu_read_unlock+0x4e/0x70 [ 276.959311][T19650] get_user_pages_remote+0x1d5/0x6b0 [ 276.959356][T19650] __access_remote_vm+0x15c/0x580 [ 276.959422][T19650] access_remote_vm+0x32/0x40 [ 276.959538][T19650] proc_pid_cmdline_read+0x32b/0x6b0 [ 276.959668][T19650] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 276.959742][T19650] vfs_readv+0x432/0x6e0 [ 276.959802][T19650] __x64_sys_preadv+0xfd/0x1c0 [ 276.959826][T19650] x64_sys_call+0x2915/0x3020 [ 276.959924][T19650] do_syscall_64+0x12c/0x370 [ 276.959958][T19650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.960058][T19650] RIP: 0033:0x7fc47797c819 [ 276.960080][T19650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.960105][T19650] RSP: 002b:00007fc4763cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 276.960130][T19650] RAX: ffffffffffffffda RBX: 00007fc477bf5fa0 RCX: 00007fc47797c819 [ 276.960171][T19650] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 276.960185][T19650] RBP: 00007fc477a12c91 R08: 00000000fffffff9 R09: 0000000000000000 [ 276.960211][T19650] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 276.960228][T19650] R13: 00007fc477bf6038 R14: 00007fc477bf5fa0 R15: 00007ffc4b4b9098 [ 276.960254][T19650] [ 277.155543][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.356101][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 277.356119][ T28] audit: type=1400 audit(2000000232.200:3621): avc: denied { append } for pid=19667 comm="syz.5.5487" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.513937][T19678] loop5: detected capacity change from 0 to 2048 [ 277.574301][T19684] xt_hashlimit: size too large, truncated to 1048576 [ 277.610361][T19688] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5497'. [ 277.620024][ T28] audit: type=1400 audit(2000000232.450:3622): avc: denied { nlmsg_read } for pid=19687 comm="syz.0.5497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 277.686261][T19691] loop5: detected capacity change from 0 to 128 [ 278.166447][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 278.179977][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.210499][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.341583][T19707] chnl_net:caif_netlink_parms(): no params data found [ 278.360351][ T4538] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 278.394611][ T4538] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 278.474765][ T12] team0: left allmulticast mode [ 278.492345][ T12] team0: left promiscuous mode [ 278.502625][ T12] bridge0: port 1(team0) entered disabled state [ 278.555146][ T8861] SELinux: failure in sel_netif_sid_slow(), invalid network interface (76) [ 278.607628][ T12] team0: Port device bridge1 removed [ 278.656377][ T12] bond0 (unregistering): Released all slaves [ 278.685686][T19707] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.692850][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.705238][T19707] bridge_slave_0: entered allmulticast mode [ 278.711824][T19707] bridge_slave_0: entered promiscuous mode [ 278.719648][ T12] tipc: Disabling bearer [ 278.736461][ T12] tipc: Left network mode [ 278.740967][T19707] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.748170][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.758441][T19707] bridge_slave_1: entered allmulticast mode [ 278.765243][T19707] bridge_slave_1: entered promiscuous mode [ 278.778795][T19756] loop5: detected capacity change from 0 to 512 [ 278.791650][T19707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.804702][T19707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.827688][ T12] hsr_slave_0: left promiscuous mode [ 278.836073][T19756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.849861][ T12] hsr_slave_1: left promiscuous mode [ 278.891775][T16758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.923454][T19774] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5517'. [ 279.011295][T19707] team0: Port device team_slave_0 added [ 279.022827][T19707] team0: Port device team_slave_1 added [ 279.058405][T19707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.075097][T19707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.109243][T19707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.120936][T19707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.131241][T19707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.159383][T19707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.204806][T19707] hsr_slave_0: entered promiscuous mode [ 279.224967][T19707] hsr_slave_1: entered promiscuous mode [ 279.235299][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.243494][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.308153][T19806] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19806 comm=syz.8.5523 [ 279.370651][ T12] IPVS: stop unused estimator thread 0... [ 279.460726][T19827] veth1_to_bond: entered allmulticast mode [ 279.469430][T19831] loop8: detected capacity change from 0 to 128 [ 279.502844][ T28] audit: type=1400 audit(2000000234.340:3623): avc: denied { mounton } for pid=19830 comm="syz.8.5532" path="/78/file0/bus" dev="loop8" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 279.550018][T19826] veth1_to_bond: left allmulticast mode [ 279.561167][ T28] audit: type=1400 audit(2000000234.380:3624): avc: denied { unmount } for pid=18470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 279.795183][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 279.801361][T15576] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 279.894362][ T28] audit: type=1400 audit(2000000234.730:3625): avc: denied { write } for pid=19870 comm="syz.1.5539" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 279.951497][T19707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 280.004813][T19877] SELinux: failed to load policy [ 280.012231][T19707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 280.040030][T19707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 280.085406][ T28] audit: type=1400 audit(2000000234.920:3626): avc: denied { execmod } for pid=19884 comm="syz.0.5544" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=59622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 280.111849][T19707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.118727][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.128912][T19889] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.212782][T19902] lo: entered allmulticast mode [ 280.225380][T19902] lo: left allmulticast mode [ 280.254203][T19707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.266821][T10363] Bluetooth: hci1: Frame reassembly failed (-84) [ 280.279285][T19707] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.285649][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.318818][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.325999][T10363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.353907][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.361062][T10363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.390355][T19707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.400947][T19707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.544112][T19707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.795816][T19707] veth0_vlan: entered promiscuous mode [ 280.826012][T19971] batadv_slave_1: entered promiscuous mode [ 280.839414][T19707] veth1_vlan: entered promiscuous mode [ 280.856571][T19971] batadv_slave_1: left promiscuous mode [ 280.872691][T19707] veth0_macvtap: entered promiscuous mode [ 280.883002][T19707] veth1_macvtap: entered promiscuous mode [ 280.894377][T19707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.908244][T19707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.925521][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.934725][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.976270][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.013252][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.281681][T20011] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.282131][ T3423] IPVS: starting estimator thread 0... [ 281.317591][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.390541][T20039] veth1_to_bond: entered allmulticast mode [ 281.396512][T20022] IPVS: using max 2304 ests per chain, 115200 per kthread [ 281.404152][T20038] veth1_to_bond: left allmulticast mode [ 281.450258][ T28] audit: type=1400 audit(2000000236.290:3627): avc: denied { read } for pid=20046 comm="syz.0.5570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 282.195163][T15576] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 282.195264][ T3757] Bluetooth: hci0: command 0x1003 tx timeout [ 282.263551][T20157] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5573'. [ 282.275066][ T43] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 282.287101][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 282.355282][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.495944][T20186] netlink: 'syz.4.5586': attribute type 1 has an invalid length. [ 282.505970][T20186] loop4: detected capacity change from 0 to 128 [ 282.748326][T20204] loop5: detected capacity change from 0 to 2048 [ 282.771376][T20204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.786487][T20204] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5593: bg 0: block 234: padding at end of block bitmap is not set [ 282.801296][T20204] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 282.813784][T20204] EXT4-fs (loop5): This should not happen!! Data will be lost [ 282.813784][T20204] [ 282.823604][T20204] EXT4-fs (loop5): Total free blocks count 0 [ 282.835595][T20204] EXT4-fs (loop5): Free/Dirty block details [ 282.841588][T20204] EXT4-fs (loop5): free_blocks=0 [ 282.846827][T20204] EXT4-fs (loop5): dirty_blocks=16 [ 282.852266][T20204] EXT4-fs (loop5): Block reservation details [ 282.858560][T20204] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 282.877836][T16758] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 282.889620][T16758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.060754][ T28] audit: type=1400 audit(2000000237.900:3628): avc: denied { ioctl } for pid=20221 comm="syz.5.5599" path="socket:[60039]" dev="sockfs" ino=60039 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 283.107703][T20224] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5600'. [ 283.155355][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.396693][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.493375][T20246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5609'. [ 283.495407][ T28] audit: type=1400 audit(2000000238.330:3629): avc: denied { bind } for pid=20245 comm="syz.1.5609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.543404][ T28] audit: type=1400 audit(2000000238.340:3630): avc: denied { read } for pid=20245 comm="syz.1.5609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.927403][T20287] sctp: [Deprecated]: syz.5.5628 (pid 20287) Use of int in max_burst socket option. [ 283.927403][T20287] Use struct sctp_assoc_value instead [ 284.355401][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 284.356044][T15576] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 284.388457][T20320] dummy0: entered allmulticast mode [ 284.394166][T20320] dummy0: left allmulticast mode [ 284.436968][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.595356][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.819340][T10352] Bluetooth: hci0: Frame reassembly failed (-84) [ 284.960574][ T28] audit: type=1400 audit(2000000239.800:3631): avc: denied { accept } for pid=20411 comm="syz.8.5656" path="socket:[61209]" dev="sockfs" ino=61209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.020614][ T28] audit: type=1326 audit(2000000239.860:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.8.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 285.057154][ T28] audit: type=1326 audit(2000000239.860:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.8.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 285.082113][ T28] audit: type=1326 audit(2000000239.860:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.8.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 285.213258][ T28] audit: type=1326 audit(2000000239.860:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.8.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 285.238641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.253315][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.289191][ T28] audit: type=1326 audit(2000000239.860:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.8.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 285.351762][ T28] audit: type=1326 audit(2000000239.890:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20421 comm="syz.8.