last executing test programs: 1m54.375114876s ago: executing program 3 (id=212): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 1m54.320650998s ago: executing program 3 (id=213): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x11482b, 0x0, 0x10ffe, 0x5, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 1m54.251917632s ago: executing program 3 (id=214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) 1m54.143030277s ago: executing program 3 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m54.08692483s ago: executing program 3 (id=217): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4177, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2cb}, &(0x7f0000001040), &(0x7f0000001080), &(0x7f0000000100)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000280)={0x0, 0x0, 0x3}, 0x1) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x180000a, 0x11, r1, 0xcaa27000) 1m53.858855132s ago: executing program 3 (id=220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4059, 0xfffffffffffffdfb, 0x40010162, 0x0, 0x0) 1m53.798343685s ago: executing program 32 (id=220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4059, 0xfffffffffffffdfb, 0x40010162, 0x0, 0x0) 1m40.469206894s ago: executing program 0 (id=495): timerfd_create(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m40.438297916s ago: executing program 0 (id=496): ioperm(0x0, 0x7, 0x80006) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1m39.541263982s ago: executing program 0 (id=506): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000080), 0x10) 1m39.524870163s ago: executing program 0 (id=507): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x909046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88a0a0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 1m39.509797254s ago: executing program 0 (id=508): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x2, 0x4000000000000001, 0x6, 0x4, 0x8, 0x3e7}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0x56d92c8a, 0xffffffffffffffff, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) 1m39.252854378s ago: executing program 0 (id=509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 1m39.252713848s ago: executing program 33 (id=509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 1m33.298643965s ago: executing program 6 (id=612): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x11, &(0x7f00000003c0)={0x3d, 0x2c, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.21097835s ago: executing program 6 (id=615): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 1m33.109639445s ago: executing program 6 (id=620): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000180)={0x22, 0x7, 0x1, {{0x15, 'test_dummy_encryption'}, 0x4}}, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1m33.080415856s ago: executing program 6 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000b80)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 1m33.044386588s ago: executing program 6 (id=625): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 1m32.81255253s ago: executing program 6 (id=629): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000845000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000507000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1632, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xc, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m32.782918112s ago: executing program 34 (id=629): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000845000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000507000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1632, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xc, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.111913772s ago: executing program 2 (id=2053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) 7.053860046s ago: executing program 2 (id=2055): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x5}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001000)=""/35, 0x23}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 7.053080935s ago: executing program 2 (id=2057): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 6.97256684s ago: executing program 2 (id=2059): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 6.95055824s ago: executing program 2 (id=2060): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x1, 0x9, 0xffee}) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) 6.517893763s ago: executing program 2 (id=2082): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) r2 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) 6.496629064s ago: executing program 35 (id=2082): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) r2 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) 4.853043969s ago: executing program 1 (id=2088): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 3.916796457s ago: executing program 1 (id=2095): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) 3.813548153s ago: executing program 5 (id=2096): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.460879371s ago: executing program 5 (id=2097): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/171, 0xab, 0x11) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001680)=0x7) 3.399068645s ago: executing program 5 (id=2098): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2.888210931s ago: executing program 4 (id=2103): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 2.832713143s ago: executing program 4 (id=2105): r0 = timerfd_create(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 2.692556781s ago: executing program 4 (id=2108): r0 = socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000700)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x400000c, 0x5, 0x0, 0x0, 0x2]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.808460086s ago: executing program 4 (id=2117): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x12d) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.54736686s ago: executing program 8 (id=2118): epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x1d, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.35924008s ago: executing program 8 (id=2121): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setresuid(0x0, 0xee00, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) 1.327643641s ago: executing program 7 (id=2122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$watch_queue(r1, &(0x7f0000000100)=""/97, 0x61) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) 1.319787342s ago: executing program 8 (id=2123): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x140) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 1.242200756s ago: executing program 7 (id=2124): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1.203597798s ago: executing program 8 (id=2125): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x3, [{@local, 0x7ff}, {@private=0xa010102, 0x17}]}]}}}], 0x28}, 0x0) 1.169898009s ago: executing program 7 (id=2126): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x4) read$watch_queue(r2, &(0x7f0000000100)=""/97, 0x61) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r0, 0x0, 0x0) 1.096873493s ago: executing program 8 (id=2127): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002880)=""/60, 0x3c}, {&(0x7f0000000240)=""/93, 0x5d}], 0x2}, 0x2}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 946.276481ms ago: executing program 4 (id=2128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x402, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 907.085673ms ago: executing program 7 (id=2129): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x5a}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000540)) 827.068047ms ago: executing program 7 (id=2130): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000fc0)="$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") r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa1", 0x2, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000580)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 669.677385ms ago: executing program 5 (id=2131): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}}, 0xd209f6d81482fb57) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40010122, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/27, 0x1b}, {0x0}], 0x2}, 0x710000}], 0x1, 0x60, 0x0) 605.450069ms ago: executing program 5 (id=2132): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') 481.836175ms ago: executing program 1 (id=2133): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x30) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 446.001207ms ago: executing program 1 (id=2134): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) 445.460537ms ago: executing program 1 (id=2135): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}}, 0xd209f6d81482fb57) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40010122, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/27, 0x1b}], 0x1}, 0x710000}], 0x1, 0x60, 0x0) 428.791238ms ago: executing program 1 (id=2136): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) exit(0x2000000fffb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 33.404878ms ago: executing program 8 (id=2137): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4f24, @empty}, 0x10) 4.933059ms ago: executing program 5 (id=2138): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0x4}, @void, @eth={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @local, @mcast2={0xff, 0x3}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}}, 0x82) 3.40686ms ago: executing program 4 (id=2139): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd10, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 7 (id=2140): perf_event_open(0x0, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xa) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0x0, 0x3) kernel console output (not intermixed with test programs): e=1400 audit(1776594292.242:400): avc: denied { mount } for pid=5400 comm="syz.1.598" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 65.979376][ T28] audit: type=1400 audit(1776594292.472:401): avc: denied { read } for pid=5416 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.025405][ T5419] netlink: 51 bytes leftover after parsing attributes in process `syz.4.607'. [ 66.035369][ T28] audit: type=1400 audit(1776594292.522:402): avc: denied { shutdown } for pid=5416 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.173188][ T5162] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 66.182929][ T5162] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 66.392152][ T5462] loop4: detected capacity change from 0 to 1024 [ 66.408995][ T5462] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.603810][ T5156] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.671275][ T5156] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.728903][ T5156] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.851915][ T5156] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.954402][ T5475] chnl_net:caif_netlink_parms(): no params data found [ 66.962588][ T5497] netlink: 'syz.5.637': attribute type 8 has an invalid length. [ 66.980770][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.637'. [ 67.040854][ T5497] bond0: entered promiscuous mode [ 67.051262][ T5497] bond_slave_0: entered promiscuous mode [ 67.057776][ T5497] bond_slave_1: entered promiscuous mode [ 67.066135][ T5497] gretap0: entered promiscuous mode [ 67.074726][ T5497] bond0: left promiscuous mode [ 67.079831][ T5497] bond_slave_0: left promiscuous mode [ 67.086111][ T5497] bond_slave_1: left promiscuous mode [ 67.094070][ T5497] gretap0: left promiscuous mode [ 67.130291][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.139317][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.155411][ T5475] bridge_slave_0: entered allmulticast mode [ 67.170880][ T5475] bridge_slave_0: entered promiscuous mode [ 67.191707][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.207743][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.221764][ T5475] bridge_slave_1: entered allmulticast mode [ 67.230214][ T5475] bridge_slave_1: entered promiscuous mode [ 67.238750][ T5156] bridge_slave_1: left allmulticast mode [ 67.244915][ T5156] bridge_slave_1: left promiscuous mode [ 67.250706][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.259443][ T5156] bridge_slave_0: left allmulticast mode [ 67.265573][ T5156] bridge_slave_0: left promiscuous mode [ 67.271956][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.366841][ T5156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.378927][ T5156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.389974][ T5156] bond0 (unregistering): Released all slaves [ 67.397850][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'. [ 67.407841][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'. [ 67.440353][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.471582][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.499281][ T5156] hsr_slave_0: left promiscuous mode [ 67.505848][ T5156] hsr_slave_1: left promiscuous mode [ 67.512077][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.529563][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.552156][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.563009][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.576051][ T5156] veth1_macvtap: left promiscuous mode [ 67.590003][ T5156] veth0_macvtap: left promiscuous mode [ 67.679670][ T5156] team0 (unregistering): Port device team_slave_1 removed [ 67.691302][ T5156] team0 (unregistering): Port device team_slave_0 removed [ 67.720705][ T5521] netlink: 'syz.4.646': attribute type 4 has an invalid length. [ 67.729081][ T5521] netlink: 17 bytes leftover after parsing attributes in process `syz.4.646'. [ 67.749097][ T5475] team0: Port device team_slave_0 added [ 67.758511][ T5475] team0: Port device team_slave_1 added [ 67.792381][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.808177][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.841519][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.862010][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.649'. [ 67.862772][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.878859][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.906058][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.938219][ T28] audit: type=1400 audit(1776594294.432:403): avc: denied { sqpoll } for pid=5529 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.978213][ T5475] hsr_slave_0: entered promiscuous mode [ 67.984931][ T5475] hsr_slave_1: entered promiscuous mode [ 67.992698][ T5475] debugfs: 'hsr0' already exists in 'hsr' [ 68.003163][ T5475] Cannot create hsr debugfs directory [ 68.901236][ T28] audit: type=1400 audit(1776594295.392:404): avc: denied { read } for pid=5548 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.975682][ T5551] loop5: detected capacity change from 0 to 128 [ 68.996153][ T5551] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.013879][ T5551] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.028512][ T28] audit: type=1400 audit(1776594295.522:405): avc: denied { create } for pid=5550 comm="syz.5.657" name=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.063065][ T4036] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.072896][ T28] audit: type=1400 audit(1776594295.542:406): avc: denied { append } for pid=5550 comm="syz.5.657" path="/71/file1/file1" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.116819][ T5428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.146884][ T5475] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 69.173052][ T5475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.196152][ T5475] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 69.228254][ T5560] netlink: 'syz.2.660': attribute type 3 has an invalid length. [ 69.321053][ T5566] loop5: detected capacity change from 0 to 512 [ 69.349594][ T5566] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.378570][ T5566] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.394778][ T5566] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.427637][ T5566] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 69.451712][ T5566] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 69.473115][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 69.480039][ C1] EXT4-fs (loop5): initial error at time 1776594295: ext4_mb_generate_buddy:1317 [ 69.489431][ C1] EXT4-fs (loop5): last error at time 1776594295: ext4_mb_generate_buddy:1317 [ 69.507566][ T5566] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.661: corrupted inode contents [ 69.523472][ T5566] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.524655][ T5566] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.661: mark_inode_dirty error [ 69.551781][ T5475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.563894][ T5566] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.564198][ T5566] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.661: corrupted inode contents [ 69.573877][ T5475] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 69.607373][ T5475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.618171][ T5566] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.618372][ T5566] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.661: mark_inode_dirty error [ 69.642845][ T3047] 8021q: adding VLAN 0 to HW filter on device eth9 [ 69.643203][ T5566] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.650496][ T5566] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.661: corrupted inode contents [ 69.674615][ T5475] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 69.699175][ T5475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.712453][ T5566] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.712639][ T5566] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 69.734301][ T5566] loop5: lost filesystem error report for type 5 error -117 [ 69.734510][ T5566] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.661: corrupted inode contents [ 69.791541][ T5566] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.791730][ T5566] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.661: mark_inode_dirty error [ 69.847953][ T5566] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.848200][ T5566] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 69.889249][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.899290][ T5566] loop5: lost filesystem error report for type 5 error -117 [ 69.900661][ T5566] EXT4-fs (loop5): 1 truncate cleaned up [ 69.922183][ T5566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.937366][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.978729][ T1941] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.986839][ T1941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.010282][ T5566] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 70.031127][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.038248][ T2049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.065620][ T5566] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 70.201223][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.209758][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.289458][ T3047] 8021q: adding VLAN 0 to HW filter on device eth10 [ 70.431873][ T5623] netlink: 'syz.5.667': attribute type 39 has an invalid length. [ 70.727088][ T3047] 8021q: adding VLAN 0 to HW filter on device eth11 [ 70.801908][ T5475] veth0_vlan: entered promiscuous mode [ 70.832515][ T5475] veth1_vlan: entered promiscuous mode [ 70.877417][ T5475] veth0_macvtap: entered promiscuous mode [ 70.900639][ T5475] veth1_macvtap: entered promiscuous mode [ 70.941957][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.969759][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.008355][ T1941] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.033545][ T1941] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.065058][ T1941] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.100502][ T1941] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.252463][ T3047] 8021q: adding VLAN 0 to HW filter on device eth12 [ 71.299246][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.631'. [ 71.330765][ T5656] loop5: detected capacity change from 0 to 32768 [ 71.385208][ T5656] loop5: p1 p3 < > [ 71.464537][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 71.488766][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 71.498376][ T5162] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.515645][ T5162] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.545008][ T5162] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.570411][ T5162] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.657172][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 71.670898][ T4155] udevd[4155]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 71.689805][ T5700] loop5: detected capacity change from 0 to 256 [ 71.735002][ T5700] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.917474][ T5706] netlink: 104 bytes leftover after parsing attributes in process `syz.5.679'. [ 72.942690][ T28] audit: type=1400 audit(1776594299.432:407): avc: denied { bind } for pid=5740 comm="syz.7.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.156092][ T5768] netlink: 'syz.4.703': attribute type 21 has an invalid length. [ 73.174921][ T5768] netlink: 132 bytes leftover after parsing attributes in process `syz.4.703'. [ 73.291495][ T5773] loop4: detected capacity change from 0 to 2048 [ 73.353316][ T5763] loop7: detected capacity change from 0 to 32768 [ 73.365721][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.390395][ T5773] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #12: block 2: comm syz.4.704: lblock 0 mapped to illegal pblock 2 (length 1) [ 73.405629][ T28] audit: type=1400 audit(1776594299.882:408): avc: denied { read } for pid=5772 comm="syz.4.704" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.436084][ T5763] loop7: p1 p3 < > [ 73.495721][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.624723][ T4155] udevd[4155]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 73.625337][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 73.673315][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.703081][ T5786] bridge_slave_0 (unregistering): left allmulticast mode [ 73.717945][ T5786] bridge_slave_0 (unregistering): left promiscuous mode [ 73.733513][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.767511][ T5795] netlink: 56 bytes leftover after parsing attributes in process `syz.4.712'. [ 73.855611][ T28] audit: type=1400 audit(1776594300.352:409): avc: denied { read } for pid=5798 comm="syz.4.714" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.902347][ T28] audit: type=1400 audit(1776594300.392:410): avc: denied { create } for pid=5798 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.016009][ T5801] loop7: detected capacity change from 0 to 512 [ 74.023587][ T5668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.034700][ T5801] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.080036][ T5801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.153522][ T5801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.170426][ T5801] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.212849][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.308157][ T5820] loop2: detected capacity change from 0 to 1024 [ 74.349243][ T5820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.411802][ T28] audit: type=1400 audit(1776594300.902:411): avc: denied { remove_name } for pid=5818 comm="syz.2.723" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.447476][ T5820] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 623: comm syz.2.723: Attempting to read directory block (623) that is past i_size (638464) [ 74.515348][ T5820] EXT4-fs (loop2): Remounting filesystem read-only [ 74.532519][ T28] audit: type=1400 audit(1776594300.902:412): avc: denied { rename } for pid=5818 comm="syz.2.723" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.586224][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.596675][ T28] audit: type=1400 audit(1776594300.902:413): avc: denied { rmdir } for pid=5818 comm="syz.2.723" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.619990][ T28] audit: type=1400 audit(1776594301.062:414): avc: denied { ioctl } for pid=5834 comm="syz.4.727" path="socket:[14808]" dev="sockfs" ino=14808 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.159522][ T28] audit: type=1400 audit(1776594301.652:415): avc: denied { create } for pid=5869 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.220298][ T28] audit: type=1400 audit(1776594301.672:416): avc: denied { write } for pid=5869 comm="syz.2.732" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.348466][ T5884] loop4: detected capacity change from 0 to 512 [ 75.357988][ T5884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.411030][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.446176][ T28] audit: type=1400 audit(1776594301.942:417): avc: denied { ioctl } for pid=5888 comm="syz.1.737" path="socket:[13905]" dev="sockfs" ino=13905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.480304][ T5890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.737'. [ 75.492140][ T5892] loop4: detected capacity change from 0 to 512 [ 75.508979][ T5892] EXT4-fs: inline encryption not supported [ 75.533931][ T5892] EXT4-fs (loop4): 1 truncate cleaned up [ 75.545147][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 75.554673][ T5892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.772164][ T5897] loop7: detected capacity change from 0 to 8192 [ 75.826104][ T5897] FAT-fs (loop7): error, clusters badly computed (2 != 1) [ 75.842441][ T5897] FAT-fs (loop7): Filesystem has been set read-only [ 75.943864][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.052745][ T5902] netlink: 32 bytes leftover after parsing attributes in process `syz.7.742'. [ 76.652636][ T5957] loop5: detected capacity change from 0 to 4096 [ 76.676407][ T5957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.757481][ T5977] loop4: detected capacity change from 0 to 512 [ 76.767187][ T5977] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 76.777452][ T5977] EXT4-fs (loop4): 1 truncate cleaned up [ 76.783801][ T5977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.811812][ T5977] EXT4-fs error (device loop4): __ext4_remount:6837: comm syz.4.759: Abort forced by user [ 76.826380][ T5977] EXT4-fs (loop4): Remounting filesystem read-only [ 76.833107][ T5977] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 76.871209][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.909310][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.962702][ T5989] netlink: 'syz.5.762': attribute type 1 has an invalid length. [ 76.998025][ T5989] bond1: entered promiscuous mode [ 77.009384][ T5989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.267448][ T5989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.286722][ T5989] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 77.305311][ T5989] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 77.328725][ T5989] bond1: (slave ip6gre1): making interface the new active one [ 77.340394][ T5989] ip6gre1: entered promiscuous mode [ 77.347789][ T5989] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 77.475950][ T6002] geneve2: entered promiscuous mode [ 77.711502][ T6013] bridge0: port 3(vlan2) entered blocking state [ 77.729529][ T6013] bridge0: port 3(vlan2) entered disabled state [ 77.741427][ T6013] vlan2: entered allmulticast mode [ 77.751338][ T6013] geneve0: entered allmulticast mode [ 77.759724][ T6013] vlan2: entered promiscuous mode [ 77.773296][ T6013] geneve0: entered promiscuous