last executing test programs: 2m55.064634654s ago: executing program 2 (id=2622): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unshare(0x20000400) fadvise64(r0, 0x7f, 0xffffffffffffffe4, 0x4) 2m54.915164212s ago: executing program 2 (id=2627): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 2m54.418186138s ago: executing program 2 (id=2632): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000540), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 2m54.250478167s ago: executing program 2 (id=2634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfec1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000001a40), 0x1007, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r0}, 0x38) 2m54.085419526s ago: executing program 2 (id=2636): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m53.940957144s ago: executing program 2 (id=2639): r0 = socket$inet(0x2b, 0x801, 0x1) unshare(0x22020600) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) bind(r0, &(0x7f0000000d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, {0xa, 0x4e21, 0x2, @mcast1, 0x5}}}, 0x80) 2m38.676989756s ago: executing program 32 (id=2639): r0 = socket$inet(0x2b, 0x801, 0x1) unshare(0x22020600) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) bind(r0, &(0x7f0000000d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, {0xa, 0x4e21, 0x2, @mcast1, 0x5}}}, 0x80) 2m27.155295039s ago: executing program 1 (id=2893): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000400)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacvA}knh#\xcf)&\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\b\x00\xe1$\xff\x9f\x8f~\xb90a\xa9\xb2\x04K\x98\x9a=n\xa8\x0f\x99\x9e\xe7\xbc\x02@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x85\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x917\xfa8\xac\xd3q\xe4vPGU\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\x99\xa4\xd8pt\x1e+\xe4\x0f\"]\xc8O\x12\xdeR\xa0\xf4\t\xb1\x88\xeb\xabe\\\x1c\xb6\x17\a\x9cU\x17\xe48\xbc\xc6\xdb\xab\xed\x0f\xd7I\x8c\x84\xcbU\xc7j\x9d|\x97\x8el\x8dBL.\x95y\xa5`\x189\x96\xb0(\xc8P\xc0xo\xb3\xf5\xac~\xb8\xa6z\xec\xdc^\x88`\xa2@\x9a\x83\x99\xa8Y\xf1\xc3\xbb1\x13A\t\x0f\xdd\xd8Xt\x1a;\xe6g\xc3z\x92W\xc2%Vy\xfc-\xc8\xf8s\xf2\xa4\xee\x1706#\x98\xf4\xe8\xe5\v\x9a\xa0\xd4\a\x8a#\x11IF&\xb7i\xbbg\xc7\x00\x9b\b\xb1\x8b,\r\xfd\xbb\xc2m\xdb\x9f\x8b\xc0S\xe9\x9b\xc5[\xb0\xe3h\xfa\x11\x8bY\xd3d\xfdk\xd9*H\x90\x85\xe7\xcb\x1dD\xf6\x06\xd9\x11\x97\x11m\xef\x02\x81\xcf}\xa3\x9c\x81\xb1i\xd5', 0x2) splice(r0, 0x0, r2, 0x0, 0x7, 0x4) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) 2m26.95341501s ago: executing program 1 (id=2902): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8bc6, 0x6}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 2m26.653869726s ago: executing program 1 (id=2906): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m26.551756101s ago: executing program 1 (id=2909): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x44000, 0x0) 2m26.442244337s ago: executing program 1 (id=2912): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000008}, 0x4000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742bbd7000fbdbdf25150000005800018044"], 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800) 2m24.804926734s ago: executing program 1 (id=2930): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$eJzs3c1vXOdeB/DvmdiJ41vl5vaGEqLeZpIqvb69xrEdmijqgpvY48QXvyDbkRoBaqomQVEsilqQ2opFKiFWVFQIIQEb1CWrSmVBNyg7WLJigQT9D1DFhrCAQXNmJh7H8xK7UzuEz2c0Pm+/5+2cM+fRjGfOE/4vq9fr5XOPyzf+Zj8ry7Pn6vzXn3/xaeP5yYMczqG8UfxdMpakmoz8d3mujM7Nr60uD8jofnIrycOkSHIkzWkPR7ct3UrxJ3lha/lhir/KyS7JxnbZOAaq8//aQZ9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwTJqbn56eKbK0uHLjrWpv5RDgfba3s/uqHPW7+GpQsUVSNJ4ZG2sP9X3yxNbmlxp/zubl5tLLzZG/x/Lx9146/uYPRyrt9H0qtC8++Ojj++9sbt55f2vVaNfAkVa7GvNHtlY/aK06cIf3luxabWVxfXVx+cq1WnVxfbV6+eLF6fPXF9arC4uprd9c36gtV+fWalc2VteqE3M/qc5cvnyhWqvcXL2xcm1+aqnWXnnpl2enpy9Wfz7167Ura+urK+d/PrU+d31xaWlx5VoZ09jciLnUOBF/bXGjulG7slyt3r23eefCoEo2gma6bim2B80Oyml2enZ2ZmZ2dubiG5ffuDQ9PbJjxfQTsiPi4E9aDs7fDvXaDd9SpdX/ZymLWcmNvJVq18dc5rOW1Sz32N7S7v/Pna/1Lbez/2/38ie3Np9K2f+/0lx6pVf/36Mugx/1ejPnvaZvPz7IR/k49/NONrOZO3n/W+e4Y7/+15Byqn771u58XEstK1nMelazmOVcKddUW2uquZyLuZjpvJ3rWch6qlnIYpZSy3puZj0bqZVn1FzWUsuVbGQ1a6lmInP5SaqZyeVczoVUU8tUbmY1N7KSa5nPlTKXu7lX7vcL/fZgO2jmaYJm+wQNuf+vHznQvoiDMfRrOOxVvdX/H+4ZUG/PTcztW60AAACAYfqlf8yxEy/+w78mo/lR+bn8wuJSbfqgqwUAAAAMUfl1vZcbk9HG3I9SeP8PAAAAz5ui/I1dkWQ8p5tzzV9CHYoPAQAAAOA5Uf7//5XGZLwxdzrF4zuh3DrougEAAADDMfge+wMjisn27X+rt5vT262I1n1+xxcWl2pTc6tLb87ktfIuA+UvDXbkdigpRsufH7yeM82oM+PN6fj2HMcaUTNTb87k9ZxtNWTi1cbk1YkukbPNyB83I3/cJ/JCIxIAnndn+/THT9v/v57JZsTkqZHDSUZOdelZp/WsAPCs6DbGTtmHd/T/A0bhKX5l6/3/aCvbbf3/i7n7n82vFEzl3byXzdzOZE4n98tvHGzL9Tc/a31m8PhrCNOZHPBpQDv2ny5VMjng84DxjoFeJgd8ItCMzW8lF/blWADAfjlb/upvZz+8m/5/suP9f3a+/388tNAdPykEgGfC4xHshzrz/W05H3QbAYDt9NIAAAAAAAAAAAAAAAAAAAAAAAAAAAAwfEO97f/YHpP/W2tcv2EPQzBg5mhrH+w9nz9Nsn91LoZcVmUI+dST7Nfx2r+ZHE/2vFe7nsaHkxx8uwbOjLReEvff2TyoKxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7qUgOdVtfSY4kmU5yfv9r9d15cNAV2H+/2rlQPMqjfJhjB1cdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnU+v+/5U0p99rrspIJTmX5FaS3zjoOg7To4OuwJAc3WO6jvv/N4556kVGmoc9xejc/NrqcuPwl2M/VL7+/ItPG8+O5EeetpwysPLE4BKtEp6M/esX2nM/KFONz9/54P7vvfe71fmrqeRwrm4sLM0vX1v72VaSl4ovk2qaz7Z2ff/g3N9/1qXlXzZa2t2T5S6UO2d+Z7m/2C11/3L7ubd5Z7ZR0kbtrY3f/517H3ZsejFnklcnkontJf1249mjpDMZ7Vda8U3xR8Wx/Hlulce/sTeKetE4RN8v23/07r3NO1Pvvrd5u0edjud0ktvJWP86fdKx+XR5PemqPOsqo41Sp8ugxp8TA9rYV0eOMz3a8IPylBlvteFwzzZ0qnZpw//U6/X2fMd+r3SrVrNGF3rU6Id5rcuRrh9Jetfotf5Hurvim+Jfiuv55/xhx/gflcbxP5fer87tWZSRHWdKz8hKM7Js+WznhrefjPz3v3iq2ncdpobd+uNtL95Kx/W/dayGdD2qF32vRx0l7u510VFiZedZ0ed1UfZIJ55I0br69ErTqueJZlSPev5CfpqMnOp3VdzRW/+091Vxe/qfdd+819f/XxYT+Y88MP4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7CuSQ93WV5JzSY63l6tJfRfZHum1oTJe7LaKQ/Xg8Z/nQmW3CYpHeZQPc+y7qQ4AAAAAAAAA++3q/Neff/Fp41kcba1q/X+/mowkOV782dHMr60uD8hoNLmV5GFjfqzL9j7/7m+kywtbyw8bSyd32xIA4Gn9bwAAAP//vGtjCg==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 2m24.804728674s ago: executing program 33 (id=2930): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 1m59.467121263s ago: executing program 5 (id=3597): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8403}], 0x1, 0x0, 0x0, 0x0) close(r0) 1m58.599127819s ago: executing program 5 (id=3628): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 1m58.512112143s ago: executing program 5 (id=3630): r0 = gettid() r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0x7ffffdbd}]}) rt_tgsigqueueinfo(r1, r0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) 1m58.431431677s ago: executing program 5 (id=3632): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) 1m58.323065203s ago: executing program 5 (id=3635): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x18, 0x8915, 0x4}, 0x20) 1m58.147668903s ago: executing program 5 (id=3640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000eaffffffffff08000740000000012c0006801400040000000000000000000000000000000001"], 0xc0}}, 0x0) 1m58.101793935s ago: executing program 34 (id=3640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000eaffffffffff08000740000000012c0006801400040000000000000000000000000000000001"], 0xc0}}, 0x0) 55.151589985s ago: executing program 6 (id=5456): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000000000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 55.151218215s ago: executing program 6 (id=5457): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) 55.106007168s ago: executing program 6 (id=5459): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1ad, 0x0, &(0x7f0000000680)="c3ef7f670000ec6783b4241544b50000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67e2e658d909c57270d30b39d3050b381d0000000000000004e1932780b192d2d61359ae0fe90b9d2a6faff570879d2f1b517210627c69e56ed195980a9a880700d5f059a6b7bb7b6a9787136a408914de373597695c519462765ac26a88185098ad1245c1d4d5162ce2fea5c53a8a44e93948de54e526e931694b28cdbc247797e769ef43a9f6bd08ef5c0abb843cc87035a5b7000083add0ccba38d197307108bfdbfae41be13e5d862e02e9f2d2582ff8ac1633f06ec78ba44e55b01022e4571179474ab5fdc0434372f826013043d00700000000000000a398285fc817fcc5ff0f02ea32cfd39b6a35f62e75f5a18720b2c73e9146cd67f57e2826f63986c202521300f2d4de3a1aed06b4771d349920e5a7891bd7b0ce80fdcbced288defdce000000e5ff00000000f75ac937aa74824fc2d467e0cfc3ff42b92176967ffb5940c531cb0dfb88cb3218c79c622b233ff7a008adf59e6dc4f4f306dd87ff882fa663110d10b9360893de", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 55.047364661s ago: executing program 6 (id=5460): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xcc8}, 0x1, 0x0, 0x0, 0x4000}, 0x111) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x17e8}}, 0x40) 54.948180666s ago: executing program 6 (id=5463): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) 54.854442141s ago: executing program 6 (id=5464): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="240004008120000024001280090001007866726d0000000014000280080002"], 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x40) 50.828522045s ago: executing program 7 (id=5528): openat$tun(0xffffffffffffff9c, 0x0, 0x4c0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbbb, {0xa, 0x0, 0x14, 0x4, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) 50.74425315s ago: executing program 7 (id=5529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x98}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lli}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 50.591030748s ago: executing program 7 (id=5530): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 50.128923582s ago: executing program 7 (id=5535): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) close(0x3) 50.031589637s ago: executing program 7 (id=5536): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) 50.013084809s ago: executing program 7 (id=5537): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x5e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='x', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="9001"], 0x190}}], 0x2, 0x42) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) 39.685235518s ago: executing program 35 (id=5464): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="240004008120000024001280090001007866726d0000000014000280080002"], 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x40) 34.923580541s ago: executing program 36 (id=5537): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x5e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='x', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="9001"], 0x190}}], 0x2, 0x42) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) 3.163432212s ago: executing program 9 (id=6579): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'unlock', ' ', 'io'}, 0xa) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000100)={0x23, "c383c0533673fd09ec67d95bf1f0793b9f4957535eb9c1eddb93626c6841da232a72049da9915e933e2b2f84da685afbf86af0911e53d9c9c246529999478dccbdfb4be5f86d41342fd2b166489a76c64592141fa147eecb3cfee0d9a3b8f284f43a7af67029d3538871e1bf5fbc6a9bcb05cffbaee301750b589545f8666a96"}) 3.118645134s ago: executing program 9 (id=6581): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0xa465, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000006c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 2.920388285s ago: executing program 9 (id=6586): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.81482065s ago: executing program 9 (id=6588): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 2.81447818s ago: executing program 9 (id=6589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x375, 0x4) 2.515388536s ago: executing program 9 (id=6597): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 1.579401696s ago: executing program 0 (id=6620): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.277003812s ago: executing program 8 (id=6623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) 1.223690155s ago: executing program 8 (id=6624): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000000600)=""/4102, 0x1006}], 0x1}, 0x8000}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.101091641s ago: executing program 8 (id=6625): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800008, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x5, 0x29d, &(0x7f0000000400)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 1.068168443s ago: executing program 4 (id=6626): r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) 1.024099915s ago: executing program 8 (id=6627): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfd, 0x1, 0x8eb4}]}) close(0x3) 819.544627ms ago: executing program 8 (id=6629): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) close(0x3) 819.137227ms ago: executing program 0 (id=6630): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x1, 0x20000000000}, {0x1, 0x2, 0x0, 0x1}, 0x400000, 0x0, 0x2, 0x0, 0x1}}, 0xb8}}, 0x4004880) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e2400000000000002000010"], 0xb8}}, 0x0) 747.32143ms ago: executing program 8 (id=6631): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 746.70096ms ago: executing program 0 (id=6641): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x101d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)}}], 0x3, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 718.743742ms ago: executing program 3 (id=6632): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000780)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 695.492013ms ago: executing program 4 (id=6633): r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) ptrace(0x4206, r0) ptrace(0x4207, r0) 648.503396ms ago: executing program 3 (id=6634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb0000060002000100000044000300000000000800", @ANYRES32=r1], 0x64}}, 0x0) 621.191877ms ago: executing program 4 (id=6635): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 593.880228ms ago: executing program 3 (id=6636): r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/240, 0xf0}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 559.81093ms ago: executing program 4 (id=6637): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 537.005511ms ago: executing program 0 (id=6638): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 504.457983ms ago: executing program 3 (id=6639): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0xeb4c, 0x40) 99.816245ms ago: executing program 4 (id=6640): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 98.997854ms ago: executing program 0 (id=6651): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 98.367335ms ago: executing program 3 (id=6642): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4c}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x76, &(0x7f0000002500)=0x0) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000000)='\v', 0x1, 0x7fffffffffffffff}]) 27.990908ms ago: executing program 4 (id=6643): unshare(0xa060400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) poll(&(0x7f0000000300)=[{r0, 0x6465e38fd7d2bc75}], 0x1, 0x404) 14.491639ms ago: executing program 3 (id=6644): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e00800000000000000009b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=6645): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): inode 15 [ 200.210449][ C1] EXT4-fs (loop6): last error at time 1776945514: ext4_do_update_inode:5690: inode 15 [ 200.250634][T14168] loop6: lost filesystem error report for type 5 error -117 [ 200.251600][T14168] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4525: corrupted inode contents [ 200.287142][T14168] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.288344][T14168] EXT4-fs