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 285.444728][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5666'. [ 285.485221][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.708425][T20447] loop8: detected capacity change from 0 to 1024 [ 285.766515][T20447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.778062][T20447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 285.811120][T20447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 285.819910][T20447] System zones: 0-1, 3-36 [ 285.841370][T20447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.907186][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.026371][T20480] hsr0: entered allmulticast mode [ 286.031834][T20480] hsr_slave_0: entered allmulticast mode [ 286.038240][T20480] hsr_slave_1: entered allmulticast mode [ 286.044558][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5672'. [ 286.058480][T20480] hsr_slave_0: left promiscuous mode [ 286.069551][T20480] hsr_slave_1: left promiscuous mode [ 286.080583][T20480] hsr0 (unregistering): left allmulticast mode [ 286.195449][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.222260][T20500] loop8: detected capacity change from 0 to 512 [ 286.230651][T20500] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 286.244204][T20500] EXT4-fs (loop8): 1 truncate cleaned up [ 286.265620][T20500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.339423][T20512] loop4: detected capacity change from 0 to 256 [ 286.368740][T20516] loop5: detected capacity change from 0 to 128 [ 286.463719][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.515910][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.562085][T20533] loop4: detected capacity change from 0 to 512 [ 286.588326][T20533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.601143][T20533] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.625157][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.645481][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.750462][T20543] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 286.835044][T15576] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 286.837598][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 286.885088][T19707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.992978][T20558] loop8: detected capacity change from 0 to 128 [ 287.028807][T20560] netlink: 'syz.0.5708': attribute type 3 has an invalid length. [ 287.060822][T20565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20565 comm=syz.1.5712 [ 287.104662][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5713'. [ 287.448701][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.458442][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.567790][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.733559][T20635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5740'. [ 287.763861][T20638] xt_HMARK: proto mask must be zero with L3 mode [ 287.803895][T20640] SELinux: ebitmap start bit (6553620) is not a multiple of the map unit size (64) [ 287.813622][T20640] SELinux: failed to load policy [ 288.089069][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 288.089089][ T28] audit: type=1400 audit(2000000242.930:3695): avc: denied { map } for pid=20659 comm="syz.8.5760" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 288.129569][T20663] loop8: detected capacity change from 0 to 512 [ 288.136928][T20663] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.146697][T20663] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (6000000) [ 288.157124][T20663] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 288.259563][T20672] loop8: detected capacity change from 0 to 512 [ 288.276789][T20672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.295814][T20672] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.422696][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.636551][ T8861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.208225][T20725] loop8: detected capacity change from 0 to 164 [ 289.229028][T20725] ISOFS: Bad logical zone size 2816 [ 289.235556][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.253968][ T28] audit: type=1107 audit(2000000244.090:3696): pid=20726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 289.288224][T20690] loop4: detected capacity change from 0 to 1024 [ 289.316646][T20690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.332263][T20690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 289.346229][T20690] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 289.354606][T20690] System zones: 0-1, 3-36 [ 289.368689][T20690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.425953][T19707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.473597][T20742] netlink: 'syz.4.5785': attribute type 2 has an invalid length. [ 289.669045][T20762] ip6gretap0: entered promiscuous mode [ 289.674836][T20762] macvtap1: entered promiscuous mode [ 289.680411][T20762] macvtap1: entered allmulticast mode [ 289.685906][T20762] ip6gretap0: entered allmulticast mode [ 289.693349][T20762] ip6gretap0: left allmulticast mode [ 289.699101][T20762] ip6gretap0: left promiscuous mode [ 289.715161][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.792523][ C1] sd 0:0:1:0: [sda] tag#4883 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 289.803046][ C1] sd 0:0:1:0: [sda] tag#4883 CDB: Read(6) 08 00 00 00 00 00 [ 290.105445][ T28] audit: type=1326 audit(2000000244.940:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.8.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 290.129970][ T28] audit: type=1326 audit(2000000244.940:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.8.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 290.153930][ T28] audit: type=1326 audit(2000000244.940:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.8.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 290.178002][ T28] audit: type=1326 audit(2000000244.940:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.8.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 290.202205][ T28] audit: type=1326 audit(2000000244.940:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.8.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 290.227647][ T28] audit: type=1326 audit(2000000244.970:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.8.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 290.251615][ T28] audit: type=1326 audit(2000000244.970:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.8.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 290.275987][ T28] audit: type=1326 audit(2000000244.970:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20785 comm="syz.8.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 290.355481][ T8861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.496101][T20814] netlink: 'syz.8.5816': attribute type 5 has an invalid length. [ 290.564612][T20820] loop8: detected capacity change from 0 to 4096 [ 290.577050][T20820] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.606959][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.755271][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.964776][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5828'. [ 290.983404][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5828'. [ 291.473552][T20886] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5846'. [ 291.805194][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.194777][T20959] netlink: 'syz.5.5870': attribute type 21 has an invalid length. [ 292.215966][T20959] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5870'. [ 292.274057][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5876'. [ 292.388326][T20988] loop4: detected capacity change from 0 to 512 [ 292.398357][T20990] loop8: detected capacity change from 0 to 512 [ 292.407175][T20988] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.414625][T20988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.440172][T20992] program syz.5.5885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.451686][T20990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.461292][T20992] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 292.467305][T20990] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.478462][T20988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.495648][T20988] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.520631][T19707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.663060][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.835268][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.398533][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.430009][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 293.430032][ T28] audit: type=1400 audit(2000000248.270:3744): avc: denied { setopt } for pid=21056 comm="syz.5.5899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.536498][T21063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5903'. [ 293.558012][T21063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5903'. [ 293.606977][T21065] team0: Port device syz_tun added [ 293.619645][T21065] team0: Port device syz_tun removed [ 293.629518][T21065] bridge_slave_0: left allmulticast mode [ 293.638194][T21072] loop8: detected capacity change from 0 to 128 [ 293.645280][T21065] bridge_slave_0: left promiscuous mode [ 293.651298][T21065] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.661296][T21065] bridge_slave_1: left allmulticast mode [ 293.669770][T21065] bridge_slave_1: left promiscuous mode [ 293.675873][T21065] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.700243][T21072] bio_check_eod: 101 callbacks suppressed [ 293.700259][T21072] syz.8.5906: attempt to access beyond end of device [ 293.700259][T21072] loop8: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 293.720531][T21072] syz.8.5906: attempt to access beyond end of device [ 293.720531][T21072] loop8: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 293.735309][T21065] bond0: (slave bond_slave_0): Releasing backup interface [ 293.743491][T21072] syz.8.5906: attempt to access beyond end of device [ 293.743491][T21072] loop8: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 293.757852][T21065] bond0: (slave bond_slave_1): Releasing backup interface [ 293.766184][T21072] syz.8.5906: attempt to access beyond end of device [ 293.766184][T21072] loop8: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 293.784848][T21065] team0: Port device team_slave_0 removed [ 293.795356][T21065] team0: Port device team_slave_1 removed [ 293.801337][T21065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.809212][T21065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.817086][T21065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.838200][ T361] kworker/u8:6: attempt to access beyond end of device [ 293.838200][ T361] loop8: rw=1, sector=138, nr_sectors = 2 limit=128 [ 293.876175][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.914395][T21087] loop4: detected capacity change from 0 to 512 [ 293.929520][T21087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.944109][T21087] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5911: invalid indirect mapped block 4294967295 (level 1) [ 293.958733][T21087] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 293.960605][T21087] EXT4-fs (loop4): Remounting filesystem read-only [ 293.969787][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 293.969802][ C1] EXT4-fs (loop4): initial error at time 2000000248: ext4_free_branches:1023: inode 11 [ 293.969840][ C1] EXT4-fs (loop4): last error at time 2000000248: ext4_free_branches:1023: inode 11 [ 294.002456][T21087] EXT4-fs (loop4): 2 truncates cleaned up [ 294.008853][T21087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.048015][T19707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.085948][T21095] ip6gretap0: entered promiscuous mode [ 294.092164][T21095] macvtap1: entered promiscuous mode [ 294.099702][T21095] macvtap1: entered allmulticast mode [ 294.105553][T21095] ip6gretap0: entered allmulticast mode [ 294.115344][T21095] ip6gretap0: left allmulticast mode [ 294.132077][T21095] ip6gretap0: left promiscuous mode [ 294.164642][T21101] bond0: entered promiscuous mode [ 294.172275][T21101] batadv0: entered promiscuous mode [ 294.351341][ T28] audit: type=1400 audit(2000000249.190:3745): avc: denied { read } for pid=21115 comm="syz.8.5923" name="file0" dev="tmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.376358][ T28] audit: type=1400 audit(2000000249.220:3746): avc: denied { map } for pid=21115 comm="syz.8.5923" path="/161/file0" dev="tmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.512671][T21126] loop8: detected capacity change from 0 to 512 [ 294.557000][T21126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.592630][T21126] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.677328][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.797162][T21144] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5933'. [ 294.815800][T21144] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5933'. [ 294.845533][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.891154][ T28] audit: type=1326 audit(2000000249.730:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 294.915279][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.940356][ T28] audit: type=1326 audit(2000000249.730:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 295.005065][ T28] audit: type=1326 audit(2000000249.730:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 295.048348][ T28] audit: type=1326 audit(2000000249.730:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 295.054261][T21152] tun0: tun_chr_ioctl cmd 1074025675 [ 295.094532][ T28] audit: type=1326 audit(2000000249.730:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 295.113221][T21152] tun0: persist enabled [ 295.126555][ T28] audit: type=1326 audit(2000000249.730:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 295.151095][T21156] tun0: tun_chr_ioctl cmd 1074025675 [ 295.156515][T21156] tun0: persist disabled [ 295.176535][ T28] audit: type=1326 audit(2000000249.730:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.8.