mode [ 78.754108][ T6049] loop5: detected capacity change from 0 to 128 [ 79.459962][ T6049] syz.5.788: attempt to access beyond end of device [ 79.459962][ T6049] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 79.631756][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 79.631772][ T28] audit: type=1400 audit(1776594306.122:423): avc: denied { execute } for pid=6073 comm="syz.1.797" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 79.714044][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.798'. [ 79.889618][ T6089] netlink: 104 bytes leftover after parsing attributes in process `syz.2.804'. [ 79.997279][ T28] audit: type=1400 audit(1776594306.492:424): avc: denied { name_bind } for pid=6090 comm="syz.2.805" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 80.387193][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.819'. [ 80.459654][ T28] audit: type=1400 audit(1776594306.952:425): avc: denied { create } for pid=6104 comm="syz.5.811" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 80.490988][ T6103] loop2: detected capacity change from 0 to 4096 [ 80.519254][ T6103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.693308][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 80.868773][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.897561][ T6107] loop7: detected capacity change from 0 to 128 [ 81.111419][ T6134] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 81.916728][ T6195] loop4: detected capacity change from 0 to 512 [ 81.946487][ T6195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.029407][ T28] audit: type=1400 audit(1776594308.522:426): avc: denied { remount } for pid=6194 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.075838][ T6195] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 82.183342][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.835386][ T6236] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.853'. [ 82.950669][ T28] audit: type=1400 audit(1776594309.442:427): avc: denied { connect } for pid=6241 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.130064][ T28] audit: type=1400 audit(1776594309.622:428): avc: denied { bind } for pid=6253 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.204565][ T28] audit: type=1400 audit(1776594309.652:429): avc: denied { name_bind } for pid=6253 comm="syz.4.861" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 83.256182][ T28] audit: type=1400 audit(1776594309.652:430): avc: denied { node_bind } for pid=6253 comm="syz.4.861" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 83.308254][ T6268] netlink: 140 bytes leftover after parsing attributes in process `syz.5.868'. [ 83.337927][ T28] audit: type=1400 audit(1776594309.652:431): avc: denied { write } for pid=6256 comm="syz.2.863" name="ip_tables_targets" dev="proc" ino=4026532452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.391704][ T28] audit: type=1400 audit(1776594309.832:432): avc: denied { append } for pid=6269 comm="syz.2.869" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.085884][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.909'. [ 86.107413][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.909'. [ 86.286175][ T6408] capability: warning: `syz.5.916' uses 32-bit capabilities (legacy support in use) [ 87.420162][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 87.420179][ T28] audit: type=1400 audit(1776594313.912:437): avc: denied { name_bind } for pid=6451 comm="syz.7.933" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 88.099483][ T28] audit: type=1400 audit(1776594314.592:438): avc: denied { create } for pid=6478 comm="syz.5.943" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.162101][ T28] audit: type=1400 audit(1776594314.652:439): avc: denied { unlink } for pid=4036 comm="syz-executor" name="file0" dev="tmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.138139][ T28] audit: type=1326 audit(1776594315.622:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6510 comm="syz.5.955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f837944c819 code=0x0 [ 89.441518][ T6520] loop7: detected capacity change from 0 to 512 [ 89.473845][ T6520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.506890][ T6520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.547609][ T6520] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.577174][ T28] audit: type=1400 audit(1776594316.072:441): avc: denied { read append } for pid=6519 comm="syz.7.959" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.610049][ T28] audit: type=1400 audit(1776594316.072:442): avc: denied { open } for pid=6519 comm="syz.7.959" path="/55/bus/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.650311][ T28] audit: type=1400 audit(1776594316.072:443): avc: denied { write } for pid=6519 comm="syz.7.959" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.713642][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.812110][ T6531] SELinux: syz.7.962 (6531) set checkreqprot to 1. This is no longer supported. [ 89.821710][ T28] audit: type=1400 audit(1776594316.302:444): avc: denied { setcheckreqprot } for pid=6530 comm="syz.7.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 90.363578][ T6555] sctp: [Deprecated]: syz.7.973 (pid 6555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.363578][ T6555] Use struct sctp_sack_info instead [ 90.439749][ T6557] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 90.695744][ T28] audit: type=1400 audit(1776594317.192:445): avc: denied { watch watch_reads } for pid=6577 comm="syz.7.984" path="/65/file1" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.926181][ T6590] netlink: 'syz.1.989': attribute type 4 has an invalid length. [ 90.959622][ T6590] netlink: 'syz.1.989': attribute type 4 has an invalid length. [ 91.177816][ T6598] cgroup: fork rejected by pids controller in /syz2 [ 91.368785][ T6602] loop5: detected capacity change from 0 to 512 [ 91.379998][ T6602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.415925][ T6602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.437775][ T6602] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.625095][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.808211][ T6625] loop7: detected capacity change from 0 to 512 [ 91.818660][ T6607] chnl_net:caif_netlink_parms(): no params data found [ 91.845301][ T6625] EXT4-fs: journaled quota format not specified [ 91.873932][ T28] audit: type=1400 audit(1776594318.372:446): avc: denied { ioctl } for pid=6624 comm="syz.7.1001" path="socket:[16882]" dev="sockfs" ino=16882 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.954368][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.985828][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.012167][ T6607] bridge_slave_0: entered allmulticast mode [ 92.032774][ T6607] bridge_slave_0: entered promiscuous mode [ 92.052354][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.071900][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.099701][ T6607] bridge_slave_1: entered allmulticast mode [ 92.115114][ T6607] bridge_slave_1: entered promiscuous mode [ 92.165820][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.191348][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.235587][ T6607] team0: Port device team_slave_0 added [ 92.252271][ T6607] team0: Port device team_slave_1 added [ 92.292946][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.308403][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.339647][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.354041][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.361312][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.389756][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.428095][ T6607] hsr_slave_0: entered promiscuous mode [ 92.434993][ T6607] hsr_slave_1: entered promiscuous mode [ 92.441297][ T6607] debugfs: 'hsr0' already exists in 'hsr' [ 92.447557][ T6607] Cannot create hsr debugfs directory [ 92.549926][ T6607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.564764][ T6607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.575464][ T6607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.656101][ T6607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.672395][ T6607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.682955][ T6607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.705000][ T28] audit: type=1326 audit(1776594319.202:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.7.1010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8238acc819 code=0x0 [ 92.739957][ T6607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.751252][ T6607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.763017][ T6607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.828980][ T6607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.842920][ T6607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.861328][ T6607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.148332][ T6675] capability: warning: `syz.1.1017' uses deprecated v2 capabilities in a way that may be insecure [ 93.633749][ T6689] loop7: detected capacity change from 0 to 32768 [ 93.674826][ T6689] loop7: p1 p3 < > [ 93.749015][ T4155] udevd[4155]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 93.764041][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 94.638489][ T28] audit: type=1400 audit(1776594321.132:448): avc: denied { write } for pid=6704 comm="syz.7.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.684166][ T6707] netlink: 'syz.7.1041': attribute type 1 has an invalid length. [ 94.692185][ T6707] netlink: 'syz.7.1041': attribute type 4 has an invalid length. [ 94.700457][ T6707] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1041'. [ 94.893150][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.209562][ T28] audit: type=1400 audit(1776594321.702:449): avc: denied { setopt } for pid=6722 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.240831][ T28] audit: type=1400 audit(1776594321.722:450): avc: denied { nlmsg_read } for pid=6722 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.799160][ T6664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.809049][ T6607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.899943][ T6730] loop5: detected capacity change from 0 to 4096 [ 95.909482][ T6730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.921399][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.930465][ T6730] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 95.934354][ T6607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.957660][ T6730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.981359][ T6736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6736 comm=syz.7.1043 [ 95.997362][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.006469][ T6607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.036238][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.043691][ T6736] netlink: 'syz.7.1043': attribute type 1 has an invalid length. [ 96.053515][ T6607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.071428][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.134056][ T6736] bond1: (slave bridge1): making interface the new active one [ 96.153848][ T6736] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 96.252928][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.264747][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.280815][ T6760] loop7: detected capacity change from 0 to 128 [ 96.297757][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.329409][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.336650][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.378951][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.386105][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.450772][ T6607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.480514][ T6607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.718795][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.029121][ T6607] veth0_vlan: entered promiscuous mode [ 97.121322][ T6607] veth1_vlan: entered promiscuous mode [ 97.139076][ T6607] veth0_macvtap: entered promiscuous mode [ 97.147300][ T6607] veth1_macvtap: entered promiscuous mode [ 97.162236][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.182673][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.203826][ T5151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.222097][ T5151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.258884][ T5151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.268807][ T5151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.314626][ T28] audit: type=1400 audit(1776594323.812:451): avc: denied { mount } for pid=6607 comm="syz-executor" name="/" dev="gadgetfs" ino=3929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 98.026638][ T6822] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1069'. [ 98.299963][ T28] audit: type=1400 audit(1776594324.792:452): avc: denied { setopt } for pid=6832 comm="syz.7.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.390017][ T28] audit: type=1400 audit(1776594324.792:453): avc: denied { connect } for pid=6832 comm="syz.7.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.527887][ T6836] loop7: detected capacity change from 0 to 4096 [ 98.581738][ T6836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.704963][ T6841] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1075'. [ 98.861009][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.151370][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1088'. [ 99.200841][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1088'. [ 99.296079][ T28] audit: type=1400 audit(1776594325.792:454): avc: denied { kexec_image_load } for pid=6870 comm="syz.2.