error (device loop6): ext4_evict_inode:315: inode #15: comm syz.6.4525: mark_inode_dirty error [ 200.298114][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4538'. [ 200.328666][T14168] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.330562][T14168] EXT4-fs (loop6): 1 orphan inode deleted [ 200.377246][T14168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.454657][T14195] netlink: 'syz.4.4537': attribute type 10 has an invalid length. [ 200.467787][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4537'. [ 200.480049][T14195] : entered promiscuous mode [ 200.485538][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.495861][T14195] bridge0: port 3() entered blocking state [ 200.502311][T14195] bridge0: port 3() entered disabled state [ 200.534733][T14195] : entered allmulticast mode [ 200.544773][T14195] bridge0: entered allmulticast mode [ 200.557477][T14195] : left allmulticast mode [ 200.567072][T14195] bridge0: left allmulticast mode [ 200.858282][T14197] wg1: entered promiscuous mode [ 200.870939][T14197] wg1: entered allmulticast mode [ 200.927666][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4543'. [ 201.097399][T14227] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 201.229786][T14238] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4556'. [ 201.804044][ T28] audit: type=1326 audit(1776945516.484:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.0.4571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x0 [ 201.847407][T14275] futex_wake_op: syz.7.4573 tries to shift op by -1; fix this program [ 201.868037][T14273] loop3: detected capacity change from 0 to 512 [ 201.879319][T14273] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.4572: inode has both inline data and extents flags [ 201.892872][T14273] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.894392][T14273] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4572: couldn't read orphan inode 15 (err -117) [ 201.903653][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 201.903675][ C1] EXT4-fs (loop3): initial error at time 1776945516: ext4_orphan_get:1397: inode 15 [ 201.903709][ C1] EXT4-fs (loop3): last error at time 1776945516: ext4_orphan_get:1397: inode 15 [ 201.941606][T14273] loop3: lost filesystem error report for type 5 error -117 [ 201.954000][T14273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.988723][T14280] program syz.7.4575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.001491][ T28] audit: type=1400 audit(1776945516.684:1385): avc: denied { rmdir } for pid=14272 comm="syz.3.4572" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 202.120690][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.327005][T14247] loop6: detected capacity change from 0 to 512 [ 202.548346][T14247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.582954][T14247] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.748199][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.046629][T14347] loop6: detected capacity change from 0 to 2048 [ 203.055447][T14347] EXT4-fs: Ignoring removed nobh option [ 203.072011][T14347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.085150][T14347] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.149938][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.371172][T14383] loop6: detected capacity change from 0 to 512 [ 203.382029][ T28] audit: type=1326 audit(1776945518.064:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14384 comm="syz.7.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431f7dc819 code=0x7ffc0000 [ 203.410206][T14383] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 203.424694][T14383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 203.444555][T14383] System zones: 1-12 [ 203.455478][T14383] EXT4-fs (loop6): orphan cleanup on readonly fs [ 203.462297][T14383] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4619: bg 0: block 361: padding at end of block bitmap is not set [ 203.476991][T14383] loop6: lost filesystem error report for type 5 error -117 [ 203.477971][T14383] EXT4-fs (loop6): Remounting filesystem read-only [ 203.484796][T14390] loop4: detected capacity change from 0 to 512 [ 203.486844][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 203.504788][ C1] EXT4-fs (loop6): initial error at time 1776945518: ext4_validate_block_bitmap:441 [ 203.505623][T14390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.514356][ C1] EXT4-fs (loop6): last error at time 1776945518: ext4_validate_block_bitmap:441 [ 203.524203][T14383] EXT4-fs (loop6): 1 truncate cleaned up [ 203.545227][T14383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 203.561603][T14390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002] [ 203.579779][T14390] System zones: 1-12 [ 203.586409][T14390] EXT4-fs (loop4): 1 truncate cleaned up [ 203.605604][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 203.615323][T14390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.697187][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.035808][T14432] loop4: detected capacity change from 0 to 4096 [ 204.057584][T14434] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.092774][T14434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002] [ 204.093408][T14432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.113092][T14434] System zones: 1-12 [ 204.118819][T14434] EXT4-fs (loop3): 1 truncate cleaned up [ 204.138046][T14434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.199134][T14444] FAT-fs (loop6): error, corrupted file size (i_pos 548, 512) [ 204.208718][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.219706][T14444] FAT-fs (loop6): Filesystem has been set read-only [ 204.227668][T14444] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 204.268649][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.348635][T14461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4653'. [ 204.450439][T14470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.495257][T14470] ext4 filesystem being mounted at /884/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.604458][T14478] tipc: Enabling of bearer rejected, already enabled [ 204.616058][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4661'. [ 204.625473][T14478] tipc: Disabling bearer [ 204.630370][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.702489][T14484] netlink: 'syz.4.4663': attribute type 8 has an invalid length. [ 204.721479][T14484] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4663'. [ 204.736952][T14484] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4663'. [ 204.773821][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 204.796530][T14498] set_capacity_and_notify: 4 callbacks suppressed [ 204.796547][T14498] loop3: detected capacity change from 0 to 256 [ 204.798346][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4669'. [ 204.889061][T14507] loop6: detected capacity change from 0 to 512 [ 204.920025][T14507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.951232][T14507] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.030705][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.125428][T14526] loop3: detected capacity change from 0 to 512 [ 205.153570][T14526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.184417][T14526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 205.199836][T14526] System zones: 1-12 [ 205.207089][T14526] EXT4-fs (loop3): 1 truncate cleaned up [ 205.219059][T14526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.290690][T14535] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 205.309957][T14535] pim6reg1: linktype set to 822 [ 205.349178][T14537] loop7: detected capacity change from 0 to 512 [ 205.359051][T14537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.383313][T14537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.400775][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.403260][T14537] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.437513][T14541] loop3: detected capacity change from 0 to 1024 [ 205.447534][T14541] EXT4-fs: Ignoring removed orlov option [ 205.455573][T14541] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 205.475099][T14541] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.486624][T11973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.496502][T14541] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 205.504530][T14541] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 205.504530][T14541] [ 205.515673][T14541] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 205.525586][T14541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.548450][T14541] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.4688: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 205.570947][T14541] EXT4-fs (loop3): Remounting filesystem read-only [ 205.595543][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.737015][T14574] IPv6: Can't replace route, no match found [ 205.800555][T14583] netlink: 'syz.4.4707': attribute type 3 has an invalid length. [ 205.898993][T14601] netlink: 'syz.3.4716': attribute type 10 has an invalid length. [ 205.912838][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4716'. [ 205.938920][T14601] : entered promiscuous mode [ 205.951778][T14601] bridge0: port 3() entered blocking state [ 205.968082][T14601] bridge0: port 3() entered disabled state [ 205.979187][T14601] : entered allmulticast mode [ 205.984036][T14601] bridge0: entered allmulticast mode [ 205.990477][T14601] : left allmulticast mode [ 205.995171][T14601] bridge0: left allmulticast mode [ 206.007584][T14606] ±ÿÿÿÿa–ïD: renamed from lo [ 206.102884][T14618] tipc: New replicast peer: 255.255.255.255 [ 206.114377][T14618] tipc: Enabled bearer , priority 10 [ 206.196202][T14628] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.4729'. [ 206.210029][T14628] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.4729'. [ 206.493618][T14638] loop7: detected capacity change from 0 to 512 [ 206.510983][T14638] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 206.533946][T14641] netlink: 'syz.6.4734': attribute type 10 has an invalid length. [ 206.538441][T14638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002] [ 206.551063][T14638] System zones: 1-12 [ 206.556077][T14641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4734'. [ 206.566086][T14638] EXT4-fs (loop7): 1 truncate cleaned up [ 206.574103][T14638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.594743][T14641] : entered promiscuous mode [ 206.611107][T11973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.620180][T14641] bridge0: port 3() entered blocking state [ 206.626318][T14641] bridge0: port 3() entered disabled state [ 206.633060][T14641] : entered allmulticast mode [ 206.638198][T14641] bridge0: entered allmulticast mode [ 206.638902][T14648] loop4: detected capacity change from 0 to 512 [ 206.644520][T14641] : left allmulticast mode [ 206.655615][T14641] bridge0: left allmulticast mode [ 206.681164][T14648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.721157][T14648] ext4 filesystem being mounted at /899/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.810262][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.821049][T14665] program syz.6.4743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.880043][T14678] loop3: detected capacity change from 0 to 128 [ 206.950864][T14681] SELinux: security_context_str_to_sid () failed with errno=-22 [ 207.014991][T14699] netlink: 'syz.7.4756': attribute type 10 has an invalid length. [ 207.032873][T14699] : entered promiscuous mode [ 207.038575][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 207.038592][ T28] audit: type=1400 audit(1776945521.724:1396): avc: denied { read } for pid=14701 comm="syz.4.4757" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.041532][T14699] bridge0: port 3() entered blocking state [ 207.047709][ T28] audit: type=1400 audit(1776945521.724:1397): avc: denied { open } for pid=14701 comm="syz.4.4757" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.077362][T14699] bridge0: port 3() entered disabled state [ 207.104404][T14699] : entered allmulticast mode [ 207.109378][T14699] bridge0: entered allmulticast mode [ 207.117843][T14699] : left allmulticast mode [ 207.131734][T14699] bridge0: left allmulticast mode [ 207.236919][ T23] tipc: Node number set to 4269801488 [ 207.300552][T14723] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 207.351907][T14725] loop6: detected capacity change from 0 to 512 [ 207.378609][T14725] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 207.409872][T14725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002] [ 207.424126][T14725] System zones: 1-12 [ 207.436505][T14725] EXT4-fs (loop6): 1 truncate cleaned up [ 207.452404][T14725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.507562][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.582518][T14731] loop6: detected capacity change from 0 to 256 [ 207.609824][T14731] FAT-fs (loop6): Directory bread(block 64) failed [ 207.620322][T14731] FAT-fs (loop6): Directory bread(block 65) failed [ 207.627293][T14731] FAT-fs (loop6): Directory bread(block 66) failed [ 207.633901][T14731] FAT-fs (loop6): Directory bread(block 67) failed [ 207.640748][T14731] FAT-fs (loop6): Directory bread(block 68) failed [ 207.647846][T14731] FAT-fs (loop6): Directory bread(block 69) failed [ 207.654971][T14731] FAT-fs (loop6): Directory bread(block 70) failed [ 207.661683][T14731] FAT-fs (loop6): Directory bread(block 71) failed [ 207.668382][T14731] FAT-fs (loop6): Directory bread(block 72) failed [ 207.675014][T14731] FAT-fs (loop6): Directory bread(block 73) failed [ 207.784457][ T28] audit: type=1326 audit(1776945522.464:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 207.840073][ T28] audit: type=1326 audit(1776945522.464:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 207.902245][ T28] audit: type=1326 audit(1776945522.464:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 207.942842][ T28] audit: type=1326 audit(1776945522.464:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 207.970982][ T28] audit: type=1326 audit(1776945522.494:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 208.005012][ T28] audit: type=1326 audit(1776945522.494:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 208.029165][ T28] audit: type=1326 audit(1776945522.494:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 208.056881][ T28] audit: type=1326 audit(1776945522.494:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14732 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 208.157416][T14756] loop6: p3 < > p4 < > [ 208.157431][T14756] loop6: partition table partially beyond EOD, truncated [ 208.159159][T14756] loop6: p3 start 4284289 is beyond EOD, truncated [ 208.240534][T14764] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4785: Failed to acquire dquot type 1 [ 208.280074][T14762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.308011][T14764] loop6: lost filesystem error report for type 5 error -117 [ 208.314339][T14764] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.4785: corrupted inode contents [ 208.321742][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 208.321766][ C0] EXT4-fs (loop6): initial error at time 1776945522: ext4_acquire_dquot:7034 [ 208.321802][ C0] EXT4-fs (loop6): last error at time 1776945522: ext4_acquire_dquot:7034 [ 208.378978][T14764] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.379230][T14764] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.4785: mark_inode_dirty error [ 