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead15bc819 code=0x7ffc0000 [ 295.211207][T21162] loop8: detected capacity change from 0 to 512 [ 295.235558][T21162] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 295.244195][T21162] System zones: 0-2, 18-18, 34-34 [ 295.255698][T21162] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 295.274695][T21162] EXT4-fs (loop8): Remounting filesystem read-only [ 295.281283][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 295.281303][ C0] EXT4-fs (loop8): initial error at time 2000000250: ext4_mb_generate_buddy:1317 [ 295.281325][ C0] EXT4-fs (loop8): last error at time 2000000250: ext4_mb_generate_buddy:1317 [ 295.307702][T21162] EXT4-fs (loop8): 1 truncate cleaned up [ 295.313867][T21162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.326563][ T361] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 295.335488][T21162] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.337318][ T361] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 295.358297][ T361] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 295.375958][T21162] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.745605][T21189] loop8: detected capacity change from 0 to 1024 [ 295.762316][T21189] EXT4-fs: Ignoring removed i_version option [ 295.781754][T21189] EXT4-fs: Ignoring removed bh option [ 295.802965][T21189] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 295.835048][T21189] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 295.862206][T21189] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 295.891428][T21189] EXT4-fs (loop8): orphan cleanup on readonly fs [ 295.900458][T21189] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 295.925209][T21189] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 295.935099][T21189] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.5952: bad orphan inode 11 [ 295.957328][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.980815][T21189] loop8: lost filesystem error report for type 5 error -117 [ 295.980931][T21189] ext4_test_bit(bit=10, block=1) = 0 [ 295.988397][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 295.988416][ C0] EXT4-fs (loop8): initial error at time 2000000250: ext4_orphan_get:1423 [ 295.988441][ C0] EXT4-fs (loop8): last error at time 2000000250: ext4_orphan_get:1423 [ 296.074849][T21189] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.095220][T21197] loop5: detected capacity change from 0 to 512 [ 296.114360][T21197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.145082][T21197] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.170020][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.308026][T16758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.436072][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.547615][T21224] netlink: 'syz.5.5967': attribute type 29 has an invalid length. [ 296.565896][T21224] netlink: 'syz.5.5967': attribute type 29 has an invalid length. [ 296.590873][T21224] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5967'. [ 296.715319][T21232] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5970'. [ 296.930479][ T3424] kernel write not supported for file bpf-prog (pid: 3424 comm: kworker/0:6) [ 296.991916][T21246] loop8: detected capacity change from 0 to 256 [ 297.034124][T21246] FAT-fs (loop8): Directory bread(block 64) failed [ 297.041023][T21246] FAT-fs (loop8): Directory bread(block 65) failed [ 297.047941][T21246] FAT-fs (loop8): Directory bread(block 66) failed [ 297.054604][T21246] FAT-fs (loop8): Directory bread(block 67) failed [ 297.067406][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.089032][T21246] FAT-fs (loop8): Directory bread(block 68) failed [ 297.100295][T21246] FAT-fs (loop8): Directory bread(block 69) failed [ 297.124705][T21246] FAT-fs (loop8): Directory bread(block 70) failed [ 297.131432][T21246] FAT-fs (loop8): Directory bread(block 71) failed [ 297.153937][T21246] FAT-fs (loop8): Directory bread(block 72) failed [ 297.173944][T21246] FAT-fs (loop8): Directory bread(block 73) failed [ 297.211941][T21246] syz.8.5976: attempt to access beyond end of device [ 297.211941][T21246] loop8: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 297.258465][T21246] syz.8.5976: attempt to access beyond end of device [ 297.258465][T21246] loop8: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 297.400452][T21259] loop8: detected capacity change from 0 to 1024 [ 297.440210][T21259] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 297.465424][T21259] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 2: comm syz.8.5981: lblock 2 mapped to illegal pblock 2 (length 1) [ 297.480658][T21259] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 297.480834][T21259] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 48: comm syz.8.5981: lblock 0 mapped to illegal pblock 48 (length 1) [ 297.489940][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 297.489997][ C0] EXT4-fs (loop8): initial error at time 2000000252: ext4_map_blocks:786: inode 3: block 2 [ 297.490039][ C0] EXT4-fs (loop8): last error at time 2000000252: ext4_map_blocks:786: inode 3: block 2 [ 297.531960][T21259] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 297.532069][T21259] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.5981: Failed to acquire dquot type 0 [ 297.552392][T21259] loop8: lost filesystem error report for type 5 error -117 [ 297.556754][T21259] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 297.585174][T21259] loop8: lost filesystem error report for type 5 error -117 [ 297.586963][T21259] EXT4-fs error (device loop8): ext4_evict_inode:265: inode #11: comm syz.8.5981: mark_inode_dirty error [ 297.626913][T21259] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 297.627134][T21259] EXT4-fs warning (device loop8): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 297.674539][T21259] EXT4-fs (loop8): 1 orphan inode deleted [ 297.681260][T21259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.693701][ T361] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 297.693740][ T361] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 297.694168][ T361] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 0 [ 297.717510][T21278] loop5: detected capacity change from 0 to 256 [ 297.793657][T21259] EXT4-fs (loop8): shut down requested (2) [ 297.830087][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.830205][T21280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.115362][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.236889][T21314] loop4: detected capacity change from 0 to 128 [ 298.245059][T21314] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.257706][T21314] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 298.325106][T21318] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.336421][T21318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.390318][T19707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.426034][T21318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.459452][T21318] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.480626][T21332] vlan3: entered allmulticast mode [ 298.495946][T21332] bridge0: entered allmulticast mode [ 298.501682][T21332] bridge0: port 1(vlan3) entered blocking state [ 298.507664][T16758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.508280][T21332] bridge0: port 1(vlan3) entered disabled state [ 298.554817][T21335] EXT4-fs (loop5): 1 truncate cleaned up [ 298.590137][T21335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.624385][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 298.624399][ T28] audit: type=1400 audit(2000000253.460:3772): avc: denied { ioctl } for pid=21322 comm="syz.8.6008" path="socket:[63817]" dev="sockfs" ino=63817 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.668733][T21340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6012'. [ 298.705327][ T28] audit: type=1400 audit(2000000253.530:3773): avc: denied { mounton } for pid=21341 comm="syz.1.6013" path="/1211/file1" dev="tmpfs" ino=6237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 298.796690][T21346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6014'. [ 298.828890][T21348] SELinux: failed to load policy [ 298.939919][T16758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.128160][T21365] set_capacity_and_notify: 2 callbacks suppressed [ 299.128176][T21365] loop5: detected capacity change from 0 to 512 [ 299.156006][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.173656][T21365] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 299.186866][T21370] loop8: detected capacity change from 0 to 256 [ 299.195227][T21365] EXT4-fs (loop5): 1 truncate cleaned up [ 299.203588][T21370] vfat: Unknown parameter 'mixed' [ 299.232430][T21365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.265428][T21377] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.335522][T16758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.405716][T21386] serio: Serial port ttyS3 [ 299.475481][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.572093][T21405] loop4: detected capacity change from 0 to 512 [ 299.633339][T21405] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.6040: corrupted in-inode xattr: invalid ea_ino [ 299.694590][T21405] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 299.695026][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 299.710699][ C1] EXT4-fs (loop4): initial error at time 2000000254: ext4_iget_extra_inode:5040: inode 15 [ 299.720649][ C1] EXT4-fs (loop4): last error at time 2000000254: ext4_iget_extra_inode:5040: inode 15 [ 299.725981][T21405] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6040: couldn't read orphan inode 15 (err -117) [ 299.790265][T21405] loop4: lost filesystem error report for type 5 error -117 [ 299.790787][T21405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.856087][T19707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.025911][T21445] syzkaller1: entered promiscuous mode [ 300.031686][T21445] syzkaller1: entered allmulticast mode [ 300.090566][T21451] loop4: detected capacity change from 0 to 256 [ 300.097564][T21451] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.134146][T21451] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.153773][ T28] audit: type=1400 audit(2000000254.990:3774): avc: denied { execmem } for pid=21450 comm="syz.4.