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 99.510880][ T6858] lo: entered allmulticast mode [ 99.523599][ T6858] lo: left allmulticast mode [ 100.229382][ T6901] netlink: 'syz.5.1100': attribute type 1 has an invalid length. [ 100.290633][ T6901] gretap1: entered allmulticast mode [ 100.311903][ T6901] bond2: (slave gretap1): making interface the new active one [ 100.351944][ T6901] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 100.582834][ T6871] kexec: Could not allocate control_code_buffer [ 100.718713][ T6918] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1107'. [ 100.729033][ T6919] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 100.759965][ T6919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1109'. [ 100.800190][ T6919] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 100.817600][ T6919] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1109'. [ 100.851286][ T6933] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1112'. [ 100.872563][ T6933] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1112'. [ 100.932328][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 101.238007][ T6982] loop4: detected capacity change from 0 to 512 [ 101.288964][ T6982] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1124: inode has both inline data and extents flags [ 101.323378][ T6982] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.323515][ T6982] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1124: couldn't read orphan inode 15 (err -117) [ 101.333121][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 101.333141][ C1] EXT4-fs (loop4): initial error at time 1776594327: ext4_orphan_get:1397: inode 15 [ 101.333176][ C1] EXT4-fs (loop4): last error at time 1776594327: ext4_orphan_get:1397: inode 15 [ 101.371248][ T6982] loop4: lost filesystem error report for type 5 error -117 [ 101.372403][ T6982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.420469][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.813525][ T7032] loop2: detected capacity change from 0 to 512 [ 101.847317][ T7032] EXT4-fs: Ignoring removed bh option [ 101.872525][ T7032] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 101.892426][ T7032] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1131: corrupted in-inode xattr: e_value size too large [ 101.911187][ T7032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.911952][ T7032] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1131: couldn't read orphan inode 15 (err -117) [ 101.921824][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 101.921850][ C0] EXT4-fs (loop2): initial error at time 1776594328: ext4_iget_extra_inode:5128: inode 15 [ 101.921883][ C0] EXT4-fs (loop2): last error at time 1776594328: ext4_iget_extra_inode:5128: inode 15 [ 101.995466][ T7032] loop2: lost filesystem error report for type 5 error -117 [ 101.996146][ T7032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.340402][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.426869][ T7048] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1134'. [ 102.529383][ T7052] netlink: 'syz.2.1139': attribute type 5 has an invalid length. [ 102.537501][ T7052] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1139'. [ 102.570693][ T7046] loop4: detected capacity change from 0 to 4096 [ 102.583627][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 102.610183][ T7046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.729539][ T28] audit: type=1400 audit(1776594329.222:455): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.963311][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.977774][ T28] audit: type=1400 audit(1776594329.472:456): avc: denied { open } for pid=7074 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 103.049959][ T28] audit: type=1400 audit(1776594329.472:457): avc: denied { kernel } for pid=7074 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 103.090089][ T28] audit: type=1400 audit(1776594329.492:458): avc: denied { write } for pid=7074 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 103.111591][ T28] audit: type=1400 audit(1776594329.572:459): avc: denied { tracepoint } for pid=7076 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 103.667746][ T7066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.845820][ T7093] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 103.892931][ T7093] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.931378][ T7093] bond4: (slave veth0_to_bond): making interface the new active one [ 103.946457][ T7093] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 104.723234][ T28] audit: type=1400 audit(1776594331.212:460): avc: denied { read } for pid=7116 comm="syz.7.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.211267][ T7200] netlink: 'syz.5.1198': attribute type 4 has an invalid length. [ 106.300192][ T7206] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 106.332837][ T28] audit: type=1400 audit(1776594332.822:461): avc: denied { read write } for pid=7208 comm="syz.5.1203" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 106.357604][ T7206] bond5: entered promiscuous mode [ 106.377773][ T7206] 8021q: adding VLAN 0 to HW filter on device bond5 [ 106.385438][ T28] audit: type=1400 audit(1776594332.822:462): avc: denied { open } for pid=7208 comm="syz.5.1203" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 106.411536][ T28] audit: type=1400 audit(1776594332.862:463): avc: denied { read } for pid=7205 comm="syz.1.1200" path="socket:[18247]" dev="sockfs" ino=18247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.467117][ T7206] 8021q: adding VLAN 0 to HW filter on device bond5 [ 106.478747][ T7206] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 106.497261][ T7206] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 106.517045][ T7206] bond5: (slave ip6gre1): making interface the new active one [ 106.531028][ T7206] ip6gre1: entered promiscuous mode [ 106.538772][ T7206] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 107.004444][ T7224] loop7: detected capacity change from 0 to 2048 [ 107.023873][ T28] audit: type=1400 audit(1776594333.512:464): avc: denied { mounton } for pid=7222 comm="syz.7.1216" path="/file1" dev="ramfs" ino=19124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 107.071245][ T7224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.103904][ T7227] loop2: detected capacity change from 0 to 4096 [ 107.127052][ T7224] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.155261][ T7227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.360583][ T7246] syzkaller1: entered promiscuous mode [ 107.385582][ T7246] syzkaller1: entered allmulticast mode [ 107.649623][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.730162][ T28] audit: type=1400 audit(1776594334.222:465): avc: denied { read } for pid=7255 comm="syz.1.1221" dev="sockfs" ino=19184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.802318][ T28] audit: type=1400 audit(1776594334.292:466): avc: denied { listen } for pid=7261 comm="syz.1.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.838369][ T7264] loop5: detected capacity change from 0 to 2048 [ 107.853537][ T28] audit: type=1400 audit(1776594334.352:467): avc: denied { accept } for pid=7261 comm="syz.1.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.884226][ T7264] loop5: p2 p3 < > p4 < p5 > [ 107.894663][ T7264] loop5: partition table partially beyond EOD, truncated [ 107.913455][ T7264] loop5: p2 start 53543428 is beyond EOD, truncated [ 107.922663][ T7264] loop5: p3 start 4284289 is beyond EOD, truncated [ 107.942966][ T7264] loop5: p5 start 53543428 is beyond EOD, truncated [ 108.096585][ T7273] netlink: 'syz.5.1227': attribute type 10 has an invalid length. [ 108.108641][ T7273] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.1227'. [ 108.179370][ T28] audit: type=1400 audit(1776594334.672:468): avc: denied { append } for pid=7281 comm="syz.5.1230" name="rt_cache" dev="proc" ino=4026533387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 108.274609][ T28] audit: type=1400 audit(1776594334.772:469): avc: denied { write } for pid=7287 comm="syz.7.1232" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.319422][ T7283] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.353779][ T7283] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.374065][ T7293] loop2: detected capacity change from 0 to 512 [ 108.374545][ T7283] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 108.415681][ T7293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.551316][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.673220][ T7308] loop7: detected capacity change from 0 to 512 [ 108.709133][ T7308] FAT-fs (loop7): Directory bread(block 199916) failed [ 108.739309][ T7308] FAT-fs (loop7): Directory bread(block 199917) failed [ 108.750723][ T7313] loop2: detected capacity change from 0 to 512 [ 108.754568][ T7308] FAT-fs (loop7): Directory bread(block 199918) failed [ 108.765833][ T7313] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.773413][ T7308] FAT-fs (loop7): Directory bread(block 199919) failed [ 108.785026][ T7308] FAT-fs (loop7): Directory bread(block 199920) failed [ 108.792743][ T7308] FAT-fs (loop7): Directory bread(block 199921) failed [ 108.800789][ T7308] FAT-fs (loop7): Directory bread(block 199922) failed [ 108.833038][ T7313] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 108.833161][ T7308] FAT-fs (loop7): Directory bread(block 199923) failed [ 108.863101][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 108.869896][ C1] EXT4-fs (loop2): initial error at time 1776594335: ext4_mb_generate_buddy:1317 [ 108.880041][ C1] EXT4-fs (loop2): last error at time 1776594335: ext4_mb_generate_buddy:1317 [ 108.886967][ T7313] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1242: Failed to acquire dquot type 1 [ 108.942439][ T7313] loop2: lost filesystem error report for type 5 error -28 [ 108.942726][ T7313] EXT4-fs (loop2): 1 truncate cleaned up [ 109.003669][ T7313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.032868][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 109.048084][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 109.059224][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 109.061970][ T7329] loop7: detected capacity change from 0 to 1024 [ 109.068391][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 109.109056][ T7329] EXT4-fs: Ignoring removed bh option [ 109.136843][ T7329] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.165506][ T7313] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 109.206827][ T7313] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.279879][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.303267][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.751863][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 109.763311][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.830334][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.142818][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 110.142838][ T28] audit: type=1400 audit(1776594336.632:470): avc: denied { bind } for pid=7376 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.257107][ T7390] netlink: 'syz.4.1272': attribute type 3 has an invalid length. [ 110.273404][ T7390] netlink: 'syz.4.1272': attribute type 1 has an invalid length. [ 110.281967][ T7390] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.1272'. [ 110.331714][ T7392] loop2: detected capacity change from 0 to 1024 [ 110.356710][ T7395] loop7: detected capacity change from 0 to 512 [ 110.375892][ T7392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.403729][ T7395] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.436854][ T28] audit: type=1400 audit(1776594336.932:471): avc: denied { map } for pid=7391 comm="syz.2.1274" path="/40/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.485557][ T7395] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 110.503112][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 110.509979][ C1] EXT4-fs (loop7): initial error at time 1776594337: ext4_mb_generate_buddy:1317 [ 110.513259][ T7395] Quota error (device loop7): write_blk: dquota write failed [ 110.519570][ C1] EXT4-fs (loop7): last error at time 1776594337: ext4_mb_generate_buddy:1317 [ 110.530352][ T28] audit: type=1400 audit(1776594336.932:472): avc: denied { execute } for pid=7391 comm="syz.2.1274" path="/40/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.557444][ T7395] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 110.583280][ T7395] Quota error (device loop7): write_blk: dquota write failed [ 110.591332][ T7396] loop5: detected capacity change from 0 to 4096 [ 110.607342][ T7395] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 110.633512][ T7396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.644642][ T7395] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.1284: Failed to acquire dquot type 1 [ 110.683298][ T7395] loop7: lost filesystem error report for type 5 error -28 [ 110.691124][ T7395] EXT4-fs (loop7): 1 truncate cleaned up [ 110.731029][ T7395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.771497][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.848826][ T7395] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 110.870426][ T7395] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.916929][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.027083][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.780477][ T7447] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.797697][ T7447] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 111.815559][ T7447] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 111.851574][ T7447] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 111.897107][ T7447] System zones: 0-2, 18-18, 34-35 [ 111.911474][ T7447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.934857][ T7421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.977004][ T7421] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.092949][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.122469][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.271346][ T7470] tipc: Failed to remove unknown binding: 66,1,1/0:2064095964/2064095966 [ 112.280176][ T7470] tipc: Failed to remove unknown binding: 66,1,1/0:2064095964/2064095966 [ 112.549505][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1314'. [ 112.617766][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1317'. [ 113.292773][ T7536] set_capacity_and_notify: 2 callbacks suppressed [ 113.301417][ T7536] loop7: detected capacity change from 0 to 512 [ 113.315500][ T7536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.333351][ T28] audit: type=1400 audit(1776594339.822:473): avc: denied { ioctl } for pid=7537 comm="syz.1.1335" path="socket:[20687]" dev="sockfs" ino=20687 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.393291][ T7536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.433296][ T7547] loop5: detected capacity change from 0 to 512 [ 113.433530][ T28] audit: type=1400 audit(1776594339.872:474): avc: denied { bind } for pid=7541 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.445048][ T7552] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 113.459862][ T28] audit: type=1400 audit(1776594339.932:475): avc: denied { write } for pid=7541 comm="syz.2.1337" path="socket:[20690]" dev="sockfs" ino=20690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.473308][ T7536] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.534886][ T7547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.549509][ T7552] bond2: entered promiscuous mode [ 113.555246][ T7552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.655571][ T7552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.663979][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.682748][ T7552] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 113.699886][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.704556][ T7552] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 113.736089][ T7552] bond2: (slave vcan1): making interface the new active one [ 113.762548][ T7552] vcan1: entered promiscuous mode [ 113.778613][ T7552] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 113.912012][ T5156] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.516635][ T7596] pim6reg1: entered allmulticast mode [ 115.164354][ T7630] loop7: detected capacity change from 0 to 512 [ 115.203235][ T7630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.661596][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.716405][ T7658] loop7: detected capacity change from 0 to 256 [ 115.762579][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 115.762595][ T28] audit: type=1400 audit(1776594342.252:477): avc: denied { remount } for pid=7657 comm="syz.7.1374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 115.825783][ T28] audit: type=1326 audit(1776594342.292:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 115.872081][ T28] audit: type=1326 audit(1776594342.292:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 115.905695][ T7668] program syz.7.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.913838][ T7670] loop4: detected capacity change from 0 to 512 [ 115.925541][ T7670] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.935569][ T7575] Bluetooth: hci0: command 0x1003 tx timeout [ 115.942237][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.954677][ T28] audit: type=1326 audit(1776594342.292:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 115.983415][ T28] audit: type=1326 audit(1776594342.292:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 115.995739][ T7670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e119, mo2=0002] [ 116.007542][ T7672] program syz.7.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.015569][ T7670] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.032005][ T7670] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1381: bg 0: block 361: padding at end of block bitmap is not set [ 116.046753][ T7670] loop4: lost filesystem error report for type 5 error -117 [ 116.046945][ T7670] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 116.054659][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 116.054680][ C0] EXT4-fs (loop4): initial error at time 1776594342: ext4_validate_block_bitmap:441 [ 116.054701][ C0] EXT4-fs (loop4): last error at time 1776594342: ext4_validate_block_bitmap:441 [ 116.076098][ T28] audit: type=1326 audit(1776594342.292:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 116.113920][ T28] audit: type=1326 audit(1776594342.292:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 116.126768][ T7670] loop4: lost filesystem error report for type 5 error -117 [ 116.138171][ T28] audit: type=1326 audit(1776594342.292:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 116.162555][ T7670] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1381: attempt to clear invalid blocks 33619980 len 1 [ 116.180728][ T28] audit: type=1326 audit(1776594342.292:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 116.218313][ T28] audit: type=1326 audit(1776594342.292:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d4bc819 code=0x7ffc0000 [ 116.228931][ T7670] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.261817][ T7670] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1381: invalid indirect mapped block 1811939328 (level 0) [ 116.290464][ T7670] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.297312][ T7670] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1381: invalid indirect mapped block 2185560079 (level 1) [ 116.324594][ T7670] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.324865][ T7670] EXT4-fs (loop4): 1 truncate cleaned up [ 116.361992][ T7670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 116.377427][ T7678] netlink: 'syz.7.1385': attribute type 1 has an invalid length. [ 116.403452][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 116.413010][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 116.457897][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 116.478235][ T7679] gretap1: entered allmulticast mode [ 116.518850][ T7679] bond2: (slave gretap1): making interface the new active one [ 116.527563][ T7679] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 116.552276][ T7686] bond2: entered allmulticast mode [ 116.565768][ T7686] vcan1: entered allmulticast mode [ 116.587058][ T7685] bond2: left allmulticast mode [ 116.600009][ T7685] vcan1: left allmulticast mode [ 117.553797][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1414'. [ 117.574859][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.577911][ T7757] loop4: detected capacity change from 0 to 128 [ 117.602004][ T7755] bridge_slave_0 (unregistering): left allmulticast mode [ 117.607098][ T7757] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.631310][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.653393][ T7757] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.820050][ T7775] loop4: detected capacity change from 0 to 512 [ 117.834549][ T7775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.856451][ T7775] EXT4-fs (loop4): 1 truncate cleaned up [ 117.864824][ T7775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.952604][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1423'. [ 117.974063][ T7781] loop2: detected capacity change from 0 to 1024 [ 118.036796][ T7781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.049762][ T7781] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.076037][ T7781] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1424: lblock 3 mapped to illegal pblock 3 (length 3) [ 118.114827][ T7781] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 118.138775][ T7781] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.138775][ T7781] [ 118.159552][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.193335][ T5144] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:22: lblock 0 mapped to illegal pblock 0 (length 3) [ 118.261135][ T5144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 118.294773][ T5144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.294773][ T5144] [ 118.329602][ T5144] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:22: lblock 4 mapped to illegal pblock 4 (length 2) [ 118.374680][ T5144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 118.402360][ T5144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.402360][ T5144] [ 118.429468][ T6607] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 118.469813][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.321623][ T7808] loop5: detected capacity change from 0 to 764 [ 119.501495][ T7805] loop7: detected capacity change from 0 to 512 [ 119.548107][ T7808] rock: directory entry would overflow storage [ 119.569779][ T7808] rock: sig=0x5245, size=8, remaining=5 [ 119.969572][ T7805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.998969][ T7805] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.240837][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.298185][ T7862] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1457'. [ 120.361721][ T7874] loop4: detected capacity change from 0 to 128 [ 120.385310][ T7874] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.464906][ T7874] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.559163][ T7883] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 120.594090][ T7874] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.1461: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 120.616598][ T7874] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 120.626691][ T7874] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.1461: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 120.670910][ T7874] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 120.748473][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.796879][ T7887] loop2: detected capacity change from 0 to 4096 [ 120.829097][ T7887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.905165][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 120.905184][ T28] audit: type=1400 audit(1776594347.402:520): avc: denied { mount } for pid=7905 comm="syz.5.1470" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.045124][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.155111][ T7925] loop2: detected capacity change from 0 to 512 [ 121.176645][ T7925] EXT4-fs: Ignoring removed nobh option [ 121.200650][ T7925] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1471: corrupted in-inode xattr: overlapping e_value [ 121.215316][ T7925] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.216745][ T7925] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1471: couldn't read orphan inode 15 (err -117) [ 121.226006][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 121.226041][ C0] EXT4-fs (loop2): initial error at time 1776594347: ext4_iget_extra_inode:5128: inode 15 [ 121.226079][ C0] EXT4-fs (loop2): last error at time 1776594347: ext4_iget_extra_inode:5128: inode 15 [ 121.265345][ T7925] loop2: lost filesystem error report for type 5 error -117 [ 121.269023][ T7925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.350550][ T28] audit: type=1400 audit(1776594347.842:521): avc: denied { map } for pid=7923 comm="syz.2.1471" path="/89/file0/file0/net_prio.prioidx" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.407392][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.452567][ T7945] loop5: detected capacity change from 0 to 2048 [ 121.466769][ T7945] EXT4-fs: Ignoring removed nobh option [ 121.478863][ T7945] EXT4-fs: Ignoring removed oldalloc option [ 121.537095][ T7945] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c028, mo2=0002] [ 121.551752][ T7945] System zones: 0-7 [ 121.566670][ T7945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.603030][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1480'. [ 121.635061][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1480'. [ 121.684485][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.703748][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 121.711663][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 121.723378][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 121.757392][ T7956] gtp0: entered promiscuous mode [ 122.010740][ T7903] loop4: detected capacity change from 0 to 512 [ 122.369577][ T7903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.396037][ T7903] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.497137][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.525283][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 122.540730][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 122.591716][ T28] audit: type=1400 audit(1776594349.082:522): avc: denied { connect } for pid=7990 comm="syz.1.1493" lport=37134 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 122.633123][ T28] audit: type=1400 audit(1776594349.082:523): avc: denied { name_connect } for pid=7990 comm="syz.1.1493" dest=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 122.853057][ T8000] tipc: Started in network mode [ 122.858425][ T8000] tipc: Node identity ac14140f, cluster identity 4711 [ 122.868724][ T8000] tipc: Enabled bearer , priority 10 [ 123.388301][ T8009] loop7: detected capacity change from 0 to 512 [ 123.404980][ T8009] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.449653][ T8009] EXT4-fs (loop7): 1 truncate cleaned up [ 123.468295][ T8009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.485328][ T8013] loop2: detected capacity change from 0 to 512 [ 123.618613][ T8013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.687533][ T8013] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.767382][ T28] audit: type=1326 audit(1776594350.262:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.5.1507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f837944c819 code=0x0 [ 123.833038][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.876798][ T8031] loop7: detected capacity change from 0 to 512 [ 123.894543][ T8031] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.934893][ T8031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.957865][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.973162][ T8036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.983408][ T23] tipc: Node number set to 2886997007 [ 123.995633][ T8031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.010434][ T8036] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 124.029298][ T8031] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.047524][ T8036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.081052][ T28] audit: type=1400 audit(1776594350.572:525): avc: denied { ioctl } for pid=8030 comm="syz.7.1509" path="/newroot/174/bus/file2" dev="loop7" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.120446][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.179986][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.185388][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1515'. [ 124.230970][ T28] audit: type=1400 audit(1776594350.722:526): avc: denied { bind } for pid=8050 comm="syz.4.1518" lport=55800 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 124.296932][ T28] audit: type=1400 audit(1776594350.722:527): avc: denied { name_bind } for pid=8050 comm="syz.4.1518" src=20001 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 124.322609][ T8057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.343211][ T28] audit: type=1400 audit(1776594350.722:528): avc: denied { node_bind } for pid=8050 comm="syz.4.1518" saddr=::ffff:0.0.0.0 src=20001 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 124.370334][ T28] audit: type=1400 audit(1776594350.782:529): avc: denied { name_bind } for pid=8054 comm="syz.7.1520" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 124.395791][ T8057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.396018][ T8061] set_capacity_and_notify: 2 callbacks suppressed [ 124.396033][ T8061] loop7: detected capacity change from 0 to 4096 [ 124.420117][ T8057] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.443804][ T8061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.453964][ T8066] loop2: detected capacity change from 0 to 128 [ 124.476926][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.487872][ T8066] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.516531][ T8066] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.604828][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.621477][ T8066] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 20: comm syz.2.1524: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 124.662702][ T8066] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem [ 124.684152][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 124.685715][ T8075] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 20: comm syz.2.1524: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 124.747492][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1529'. [ 124.780228][ T6607] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.828128][ T8127] loop2: detected capacity change from 0 to 128 [ 126.039633][ T8136] loop5: detected capacity change from 0 to 4096 [ 126.241759][ T8146] loop5: detected capacity change from 0 to 1024 [ 126.264869][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.297932][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.987507][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 126.987557][ T28] audit: type=1400 audit(1776594353.482:533): avc: denied { mount } for pid=8181 comm="syz.7.1570" name="/" dev="autofs" ino=21946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 128.087956][ T28] audit: type=1400 audit(1776594354.582:534): avc: denied { create } for pid=8207 comm="syz.2.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.200077][ T8218] loop7: detected capacity change from 0 to 512 [ 128.253369][ T8218] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.290615][ T28] audit: type=1400 audit(1776594354.782:535): avc: denied { create } for pid=8227 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.315741][ T28] audit: type=1400 audit(1776594354.812:536): avc: denied { ioctl } for pid=8227 comm="syz.1.1593" path="socket:[22123]" dev="sockfs" ino=22123 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.361376][ T28] audit: type=1400 audit(1776594354.842:537): avc: denied { bind } for pid=8227 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.381267][ T28] audit: type=1400 audit(1776594354.842:538): avc: denied { write } for pid=8227 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.416849][ T28] audit: type=1400 audit(1776594354.912:539): avc: denied { read } for pid=8227 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.513998][ T8236] loop7: detected capacity change from 0 to 128 [ 128.559034][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.559034][ T8236] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 128.583248][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.583248][ T8236] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 128.625772][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.625772][ T8236] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 128.658053][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.658053][ T8236] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 128.690437][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.690437][ T8236] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 128.722009][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.722009][ T8236] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 128.747149][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.747149][ T8236] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 128.763254][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.763254][ T8236] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 128.777509][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.777509][ T8236] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 128.791586][ T8236] syz.7.1596: attempt to access beyond end of device [ 128.791586][ T8236] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 129.193939][ T8264] vcan0: tx drop: invalid da for name 0x0000000000000008 [ 129.202701][ T28] audit: type=1400 audit(1776594355.692:540): avc: denied { connect } for pid=8263 comm="syz.1.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.424706][ T28] audit: type=1326 audit(1776594355.922:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8271 comm="syz.1.1611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d8c99c819 code=0x0 [ 129.507584][ T8279] loop2: detected capacity change from 0 to 512 [ 129.530739][ T8279] EXT4-fs (loop2): 1 truncate cleaned up [ 129.547520][ T28] audit: type=1400 audit(1776594356.042:542): avc: denied { rename } for pid=8277 comm="syz.2.1614" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.687410][ T8287] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1614: invalid indirect mapped block 4294967295 (level 1) [ 129.712715][ T8287] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1614: invalid indirect mapped block 65535 (level 2) [ 129.969939][ T8298] xt_hashlimit: size too large, truncated to 1048576 [ 130.342157][ T8312] loop2: detected capacity change from 0 to 4096 [ 130.639356][ T8337] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 130.663645][ T8337] SELinux: failed to load policy [ 130.710595][ T8336] loop7: detected capacity change from 0 to 4096 [ 130.889700][ T8350] loop4: detected capacity change from 0 to 764 [ 131.148769][ T8354] loop4: detected capacity change from 0 to 8192 [ 132.009400][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 132.009435][ T28] audit: type=1400 audit(1776594358.502:559): avc: denied { relabelfrom } for pid=8399 comm="syz.2.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.055784][ T28] audit: type=1400 audit(1776594358.502:560): avc: denied { relabelto } for pid=8399 comm="syz.2.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.136232][ T28] audit: type=1400 audit(1776594358.632:561): avc: denied { getopt } for pid=8412 comm="syz.2.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.378829][ T8435] netlink: 'syz.7.1673': attribute type 13 has an invalid length. [ 132.389453][ T8438] syzkaller0: entered allmulticast mode [ 132.403258][ T8438] syzkaller0: entered promiscuous mode [ 132.427780][ T8438] syzkaller0 (unregistering): left allmulticast mode [ 132.438451][ T8438] syzkaller0 (unregistering): left promiscuous mode [ 132.783857][ T8449] syzkaller0: entered promiscuous mode [ 132.797652][ T8449] syzkaller0: entered allmulticast mode [ 132.948461][ T8461] loop2: detected capacity change from 0 to 128 [ 133.976499][ T8504] all: renamed from bridge_slave_1 (while UP) [ 134.141584][ T28] audit: type=1400 audit(1776594360.632:562): avc: denied { getopt } for pid=8510 comm="syz.1.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.165994][ T8515] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 134.200115][ T8515] team0: Device xfrm0 is of different type [ 134.245490][ T8518] SET target dimension over the limit! [ 134.599784][ T8532] __nla_validate_parse: 1 callbacks suppressed [ 134.599806][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 134.651714][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1711'. [ 134.881422][ T8542] xt_hashlimit: size too large, truncated to 1048576 [ 135.072043][ T8546] loop2: detected capacity change from 0 to 8192 [ 135.325292][ T8565] loop7: detected capacity change from 0 to 256 [ 135.413278][ T28] audit: type=1400 audit(1776594361.912:563): avc: denied { cpu } for pid=8569 comm="syz.4.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 135.543221][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1726'. [ 135.593406][ T8575] loop4: detected capacity change from 0 to 512 [ 135.615423][ T8575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.624451][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 135.666557][ T8575] EXT4-fs mount: 10 callbacks suppressed [ 135.666582][ T8575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.752361][ T8575] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.812706][ T8575] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz.4.1728: invalid size [ 135.833297][ T8575] EXT4-fs (loop4): Remounting filesystem read-only [ 135.876518][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.893629][ T5144] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 135.920593][ T5144] Quota error (device loop4): write_blk: dquota write failed [ 135.943524][ T5144] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 135.972162][ T5144] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.008268][ T5144] Quota error (device loop4): write_blk: dquota write failed [ 136.028307][ T5144] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 136.150729][ T8598] loop5: detected capacity change from 0 to 256 [ 136.775806][ T8619] loop2: detected capacity change from 0 to 128 [ 136.836909][ T28] audit: type=1400 audit(1776594363.332:564): avc: denied { watch watch_reads } for pid=8618 comm="syz.2.1748" path="/149/file1/_." dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 136.919089][ T8631] pimreg: entered allmulticast mode [ 136.928582][ T8631] pimreg: left allmulticast mode [ 137.076123][ T8647] loop5: detected capacity change from 0 to 128 [ 137.662960][ T8663] loop4: detected capacity change from 0 to 128 [ 137.681367][ T28] audit: type=1400 audit(1776594364.162:565): avc: denied { setopt } for pid=8655 comm="syz.2.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.716177][ T8663] bio_check_eod: 16 callbacks suppressed [ 137.716197][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.716197][ T8663] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 137.736982][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.736982][ T8663] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 137.793712][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.793712][ T8663] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 137.813018][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.813018][ T8663] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 137.829324][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.829324][ T8663] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 137.843676][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.843676][ T8663] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 137.858297][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.858297][ T8663] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 137.872379][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.872379][ T8663] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 137.925535][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.925535][ T8663] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 137.975356][ T8663] syz.4.1765: attempt to access beyond end of device [ 137.975356][ T8663] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 138.149055][ T5156] Bluetooth: hci0: Frame reassembly failed (-84) [ 138.309691][ T8696] pim6reg1: entered promiscuous mode [ 138.317269][ T8696] pim6reg1: entered allmulticast mode [ 138.397604][ T28] audit: type=1400 audit(1776594364.892:566): avc: denied { bind } for pid=8694 comm="syz.1.