208.389059][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.426763][T14764] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.429306][T14764] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.4785: corrupted inode contents [ 208.473090][T14764] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.473585][T14764] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.4785: mark_inode_dirty error [ 208.474158][T14774] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 208.491011][T14764] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.497096][T14774] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 208.521743][T14774] EXT4-fs (loop3): 1 truncate cleaned up [ 208.527954][T14764] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.4785: corrupted inode contents [ 208.537382][T14774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.540228][T14764] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.567228][T14764] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 208.590022][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.600066][T14764] loop6: lost filesystem error report for type 5 error -117 [ 208.600658][T14764] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.4785: corrupted inode contents [ 208.621533][T14764] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.621822][T14764] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.4785: mark_inode_dirty error [ 208.648378][T14764] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 208.649705][T14764] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 208.683707][T14780] EXT4-fs: Ignoring removed bh option [ 208.689652][T14764] loop6: lost filesystem error report for type 5 error -117 [ 208.692709][T14764] EXT4-fs (loop6): 1 truncate cleaned up [ 208.716286][T14764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.729279][T14764] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.747907][T14780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.782954][T14780] ext4 filesystem being mounted at /952/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.810916][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.843065][T14780] EXT4-fs (loop3): shut down requested (2) [ 208.860117][T14780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 208.880265][T14780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 208.905153][T14793] xt_hashlimit: size too large, truncated to 1048576 [ 208.912200][T14780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 208.960876][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.048681][T14890] __nla_validate_parse: 3 callbacks suppressed [ 210.048698][T14890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4837'. [ 210.643835][T14933] team0: Device gtp1 is of different type [ 210.760919][T14940] set_capacity_and_notify: 5 callbacks suppressed [ 210.761007][T14940] loop7: detected capacity change from 0 to 256 [ 210.802801][T14940] FAT-fs (loop7): Directory bread(block 64) failed [ 210.816969][T14940] FAT-fs (loop7): Directory bread(block 65) failed [ 210.835972][T14940] FAT-fs (loop7): Directory bread(block 66) failed [ 210.852746][T14940] FAT-fs (loop7): Directory bread(block 67) failed [ 210.866244][T14940] FAT-fs (loop7): Directory bread(block 68) failed [ 210.880062][T14940] FAT-fs (loop7): Directory bread(block 69) failed [ 210.893928][T14940] FAT-fs (loop7): Directory bread(block 70) failed [ 210.907484][T14940] FAT-fs (loop7): Directory bread(block 71) failed [ 210.918740][T14940] FAT-fs (loop7): Directory bread(block 72) failed [ 210.932373][T14940] FAT-fs (loop7): Directory bread(block 73) failed [ 211.249946][T14955] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4866'. [ 211.605048][T14979] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.4877'. [ 211.636559][T14981] xt_hashlimit: size too large, truncated to 1048576 [ 211.638477][T14979] loop4: detected capacity change from 0 to 512 [ 211.657328][T14979] EXT4-fs (loop4): invalid first ino: 9 [ 211.783912][T14988] loop4: detected capacity change from 0 to 8192 [ 211.806344][T14988] syz.4.4880: attempt to access beyond end of device [ 211.806344][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 211.829838][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 211.848221][T14988] syz.4.4880: attempt to access beyond end of device [ 211.848221][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 211.871912][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 211.898312][T14988] syz.4.4880: attempt to access beyond end of device [ 211.898312][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 211.923495][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 211.936912][T14988] syz.4.4880: attempt to access beyond end of device [ 211.936912][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 211.959064][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 211.977644][T14988] syz.4.4880: attempt to access beyond end of device [ 211.977644][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.007167][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 212.017017][T14988] syz.4.4880: attempt to access beyond end of device [ 212.017017][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.037247][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 212.045627][T14988] syz.4.4880: attempt to access beyond end of device [ 212.045627][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.059616][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 212.069525][T14988] syz.4.4880: attempt to access beyond end of device [ 212.069525][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.084438][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 212.092940][T14988] syz.4.4880: attempt to access beyond end of device [ 212.092940][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.108054][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 212.116358][T14988] syz.4.4880: attempt to access beyond end of device [ 212.116358][T14988] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 212.149944][T14988] Buffer I/O error on dev loop4, logical block 57847, async page read [ 212.330315][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4884'. [ 212.681958][ T28] kauditd_printk_skb: 226 callbacks suppressed [ 212.681976][ T28] audit: type=1400 audit(1776945527.364:1630): avc: denied { write } for pid=15008 comm="syz.3.4890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.919962][T15016] loop4: detected capacity change from 0 to 2048 [ 212.978658][T15016] loop4: p3 < > p4 < > [ 212.985759][T15016] loop4: partition table partially beyond EOD, truncated [ 213.022715][T15016] loop4: p3 start 4284289 is beyond EOD, truncated [ 213.290206][T15040] lo speed is unknown, defaulting to 1000 [ 213.434777][T15049] tipc: Enabling of bearer rejected, failed to enable media [ 213.604223][T15026] loop7: detected capacity change from 0 to 512 [ 213.961321][T15069] xt_hashlimit: size too large, truncated to 1048576 [ 213.977279][ T28] audit: type=1400 audit(1776945528.654:1631): avc: denied { accept } for pid=15062 comm="syz.4.4913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.030855][T15069] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 214.252628][ T28] audit: type=1400 audit(1776945528.934:1632): avc: denied { listen } for pid=15084 comm="syz.3.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.363076][T15026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.423608][T15026] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.749040][T11973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.232242][T15134] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4939'. [ 215.267466][T15136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4940'. [ 215.441602][ T28] audit: type=1326 audit(1776945530.124:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.3.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 215.497105][ T28] audit: type=1326 audit(1776945530.164:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.3.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 215.561048][ T28] audit: type=1326 audit(1776945530.164:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.3.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 215.632327][ T28] audit: type=1326 audit(1776945530.164:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.3.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 215.665261][ T28] audit: type=1326 audit(1776945530.164:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.3.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 215.697151][ T28] audit: type=1326 audit(1776945530.164:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.3.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 215.774718][ T28] audit: type=1326 audit(1776945530.164:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15149 comm="syz.3.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 215.809968][T15165] vhci_hcd vhci_hcd.2: invalid port number 96 [ 215.828810][T15165] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 215.897326][T15165] lo speed is unknown, defaulting to 1000 [ 215.908190][T15175] loop6: detected capacity change from 0 to 1024 [ 215.933932][T15175] EXT4-fs: Ignoring removed bh option [ 215.977276][T15175] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.037926][T15175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 216.123301][T15175] System zones: 0-1, 3-12 [ 216.161040][T15175] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.4957: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.290988][T15175] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.292108][T15175] EXT4-fs (loop6): Remounting filesystem read-only [ 216.301311][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 216.301331][ C1] EXT4-fs (loop6): initial error at time 1776945530: ext4_map_blocks:833: inode 3: block 1 [ 216.301375][ C1] EXT4-fs (loop6): last error at time 1776945530: ext4_map_blocks:833: inode 3: block 1 [ 216.360708][T15175] EXT4-fs (loop6): 1 orphan inode deleted [ 216.367872][T15175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.417976][T15209] netlink: 'syz.3.4972': attribute type 1 has an invalid length. [ 216.484720][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.914117][T15222] loop3: detected capacity change from 0 to 128 [ 216.939333][T15222] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 216.957283][T15222] FAT-fs (loop3): Filesystem has been set read-only [ 216.985913][T15222] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 217.154799][T15241] lo speed is unknown, defaulting to 1000 [ 218.085837][T15281] loop3: detected capacity change from 0 to 164 [ 218.099701][T15281] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 218.135217][T15273] loop6: detected capacity change from 0 to 8192 [ 218.159473][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 218.159490][ T28] audit: type=1400 audit(1776945532.844:1654): avc: denied { bind } for pid=15286 comm="syz.3.5009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 218.200626][T15273] loop6: p1 < > p2 < > p3 p4 < > [ 218.215148][T15273] loop6: partition table partially beyond EOD, truncated [ 218.235073][T15273] loop6: p1 start 67108864 is beyond EOD, truncated [ 218.249905][T15273] loop6: p3 start 100859904 is beyond EOD, truncated [ 218.258846][ T28] audit: type=1400 audit(1776945532.874:1655): avc: denied { read } for pid=15286 comm="syz.3.5009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 218.343970][T15307] loop7: detected capacity change from 0 to 764 [ 218.387634][T15311] program syz.3.5019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.406274][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 218.419767][ T9351] udevd[9351]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 218.435051][ T28] audit: type=1326 audit(1776945533.114:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0861ac819 code=0x7ffc0000 [ 218.514428][T15319] loop6: detected capacity change from 0 to 512 [ 218.528377][ T28] audit: type=1326 audit(1776945533.144:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0861ac819 code=0x7ffc0000 [ 218.556015][T15319] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 218.580715][T15319] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.5023: Invalid inode bitmap blk 4 in block_group 0 [ 218.593757][ T28] audit: type=1326 audit(1776945533.144:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0861ac819 code=0x7ffc0000 [ 218.617248][T15319] loop6: lost filesystem error report for type 5 error -117 [ 218.623641][ T28] audit: type=1326 audit(1776945533.144:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0861ac819 code=0x7ffc0000 [ 218.628071][T15319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.641737][ T28] audit: type=1326 audit(1776945533.144:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0861ac819 code=0x7ffc0000 [ 218.692001][ T28] audit: type=1326 audit(1776945533.144:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0861ac819 code=0x7ffc0000 [ 218.716047][ T28] audit: type=1326 audit(1776945533.144:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0861ac819 code=0x7ffc0000 [ 218.740250][ T28] audit: type=1326 audit(1776945533.144:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0861ac819 code=0x7ffc0000 [ 218.828504][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.103985][T15363] loop3: detected capacity change from 0 to 736 [ 219.130153][T15363] iso9660: Unknown parameter 'Êx+ë¤årvã¤HÛƒ¼ˆ¯'·Ckqºz'ßímo¶;i|' [ 219.242914][T15344] lo speed is unknown, defaulting to 1000 [ 219.318757][T15377] loop6: detected capacity change from 0 to 512 [ 219.353129][T15377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.404173][T15377] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.487551][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.489995][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5058'. [ 219.505854][T15398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5058'. [ 219.640304][T15409] loop4: detected capacity change from 0 to 256 [ 219.655481][T15409] vfat: Bad value for 'utf8' [ 219.963138][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5070'. [ 220.007242][T15429] loop6: detected capacity change from 0 to 2048 [ 220.034570][T15435] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5073'. [ 220.045481][T15435] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5073'. [ 220.054290][T15429] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 220.092721][T15429] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 220.114168][T15429] EXT4-fs (loop6): This should not happen!! Data will be lost [ 220.114168][T15429] [ 220.124796][T15429] EXT4-fs (loop6): Total free blocks count 0 [ 220.131005][T15429] EXT4-fs (loop6): Free/Dirty block details [ 220.137146][T15429] EXT4-fs (loop6): free_blocks=4096 [ 220.143180][T15429] EXT4-fs (loop6): dirty_blocks=32 [ 220.148612][T15429] EXT4-fs (loop6): Block reservation details [ 220.154682][T15429] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 220.294604][T10147] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 220.611809][T15486] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.5098: inode has both inline data and extents flags [ 220.637019][T15486] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.637231][T15486] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5098: couldn't read orphan inode 15 (err -117) [ 220.658254][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 220.658274][ C1] EXT4-fs (loop3): initial error at time 1776945535: ext4_orphan_get:1397: inode 15 [ 220.658305][ C1] EXT4-fs (loop3): last error at time 1776945535: ext4_orphan_get:1397: inode 15 [ 220.789473][T15486] loop3: lost filesystem error report for type 5 error -117 [ 220.858151][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5106'. [ 220.973659][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5113'. [ 221.088581][T15540] program syz.6.5122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.237193][T15560] set_capacity_and_notify: 2 callbacks suppressed [ 221.237212][T15560] loop7: detected capacity change from 0 to 1024 [ 222.133218][T15612] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5154'. [ 222.152038][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5154'. [ 222.172326][T15612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5154'. [ 222.261259][T15620] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5159'. [ 222.771987][T15632] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 223.285658][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5177'. [ 223.450058][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 223.450134][ T28] audit: type=1400 audit(1776945538.134:1697): avc: denied { bind } for pid=15686 comm="syz.7.5187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 223.493867][T15690] loop4: detected capacity change from 0 to 512 [ 223.496350][T15692] loop3: detected capacity change from 0 to 512 [ 223.508447][T15690] ext4: Unknown parameter 'nouser_xattr' [ 223.524934][T15692] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 223.545140][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5191'. [ 223.561285][T15692] EXT4-fs (loop3): 1 truncate cleaned up [ 223.624234][T15704] loop3: detected capacity change from 0 to 1024 [ 223.704514][ T28] audit: type=1400 audit(1776945538.384:1698): avc: denied { getopt } for pid=15712 comm="syz.3.