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 300.195259][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.210322][ T28] audit: type=1400 audit(2000000255.010:3775): avc: denied { read write } for pid=18470 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.312041][ T28] audit: type=1400 audit(2000000255.020:3776): avc: denied { open } for pid=18470 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.365053][ T28] audit: type=1400 audit(2000000255.020:3777): avc: denied { ioctl } for pid=18470 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.392532][ T28] audit: type=1400 audit(2000000255.030:3778): avc: denied { create } for pid=21454 comm="syz.8.6064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.442591][ T28] audit: type=1400 audit(2000000255.030:3779): avc: denied { recv } for pid=21444 comm="syz.8.6060" saddr=10.128.0.163 src=30036 daddr=10.128.0.18 dest=34566 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 300.493577][ T28] audit: type=1400 audit(2000000255.040:3780): avc: denied { write } for pid=21454 comm="syz.8.6064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.543224][ T28] audit: type=1400 audit(2000000255.050:3781): avc: denied { unmount } for pid=19707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 300.730600][T21503] loop5: detected capacity change from 0 to 2048 [ 300.748008][T21503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.834592][T16758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.099754][T21518] chnl_net:caif_netlink_parms(): no params data found [ 301.154679][T21518] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.162273][T21518] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.169748][T21518] bridge_slave_0: entered allmulticast mode [ 301.176548][T21518] bridge_slave_0: entered promiscuous mode [ 301.189473][T21518] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.197949][T21518] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.205370][T21518] bridge_slave_1: entered allmulticast mode [ 301.212046][T21518] bridge_slave_1: entered promiscuous mode [ 301.235122][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.272816][ T50] bond0 (unregistering): Released all slaves [ 301.322541][T21518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.333034][T21545] loop8: detected capacity change from 0 to 512 [ 301.341129][T21518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.352654][T21545] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 301.362121][ T50] tipc: Disabling bearer [ 301.369538][ T50] tipc: Left network mode [ 301.386572][T21545] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 301.391272][T21518] team0: Port device team_slave_0 added [ 301.401331][T21518] team0: Port device team_slave_1 added [ 301.414288][T21545] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.6100: bad orphan inode 4 [ 301.426369][ T50] hsr_slave_0: left promiscuous mode [ 301.426830][T21545] loop8: lost filesystem error report for type 5 error -117 [ 301.432210][ T50] hsr_slave_1: left promiscuous mode [ 301.439864][T21545] EXT4-fs (loop8): Remounting filesystem read-only [ 301.451563][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 301.451580][ C1] EXT4-fs (loop8): initial error at time 2000000256: ext4_orphan_get:1423 [ 301.451619][ C1] EXT4-fs (loop8): last error at time 2000000256: ext4_orphan_get:1423 [ 301.489699][T21545] EXT4-fs (loop8): 1 orphan inode deleted [ 301.496330][T21545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.700534][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.727719][T21518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.734839][T21518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.767871][T21518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.780192][T21518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.799532][T21518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.862749][T21518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.928056][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6111'. [ 301.951525][T21518] hsr_slave_0: entered promiscuous mode [ 301.957812][T21518] hsr_slave_1: entered promiscuous mode [ 301.964334][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6111'. [ 302.275235][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.515276][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.655127][T21518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 302.678561][T21518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 302.704180][T21518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.726566][T21518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.012671][T21518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.035559][T21700] program syz.8.6123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.047502][T21518] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.068092][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.075254][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.123171][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.130306][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.317403][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.341320][T21518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.398103][T21740] Cannot find add_set index 0 as target [ 303.542279][T21518] veth0_vlan: entered promiscuous mode [ 303.606117][T21518] veth1_vlan: entered promiscuous mode [ 303.646085][T21518] veth0_macvtap: entered promiscuous mode [ 303.676026][T21518] veth1_macvtap: entered promiscuous mode [ 303.701000][T21518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.717755][T21518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.754971][ T142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.774208][ T142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.856384][ T142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.870422][ T142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.880782][T21782] loop4: detected capacity change from 0 to 512 [ 303.905309][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 303.905321][ T28] audit: type=1400 audit(2000000258.750:3884): avc: denied { mounton } for pid=21518 comm="syz-executor" path="/root/syzkaller.XZtl8K/syz-tmp" dev="sda1" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 303.947035][ T28] audit: type=1400 audit(2000000258.780:3885): avc: denied { mount } for pid=21518 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 303.994320][T21782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.037484][ T28] audit: type=1400 audit(2000000258.780:3886): avc: denied { mount } for pid=21518 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 304.059830][ T28] audit: type=1400 audit(2000000258.780:3887): avc: denied { mounton } for pid=21518 comm="syz-executor" path="/root/syzkaller.XZtl8K/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 304.066332][T21782] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.097068][ T28] audit: type=1400 audit(2000000258.780:3888): avc: denied { mounton } for pid=21518 comm="syz-executor" path="/root/syzkaller.XZtl8K/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=65722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 304.172244][ T28] audit: type=1400 audit(2000000258.810:3889): avc: denied { mounton } for pid=21518 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 304.172283][ T28] audit: type=1400 audit(2000000258.810:3890): avc: denied { mount } for pid=21518 comm="syz-executor" name="/" dev="gadgetfs" ino=4683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 304.172633][ T28] audit: type=1400 audit(2000000258.870:3891): avc: denied { create } for pid=21783 comm="syz.0.6120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 304.172666][ T28] audit: type=1400 audit(2000000258.900:3892): avc: denied { sys_admin } for pid=21783 comm="syz.0.6120" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 304.172698][ T28] audit: type=1400 audit(2000000259.000:3893): avc: denied { getopt } for pid=21781 comm="syz.4.6143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.182686][T19707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.355946][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.435818][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.477604][T21811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6148'. [ 304.530966][ T3011] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 304.637694][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6155'. [ 304.665360][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6155'. [ 304.702121][T21851] loop2: detected capacity change from 0 to 1024 [ 304.709959][T21851] EXT4-fs: inline encryption not supported [ 304.717558][T21851] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 304.717558][T21851] [ 304.858260][T21869] syzkaller1: entered promiscuous mode [ 304.868054][T21869] syzkaller1: entered allmulticast mode [ 305.399178][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.413322][T21961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6185'. [ 305.555491][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.587373][T21980] syzkaller1: entered promiscuous mode [ 305.615830][T21980] syzkaller1: entered allmulticast mode [ 305.651744][T21987] loop2: detected capacity change from 0 to 512 [ 305.672685][T21987] ext4: Unknown parameter 'nouser_xattr' [ 305.903202][T22016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6206'. [ 305.944277][T10349] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.016537][T22031] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 306.044114][T22035] loop2: detected capacity change from 0 to 512 [ 306.057687][T10349] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.116255][T22035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.152748][T10349] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.169675][T22035] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.218253][T10349] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.371218][T10349] bridge_slave_1: left allmulticast mode [ 306.382042][T10349] bridge_slave_1: left promiscuous mode [ 306.388493][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.397840][T10349] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.416804][T10349] bridge_slave_0: left allmulticast mode [ 306.422653][T10349] bridge_slave_0: left promiscuous mode [ 306.429368][T10349] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.445451][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.598507][T10349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.629628][T10349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.647031][T10349] bond0 (unregistering): Released all slaves [ 306.671737][T22066] team0: Port device syz_tun added [ 306.693664][T22067] team0: Port device syz_tun removed [ 306.719001][T22067] bridge_slave_0: left allmulticast mode [ 306.725173][T22067] bridge_slave_0: left promiscuous mode [ 306.731336][T22067] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.741129][T22067] bridge_slave_1: left allmulticast mode [ 306.750947][T22067] bridge_slave_1: left promiscuous mode [ 306.756841][T22067] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.767688][T22067] bond0: (slave bond_slave_0): Releasing backup interface [ 306.778067][T22067] bond0: (slave bond_slave_1): Releasing backup interface [ 306.791518][T22067] team0: Port device team_slave_0 removed [ 306.804816][T22067] team0: Port device team_slave_1 removed [ 306.815593][T22067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.828206][T22067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.846897][T22067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.862359][T22067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.881073][T22067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 306.912249][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.920064][T10349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.928770][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.936327][T10349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.955355][T10349] veth1_macvtap: left promiscuous mode [ 306.970921][T10349] veth0_macvtap: left promiscuous mode [ 306.980671][T10349] veth1_vlan: left promiscuous mode [ 307.018236][T10349] veth0_vlan: left promiscuous mode [ 307.166087][T10349] team0 (unregistering): Port device team_slave_1 removed [ 307.182236][T10349] team0 (unregistering): Port device team_slave_0 removed [ 307.449986][T22036] chnl_net:caif_netlink_parms(): no params data found [ 307.475166][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.542187][T22144] team0: Port device syz_tun added [ 307.553844][T22144] team0: Port device syz_tun removed [ 307.559649][T22144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 307.588149][T22150] loop2: detected capacity change from 0 to 256 [ 307.708899][T22036] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.724097][T22036] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.731690][T22036] bridge_slave_0: entered allmulticast mode [ 307.738533][T22036] bridge_slave_0: entered promiscuous mode [ 307.772588][T22036] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.785150][T22036] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.800492][T22036] bridge_slave_1: entered allmulticast mode [ 307.807392][T22036] bridge_slave_1: entered promiscuous mode [ 307.815312][T10349] IPVS: stop unused estimator thread 0... [ 307.872682][T22036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.892170][T22036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.943753][T22036] team0: Port device team_slave_0 