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.758378][ T8706] netlink: 'syz.2.1782': attribute type 12 has an invalid length. [ 139.000584][ T8709] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 139.017285][ T8709] netlink: 'syz.2.1783': attribute type 4 has an invalid length. [ 139.031470][ T8709] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1783'. [ 139.088662][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 139.239769][ T8717] loop2: detected capacity change from 0 to 512 [ 139.252028][ T8717] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.269466][ T8717] EXT4-fs (loop2): 1 orphan inode deleted [ 139.284909][ T2097] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 139.302244][ T2097] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 1 [ 139.314082][ T2097] loop2: lost filesystem error report for type 5 error -117 [ 139.318089][ T8717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.324969][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1788'. [ 139.348536][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1788'. [ 139.365683][ T6607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.476731][ T8723] loop2: detected capacity change from 0 to 8192 [ 139.749587][ T8732] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 139.757751][ T8732] FAT-fs (loop2): Filesystem has been set read-only [ 140.080605][ T8767] loop7: detected capacity change from 0 to 512 [ 140.104997][ T8767] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 140.145514][ T8767] EXT4-fs error (device loop7): ext4_init_orphan_info:618: comm syz.7.1807: orphan file block 0: bad magic [ 140.173148][ T7575] Bluetooth: hci0: command 0x1003 tx timeout [ 140.179362][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.194287][ T8767] loop7: lost filesystem error report for type 5 error -117 [ 140.194575][ T8767] EXT4-fs (loop7): Remounting filesystem read-only [ 140.208914][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 140.208939][ C1] EXT4-fs (loop7): initial error at time 1776594366: ext4_init_orphan_info:618 [ 140.208973][ C1] EXT4-fs (loop7): last error at time 1776594366: ext4_init_orphan_info:618 [ 140.263228][ T8767] EXT4-fs (loop7): mount failed [ 140.813021][ T8802] loop4: detected capacity change from 0 to 256 [ 141.091958][ T28] audit: type=1400 audit(1776594367.582:567): avc: denied { name_bind } for pid=8815 comm="syz.4.1833" src=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 141.145508][ T8822] loop5: detected capacity change from 0 to 128 [ 141.502856][ T28] audit: type=1400 audit(1776594367.992:568): avc: denied { read } for pid=8837 comm="syz.5.1827" path="socket:[26220]" dev="sockfs" ino=26220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.666193][ T28] audit: type=1400 audit(1776594368.162:569): avc: denied { read } for pid=8844 comm="syz.2.1832" path="socket:[26667]" dev="sockfs" ino=26667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.137446][ T28] audit: type=1400 audit(1776594368.632:570): avc: denied { connect } for pid=8858 comm="syz.5.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.451585][ T28] audit: type=1400 audit(1776594368.942:571): avc: denied { name_bind } for pid=8879 comm="syz.5.1849" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 142.716842][ T28] audit: type=1400 audit(1776594369.212:572): avc: denied { remount } for pid=8894 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.741098][ T8899] netlink: 'syz.1.1857': attribute type 12 has an invalid length. [ 143.106561][ T8906] loop5: detected capacity change from 0 to 1024 [ 143.139894][ T8906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.191830][ T8906] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.319448][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.395510][ T8921] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1865'. [ 143.474879][ T8928] loop5: detected capacity change from 0 to 128 [ 143.548118][ T8928] bio_check_eod: 16 callbacks suppressed [ 143.548138][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.548138][ T8928] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 143.613278][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.613278][ T8928] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 143.637590][ T28] audit: type=1400 audit(1776594370.132:573): avc: denied { shutdown } for pid=8932 comm="syz.4.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.683161][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.683161][ T8928] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 143.722436][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.722436][ T8928] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 143.769327][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.769327][ T8928] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 143.811117][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.811117][ T8928] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 143.850681][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.850681][ T8928] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 143.892963][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.892963][ T8928] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 143.938806][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.938806][ T8928] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 143.993149][ T8928] syz.5.1867: attempt to access beyond end of device [ 143.993149][ T8928] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 144.073878][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 144.102848][ T8946] erspan0: entered promiscuous mode [ 144.118836][ T8946] macvtap1: entered promiscuous mode [ 144.128937][ T8946] macvtap1: entered allmulticast mode [ 144.136232][ T8946] erspan0: entered allmulticast mode [ 144.143740][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 144.198198][ T8951] erspan0: left allmulticast mode [ 144.212958][ T8951] erspan0: left promiscuous mode [ 144.299163][ T8966] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 144.349228][ T8967] syzkaller1: entered promiscuous mode [ 144.368434][ T8967] syzkaller1: entered allmulticast mode [ 144.397791][ T8966] bond3: (slave geneve3): making interface the new active one [ 144.408161][ T8966] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 144.435302][ T5158] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.485389][ T5158] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.562544][ T5158] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.575585][ T5158] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.715817][ T8985] loop4: detected capacity change from 0 to 512 [ 144.728731][ T8989] loop5: detected capacity change from 0 to 512 [ 144.756894][ T8985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.758967][ T8989] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.807310][ T8985] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.830534][ T8989] EXT4-fs (loop5): 1 truncate cleaned up [ 144.868874][ T8989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.957191][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.026802][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.336840][ T9021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1906'. [ 145.511041][ T9031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9031 comm=syz.5.1911 [ 145.773954][ T28] audit: type=1400 audit(1776594372.272:574): avc: denied { map } for pid=9038 comm="syz.2.1915" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 146.078417][ T28] audit: type=1400 audit(1776594372.572:575): avc: denied { cmd } for pid=9054 comm="syz.2.1922" path="socket:[27179]" dev="sockfs" ino=27179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 146.154315][ T28] audit: type=1400 audit(1776594372.652:576): avc: denied { mount } for pid=9061 comm="syz.2.1924" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 146.224294][ T9065] io-wq is not configured for unbound workers [ 146.640429][ T28] audit: type=1400 audit(1776594373.132:577): avc: denied { write } for pid=9082 comm="syz.4.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.985576][ T9099] netlink: 'syz.5.1936': attribute type 5 has an invalid length. [ 147.434039][ T9109] sctp: [Deprecated]: syz.4.1941 (pid 9109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.434039][ T9109] Use struct sctp_sack_info instead [ 147.654098][ T9103] Set syz1 is full, maxelem 65536 reached [ 147.897048][ T9131] loop5: detected capacity change from 0 to 512 [ 147.910505][ T9132] raw_sendmsg: syz.1.1951 forgot to set AF_INET. Fix it! [ 147.918409][ T9131] ext4: Unknown parameter 'smackfstransmute' [ 148.008942][ T28] audit: type=1400 audit(1776594374.502:578): avc: denied { append } for pid=9137 comm="syz.2.1954" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.058784][ T9138] loop2: detected capacity change from 0 to 2048 [ 148.075777][ T9138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.134226][ T9137] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 148.149116][ T9137] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 148.161802][ T9137] EXT4-fs (loop2): This should not happen!! Data will be lost [ 148.161802][ T9137] [ 148.172116][ T9137] EXT4-fs (loop2): Total free blocks count 0 [ 148.180817][ T9137] EXT4-fs (loop2): Free/Dirty block details [ 148.187369][ T9137] EXT4-fs (loop2): free_blocks=4096 [ 148.192741][ T9137] EXT4-fs (loop2): dirty_blocks=512 [ 148.198414][ T9137] EXT4-fs (loop2): Block reservation details [ 148.204666][ T9137] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 148.238540][ T5144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 148.268841][ T6607] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 148.519514][ T28] audit: type=1400 audit(1776594375.002:579): avc: denied { unmount } for pid=9175 comm="syz.5.1966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 148.806514][ T9203] loop5: detected capacity change from 0 to 512 [ 148.821385][ T9203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.844254][ T9203] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1978: bad orphan inode 1 [ 148.866048][ T9203] loop5: lost filesystem error report for type 5 error -117 [ 148.867011][ T9203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.922828][ T28] audit: type=1400 audit(1776594375.412:580): avc: denied { rename } for pid=9202 comm="syz.5.1978" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 148.994814][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.097854][ T9214] batman_adv: batadv0: Adding interface: dummy0 [ 149.114376][ T9214] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.161181][ T9214] batman_adv: batadv0: Interface activated: dummy0 [ 149.176117][ T9215] batadv0: mtu less than device minimum [ 149.206338][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.217579][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.228656][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.239850][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.250711][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.262218][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.273470][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.284807][ T9215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 149.328857][ T9201] loop2: detected capacity change from 0 to 32768 [ 149.756520][ T9245] loop7: detected capacity change from 0 to 1024 [ 149.778645][ T9240] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.786085][ T9240] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.806991][ T9245] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 149.806991][ T9245] [ 149.842743][ T9245] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 149.910106][ T9240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.146053][ T5158] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.184602][ T28] audit: type=1400 audit(1776594376.672:581): avc: denied { setopt } for pid=9282 comm="syz.7.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.214514][ T5158] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.228461][ T5158] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.250861][ T5158] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.277949][ T5158] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.300412][ T5158] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.335449][ T9277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.364724][ T9277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.402056][ T5158] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.422628][ T9295] netlink: 'syz.2.2009': attribute type 6 has an invalid length. [ 150.439285][ T5158] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.474023][ T9277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.511116][ T9277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.559836][ T9277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.597897][ T9277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.705177][ T9277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.721932][ T9332] loop7: detected capacity change from 0 to 1024 [ 150.736479][ T9277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.752618][ T9332] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 150.837742][ T5158] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.854337][ T5158] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.896944][ T5142] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.923132][ T5142] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.961797][ T5142] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.970888][ T5142] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.003830][ T2049] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.021998][ T2049] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.325482][ T28] audit: type=1326 audit(1776594377.822:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b373ac819 code=0x7ffc0000 [ 151.374581][ T28] audit: type=1326 audit(1776594377.852:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b373ac819 code=0x7ffc0000 [ 151.399743][ T28] audit: type=1326 audit(1776594377.852:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b373ac819 code=0x7ffc0000 [ 151.424536][ T28] audit: type=1326 audit(1776594377.852:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b373ac819 code=0x7ffc0000 [ 151.549172][ T28] audit: type=1326 