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.717108][T15716] batadv0: entered promiscuous mode [ 223.741624][T15716] bond0: entered promiscuous mode [ 223.753404][T15716] bond_slave_0: entered promiscuous mode [ 223.765871][T15716] bond_slave_1: entered promiscuous mode [ 223.774641][T15721] loop7: detected capacity change from 0 to 2048 [ 223.783076][T15724] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 223.794665][T15716] debugfs: 'hsr1' already exists in 'hsr' [ 223.800908][T15716] Cannot create hsr debugfs directory [ 223.814692][T15721] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.822886][T15716] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 223.849912][T15716] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 223.860524][T15716] hsr1: entered allmulticast mode [ 223.865760][T15716] batadv0: entered allmulticast mode [ 223.872334][T15716] bond0: entered allmulticast mode [ 223.878075][T15716] bond_slave_0: entered allmulticast mode [ 223.893828][T15716] bond_slave_1: entered allmulticast mode [ 223.909759][T15716] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 224.354737][T15766] loop4: detected capacity change from 0 to 512 [ 224.362234][T15766] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 224.371250][T15766] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 224.380316][T15766] EXT4-fs (loop4): 1 truncate cleaned up [ 224.388275][T15766] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 224.555659][T15775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5225'. [ 224.789370][T15799] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5236'. [ 224.944818][T15808] loop3: detected capacity change from 0 to 512 [ 224.971137][T15810] sock: sock_set_timeout: `syz.0.5241' (pid 15810) tries to set negative timeout [ 225.109514][T15828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26217 sclass=netlink_route_socket pid=15828 comm=syz.3.5250 [ 225.125519][T15828] netlink: 'syz.3.5250': attribute type 29 has an invalid length. [ 225.284772][ T28] audit: type=1400 audit(1776945539.964:1699): avc: denied { read } for pid=15850 comm="syz.3.5261" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 225.411343][T15872] loop3: detected capacity change from 0 to 128 [ 225.437767][T15872] bio_check_eod: 9506 callbacks suppressed [ 225.437787][T15872] syz.3.5271: attempt to access beyond end of device [ 225.437787][T15872] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 225.518020][ T28] audit: type=1400 audit(1776945540.204:1700): avc: denied { wake_alarm } for pid=15885 comm="syz.0.5278" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.672930][T15908] 9p: Bad value for 'rfdno' [ 225.965721][T15930] loop3: detected capacity change from 0 to 256 [ 226.017260][T15934] netlink: 'syz.0.5299': attribute type 2 has an invalid length. [ 226.068523][T15938] loop3: detected capacity change from 0 to 2048 [ 226.077388][T15938] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 226.103632][T15938] EXT4-fs mount: 14 callbacks suppressed [ 226.103650][T15938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.151212][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.275956][T15955] program syz.3.5308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.374296][T15964] loop6: detected capacity change from 0 to 2048 [ 226.389224][T15964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.402877][T15964] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.473768][ T1763] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 226.517093][ T1763] EXT4-fs (loop6): Remounting filesystem read-only [ 226.542545][ T36] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 2: ext4_ext_map_blocks returned -30 [ 226.571076][T10147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.699411][ T28] audit: type=1326 audit(1776945541.384:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.3.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 226.773657][ T28] audit: type=1326 audit(1776945541.384:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.3.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 226.796073][T15986] lo speed is unknown, defaulting to 1000 [ 226.799336][ T28] audit: type=1326 audit(1776945541.384:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.3.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 226.829169][ T28] audit: type=1326 audit(1776945541.384:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.3.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 226.853789][ T28] audit: type=1326 audit(1776945541.384:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.3.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 226.878740][ T28] audit: type=1326 audit(1776945541.384:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.3.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 227.755748][T16075] loop6: detected capacity change from 0 to 128 [ 227.783895][T16075] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 227.799238][T16075] FAT-fs (loop6): Filesystem has been set read-only [ 227.810759][T16075] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 227.908733][T16085] __nla_validate_parse: 1 callbacks suppressed [ 227.908752][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5367'. [ 227.955357][T16085] netlink: 'syz.6.5367': attribute type 1 has an invalid length. [ 227.971167][T16085] netlink: 'syz.6.5367': attribute type 2 has an invalid length. [ 228.282689][T16101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16101 comm=syz.4.5374 [ 228.318813][T16101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16101 comm=syz.4.5374 [ 228.755418][T16125] loop7: detected capacity change from 0 to 512 [ 228.785720][T16125] EXT4-fs: Ignoring removed nobh option [ 228.818050][T16125] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 228.864002][T16125] EXT4-fs (loop7): 1 truncate cleaned up [ 228.879975][T16125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.963768][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 228.963784][ T28] audit: type=1400 audit(1776945543.644:1718): avc: denied { setopt } for pid=16130 comm="syz.3.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.969820][T16125] Invalid option length (255) for dns_resolver key [ 229.209816][ T28] audit: type=1326 audit(1776945543.894:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 229.242503][T11973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.261959][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5392'. [ 229.292424][ T28] audit: type=1326 audit(1776945543.894:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 229.322863][T16144] gre0: entered promiscuous mode [ 229.334502][T16150] loop7: detected capacity change from 0 to 256 [ 229.336053][T16144] gre0: entered allmulticast mode [ 229.378593][ T28] audit: type=1326 audit(1776945543.914:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 229.423595][ T28] audit: type=1326 audit(1776945543.914:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 229.475443][ T28] audit: type=1326 audit(1776945543.934:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 229.535901][T16158] rdma_op ffff8881358f7180 conn xmit_rdma 0000000000000000 [ 229.536449][ T28] audit: type=1326 audit(1776945543.934:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 229.573457][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5403'. [ 229.606899][ T28] audit: type=1326 audit(1776945543.934:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 229.642192][ T28] audit: type=1326 audit(1776945543.934:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 229.682592][ T28] audit: type=1326 audit(1776945543.934:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16139 comm="syz.0.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefd0bc819 code=0x7ffc0000 [ 230.448662][T16242] delete_channel: no stack [ 230.461211][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5438'. [ 230.584851][T16249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5442'. [ 230.925982][T16282] netlink: 'syz.6.5456': attribute type 21 has an invalid length. [ 231.033271][T16288] program syz.6.5459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.090548][T16290] netlink: 5720 bytes leftover after parsing attributes in process `syz.6.5460'. [ 231.123275][T16290] netlink: 5720 bytes leftover after parsing attributes in process `syz.6.5460'. [ 231.757745][T16303] loop7: detected capacity change from 0 to 512 [ 231.786049][T16303] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5467: iget: bad i_size value: 38620345925642 [ 231.812967][T16303] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.813725][T16303] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5467: couldn't read orphan inode 15 (err -117) [ 231.823022][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 231.823046][ C0] EXT4-fs (loop7): initial error at time 1776945546: ext4_orphan_get:1397: inode 15 [ 231.823095][ C0] EXT4-fs (loop7): last error at time 1776945546: ext4_orphan_get:1397: inode 15 [ 231.956901][T16303] loop7: lost filesystem error report for type 5 error -117 [ 231.957552][T16303] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.012232][T16303] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5467: bg 0: block 5: invalid block bitmap [ 232.040617][T16303] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 232.067920][T16303] EXT4-fs (loop7): This should not happen!! Data will be lost [ 232.067920][T16303] [ 232.097794][T16303] EXT4-fs (loop7): Total free blocks count 0 [ 232.120293][T16303] EXT4-fs (loop7): Free/Dirty block details [ 232.142857][T16303] EXT4-fs (loop7): free_blocks=0 [ 232.154975][T16303] EXT4-fs (loop7): dirty_blocks=1 [ 232.166874][T16303] EXT4-fs (loop7): Block reservation details [ 232.182501][T16303] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 232.250007][T11973] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 232.281526][T11973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 232.521450][T16333] loop4: detected capacity change from 0 to 256 [ 232.548202][T16333] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.601843][T16335] loop3: detected capacity change from 0 to 512 [ 232.635432][T16335] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 232.702702][T16335] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5481: bg 0: block 104: invalid block bitmap [ 232.753981][T16335] loop3: lost filesystem error report for type 5 error -117 [ 232.754202][T16335] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 232.761812][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 232.761833][ C0] EXT4-fs (loop3): initial error at time 1776945547: ext4_validate_block_bitmap:432 [ 232.761855][ C0] EXT4-fs (loop3): last error at time 1776945547: ext4_validate_block_bitmap:432 [ 232.807005][T16335] loop3: lost filesystem error report for type 5 error -117 [ 232.808269][T16335] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5481: invalid indirect mapped block 1 (level 1) [ 232.848279][T16335] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 232.848594][T16335] EXT4-fs (loop3): 1 truncate cleaned up [ 232.874479][T16335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.911049][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5481'. [ 232.952477][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.789155][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 234.789173][ T28] audit: type=1400 audit(1776945549.474:1763): avc: denied { associate } for pid=16411 comm="syz.3.5516" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 234.865881][T16416] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5518'. [ 234.866953][ T28] audit: type=1400 audit(1776945549.474:1764): avc: denied { append } for pid=16411 comm="syz.3.5516" name="pfkey" dev="proc" ino=4026532477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 235.014897][ T28] audit: type=1326 audit(1776945549.694:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 235.123258][ T28] audit: type=1326 audit(1776945549.694:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 235.187904][ T28] audit: type=1326 audit(1776945549.724:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 235.256966][ T28] audit: type=1326 audit(1776945549.724:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 235.327787][ T28] audit: type=1326 audit(1776945549.734:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 235.411809][ T28] audit: type=1326 audit(1776945549.734:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 235.533361][ T28] audit: type=1326 audit(1776945549.734:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 235.590726][ T28] audit: type=1326 audit(1776945549.734:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16421 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5440c9c819 code=0x7ffc0000 [ 236.291587][T16451] loop4: detected capacity change from 0 to 32768 [ 236.348622][T16451] loop4: p1 p2 p3 < p5 p6 > [ 236.365738][T16451] loop4: p2 size 16775168 extends beyond EOD, truncated [ 236.394664][T16451] loop4: p5 start 4294970168 is beyond EOD, truncated [ 236.589264][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 236.590025][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 236.600774][ T9352] udevd[9352]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 236.623677][ T9351] udevd[9351]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 239.568680][T16539] loop4: detected capacity change from 0 to 256 [ 240.843750][T16541] syz.4.5573 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 240.877885][T16541] CPU: 1 UID: 0 PID: 16541 Comm: syz.4.5573 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.877986][T16541] Tainted: [W]=WARN [ 240.877994][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.878007][T16541] Call Trace: [ 240.878015][T16541] [ 240.878023][T16541] __dump_stack+0x1d/0x30 [ 240.878102][T16541] dump_stack_lvl+0x95/0xd0 [ 240.878130][T16541] dump_stack+0x15/0x1b [ 240.878155][T16541] dump_header+0x80/0x240 [ 240.878179][T16541] oom_kill_process+0x295/0x350 [ 240.878200][T16541] out_of_memory+0x97d/0xb80 [ 240.878254][T16541] try_charge_memcg+0x62f/0xa10 [ 240.878425][T16541] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 240.878466][T16541] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 240.878499][T16541] __alloc_frozen_pages_noprof+0x18a/0x350 [ 240.878588][T16541] alloc_pages_mpol+0xb3/0x260 [ 240.878619][T16541] ? mod_lruvec_state+0xe0/0xf0 [ 240.878695][T16541] alloc_pages_noprof+0x8f/0x140 [ 240.878728][T16541] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 240.878770][T16541] __kvmalloc_node_noprof+0x3d4/0x640 [ 240.878837][T16541] ? futex_hash_allocate+0x190/0x9a0 [ 240.878862][T16541] ? futex_hash_allocate+0x190/0x9a0 [ 240.878888][T16541] futex_hash_allocate+0x190/0x9a0 [ 240.878915][T16541] ? cap_task_prctl+0x13f/0x6b0 [ 240.879007][T16541] futex_hash_prctl+0xd8/0xf0 [ 240.879026][T16541] __se_sys_prctl+0x4f4/0x1400 [ 240.879062][T16541] __x64_sys_prctl+0x67/0x80 [ 240.879144][T16541] x64_sys_call+0x2533/0x3020 [ 240.879172][T16541] do_syscall_64+0x12c/0x3b0 [ 240.879198][T16541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.879225][T16541] RIP: 0033:0x7fb6ddb2c819 [ 240.879248][T16541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.879308][T16541] RSP: 002b:00007fb6dc587028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 240.879332][T16541] RAX: ffffffffffffffda RBX: 00007fb6ddda5fa0 RCX: 00007fb6ddb2c819 [ 240.879350][T16541] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 240.879366][T16541] RBP: 00007fb6ddbc2c91 R08: 0000000000000000 R09: 0000000000000000 [ 240.879382][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.879457][T16541] R13: 00007fb6ddda6038 R14: 00007fb6ddda5fa0 R15: 00007ffe43dcf5e8 [ 240.879480][T16541] [ 240.879561][T16541] memory: usage 307200kB, limit 307200kB, failcnt 370 [ 241.121030][T16541] memory+swap: usage 307860kB, limit 9007199254740988kB, failcnt 0 [ 241.129759][T16541] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 241.146661][T16541] Memory cgroup stats for /syz4: [ 241.147034][T16541] cache 0 [ 241.158718][T16541] rss 0 [ 241.166503][T16541] shmem 0 [ 241.170969][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 241.170986][ T28] audit: type=1400 audit(1776945555.854:1791): avc: denied { kexec_image_load } for pid=16562 comm="syz.3.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 241.185614][T16541] mapped_file 0 [ 241.220062][T16541] dirty 0 [ 241.226053][T16541] writeback 0 [ 241.238214][T16541] workingset_refault_anon 82 [ 241.252717][T16541] workingset_refault_file 320 [ 241.273947][T16541] swap 675840 [ 241.285507][T16541] swapcached 29589504 [ 241.298855][T16541] pgpgin 235150 [ 241.309159][T16541] pgpgout 235150 [ 241.323442][T16541] pgfault 270753 [ 241.332606][T16541] pgmajfault 39 [ 241.346344][T16541] inactive_anon 0 [ 241.358060][T16541] active_anon 0 [ 241.370080][T16541] inactive_file 0 [ 241.379994][T16541] active_file 0 [ 241.388729][T16541] unevictable 0 [ 241.395893][T16541] hierarchical_memory_limit 314572800 [ 241.408581][T16541] hierarchical_memsw_limit 9223372036854771712 [ 241.426290][T16541] total_cache 0 [ 241.436306][T16541] total_rss 0 [ 241.444039][T16541] total_shmem 0 [ 241.452955][T16541] total_mapped_file 0 [ 241.462777][T16541] total_dirty 0 [ 241.472377][T16541] total_writeback 0 [ 241.481647][T16541] total_workingset_refault_anon 82 [ 241.493179][T16541] total_workingset_refault_file 320 [ 241.503652][T16541] total_swap 675840 [ 241.514867][T16541] total_swapcached 29589504 [ 241.529007][T16541] total_pgpgin 235150 [ 241.536979][T16541] total_pgpgout 235150 [ 241.545175][T16541] total_pgfault 270753 [ 241.553991][T16541] total_pgmajfault 39 [ 241.566002][T16541] total_inactive_anon 0 [ 241.576225][T16541] total_active_anon 0 [ 241.589301][T16541] total_inactive_file 0 [ 241.607348][T16541] total_active_file 0 [ 241.615797][T16541] total_unevictable 0 [ 241.624276][T16541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5573,pid=16540,uid=0 [ 241.656873][T16541] Memory cgroup out of memory: Killed process 16540 (syz.4.5573) total-vm:96080kB, anon-rss:1224kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 241.786086][T16584] loop4: detected capacity change from 0 to 512 [ 241.808985][T16584] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.269463][ T28] audit: type=1400 audit(1776945556.954:1792): avc: denied { ioctl } for pid=16610 comm="syz.0.5606" path="socket:[47444]" dev="sockfs" ino=47444 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 242.406228][T16563] kexec: Could not allocate control_code_buffer [ 242.534813][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5610'. [ 242.553907][T16619] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5610'. [ 242.832068][T16633] cgroup: Unknown subsys name 'cpuset' [ 243.282026][T16666] loop4: detected capacity change from 0 to 2048 [ 246.620850][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.644871][ T28] audit: type=1400 audit(1776945561.324:1793): avc: denied { append } for pid=16704 comm="syz.3.5645" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.678668][T16686] lo speed is unknown, defaulting to 1000 [ 246.712513][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.800114][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.831038][T16686] chnl_net:caif_netlink_parms(): no params data found [ 246.853265][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.971822][T16686] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.991244][T16686] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.013449][T16686] bridge_slave_0: entered allmulticast mode [ 247.030544][T16686] bridge_slave_0: entered promiscuous mode [ 247.057428][T16686] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.076401][T16686] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.095730][T16686] bridge_slave_1: entered allmulticast mode [ 247.111678][T16686] bridge_slave_1: entered promiscuous mode [ 247.180412][ T12] bridge_slave_1: left allmulticast mode [ 247.192457][ T12] bridge_slave_1: left promiscuous mode [ 247.204785][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.221462][ T12] bridge_slave_0: left allmulticast mode [ 247.227374][ T12] bridge_slave_0: left promiscuous mode [ 247.233437][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.310035][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.328689][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.348541][ T12] bond0 (unregistering): Released all slaves [ 247.363912][T16730] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5655'. [ 247.388504][T16686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.411173][T16686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.453267][T16686] team0: Port device team_slave_0 added [ 247.469816][ T12] hsr_slave_0: left promiscuous mode [ 247.483630][ T12] hsr_slave_1: left promiscuous mode [ 247.497233][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.516242][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.537690][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.556359][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.571529][ T12] veth1_macvtap: left promiscuous mode [ 247.584897][ T12] veth0_macvtap: left promiscuous mode [ 247.596878][ T12] veth1_vlan: left promiscuous mode [ 247.606908][ T12] veth0_vlan: left promiscuous mode [ 247.756040][ T12] team0 (unregistering): Port device team_slave_1 removed [ 247.764918][ T28] audit: type=1400 audit(1776945562.444:1794): avc: denied { listen } for pid=16750 comm="syz.0.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.800395][ T12] team0 (unregistering): Port device team_slave_0 removed [ 247.877317][T16686] team0: Port device team_slave_1 added [ 247.902320][T16760] bond2: ARP target 9.0.0.0 is already present [ 247.915994][T16760] bond2: option arp_ip_target: invalid value (9) [ 247.924240][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5670'. [ 247.934396][T16760] bond2 (unregistering): Released all slaves [ 247.971970][T16686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.987416][T16686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.052675][T16686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.076416][T16686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.092904][T16779] loop4: detected capacity change from 0 to 128 [ 248.094476][T16686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.171401][T16686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.206641][ T3048] 8021q: adding VLAN 0 to HW filter on device eth13 [ 248.259577][T16686] hsr_slave_0: entered promiscuous mode [ 248.276012][T16686] hsr_slave_1: entered promiscuous mode [ 248.277967][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5679'. [ 248.290319][T16686] debugfs: 'hsr0' already exists in 'hsr' [ 248.302978][T16686] Cannot create hsr debugfs directory [ 248.503646][T16686] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 248.521617][T16686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.537985][T16686] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 248.555883][T16686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.576244][ T3048] 8021q: adding VLAN 0 to HW filter on device eth14 [ 248.594096][T16686] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 248.610499][T16686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.622935][T16686] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 248.637349][T16686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.653842][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 248.665051][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'. [ 248.674334][T16828] netlink: 'syz.0.5684': attribute type 19 has an invalid length. [ 248.683166][T16828] netlink: 'syz.0.5684': attribute type 20 has an invalid length. [ 248.720293][T16686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.738073][T16686] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.750414][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.757530][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.783252][T16686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.797532][T16686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.814609][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.821896][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.945483][T16686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.989512][ T3048] 8021q: adding VLAN 0 to HW filter on device eth15 [ 249.221282][T16686] veth0_vlan: entered promiscuous mode [ 249.239815][T16686] veth1_vlan: entered promiscuous mode [ 249.262280][ T3048] 8021q: adding VLAN 0 to HW filter on device eth16 [ 249.321569][T16686] veth0_macvtap: entered promiscuous mode [ 249.354406][T16686] veth1_macvtap: entered promiscuous mode [ 249.399942][T16686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.409148][T16686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.418206][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5693'. [ 249.440164][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.473732][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.601689][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.611714][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.277471][ T28] audit: type=1400 audit(1776945564.964:1795): avc: denied { mount } for pid=16929 comm="syz.3.5707" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 250.320095][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5708'. [ 250.620385][T16945] loop3: detected capacity change from 0 to 8192 [ 250.839460][T16959] xt_hashlimit: size too large, truncated to 1048576 [ 250.902073][T16971] loop3: detected capacity change from 0 to 512 [ 250.940963][T16971] EXT4-fs (loop3): 1 truncate cleaned up [ 250.970587][T16971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.993909][ T28] audit: type=1400 audit(1776945565.664:1796): avc: denied { getopt } for pid=16972 comm="syz.8.5726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.064951][ T28] audit: type=1400 audit(1776945565.714:1797): avc: denied { connect } for pid=16977 comm="syz.4.5727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.180557][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.207601][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5731'. [ 251.401970][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.420455][T17008] loop4: detected capacity change from 0 to 256 [ 251.430648][T17008] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.458245][T17008] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.488502][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.524241][T17016] loop8: detected capacity change from 0 to 512 [ 251.546288][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.561539][T17020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=17020 comm=syz.4.5742 [ 251.605198][T17024] netlink: 'syz.0.5744': attribute type 4 has an invalid length. [ 251.639081][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.687628][T16996] lo speed is unknown, defaulting to 1000 [ 251.839099][ T12] bridge_slave_1: left promiscuous mode [ 251.851305][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.865193][ T12] bridge_slave_0: left allmulticast mode [ 251.871060][ T12] bridge_slave_0: left promiscuous mode [ 251.877206][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.923867][T17055] loop3: detected capacity change from 0 to 4096 [ 251.942827][T17055] EXT4-fs: Ignoring removed bh option [ 251.954470][T17055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.050600][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.080831][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.107328][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.120816][ T12] bond0 (unregistering): Released all slaves [ 252.139572][ T12] bond1 (unregistering): Released all slaves [ 252.219541][ T12] hsr_slave_0: left promiscuous mode [ 252.229303][ T12] hsr_slave_1: left promiscuous mode [ 252.239960][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.264268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.281872][T17083] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5770'. [ 252.292070][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.299750][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.324089][ T12] veth1_macvtap: left promiscuous mode [ 252.333834][ T12] veth0_macvtap: left promiscuous mode [ 252.345680][ T12] veth1_vlan: left promiscuous mode [ 252.361216][ T12] veth0_vlan: left promiscuous mode [ 252.415592][T17094] loop4: detected capacity change from 0 to 128 [ 252.439002][T17094] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.490821][T17094] ext4 filesystem being mounted at /1089/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.554827][ T3325] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.569451][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.591378][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.700367][T16996] chnl_net:caif_netlink_parms(): no params data found [ 252.859980][T16996] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.912517][T16996] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.920072][T16996] bridge_slave_0: entered allmulticast mode [ 252.926744][T16996] bridge_slave_0: entered promiscuous mode [ 252.940188][T16996] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.951666][T16996] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.961872][T16996] bridge_slave_1: entered allmulticast mode [ 252.968672][T16996] bridge_slave_1: entered promiscuous mode [ 252.988214][T16996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.013881][T16996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.108113][T16996] team0: Port device team_slave_0 added [ 253.136006][T16996] team0: Port device team_slave_1 added [ 253.205323][ T28] audit: type=1400 audit(1776945567.884:1798): avc: denied { getopt } for pid=17158 comm="syz.8.5796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.613084][ T3048] 8021q: adding VLAN 0 to HW filter on device eth17 [ 253.627991][T17165] netlink: 'syz.3.5799': attribute type 2 has an invalid length. [ 253.639137][T16996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.651978][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.706039][T16996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.727146][T16996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.745390][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.806851][T16996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.855953][T16996] hsr_slave_0: entered promiscuous mode [ 253.867601][T16996] hsr_slave_1: entered promiscuous mode [ 253.877267][T16996] debugfs: 'hsr0' already exists in 'hsr' [ 253.886672][T16996] Cannot create hsr debugfs directory [ 254.077361][T16996] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 254.092546][T16996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.102147][T16996] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 254.114636][T16996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.122782][ T3048] 8021q: adding VLAN 0 to HW filter on device eth18 [ 254.130485][T16996] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 254.141509][T16996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.149648][T16996] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 254.159324][T16996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.208145][T16996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.228496][T16996] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.248301][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.255438][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.278821][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.285978][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.310741][T17198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.329350][T17198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.423994][T16996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.470769][ T3048] 8021q: adding VLAN 0 to HW filter on device eth19 [ 254.731374][T16996] veth0_vlan: entered promiscuous mode [ 254.753338][T16996] veth1_vlan: entered promiscuous mode [ 254.766685][ T3048] 8021q: adding VLAN 0 to HW filter on device eth20 [ 254.795650][T16996] veth0_macvtap: entered promiscuous mode [ 254.812882][T16996] veth1_macvtap: entered promiscuous mode [ 254.840539][T16996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.863907][T16996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.888120][ T9730] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.906494][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5819'. [ 254.915487][ T9730] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.915531][ T9730] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.915767][ T9730] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.949783][T17277] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5819'. [ 255.005835][T17277] vlan2: entered allmulticast mode [ 255.017906][T17277] macvtap0: entered allmulticast mode [ 255.035056][T17277] veth0_macvtap: entered allmulticast mode [ 255.155661][T17297] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 255.297915][T17307] ip6tnl1: entered promiscuous mode [ 255.306052][T17307] ip6tnl1: entered allmulticast mode [ 255.473789][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5835'. [ 255.577351][T17326] netlink: 'syz.0.5839': attribute type 14 has an invalid length. [ 255.922462][T17359] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5852'. [ 256.047179][T17372] loop8: detected capacity change from 0 to 1024 [ 256.069877][T17372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.107824][T16686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.117278][T17384] loop9: detected capacity change from 0 to 512 [ 256.127280][T17384] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.154190][T17384] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.5862: corrupted in-inode xattr: e_value size too large [ 256.187375][T17384] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 256.187641][T17384] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.5862: couldn't read orphan inode 15 (err -117) [ 256.196865][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 256.196891][ C1] EXT4-fs (loop9): initial error at time 1776945826: ext4_iget_extra_inode:5128: inode 15 [ 256.196934][ C1] EXT4-fs (loop9): last error at time 1776945826: ext4_iget_extra_inode:5128: inode 15 [ 256.283955][T17393] loop8: detected capacity change from 0 to 512 [ 256.345433][T17384] loop9: lost filesystem error report for type 5 error -117 [ 256.346210][T17384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.414281][T16996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.471755][T17409] netlink: 'syz.9.5872': attribute type 4 has an invalid length. [ 256.739983][T17429] loop4: detected capacity change from 0 to 1024 [ 256.767807][T17429] ext4: Unknown parameter 'noacl' [ 256.812547][T17436] program syz.9.5885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.907813][T17445] loop8: detected capacity change from 0 to 1764 [ 257.066483][ T28] audit: type=1400 audit(1776945827.744:1799): avc: denied { nlmsg_read } for pid=17455 comm="syz.4.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 257.068020][T17461] tap0: tun_chr_ioctl cmd 1074025677 [ 257.093009][T17461] tap0: linktype set to 0 [ 257.126271][ T28] audit: type=1400 audit(1776945827.774:1800): avc: denied { audit_write } for pid=17455 comm="syz.4.5893" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 257.149526][ T28] audit: type=1107 audit(1776945827.774:1801): pid=17455 uid=0 auid=0 ses=3 subj=root:sysadm_r:sysadm_t msg='' [ 257.304513][ T3417] kernel write not supported for file /2405/uid_map (pid: 3417 comm: kworker/0:4) [ 257.400348][T17479] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 257.408956][T17479] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.320999][T17523] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 260.491575][T17540] loop4: detected capacity change from 0 to 128 [ 260.542652][T17543] netlink: 'syz.8.5929': attribute type 13 has an invalid length. [ 260.569421][T17543] gretap0: refused to change device tx_queue_len [ 260.597149][T17547] loop3: detected capacity change from 0 to 164 [ 260.604155][T17543] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 260.647902][T17547] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 260.705077][T17553] loop4: detected capacity change from 0 to 1024 [ 260.729601][ T28] audit: type=1400 audit(1776945831.404:1802): avc: denied { accept } for pid=17559 comm="syz.3.5934" path="socket:[51113]" dev="sockfs" ino=51113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.736608][T17553] EXT4-fs: Ignoring removed bh option [ 260.810984][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5936'. [ 260.849903][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5936'. [ 260.850119][T17553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 260.983468][T17587] loop9: detected capacity change from 0 to 512 [ 260.990364][T17553] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 261.425206][T17627] loop4: detected capacity change from 0 to 512 [ 261.450775][T17627] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 261.482376][T17627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5956: bg 0: block 104: invalid block bitmap [ 261.503107][T17627] loop4: lost filesystem error report for type 5 error -117 [ 261.507285][T17627] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 261.523521][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 261.523547][ C1] EXT4-fs (loop4): initial error at time 1776945832: ext4_validate_block_bitmap:432 [ 261.523574][ C1] EXT4-fs (loop4): last error at time 1776945832: ext4_validate_block_bitmap:432 [ 261.549123][T17627] loop4: lost filesystem error report for type 5 error -117 [ 261.550529][T17627] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5956: invalid indirect mapped block 1 (level 1) [ 261.572427][T17627] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.573881][T17627] EXT4-fs (loop4): 1 truncate cleaned up [ 261.589422][T17627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.682287][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.705168][T17647] loop9: detected capacity change from 0 to 512 [ 261.738954][T17647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.760071][T17647] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.885843][T16996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.961637][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5964'. [ 261.975579][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5964'. [ 262.162823][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.238789][T17698] loop3: detected capacity change from 0 to 512 [ 262.408975][ T28] audit: type=1400 audit(1776945833.094:1803): avc: denied { setopt } for pid=17716 comm="syz.8.5987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 262.479993][T17721] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 262.790393][ T28] audit: type=1400 audit(1776945833.464:1804): avc: denied { read } for pid=17738 comm="syz.3.5996" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 262.802341][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5997'. [ 262.835192][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5997'. [ 262.856975][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5998'. [ 263.213014][T17778] loop8: detected capacity change from 0 to 1024 [ 263.227894][T17778] EXT4-fs: inline encryption not supported [ 263.243979][T17778] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 263.270052][T17778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.391729][T16686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.605756][T17805] loop3: detected capacity change from 0 to 128 [ 263.612689][T17805] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 263.628598][T17805] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.668466][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6026'. [ 264.236833][ T9581] Bluetooth: hci0: command 0x1003 tx timeout [ 264.243194][ T3643] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.439062][T17840] loop3: detected capacity change from 0 to 1024 [ 264.465299][T17840] EXT4-fs: Ignoring removed bh option [ 264.499517][T17840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.540694][T17850] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6045'. [ 264.570912][T17850] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6045'. [ 264.592979][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.736161][ T28] audit: type=1400 audit(1776945835.414:1805): avc: denied { write } for pid=17864 comm="syz.0.6051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 265.796247][T17944] netlink: 'syz.0.6080': attribute type 8 has an invalid length. [ 265.980237][T17956] loop3: detected capacity change from 0 to 128 [ 266.010945][T17956] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.036644][T17960] __nla_validate_parse: 3 callbacks suppressed [ 266.036662][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6086'. [ 266.058383][T17956] ext4 filesystem being mounted at /1244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.087518][T17965] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6086'. [ 266.098355][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.118623][T17965] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6086'. [ 266.213605][T17977] loop4: detected capacity change from 0 to 256 [ 266.249214][T17977] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 266.270172][T17977] FAT-fs (loop4): Filesystem has been set read-only [ 266.290712][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6095'. [ 266.306304][T17977] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 266.403296][T17999] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6108'. [ 266.438621][T18002] netlink: 340 bytes leftover after parsing attributes in process `syz.4.6099'. [ 266.972847][T18041] lo speed is unknown, defaulting to 1000 [ 266.994319][T18045] bond2: invalid ARP target 0.0.0.0 specified for addition [ 267.007033][T18045] bond2: option arp_ip_target: invalid value (0) [ 267.057982][T18045] bond2 (unregistering): Released all slaves [ 267.255919][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6114'. [ 267.283133][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6114'. [ 267.302346][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6114'. [ 267.411326][T18052] wireguard0: entered promiscuous mode [ 267.417137][T18052] wireguard0: entered allmulticast mode [ 268.249532][T18068] loop4: detected capacity change from 0 to 512 [ 268.274580][T18077] batman_adv: batadv0: Adding interface: vlan2 [ 268.281088][T18077] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.291869][T18068] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 268.335093][T18077] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 269.351118][ T28] audit: type=1400 audit(1776945840.034:1806): avc: denied { firmware_load } for pid=18134 comm="syz.9.6144" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 269.429030][ T28] audit: type=1400 audit(1776945840.114:1807): avc: denied { append } for pid=18136 comm="syz.4.6145" path="socket:[52801]" dev="sockfs" ino=52801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.459088][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6146'. [ 270.210757][ T28] audit: type=1326 audit(1776945840.894:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a823c819 code=0x7ffc0000 [ 270.237139][ T28] audit: type=1326 audit(1776945840.894:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a823c819 code=0x7ffc0000 [ 270.247229][T18202] loop9: detected capacity change from 0 to 512 [ 270.261227][ T28] audit: type=1326 audit(1776945840.894:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a823c819 code=0x7ffc0000 [ 270.273953][T18202] EXT4-fs: Ignoring removed nobh option [ 270.297889][ T28] audit: type=1326 audit(1776945840.914:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f90a823c819 code=0x7ffc0000 [ 270.322730][ T28] audit: type=1326 audit(1776945840.914:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a823c819 code=0x7ffc0000 [ 270.350791][T18202] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 270.361085][ T28] audit: type=1326 audit(1776945840.914:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a823c819 code=0x7ffc0000 [ 270.392256][ T28] audit: type=1326 audit(1776945840.914:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a823c819 code=0x7ffc0000 [ 270.394935][T18202] EXT4-fs (loop9): 1 truncate cleaned up [ 270.416264][ T28] audit: type=1326 audit(1776945840.914:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90a823c819 code=0x7ffc0000 [ 270.446343][T18202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.500829][T16996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.015132][T18248] netdevsim netdevsim8: Direct firmware load for ..