added [ 307.969979][T22036] team0: Port device team_slave_1 added [ 308.013430][T22036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.026585][T22036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.088410][T22036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.104205][T22036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.119096][T22036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.149282][T22036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.231677][T22036] hsr_slave_0: entered promiscuous mode [ 308.250472][T22036] hsr_slave_1: entered promiscuous mode [ 308.258263][T22036] debugfs: 'hsr0' already exists in 'hsr' [ 308.285435][T22036] Cannot create hsr debugfs directory [ 308.515785][ T8861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.533419][T22212] syzkaller1: entered promiscuous mode [ 308.545156][T22212] syzkaller1: entered allmulticast mode [ 308.595790][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.816455][T22036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.826203][T22036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.843160][T22036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.858012][T22036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.945868][T22036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.965433][T22036] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.984177][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.991308][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.023835][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.030980][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.105271][T22036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.260603][T22036] veth0_vlan: entered promiscuous mode [ 309.270453][T22036] veth1_vlan: entered promiscuous mode [ 309.297525][T22036] veth0_macvtap: entered promiscuous mode [ 309.312723][T22036] veth1_macvtap: entered promiscuous mode [ 309.340868][T22295] loop8: detected capacity change from 0 to 512 [ 309.355834][T22036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.379495][T22295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.397869][T22036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.411687][T22295] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.420800][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.444700][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 309.444740][ T28] audit: type=1400 audit(2000000264.280:3965): avc: denied { create } for pid=22294 comm="syz.8.6273" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 309.466192][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.493909][ T28] audit: type=1400 audit(2000000264.320:3966): avc: denied { remove_name } for pid=22294 comm="syz.8.6273" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.517350][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.518256][T18470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.526447][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.543968][ T28] audit: type=1400 audit(2000000264.320:3967): avc: denied { rename } for pid=22294 comm="syz.8.6273" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.575188][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.587281][ T28] audit: type=1400 audit(2000000264.320:3968): avc: denied { rmdir } for pid=22294 comm="syz.8.6273" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 309.609647][ T28] audit: type=1400 audit(2000000264.320:3969): avc: denied { rename } for pid=22294 comm="syz.8.6273" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 309.647300][T22303] sctp: [Deprecated]: syz.0.6275 (pid 22303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.647300][T22303] Use struct sctp_sack_info instead [ 309.674584][ T28] audit: type=1400 audit(2000000264.320:3970): avc: denied { rmdir } for pid=22294 comm="syz.8.6273" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.729232][ T28] audit: type=1400 audit(2000000264.570:3971): avc: denied { connect } for pid=22309 comm="syz.1.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.784011][ T28] audit: type=1400 audit(2000000264.570:3972): avc: denied { read } for pid=22309 comm="syz.1.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.802724][T22318] syzkaller1: entered promiscuous mode [ 309.820830][T22318] syzkaller1: entered allmulticast mode [ 309.845299][T22325] loop8: detected capacity change from 0 to 128 [ 309.854389][ T28] audit: type=1400 audit(2000000264.670:3973): avc: denied { map } for pid=22320 comm="syz.2.6276" path="socket:[67604]" dev="sockfs" ino=67604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 309.935171][ T28] audit: type=1400 audit(2000000264.670:3974): avc: denied { read } for pid=22320 comm="syz.2.6276" path="socket:[67604]" dev="sockfs" ino=67604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.224105][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6284'. [ 310.279400][T22357] bond1: Invalid ad_actor_system MAC address. [ 310.312434][T22357] bond1: option ad_actor_system: invalid value (4294967295) [ 310.334253][T22357] bond1 (unregistering): Released all slaves [ 310.554665][T22383] sctp: [Deprecated]: syz.2.6288 (pid 22383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.554665][T22383] Use struct sctp_sack_info instead [ 310.595420][ T8861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.658394][T22403] ip6erspan0: entered allmulticast mode [ 310.843606][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.476445][T22496] sctp: [Deprecated]: syz.3.6309 (pid 22496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.476445][T22496] Use struct sctp_sack_info instead [ 311.567180][T22504] ip6erspan0: entered allmulticast mode [ 311.635112][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.643350][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.878341][T22536] netlink: 'syz.3.6322': attribute type 4 has an invalid length. [ 312.022720][T22548] loop3: detected capacity change from 0 to 128 [ 312.056754][T22548] syz.3.6326: attempt to access beyond end of device [ 312.056754][T22548] loop3: rw=1, sector=138, nr_sectors = 2 limit=128 [ 312.119171][T22555] sctp: [Deprecated]: syz.2.6329 (pid 22555) Use of int in max_burst socket option. [ 312.119171][T22555] Use struct sctp_assoc_value instead [ 312.278802][ T3371] Process accounting resumed [ 312.675221][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.020004][T22628] loop2: detected capacity change from 0 to 128 [ 313.073094][T22630] serio: Serial port ptm0 [ 313.104128][T22633] batadv_slave_1: entered promiscuous mode [ 313.131858][T22631] batadv_slave_1: left promiscuous mode [ 313.353704][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6353'. [ 313.363678][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6353'. [ 313.431774][T22653] syzkaller1: entered promiscuous mode [ 313.438735][T22653] syzkaller1: entered allmulticast mode [ 313.540321][T22669] loop2: detected capacity change from 0 to 512 [ 313.558908][T22669] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 313.583036][T22669] System zones: 0-2, 18-18, 34-34 [ 313.603473][T22669] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 313.655449][T22669] EXT4-fs (loop2): Remounting filesystem read-only [ 313.664995][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 313.671465][ C0] EXT4-fs (loop2): initial error at time 2000000268: ext4_mb_generate_buddy:1317 [ 313.680618][ C0] EXT4-fs (loop2): last error at time 2000000268: ext4_mb_generate_buddy:1317 [ 313.692093][T22669] EXT4-fs (loop2): 1 truncate cleaned up [ 313.700009][T22669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.712626][ T36] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 313.723635][ T36] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 313.725761][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.737196][ T36] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 313.752821][T22669] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.764001][T22669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.475662][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6371'. [ 314.493600][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6371'. [ 314.571421][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 314.571438][ T28] audit: type=1400 audit(2000000269.410:3996): avc: denied { create } for pid=22697 comm="syz.1.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 314.676065][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.696114][T22716] loop2: detected capacity change from 0 to 2048 [ 314.727978][T22716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.742169][ T28] audit: type=1400 audit(2000000269.570:3997): avc: denied { read write } for pid=22721 comm="syz.1.6387" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 314.767518][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.775804][ T28] audit: type=1400 audit(2000000269.570:3998): avc: denied { open } for pid=22721 comm="syz.1.6387" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 314.785469][T22716] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.812640][ T28] audit: type=1400 audit(2000000269.650:3999): avc: denied { ioctl } for pid=22721 comm="syz.1.6387" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 314.911716][ T28] audit: type=1400 audit(2000000269.750:4000): avc: denied { ioctl } for pid=22715 comm="syz.2.6384" path="/57/file0/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 314.912965][T22727] program syz.1.6388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.978118][ T28] audit: type=1400 audit(2000000269.810:4001): avc: denied { create } for pid=22729 comm="syz.3.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 315.174186][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.223632][T22744] loop3: detected capacity change from 0 to 128 [ 315.237568][ T28] audit: type=1400 audit(2000000270.080:4002): avc: denied { mounton } for pid=22743 comm="syz.3.6395" path="/20/file0/bus" dev="loop3" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 315.270604][ T28] audit: type=1400 audit(2000000270.110:4003): avc: denied { unmount } for pid=22036 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 315.330383][ T28] audit: type=1400 audit(2000000270.170:4004): avc: denied { create } for pid=22752 comm="syz.3.6399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.352227][ T28] audit: type=1400 audit(2000000270.190:4005): avc: denied { watch watch_reads } for pid=22750 comm="syz.2.6398" path="/60/file1" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 315.795245][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.835766][T22801] SELinux: ebitmap: map size 15 does not match my size 64 (high bit was 0) [ 315.844620][T22801] SELinux: failed to load policy [ 315.945422][T22811] SELinux: Context : is not valid (left unmapped). [ 315.980204][T22817] syzkaller1: entered promiscuous mode [ 315.987689][T22817] syzkaller1: entered allmulticast mode [ 316.615622][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6450'. [ 316.629104][T22878] netlink: 'syz.0.6450': attribute type 30 has an invalid length. [ 316.707551][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.724062][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.747124][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.781078][T22891] loop8: detected capacity change from 0 to 164 [ 316.793710][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.804005][T22891] ISOFS: Bad logical zone size 2816 [ 316.835163][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.012962][T22918] loop2: detected capacity change from 0 to 128 [ 317.088878][T22920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6464'. [ 317.167984][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6468'. [ 317.292198][T22939] Process accounting resumed [ 317.641282][T22985] Falling back ldisc for ttyS3. [ 317.715182][ T3534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.862317][T22999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.877717][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.886500][T22999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.438471][T23037] loop2: detected capacity change from 0 to 1024 [ 318.459515][T23037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 318.479898][T23037] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.493854][T23037] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6502: bg 0: block 112: padding at end of block bitmap is not set [ 318.509173][T23037] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28 [ 318.521827][T23037] EXT4-fs (loop2): This should not happen!! Data will be lost [ 318.521827][T23037] [ 318.531707][T23037] EXT4-fs (loop2): Total free blocks count 0 [ 318.538104][T23037] EXT4-fs (loop2): Free/Dirty block details [ 318.544607][T23037] EXT4-fs (loop2): free_blocks=0 [ 318.549826][T23037] EXT4-fs (loop2): dirty_blocks=16 [ 318.555111][T23037] EXT4-fs (loop2): Block reservation details [ 318.561195][T23037] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 318.581532][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 318.651293][T23053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6507'. [ 318.751362][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6509'. [ 318.760466][T15576] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 318.765142][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 318.846270][T23069] loop2: detected capacity change from 0 to 1024 [ 318.866289][T23069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.897506][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.915321][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.095843][T23092] netlink: 'syz.2.6524': attribute type 1 has an invalid length. [ 319.114730][T23092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.145427][T23092] bond1: (slave geneve2): making interface the new active one [ 319.156648][T23092] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 319.166087][T23095] syzkaller1: entered promiscuous mode [ 319.171616][T23095] syzkaller1: entered allmulticast mode [ 319.305545][T23111] netlink: 'syz.3.6532': attribute type 10 has an invalid length. [ 319.336935][T23111] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.355222][T23111] bond0: (slave team0): Enslaving as an active interface with an up link [ 319.668079][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 319.668094][ T28] audit: type=1400 audit(2000000274.510:4067): avc: denied { read } for pid=23133 comm="syz.8.6541" lport=45672 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 319.702527][T23132] Invalid option length (63724) for dns_resolver key [ 319.739261][ T28] audit: type=1400 audit(2000000274.560:4068): avc: denied { setopt } for pid=23133 comm="syz.8.6541" lport=45672 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 319.814338][ T28] audit: type=1400 audit(2000000274.650:4069): avc: denied { write } for pid=23138 comm="syz.8.6543" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 319.839229][T23139] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.848129][T23139] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 319.863269][ T28] audit: type=1400 audit(2000000274.680:4070): avc: denied { map } for pid=23138 comm="syz.8.6543" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 319.889424][ T28] audit: type=1326 audit(2000000274.730:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47797c819 code=0x7fc00000 [ 319.939156][ T28] audit: type=1326 audit(2000000274.780:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.1.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa724a7c819 code=0x7ffc0000 [ 319.955412][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.979528][ T28] audit: type=1326 audit(2000000274.780:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.1.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa724a7c819 code=0x7ffc0000 [ 320.004645][ T28] audit: type=1326 audit(2000000274.780:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.1.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa724a7c819 code=0x7ffc0000 [ 320.030272][ T28] audit: type=1326 audit(2000000274.780:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.1.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa724a7c819 code=0x7ffc0000 [ 320.135844][ T28] audit: type=1326 audit(2000000274.780:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.1.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa724a7c819 code=0x7ffc0000 [ 320.422228][T23177] loop2: detected capacity change from 0 to 512 [ 320.434007][T23177] EXT4-fs: inline encryption not supported [ 320.445713][ T3534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.476360][T23177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 320.489723][T23177] EXT4-fs (loop2): 1 truncate cleaned up [ 320.507271][T23177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.602646][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.725416][T23184] SELinux: unknown common [ 320.730180][T23184] SELinux: failed to load policy [ 320.755168][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.995179][ T4538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.077120][ T3534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.162890][T23210] netlink: 'syz.3.6573': attribute type 5 has an invalid length. [ 321.255678][T23212] loop2: detected capacity change from 0 to 8192 [ 321.293606][T23211] syz.2.6574: attempt to access beyond end of device [ 321.293606][T23211] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 321.325014][T23211] Buffer I/O error on dev loop2, logical block 57847, async page read [ 321.354441][T23212] syz.2.6574: attempt to access beyond end of device [ 321.354441][T23212] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 321.395140][T23212] Buffer I/O error on dev loop2, logical block 57847, async page read [ 321.420072][T23212] syz.2.6574: attempt to access beyond end of device [ 321.420072][T23212] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 321.458533][T23212] Buffer I/O error on dev loop2, logical block 57847, async page read [ 321.935115][T23276] loop2: detected capacity change from 0 to 4096 [ 321.948770][T23276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.037550][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.062195][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.513322][T23322] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 322.520671][T23322] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 322.527811][T23322] veth0_to_bridge: entered allmulticast mode [ 322.534417][T23322] veth0_to_bridge: entered promiscuous mode [ 322.575299][T23326] loop2: detected capacity change from 0 to 128 [ 322.582665][T23326] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.595693][T23326] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.630544][T10349] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.657835][T23330] loop2: detected capacity change from 0 to 512 [ 322.667913][T23330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 322.682583][T23330] EXT4-fs (loop2): 1 truncate cleaned up [ 322.694816][T23330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.817050][T23342] loop3: detected capacity change from 0 to 2048 [ 322.836893][T23342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.898377][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.919563][T23342] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6626: bg 0: block 234: padding at end of block bitmap is not set [ 322.935193][T23342] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 934 with error 28 [ 322.955556][T23342] EXT4-fs (loop3): This should not happen!! Data will be lost [ 322.955556][T23342] [ 322.977808][T23342] EXT4-fs (loop3): Total free blocks count 0 [ 322.993951][T23342] EXT4-fs (loop3): Free/Dirty block details [ 323.001269][T23342] EXT4-fs (loop3): free_blocks=0 [ 323.020956][T23342] EXT4-fs (loop3): dirty_blocks=944 [ 323.040486][T23342] EXT4-fs (loop3): Block reservation details [ 323.053968][T23342] EXT4-fs (loop3): i_reserved_data_blocks=59 [ 323.075214][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.178277][T23363] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6633'. [ 323.204886][T22036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.509838][T23380] loop3: detected capacity change from 0 to 512 [ 323.537230][T23380] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #3: comm syz.3.6641: corrupted inode contents [ 323.559943][T23380] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.560873][T23380] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #3: comm syz.3.6641: mark_inode_dirty error [ 323.570027][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 323.570050][ C1] EXT4-fs (loop3): initial error at time 2000000278: ext4_do_update_inode:5602: inode 3 [ 323.570103][ C1] EXT4-fs (loop3): last error at time 2000000278: ext4_do_update_inode:5602: inode 3 [ 323.627560][T23380] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.647018][T23380] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #3: comm syz.3.6641: corrupted inode contents [ 323.670884][T23380] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.715411][T23380] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.6641: mark_inode_dirty error [ 323.743913][T23380] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.744149][T23380] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.6641: Failed to acquire dquot type 0 [ 323.768102][T23380] loop3: lost filesystem error report for type 5 error -117 [ 323.768734][T23380] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.6641: corrupted inode contents [ 323.788328][T23380] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.795147][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.812889][T23380] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #16: comm syz.3.6641: mark_inode_dirty error [ 323.825156][T23380] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.825515][T23380] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.6641: corrupted inode contents [ 323.846842][T23380] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.847004][T23380] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.6641: mark_inode_dirty error [ 323.874539][T23380] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.874953][T23380] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.6641: corrupted inode contents [ 323.899222][T23380] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.899526][T23380] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 323.917424][T23380] loop3: lost filesystem error report for type 5 error -117 [ 323.917634][T23380] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.6641: corrupted inode contents [ 323.963534][T23405] loop2: detected capacity change from 0 to 2048 [ 324.010682][T23380] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.014365][T23405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.036447][T23380] EXT4-fs error (device loop3): ext4_truncate:4602: inode #16: comm syz.3.6641: mark_inode_dirty error [ 324.053108][T23380] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 324.065097][T23380] loop3: lost filesystem error report for type 5 error -117 [ 324.066178][T23380] EXT4-fs (loop3): 1 truncate cleaned up [ 324.108044][T23380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.120842][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.166611][T23405] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6646: bg 0: block 234: padding at end of block bitmap is not set [ 324.185438][T23380] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.203027][T23405] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1036 with error 28 [ 324.217764][T23405] EXT4-fs (loop2): This should not happen!! Data will be lost [ 324.217764][T23405] [ 324.243154][T23405] EXT4-fs (loop2): Total free blocks count 0 [ 324.253204][T23380] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #3: comm syz.3.6641: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 324.253204][T23380] [ 324.265181][T23405] EXT4-fs (loop2): Free/Dirty block details [ 324.282272][T23405] EXT4-fs (loop2): free_blocks=0 [ 324.287315][T23405] EXT4-fs (loop2): dirty_blocks=1040 [ 324.292741][T23405] EXT4-fs (loop2): Block reservation details [ 324.298945][T23405] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 324.464046][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.474531][T22036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.102839][T23487] loop3: detected capacity change from 0 to 512 [ 325.121319][T23487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 325.140530][T23487] EXT4-fs (loop3): 1 truncate cleaned up [ 325.146871][T23487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.159123][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.430827][T22036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.606662][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 325.606680][ T28] audit: type=1400 audit(2000000280.450:4128): avc: denied { remount } for pid=23516 comm="syz.3.6677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 325.867986][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.908792][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.978299][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.042039][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.101359][T23532] chnl_net:caif_netlink_parms(): no params data found [ 326.132037][ T50] bridge_slave_1: left allmulticast mode [ 326.137867][ T50] bridge_slave_1: left promiscuous mode [ 326.143573][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.151619][ T50] bridge_slave_0: left allmulticast mode [ 326.157383][ T50] bridge_slave_0: left promiscuous mode [ 326.163032][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.195632][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.238167][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.248153][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.258300][ T50] bond0 (unregistering): (slave team0): Releasing backup interface [ 326.267517][ T50] bond0 (unregistering): Released all slaves [ 326.293544][T23532] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.300768][T23532] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.309140][T23532] bridge_slave_0: entered allmulticast mode [ 326.315946][T23532] bridge_slave_0: entered promiscuous mode [ 326.324424][ T50] hsr_slave_0: left promiscuous mode [ 326.330212][ T50] hsr_slave_1: left promiscuous mode [ 326.336063][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.343448][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.351390][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.359016][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.369902][ T50] veth1_macvtap: left promiscuous mode [ 326.375439][ T50] veth0_macvtap: left promiscuous mode [ 326.381327][ T50] veth1_vlan: left promiscuous mode [ 326.386649][ T50] veth0_vlan: left promiscuous mode [ 326.459377][ T50] team0 (unregistering): Port device team_slave_1 removed [ 326.469633][ T50] team0 (unregistering): Port device team_slave_0 removed [ 326.504219][T23532] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.511923][T23532] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.519571][T23532] bridge_slave_1: entered allmulticast mode [ 326.526839][T23532] bridge_slave_1: entered promiscuous mode [ 326.546284][T23532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.556972][T23532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.578196][T23532] team0: Port device team_slave_0 added [ 326.584950][T23532] team0: Port device team_slave_1 added [ 326.604437][T23532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.611560][T23532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.639082][T23532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.651928][T23532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.659197][T23532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.685617][T23532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.718647][T23532] hsr_slave_0: entered promiscuous mode [ 326.725089][T23532] hsr_slave_1: entered promiscuous mode [ 326.731269][T23532] debugfs: 'hsr0' already exists in 'hsr' [ 326.737304][T23532] Cannot create hsr debugfs directory [ 326.835676][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.235156][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.456186][T23577] syzkaller0: entered promiscuous mode [ 327.461758][T23577] syzkaller0: entered allmulticast mode [ 327.633626][T23585] netlink: 1315 bytes leftover after parsing attributes in process `syz.0.6701'. [ 327.710713][T23591] netlink: 'syz.0.6704': attribute type 18 has an invalid length. [ 327.718700][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6704'. [ 327.755422][T23591] netlink: 'syz.0.6704': attribute type 18 has an invalid length. [ 327.763358][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6704'. [ 327.943056][ T28] audit: type=1400 audit(2000000282.780:4129): avc: denied { mounton } for pid=23596 comm="syz.0.6707" path="/proc/1491/task" dev="proc" ino=71387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 328.133392][ T28] audit: type=1400 audit(2000000282.970:4130): avc: denied { watch } for pid=23615 comm="syz.0.6712" path="/683/file0" dev="tmpfs" ino=3532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 328.275248][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.455750][T23502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.478192][T23532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.520803][T23532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.557400][T23532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.579578][T23532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.609279][T23641] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.6721'. [ 328.642859][ T28] audit: type=1400 audit(2000000283.480:4131): avc: denied { create } for pid=23652 comm="syz.0.6723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 328.683190][T23532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.693020][ T28] audit: type=1400 audit(2000000283.480:4132): avc: denied { bind } for pid=23652 comm="syz.0.6723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 328.721396][T23532] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.732003][ T28] audit: type=1400 audit(2000000283.480:4133): avc: denied { name_bind } for pid=23652 comm="syz.0.6723" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 328.754919][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.756145][ T28] audit: type=1400 audit(2000000283.480:4134): avc: denied { node_bind } for pid=23652 comm="syz.0.6723" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 328.762117][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.794803][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.801898][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.811637][ T28] audit: type=1400 audit(2000000283.570:4135): avc: denied { getopt } for pid=23656 comm="syz.1.6724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.841943][T23661] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6726'. [ 328.851027][T23661] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6726'. [ 328.874607][T23661] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6726'. [ 328.994844][T23532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.148330][T23532] veth0_vlan: entered promiscuous mode [ 329.161587][T23532] veth1_vlan: entered promiscuous mode [ 329.192853][T23532] veth0_macvtap: entered promiscuous mode [ 329.204485][T23532] veth1_macvtap: entered promiscuous mode [ 329.222099][T23532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.237598][T23532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.252101][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.262335][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.271436][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.284877][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.315215][ T8861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.359189][ T28] audit: type=1400 audit(2000000284.190:4136): avc: denied { write } for pid=23725 comm="syz.3.6682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 329.427375][T23732] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6741'. [ 329.525930][T23741] netlink: 27 bytes leftover after parsing attributes in process `syz.8.6744'. [ 329.562801][T23738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6743'. [ 329.611819][ T28] audit: type=1400 audit(2000000284.450:4137): avc: denied { bind } for pid=23744 comm="syz.3.6747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 329.650143][T23752] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 329.672498][T23745] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 329.875314][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.101069][T23796] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.6766'. [ 330.355175][ T8861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.675892][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.885703][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 330.885721][ T28] audit: type=1400 audit(2000000285.730:4140): avc: denied { mount } for pid=23805 comm="syz.0.6771" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 330.914337][T23806] loop3: detected capacity change from 0 to 512 [ 330.938727][T23806] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 330.957166][ T28] audit: type=1400 audit(2000000285.800:4141): avc: denied { unmount } for pid=14992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 330.996330][T23806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.010824][T23806] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 331.044005][T23806] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.6770: corrupted xattr block 33: invalid ea_ino [ 331.064731][T23806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 331.086453][T23806] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.6770: corrupted xattr block 33: invalid ea_ino [ 331.103732][ T28] audit: type=1400 audit(2000000285.940:4142): avc: denied { listen } for pid=23821 comm="syz.1.6776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.174747][ T28] audit: type=1400 audit(2000000286.010:4143): avc: denied { accept } for pid=23821 comm="syz.1.6776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.209742][T23827] loop2: detected capacity change from 0 to 2048 [ 331.229820][T23827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.293887][ T28] audit: type=1400 audit(2000000286.130:4144): avc: denied { bind } for pid=23810 comm="syz.0.6773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.316449][ T28] audit: type=1400 audit(2000000286.130:4145): avc: denied { name_bind } for pid=23810 comm="syz.0.6773" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 331.337523][ T28] audit: type=1400 audit(2000000286.130:4146): avc: denied { node_bind } for pid=23810 comm="syz.0.6773" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 331.340003][T23827] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6778: bg 0: block 234: padding at end of block bitmap is not set [ 331.376998][T23827] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1254 with error 28 [ 331.390218][T23827] EXT4-fs (loop2): This should not happen!! Data will be lost [ 331.390218][T23827] [ 331.400260][ T8861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.400460][T23827] EXT4-fs (loop2): Total free blocks count 0 [ 331.415022][T23827] EXT4-fs (loop2): Free/Dirty block details [ 331.422206][T23827] EXT4-fs (loop2): free_blocks=0 [ 331.428682][T23827] EXT4-fs (loop2): dirty_blocks=1264 [ 331.434050][T23827] EXT4-fs (loop2): Block reservation details [ 331.440537][T23827] EXT4-fs (loop2): i_reserved_data_blocks=79 [ 331.538162][T21518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.627332][T23532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.410527][ T28] audit: type=1400 audit(2000000287.250:4147): avc: denied { read } for pid=23846 comm="syz.8.6794" path="socket:[72787]" dev="sockfs" ino=72787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.436994][T23851] loop2: detected capacity change from 0 to 2048 [ 332.444887][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.479752][ T5478] Alternate GPT is invalid, using primary GPT. [ 332.487342][ T5478] loop2: p1 p2 p3 [ 332.506944][T23851] Alternate GPT is invalid, using primary GPT. [ 332.520618][T23851] loop2: p1 p2 p3 [ 332.550579][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6785'. [ 332.567514][T10881] kernel read not supported for file /vcs (pid: 10881 comm: kworker/1:8) [ 332.715036][ T28] audit: type=1400 audit(2000000287.510:4148): avc: denied { setopt } for pid=23872 comm="syz.3.6792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.917963][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.021842][ T5497] udevd[5497]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 333.032521][ T5472] udevd[5472]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 333.045292][ T5478] udevd[5478]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 333.068503][ T5497] udevd[5497]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 333.080008][ T5472] udevd[5472]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 333.090179][ T5478] udevd[5478]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 333.569651][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.620364][ T28] audit: type=1400 audit(2000000288.460:4149): avc: denied { ioctl } for pid=23893 comm="syz.0.6802" path="socket:[72889]" dev="sockfs" ino=72889 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.808058][T23914] loop3: detected capacity change from 0 to 512 [ 333.823798][T23914] EXT4-fs: Invalid want_extra_isize 7 [ 334.053054][ T36] bridge_slave_1: left allmulticast mode [ 334.068909][ T36] bridge_slave_1: left promiscuous mode [ 334.084811][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.101367][ T36] bridge_slave_0: left allmulticast mode [ 334.107793][ T36] bridge_slave_0: left promiscuous mode [ 