audit(1776594377.852:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b373ac819 code=0x7ffc0000 [ 151.590939][ T28] audit: type=1326 audit(1776594377.852:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b373ac819 code=0x7ffc0000 [ 151.752357][ T9425] loop5: detected capacity change from 0 to 512 [ 151.760481][ T5144] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.770371][ T7575] Bluetooth: hci0: unexpected event 0x07 length: 0 < 255 [ 152.111172][ T9459] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 152.378738][ T9479] netlink: 'syz.5.2056': attribute type 1 has an invalid length. [ 152.392282][ T9479] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2056'. [ 152.783847][ T9268] IPVS: starting estimator thread 0... [ 152.893584][ T9514] IPVS: using max 2352 ests per chain, 117600 per kthread [ 152.908697][ T5156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.978470][ T5156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.003305][ T9524] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 153.015200][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 153.015218][ T28] audit: type=1400 audit(1776594379.512:635): avc: denied { relabelto } for pid=9523 comm="syz.1.2075" name="file1" dev="tmpfs" ino=2303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 153.073554][ T5156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.078316][ T28] audit: type=1400 audit(1776594379.512:636): avc: denied { associate } for pid=9523 comm="syz.1.2075" name="file1" dev="tmpfs" ino=2303 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslog_conf_t:s0" [ 153.134509][ T28] audit: type=1400 audit(1776594379.542:637): avc: denied { map } for pid=9523 comm="syz.1.2075" path="/441/file1" dev="tmpfs" ino=2303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 153.164151][ T5156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.186775][ T28] audit: type=1400 audit(1776594379.542:638): avc: denied { read write execute } for pid=9523 comm="syz.1.2075" path="/441/file1" dev="tmpfs" ino=2303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 153.237488][ T28] audit: type=1400 audit(1776594379.602:639): avc: denied { open } for pid=9523 comm="syz.1.2075" path="/441/file1" dev="tmpfs" ino=2303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 153.315964][ T9525] chnl_net:caif_netlink_parms(): no params data found [ 153.421145][ T5156] bridge_slave_1: left allmulticast mode [ 153.433650][ T5156] bridge_slave_1: left promiscuous mode [ 153.447576][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.466325][ T5156] bridge_slave_0: left allmulticast mode [ 153.472449][ T5156] bridge_slave_0: left promiscuous mode [ 153.480199][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.678124][ T5156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.699671][ T5156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.722169][ T5156] bond0 (unregistering): Released all slaves [ 153.750186][ T3047] 8021q: adding VLAN 0 to HW filter on device eth14 [ 153.774744][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.781310][ T7575] Bluetooth: hci0: command 0x1003 tx timeout [ 153.794253][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.801380][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.808906][ T9525] bridge_slave_0: entered allmulticast mode [ 153.821411][ T9525] bridge_slave_0: entered promiscuous mode [ 153.877081][ T5156] hsr_slave_0: left promiscuous mode [ 153.899340][ T5156] hsr_slave_1: left promiscuous mode [ 153.905578][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.913002][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.920761][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.928350][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.942012][ T5156] veth1_macvtap: left promiscuous mode [ 153.949549][ T5156] veth0_macvtap: left promiscuous mode [ 154.294415][ T5156] team0 (unregistering): Port device team_slave_1 removed [ 154.307103][ T5156] team0 (unregistering): Port device team_slave_0 removed [ 154.348609][ T28] audit: type=1400 audit(1776594380.842:640): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file1" dev="tmpfs" ino=2303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 154.381326][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.388611][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.396192][ T9525] bridge_slave_1: entered allmulticast mode [ 154.402962][ T9525] bridge_slave_1: entered promiscuous mode [ 154.499115][ T9577] loop4: detected capacity change from 0 to 32768 [ 154.521036][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.557155][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.605245][ T28] audit: type=1400 audit(1776594381.102:641): avc: denied { setopt } for pid=9586 comm="syz.4.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.631920][ T9525] team0: Port device team_slave_0 added [ 154.656788][ T9525] team0: Port device team_slave_1 added [ 154.710334][ T9598] loop4: detected capacity change from 0 to 512 [ 154.719080][ T9598] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.742071][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.757469][ T9598] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 154.765533][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.830615][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.857173][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.864670][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.905177][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.934225][ T3047] 8021q: adding VLAN 0 to HW filter on device eth13 [ 154.986566][ T9525] hsr_slave_0: entered promiscuous mode [ 155.000830][ T9525] hsr_slave_1: entered promiscuous mode [ 155.015374][ T9525] debugfs: 'hsr0' already exists in 'hsr' [ 155.027206][ T9525] Cannot create hsr debugfs directory [ 155.353861][ T9525] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 155.389132][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.401927][ T3047] 8021q: adding VLAN 0 to HW filter on device eth15 [ 155.422525][ T9525] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 155.442727][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.465486][ T9525] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 155.499937][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.520094][ T9525] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 155.538950][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.567669][ T9623] loop7: detected capacity change from 0 to 512 [ 155.638545][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.824127][ T9623] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 155.859110][ T9525] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.888717][ T3047] 8021q: adding VLAN 0 to HW filter on device eth16 [ 155.912459][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.919609][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.970577][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.978118][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.001530][ T9623] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2094: iget: bogus i_mode (2) [ 156.077822][ T9623] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.083091][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 156.099086][ C0] EXT4-fs (loop7): initial error at time 1776594382: ext4_orphan_get:1397: inode 15 [ 156.108874][ C0] EXT4-fs (loop7): last error at time 1776594382: ext4_orphan_get:1397: inode 15 [ 156.130166][ T9623] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2094: couldn't read orphan inode 15 (err -117) [ 156.155540][ T9623] loop7: lost filesystem error report for type 5 error -117 [ 156.174548][ T9623] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.296989][ T9525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.576698][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.746008][ T9525] veth0_vlan: entered promiscuous mode [ 156.772828][ T9525] veth1_vlan: entered promiscuous mode [ 156.812499][ T9525] veth0_macvtap: entered promiscuous mode [ 156.834392][ T9525] veth1_macvtap: entered promiscuous mode [ 156.859853][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.882941][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.911689][ T5142] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.928765][ T5142] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.951108][ T5142] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.982697][ T5142] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.024132][ T28] audit: type=1400 audit(1776594639.529:642): avc: denied { mount } for pid=9525 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.203261][ T9724] loop7: detected capacity change from 0 to 512 [ 157.219459][ T9724] EXT4-fs: Ignoring removed orlov option [ 157.246585][ T9724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.281918][ T9724] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.354828][ T9730] loop8: detected capacity change from 0 to 4096 [ 157.386470][ T9730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.495563][ T5475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.505880][ T9525] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.642832][ T9735] loop8: detected capacity change from 0 to 2048 [ 157.669376][ T9735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.764662][ T9735] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2116: bg 0: block 234: padding at end of block bitmap is not set [ 157.780662][ T9735] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 366 with error 117 [ 157.794710][ T9735] EXT4-fs (loop8): This should not happen!! Data will be lost [ 157.794710][ T9735] [ 157.884573][ T9525] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 157.917409][ T9525] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.634609][ T9776] loop7: detected capacity change from 0 to 128 [ 158.673430][ T9776] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.480230][ T9798] loop7: detected capacity change from 0 to 4096 [ 159.503275][ T5144] ================================================================== [ 159.511505][ T5144] BUG: KCSAN: data-race in touch_atime / touch_atime [ 159.518586][ T5144] [ 159.521111][ T5144] write to 0xffff888109d6b130 of 8 bytes by task 5162 on cpu 1: [ 159.529023][ T5144] touch_atime+0x1c4/0x330 [ 159.533486][ T5144] shmem_file_read_iter+0x3f4/0x4b0 [ 159.538721][ T5144] lo_rw_aio+0x67d/0x730 [ 159.543084][ T5144] loop_process_work+0x56c/0xac0 [ 159.548236][ T5144] loop_rootcg_workfn+0x22/0x30 [ 159.553202][ T5144] process_scheduled_works+0x4f0/0x9c0 [ 159.558868][ T5144] worker_thread+0x58a/0x780 [ 159.563581][ T5144] kthread+0x22a/0x280 [ 159.567857][ T5144] ret_from_fork+0x146/0x330 [ 159.572461][ T5144] ret_from_fork_asm+0x1a/0x30 [ 159.577258][ T5144] [ 159.579680][ T5144] write to 0xffff888109d6b130 of 8 bytes by task 5144 on cpu 0: [ 159.587327][ T5144] touch_atime+0x1c4/0x330 [ 159.591950][ T5144] shmem_file_read_iter+0x3f4/0x4b0 [ 159.597174][ T5144] lo_rw_aio+0x67d/0x730 [ 159.601464][ T5144] loop_process_work+0x56c/0xac0 [ 159.606429][ T5144] loop_workfn+0x31/0x40 [ 159.610699][ T5144] process_scheduled_works+0x4f0/0x9c0 [ 159.616183][ T5144] worker_thread+0x58a/0x780 [ 159.620802][ T5144] kthread+0x22a/0x280 [ 159.624989][ T5144] ret_from_fork+0x146/0x330 [ 159.629591][ T5144] ret_from_fork_asm+0x1a/0x30 [ 159.634381][ T5144] [ 159.636719][ T5144] value changed: 0x0000000069e4aed1 -> 0x0000000069e4aed2 [ 159.643922][ T5144] [ 159.646263][ T5144] Reported by Kernel Concurrency Sanitizer on: [ 159.652600][ T5144] CPU: 0 UID: 0 PID: 5144 Comm: kworker/u8:22 Tainted: G W syzkaller #0 PREEMPT(full) [ 159.663731][ T5144] Tainted: [W]=WARN [ 159.667840][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.678433][ T5144] Workqueue: loop7 loop_workfn [ 159.683228][ T5144] ================================================================== [ 159.815315][ T9798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.104767][ T5146] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.176230][ T5146] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.236682][ T5146] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.296311][ T5146] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.389780][ T5146] bridge_slave_1: left allmulticast mode [ 160.395669][ T5146] bridge_slave_1: left promiscuous mode [ 160.401564][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.403474][ T9798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.419416][ T5146] bridge_slave_0: left allmulticast mode [ 160.425516][ T5146] bridge_slave_0: left promiscuous mode [ 160.431478][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.535448][ T5146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.545630][ T5146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.555866][ T5146] bond0 (unregistering): Released all slaves [ 160.581242][ T3047] 8021q: adding VLAN 0 to HW filter on device eth17 [ 160.593922][ T5146] hsr_slave_0: left promiscuous mode [ 160.599606][ T5146] hsr_slave_1: left promiscuous mode [ 160.605560][ T5146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.613266][ T5146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.620951][ T5146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.628412][ T5146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.638500][ T5146] veth1_macvtap: left promiscuous mode [ 160.644148][ T5146] veth0_macvtap: left promiscuous mode [ 160.649839][ T5146] veth1_vlan: left promiscuous mode [ 160.655161][ T5146] veth0_vlan: left promiscuous mode [ 160.721849][ T5146] team0 (unregistering): Port device team_slave_1 removed [ 160.731443][ T5146] team0 (unregistering): Port device team_slave_0 removed [ 160.864871][ T3047] 8021q: adding VLAN 0 to HW filter on device eth18 [ 160.968363][ T3047] 8021q: adding VLAN 0 to HW filter on device eth19 [ 161.075535][ T3047] 8021q: adding VLAN 0 to HW filter on device eth20