334.114251][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.383764][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.394910][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.406764][ T36] bond0 (unregistering): Released all slaves [ 334.421011][ T36] bond1 (unregistering): Released all slaves [ 334.437921][ T36] bond2 (unregistering): Released all slaves [ 334.486474][ T36] hsr_slave_0: left promiscuous mode [ 334.496899][ T36] hsr_slave_1: left promiscuous mode [ 334.510581][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.519174][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.582074][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.607278][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.636499][ T36] veth1_macvtap: left promiscuous mode [ 334.650845][ T36] veth0_macvtap: left promiscuous mode [ 334.656988][ T36] veth1_vlan: left promiscuous mode [ 334.662353][ T36] veth0_vlan: left promiscuous mode [ 334.773849][ T36] team0 (unregistering): Port device team_slave_1 removed [ 334.785332][ T36] team0 (unregistering): Port device team_slave_0 removed [ 334.790849][T23950] tls_set_device_offload_rx: netdev not found [ 335.003516][T23964] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 335.171506][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.207433][T23963] chnl_net:caif_netlink_parms(): no params data found [ 335.253669][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.276643][T23963] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.283764][T23963] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.295175][T23963] bridge_slave_0: entered allmulticast mode [ 335.301628][T23963] bridge_slave_0: entered promiscuous mode [ 335.310881][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.321981][T23963] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.329379][T23963] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.355257][T23963] bridge_slave_1: entered allmulticast mode [ 335.361921][T23963] bridge_slave_1: entered promiscuous mode [ 335.398291][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.425621][T23963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.461178][T23963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.508331][T23963] team0: Port device team_slave_0 added [ 335.515129][T23963] team0: Port device team_slave_1 added [ 335.531947][T23963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.539026][T23963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.565413][T23963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.576805][T23963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.583801][T23963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.610687][T23963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.664729][T23963] hsr_slave_0: entered promiscuous mode [ 335.675550][T23963] hsr_slave_1: entered promiscuous mode [ 335.681658][T23963] debugfs: 'hsr0' already exists in 'hsr' [ 335.687582][T23963] Cannot create hsr debugfs directory [ 335.804767][ T36] bond1 (unregistering): (slave geneve2): Releasing active interface [ 335.857039][ T36] bond0 (unregistering): Released all slaves [ 335.866986][ T36] bond1 (unregistering): Released all slaves [ 335.899829][T24031] 9p: Bad value for 'rfdno' [ 335.998556][ T36] hsr_slave_0: left promiscuous mode [ 336.011352][ T36] hsr_slave_1: left promiscuous mode [ 336.034493][ T36] veth1_macvtap: left promiscuous mode [ 336.054985][ T36] veth0_macvtap: left promiscuous mode [ 336.065307][ T36] veth1_vlan: left promiscuous mode [ 336.070556][ T36] veth0_vlan: left promiscuous mode [ 336.471227][T24083] xt_hashlimit: size too large, truncated to 1048576 [ 336.631126][T24095] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6870'. [ 336.998961][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 336.998978][ T28] audit: type=1326 audit(2000000547.837:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47797c819 code=0x7ffc0000 [ 337.123802][ T28] audit: type=1326 audit(2000000547.867:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47797c819 code=0x7ffc0000 [ 337.200205][ T28] audit: type=1326 audit(2000000547.887:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc47797c819 code=0x7ffc0000 [ 337.281768][ T28] audit: type=1326 audit(2000000547.887:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47797c819 code=0x7ffc0000 [ 337.327126][ T28] audit: type=1326 audit(2000000547.887:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47797c819 code=0x7ffc0000 [ 337.350821][ T28] audit: type=1326 audit(2000000547.887:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fc47797c819 code=0x7ffc0000 [ 337.396821][ T28] audit: type=1326 audit(2000000547.887:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47797c819 code=0x7ffc0000 [ 337.429571][ T28] audit: type=1326 audit(2000000547.887:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47797c819 code=0x7ffc0000 [ 337.454782][T24143] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 337.497940][ T28] audit: type=1401 audit(2000000547.787:4181): op=setxattr invalid_context=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 [ 337.521937][T24136] loop3: detected capacity change from 0 to 8192 [ 337.633442][T24156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24156 comm=syz.1.6883 [ 337.678684][T24136] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.784597][ T28] audit: type=1400 audit(2000000549.617:4190): avc: denied { listen } for pid=24202 comm="syz.8.6895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 338.816419][T24203] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 339.005620][T23963] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 339.041328][T23963] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 339.097842][T23963] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 339.128002][T23963] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 339.255764][T24232] ================================================================== [ 339.263923][T24232] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 339.272580][T24232] [ 339.274921][T24232] write to 0xffff88811a074d68 of 8 bytes by task 24243 on cpu 0: [ 339.282704][T24232] shmem_file_splice_read+0x470/0x600 [ 339.288123][T24232] splice_direct_to_actor+0x26e/0x670 [ 339.293527][T24232] do_splice_direct+0x119/0x1a0 [ 339.298449][T24232] do_sendfile+0x382/0x650 [ 339.302921][T24232] __x64_sys_sendfile64+0x105/0x150 [ 339.308156][T24232] x64_sys_call+0x2dc4/0x3020 [ 339.312862][T24232] do_syscall_64+0x12c/0x370 [ 339.317490][T24232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.323424][T24232] [ 339.325768][T24232] write to 0xffff88811a074d68 of 8 bytes by task 24232 on cpu 1: [ 339.333531][T24232] shmem_file_splice_read+0x470/0x600 [ 339.338946][T24232] splice_direct_to_actor+0x26e/0x670 [ 339.344362][T24232] do_splice_direct+0x119/0x1a0 [ 339.349243][T24232] do_sendfile+0x382/0x650 [ 339.353695][T24232] __x64_sys_sendfile64+0x105/0x150 [ 339.358952][T24232] x64_sys_call+0x2dc4/0x3020 [ 339.363689][T24232] do_syscall_64+0x12c/0x370 [ 339.365254][T24267] netlink: 25 bytes leftover after parsing attributes in process `syz.8.6907'. [ 339.368302][T24232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.368327][T24232] [ 339.368333][T24232] value changed: 0x0000000000002239 -> 0x000000000000223b [ 339.392603][T24232] [ 339.394946][T24232] Reported by Kernel Concurrency Sanitizer on: [ 339.401109][T24232] CPU: 1 UID: 0 PID: 24232 Comm: syz.0.6901 Not tainted syzkaller #0 PREEMPT(full) [ 339.404465][T24267] netlink: 140 bytes leftover after parsing attributes in process `syz.8.6907'. [ 339.410502][T24232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.410520][T24232] ================================================================== [ 339.420821][T23963] 8021q: adding VLAN 0 to HW filter on device bond0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.453522][T23963] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.470816][T23963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.486500][T23963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.519629][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.526769][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.616278][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.623464][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.681776][T24267] netlink: 25 bytes leftover after parsing attributes in process `syz.8.6907'. [ 340.011695][ T142] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.116181][ T142] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.198566][ T142] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.268131][ T142] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.359541][ T142] bridge_slave_1: left allmulticast mode [ 340.365554][ T142] bridge_slave_1: left promiscuous mode [ 340.371239][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.381677][ T142] bridge_slave_0: left allmulticast mode [ 340.387454][ T142] bridge_slave_0: left promiscuous mode [ 340.393202][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.557449][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.567457][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.578532][ T142] bond0 (unregistering): Released all slaves [ 340.614045][ T142] hsr_slave_0: left promiscuous mode [ 340.619778][ T142] hsr_slave_1: left promiscuous mode [ 340.625678][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.633134][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.640914][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.648671][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.661696][ T142] veth1_macvtap: left promiscuous mode [ 340.667307][ T142] veth0_macvtap: left promiscuous mode [ 340.672835][ T142] veth1_vlan: left promiscuous mode [ 340.678234][ T142] veth0_vlan: left promiscuous mode [ 340.761993][ T142] team0 (unregistering): Port device team_slave_1 removed [ 340.772653][ T142] team0 (unregistering): Port device team_slave_0 removed [ 341.587511][ T142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.634525][ T142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.690093][ T142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.748078][ T142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.026091][ T142] bridge_slave_1: left allmulticast mode [ 342.031810][ T142] bridge_slave_1: left promiscuous mode [ 342.037723][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.045952][ T142] bridge_slave_0: left allmulticast mode [ 342.051711][ T142] bridge_slave_0: left promiscuous mode [ 342.057589][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.066162][ T142] bridge_slave_1: left allmulticast mode [ 342.071877][ T142] bridge_slave_1: left promiscuous mode [ 342.077787][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.085570][ T142] bridge_slave_0: left allmulticast mode [ 342.091215][ T142] bridge_slave_0: left promiscuous mode [ 342.096961][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.207723][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.217357][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.226924][ T142] bond0 (unregistering): Released all slaves [ 342.307933][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.317996][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.327585][ T142] bond0 (unregistering): Released all slaves [ 342.406891][ T142] smc: removing net device bond0 with user defined pnetid SYZ2 [ 342.414716][ T142] bond0 (unregistering): Released all slaves [ 342.467474][ T142] hsr_slave_0: left promiscuous mode [ 342.473242][ T142] hsr_slave_1: left promiscuous mode [ 342.478908][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.486436][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.496509][ T142] hsr_slave_0: left promiscuous mode [ 342.503665][ T142] hsr_slave_1: left promiscuous mode [ 342.509485][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.520407][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.529108][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.544377][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.553603][ T142] hsr_slave_0: left promiscuous mode [ 342.560358][ T142] hsr_slave_1: left promiscuous mode [ 342.571943][ T142] veth1_macvtap: left promiscuous mode [ 342.577634][ T142] veth0_macvtap: left promiscuous mode [ 342.583153][ T142] veth1_vlan: left promiscuous mode [ 342.588641][ T142] veth0_vlan: left promiscuous mode [ 342.675025][ T142] team0 (unregistering): Port device team_slave_1 removed [ 342.684821][ T142] team0 (unregistering): Port device team_slave_0 removed [ 342.742716][ T142] team0 (unregistering): Port device team_slave_1 removed [ 342.753047][ T142] team0 (unregistering): Port device team_slave_0 removed [ 343.404901][ T142] IPVS: stop unused estimator thread 0...