€ failed with error -2 [ 271.579059][T18296] loop9: detected capacity change from 0 to 512 [ 271.602179][T18296] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.627742][T18296] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.687639][T16996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.861871][T18318] loop9: detected capacity change from 0 to 512 [ 271.884978][T18318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.898073][T18318] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.914595][T18318] EXT4-fs warning (device loop9): ext4_empty_dir:3094: inode #12: comm syz.9.6228: directory missing '.' [ 271.944193][T16996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.973456][T18323] program syz.8.6230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.530900][T18360] pimreg: entered allmulticast mode [ 272.547617][T18360] pimreg: left allmulticast mode [ 273.419036][T18405] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 273.712304][T18419] loop8: detected capacity change from 0 to 256 [ 273.751393][T18419] FAT-fs (loop8): Directory bread(block 64) failed [ 273.782493][T18419] FAT-fs (loop8): Directory bread(block 65) failed [ 273.789971][T18419] FAT-fs (loop8): Directory bread(block 66) failed [ 273.799279][T18419] FAT-fs (loop8): Directory bread(block 67) failed [ 273.823895][T18419] FAT-fs (loop8): Directory bread(block 68) failed [ 273.833009][T18419] FAT-fs (loop8): Directory bread(block 69) failed [ 273.845385][T18419] FAT-fs (loop8): Directory bread(block 70) failed [ 273.860965][T18419] FAT-fs (loop8): Directory bread(block 71) failed [ 273.887574][T18419] FAT-fs (loop8): Directory bread(block 72) failed [ 273.894234][T18419] FAT-fs (loop8): Directory bread(block 73) failed [ 274.267236][T18447] __nla_validate_parse: 7 callbacks suppressed [ 274.267255][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6287'. [ 274.393087][T18451] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6289'. [ 274.510748][T18469] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6298'. [ 274.625795][T18481] loop8: detected capacity change from 0 to 128 [ 274.659830][T18481] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.681760][T18481] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.712449][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 274.712466][ T28] audit: type=1326 audit(1776945845.394:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 274.775828][ T28] audit: type=1326 audit(1776945845.424:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 274.803722][ T68] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.841499][ T28] audit: type=1326 audit(1776945845.424:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 274.897902][ T28] audit: type=1326 audit(1776945845.424:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 274.926972][ T28] audit: type=1326 audit(1776945845.424:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb6ddb2b687 code=0x7ffc0000 [ 274.951371][ T28] audit: type=1326 audit(1776945845.424:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 274.991939][ T28] audit: type=1326 audit(1776945845.424:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 275.023859][ T28] audit: type=1326 audit(1776945845.424:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 275.070314][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6316'. [ 275.085889][ T28] audit: type=1326 audit(1776945845.424:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 275.112864][ T28] audit: type=1326 audit(1776945845.434:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.4.6306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ddb2c819 code=0x7ffc0000 [ 275.201896][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6320'. [ 275.275080][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6322'. [ 275.596566][T18529] loop8: detected capacity change from 0 to 512 [ 275.637192][T18529] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 275.668211][T18529] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.6326: bad orphan inode 131083 [ 275.687388][T18529] loop8: lost filesystem error report for type 5 error -117 [ 275.693566][T18529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.961653][T16686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.312500][T18593] loop4: detected capacity change from 0 to 128 [ 276.372492][T18595] loop9: detected capacity change from 0 to 1024 [ 276.385443][T18595] ext3: Unknown parameter 'noacl' [ 276.467177][T18604] batadv_slave_0: entered promiscuous mode [ 276.477339][T18602] batadv_slave_0: left promiscuous mode [ 276.644476][T18629] loop4: detected capacity change from 0 to 512 [ 276.666146][T18629] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.694472][T18629] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 276.709215][T18629] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.6368: Failed to acquire dquot type 1 [ 276.720527][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 276.720551][ C0] EXT4-fs (loop4): initial error at time 1776945847: ext4_mb_generate_buddy:1317 [ 276.720574][ C0] EXT4-fs (loop4): last error at time 1776945847: ext4_mb_generate_buddy:1317 [ 276.746065][T18629] loop4: lost filesystem error report for type 5 error -28 [ 276.749755][T18629] EXT4-fs (loop4): 1 truncate cleaned up [ 276.767398][T18629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.841643][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.854456][T18644] netlink: 140 bytes leftover after parsing attributes in process `syz.9.6373'. [ 276.911838][T18650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6377'. [ 277.165903][T18670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.219699][T18670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.270542][T18670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.329795][T18670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.397006][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.415916][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.447745][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.461940][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.582945][T18716] netlink: 'syz.3.6409': attribute type 30 has an invalid length. [ 277.600950][T18718] program syz.8.6410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.667725][T18722] lo speed is unknown, defaulting to 1000 [ 278.530265][T18741] xt_hashlimit: size too large, truncated to 1048576 [ 278.570333][T18747] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 278.602410][T18751] macvlan4: entered promiscuous mode [ 278.616980][T18751] bridge0: entered promiscuous mode [ 278.638389][T18747] pim6reg: entered allmulticast mode [ 278.675585][T18759] loop4: detected capacity change from 0 to 164 [ 278.714158][T18759] rock: directory entry would overflow storage [ 278.738867][T18759] rock: sig=0x5252, size=5, remaining=3 [ 278.931339][T18783] veth1_macvtap: left promiscuous mode [ 278.952699][T18783] macsec0: entered promiscuous mode [ 278.969477][T18783] macsec0: entered allmulticast mode [ 278.982583][T18779] loop9: detected capacity change from 0 to 8192 [ 279.000736][T18779] syz.9.6437: attempt to access beyond end of device [ 279.000736][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.004189][T18783] veth1_macvtap: entered promiscuous mode [ 279.024798][T18779] buffer_io_error: 9506 callbacks suppressed [ 279.024816][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.066886][T18783] veth1_macvtap: entered allmulticast mode [ 279.067140][T18779] syz.9.6437: attempt to access beyond end of device [ 279.067140][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.087062][T18783] macsec0: left promiscuous mode [ 279.107123][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.109907][T18783] macsec0: left allmulticast mode [ 279.115507][T18779] syz.9.6437: attempt to access beyond end of device [ 279.115507][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.136357][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.146603][T18779] syz.9.6437: attempt to access beyond end of device [ 279.146603][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.152146][T18783] veth1_macvtap: left allmulticast mode [ 279.176404][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.184942][T18779] syz.9.6437: attempt to access beyond end of device [ 279.184942][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.202866][T18794] syz_tun: entered allmulticast mode [ 279.216897][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.225487][T18794] syz_tun: left allmulticast mode [ 279.230721][T18779] syz.9.6437: attempt to access beyond end of device [ 279.230721][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.252649][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.261167][T18779] syz.9.6437: attempt to access beyond end of device [ 279.261167][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.299338][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.309011][T18779] syz.9.6437: attempt to access beyond end of device [ 279.309011][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.314939][T18800] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6447'. [ 279.323010][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.340401][T18779] syz.9.6437: attempt to access beyond end of device [ 279.340401][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.377991][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.408952][T18779] syz.9.6437: attempt to access beyond end of device [ 279.408952][T18779] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 279.427117][T18806] loop4: detected capacity change from 0 to 512 [ 279.443609][T18806] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 279.461650][T18779] Buffer I/O error on dev loop9, logical block 57847, async page read [ 279.471614][T18806] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 279.485059][T18806] EXT4-fs (loop4): orphan cleanup on readonly fs [ 279.506951][T18806] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.6449: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 279.549483][T18806] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 279.549664][T18806] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6449: couldn't read orphan inode 13 (err -117) [ 279.558895][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 279.558914][ C0] EXT4-fs (loop4): last error at time 1776946106: ext4_ext_check_inode:521: inode 13 [ 279.653948][T18806] loop4: lost filesystem error report for type 5 error -117 [ 279.654673][T18806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.679764][T18806] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (24564!=0) [ 279.727635][T18815] loop3: detected capacity change from 0 to 8192 [ 279.737190][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.756454][T18815] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.949601][T18832] dvmrp6: entered allmulticast mode [ 279.970479][T18834] macvtap2: entered promiscuous mode [ 279.977177][T18834] team0: entered promiscuous mode [ 279.982523][T18834] team_slave_0: entered promiscuous mode [ 279.983241][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6464'. [ 279.988779][T18834] team_slave_1: entered promiscuous mode [ 280.004350][T18834] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 280.012003][T18834] team0: Device macvtap2 is already an upper device of the team interface [ 280.021936][T18834] team0: left promiscuous mode [ 280.027172][T18834] team_slave_0: left promiscuous mode [ 280.033128][T18834] team_slave_1: left promiscuous mode [ 280.175242][T18858] loop9: detected capacity change from 0 to 1024 [ 280.210398][T18858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.230944][T18858] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.6473: missing EA_INODE flag [ 280.247257][T18858] EXT4-fs (loop9): Remounting filesystem read-only [ 280.254609][T18840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.267402][T18840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.276002][T16996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.543741][T18904] loop9: detected capacity change from 0 to 2048 [ 280.577700][T18904] loop9: p1 p2 [ 280.756491][T18919] lo speed is unknown, defaulting to 1000 [ 280.835437][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 280.835455][ T28] audit: type=1400 audit(1776946107.511:1916): avc: denied { shutdown } for pid=18923 comm="syz.9.6504" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.903052][T18932] Cannot find add_set index 46338 as target [ 280.990598][T18940] loop8: detected capacity change from 0 to 128 [ 281.060157][ T28] audit: type=1400 audit(1776946107.741:1917): avc: denied { bind } for pid=18943 comm="syz.8.6513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 281.141790][T18954] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.192157][T18954] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.265644][T18954] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.310427][T18954] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.364371][ T9730] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.391868][ T1763] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.415813][ T1763] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.428912][ T1763] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.538287][T18977] program syz.8.6529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.678600][ T28] audit: type=1400 audit(1776946108.361:1918): avc: denied { accept } for pid=18991 comm="syz.9.6536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 281.752444][T18998] loop3: detected capacity change from 0 to 1024 [ 281.764094][T18996] loop9: detected capacity change from 0 to 4096 [ 281.790154][T18998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.804965][T18996] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.828602][T18998] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.6539: missing EA_INODE flag [ 281.857087][T18998] EXT4-fs (loop3): Remounting filesystem read-only [ 281.868658][T16996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.921621][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.969513][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6544'. [ 281.991539][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6544'. [ 282.195156][T19041] loop4: detected capacity change from 0 to 4096 [ 282.207709][T19041] EXT4-fs: Ignoring removed bh option [ 282.219972][T19041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.263127][T19041] EXT4-fs error (device loop4): ext4_empty_dir:3101: inode #12: block 80: comm syz.4.6556: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 282.308224][ T3410] kernel read not supported for file /vcs (pid: 3410 comm: kworker/1:3) [ 282.323235][T19041] EXT4-fs (loop4): Remounting filesystem read-only [ 282.336882][T19041] EXT4-fs warning (device loop4): ext4_empty_dir:3104: inode #12: comm syz.4.6556: directory missing '..' [ 282.377038][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.472283][T19060] loop9: detected capacity change from 0 to 256 [ 282.531238][T19062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 282.549150][T19062] ext4 filesystem being mounted at /1244/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.617368][T19072] program syz.9.6570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.630361][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 282.715343][T19079] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6573'. [ 283.568714][ T1763] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.632992][ T1763] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.722584][ T1763] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.781200][ T1763] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode [ 283.801731][ T1763] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.947744][ T1763] bridge_slave_1: left allmulticast mode [ 283.948013][T19163] EXT4-fs: Ignoring removed bh option [ 283.972054][ T1763] bridge_slave_1: left promiscuous mode [ 283.982440][T19163] EXT4-fs: Ignoring removed oldalloc option [ 283.995733][ T1763] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.003062][T19163] EXT4-fs: Ignoring removed nobh option [ 284.018511][ T1763] bridge_slave_0: left allmulticast mode [ 284.029688][T19163] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 284.029688][T19163] [ 284.047324][ T1763] bridge_slave_0: left promiscuous mode [ 284.062637][ T1763] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.103961][ T1763] dvmrp6: left allmulticast mode [ 284.168520][T19184] set_capacity_and_notify: 3 callbacks suppressed [ 284.168605][T19184] loop3: detected capacity change from 0 to 2048 [ 284.218802][T19184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.250706][ T28] audit: type=1400 audit(1776946110.931:1919): avc: denied { lock } for pid=19181 comm="syz.3.6612" path="/1314/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.324774][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.382340][ T1763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.404819][ T1763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.424583][ T1763] bond0 (unregistering): Released all slaves [ 284.440920][ T1763] bond1 (unregistering): Released all slaves [ 284.463720][ T3048] 8021q: adding VLAN 0 to HW filter on device eth21 [ 284.508524][ T1763] hsr_slave_0: left promiscuous mode [ 284.521931][T19202] loop4: detected capacity change from 0 to 1024 [ 284.529330][ T1763] hsr_slave_1: left promiscuous mode [ 284.535157][ T1763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.537418][T19202] EXT4-fs: inline encryption not supported [ 284.549158][ T1763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.557686][ T1763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.565314][ T1763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.577454][ T1763] veth1_macvtap: left promiscuous mode [ 284.583458][ T1763] veth0_macvtap: left promiscuous mode [ 284.595913][T19202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 284.603820][ T1763] veth1_vlan: left promiscuous mode [ 284.623549][ T1763] veth0_vlan: left promiscuous mode [ 284.629987][T19202] ext4 filesystem being mounted at /1256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.686310][ T1763] pim6reg (unregistering): left allmulticast mode [ 284.710018][T19202] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.6618: lblock 0 mapped to illegal pblock 0 (length 6) [ 284.773766][ T3417] kernel read not supported for file /mdstat (pid: 3417 comm: kworker/0:4) [ 284.782759][ T1763] team0 (unregistering): Port device team_slave_1 removed [ 284.783723][ T28] audit: type=1400 audit(1776946111.451:1920): avc: denied { write } for pid=19210 comm="syz.8.6621" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 284.815543][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 284.829801][ T1763] team0 (unregistering): Port device team_slave_0 removed [ 284.931825][T19140] lo speed is unknown, defaulting to 1000 [ 285.035445][T19225] loop8: detected capacity change from 0 to 128 [ 285.097706][T19140] chnl_net:caif_netlink_parms(): no params data found [ 285.198566][T19140] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.205968][T19140] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.213338][T19140] bridge_slave_0: entered allmulticast mode [ 285.220296][T19140] bridge_slave_0: entered promiscuous mode [ 285.228002][T19140] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.235173][T19140] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.242506][T19140] bridge_slave_1: entered allmulticast mode [ 285.249441][T19140] bridge_slave_1: entered promiscuous mode [ 285.292550][T19140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.325492][ T3048] 8021q: adding VLAN 0 to HW filter on device eth22 [ 285.338350][T19140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.387726][T19140] team0: Port device team_slave_0 added [ 285.395971][T19140] team0: Port device team_slave_1 added [ 285.418763][T19140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.426073][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.469507][T19140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.503875][T19140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.525369][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.554348][T19140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.640890][T19140] hsr_slave_0: entered promiscuous mode [ 285.659351][T19140] hsr_slave_1: entered promiscuous mode [ 285.673435][T19140] debugfs: 'hsr0' already exists in 'hsr' [ 285.686840][T19140] Cannot create hsr debugfs directory [ 285.854265][ T3048] 8021q: adding VLAN 0 to HW filter on device eth23 [ 286.063432][T19140] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 286.100387][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.130182][T19140] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 286.156037][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.165634][T19140] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 286.174943][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.183357][T19140] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 286.202032][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.212300][ T2] ================================================================== [ 286.220602][ T2] BUG: KCSAN: data-race in alloc_pid / copy_process [ 286.227469][ T2] [ 286.229819][ T2] read-write to 0xffffffff86e5c3a8 of 4 bytes by task 3048 on cpu 0: [ 286.237981][ T2] alloc_pid+0x6ca/0x950 [ 286.242229][ T2] copy_process+0x11a2/0x23a0 [ 286.247091][ T2] kernel_clone+0x1a5/0x5e0 [ 286.251779][ T2] __se_sys_clone3+0x1f5/0x230 [ 286.256560][ T2] __x64_sys_clone3+0x31/0x40 [ 286.261249][ T2] x64_sys_call+0x580/0x3020 [ 286.265937][ T2] do_syscall_64+0x12c/0x3b0 [ 286.270539][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.276461][ T2] [ 286.278788][ T2] read to 0xffffffff86e5c3a8 of 4 bytes by task 2 on cpu 1: [ 286.286076][ T2] copy_process+0x1b1d/0x23a0 [ 286.290775][ T2] kernel_clone+0x1a5/0x5e0 [ 286.295299][ T2] kernel_thread+0xe5/0x120 [ 286.299823][ T2] kthreadd+0x25b/0x320 [ 286.304027][ T2] ret_from_fork+0x146/0x330 [ 286.308623][ T2] ret_from_fork_asm+0x1a/0x30 [ 286.313491][ T2] [ 286.315825][ T2] value changed: 0x80000145 -> 0x80000146 [ 286.321562][ T2] [ 286.323885][ T2] Reported by Kernel Concurrency Sanitizer on: [ 286.330056][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(full) [ 286.340566][ T2] Tainted: [W]=WARN [ 286.344393][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 286.354691][ T2] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.386408][ T28] audit: type=1400 audit(1776946113.051:1921): avc: denied { write } for pid=3309 comm="syz-executor" path="pipe:[1625]" dev="pipefs" ino=1625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 286.448933][T19140] kthread_run failed with err -4 [ 286.466307][ T28] audit: type=1400 audit(1776946113.091:1922): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=44568 daddr=10.128.0.123 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 286.909472][ T49] bridge_slave_1: left allmulticast mode [ 286.915182][ T49] bridge_slave_1: left promiscuous mode [ 286.920958][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.928799][ T49] bridge_slave_0: left allmulticast mode [ 286.934723][ T49] bridge_slave_0: left promiscuous mode [ 286.940751][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.008667][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.018377][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.027711][ T49] bond0 (unregistering): Released all slaves [ 287.061582][ T49] hsr_slave_0: left promiscuous mode [ 287.067385][ T49] hsr_slave_1: left promiscuous mode [ 287.073362][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.081198][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.119816][ T49] team0 (unregistering): Port device team_slave_1 removed [ 287.131284][ T49] team0 (unregistering): Port device team_slave_0 removed [ 287.166566][ T3048] 8021q: adding VLAN 0 to HW filter on device eth21 [ 287.272658][ T3048] 8021q: adding VLAN 0 to HW filter on device eth22 [ 287.372412][ T3048] 8021q: adding VLAN 0 to HW filter on device eth23 [ 287.460077][ T49] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.478758][ T3048] 8021q: adding VLAN 0 to HW filter on device eth24 [ 287.508816][ T49] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.558495][ T49] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.608596][ T49] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.691203][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.739601][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.799402][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.812169][ T3048] 8021q: adding VLAN 0 to HW filter on device eth25 [ 287.861076][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.934556][ T3048] 8021q: adding VLAN 0 to HW filter on device eth26 [ 287.943207][ T49] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.988332][ T49] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.038487][ T49] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.059803][ T3048] 8021q: adding VLAN 0 to HW filter on device eth27 [ 288.088411][ T49] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.162345][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.172900][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.183865][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55692 - 0 [ 288.196052][ T3048] 8021q: adding VLAN 0 to HW filter on device eth28 [ 288.220945][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.231355][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.241861][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55692 - 0 [ 288.320103][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.330797][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.341863][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55692 - 0 [ 288.354189][ T3048] 8021q: adding VLAN 0 to HW filter on device eth29 [ 288.399901][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.410476][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.421274][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55692 - 0 [ 288.482402][ T3048] 8021q: adding VLAN 0 to HW filter on device eth30 [ 288.498988][ T49] bridge_slave_1: left allmulticast mode [ 288.504675][ T49] bridge_slave_1: left promiscuous mode [ 288.510781][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.518820][ T49] bridge_slave_0: left allmulticast mode [ 288.524534][ T49] bridge_slave_0: left promiscuous mode [ 288.530319][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.539240][ T49] bridge_slave_1: left allmulticast mode [ 288.545245][ T49] bridge_slave_1: left promiscuous mode [ 288.551162][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.559307][ T49] bridge_slave_0: left promiscuous mode [ 288.565111][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.729821][ T49] bridge_slave_1: left allmulticast mode [ 288.735638][ T49] bridge_slave_1: left promiscuous mode [ 288.741556][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.749598][ T49] bridge_slave_0: left allmulticast mode [ 288.755320][ T49] bridge_slave_0: left promiscuous mode [ 288.761040][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.770813][ T49] bridge_slave_1: left allmulticast mode [ 288.776850][ T49] bridge_slave_1: left promiscuous mode [ 288.782616][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.790405][ T49] bridge_slave_0: left allmulticast mode [ 288.796161][ T49] bridge_slave_0: left promiscuous mode [ 288.801992][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.863993][ T49] batman_adv: batadv0: Removing interface: vlan2 [ 288.889085][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.899212][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.908745][ T49] bond0 (unregistering): Released all slaves [ 288.938405][ T49] bridge0 (unregistering): left promiscuous mode [ 288.999226][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.008812][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.018433][ T49] bond0 (unregistering): Released all slaves [ 289.026153][ T49] bond1 (unregistering): Released all slaves [ 289.048777][ T49] batman_adv: batadv0: Removing interface: macvtap1 [ 289.170917][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.180180][ T49] bond_slave_0: left promiscuous mode [ 289.186613][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.196344][ T49] bond_slave_1: left promiscuous mode [ 289.202532][ T49] bond0 (unregistering): Released all slaves [ 289.210551][ T49] bond1 (unregistering): Released all slaves [ 289.290408][ T49] bond0 (unregistering): left promiscuous mode [ 289.296626][ T49] bond_slave_0: left promiscuous mode [ 289.302229][ T49] bond_slave_1: left promiscuous mode [ 289.308480][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.318732][ T49] bond_slave_0: left allmulticast mode [ 289.325323][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.335018][ T49] bond_slave_1: left allmulticast mode [ 289.341227][ T49] bond0 (unregistering): Released all slaves [ 289.349235][ T49] bond1 (unregistering): Released all slaves [ 289.357919][ T49] bond2 (unregistering): Released all slaves [ 289.406747][ T49] tipc: Disabling bearer [ 289.412228][ T49] tipc: Left network mode [ 289.417385][ T49] tipc: Disabling bearer [ 289.422935][ T49] tipc: Left network mode [ 289.428231][ T49] tipc: Disabling bearer [ 289.434065][ T49] tipc: Left network mode [ 289.442708][ T49] IPVS: stopping master sync thread 6081 ... [ 289.449199][ T49] IPVS: stopping master sync thread 8573 ... [ 289.460113][ T49] hsr_slave_0: left promiscuous mode [ 289.466066][ T49] hsr_slave_1: left promiscuous mode [ 289.472259][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.480056][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.488956][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.496404][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.507502][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.514912][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.522813][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.530419][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.538342][ T49] batadv0: left promiscuous mode [ 289.545696][ T49] hsr_slave_0: left promiscuous mode [ 289.551664][ T49] hsr_slave_1: left promiscuous mode [ 289.557437][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.564856][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.572649][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.580078][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.587768][ T49] batadv0: left promiscuous mode [ 289.594537][ T49] hsr_slave_0: left promiscuous mode [ 289.600510][ T49] hsr_slave_1: left promiscuous mode [ 289.606212][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.613722][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.621419][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.628876][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.644910][ T49] veth1_macvtap: left promiscuous mode [ 289.650476][ T49] veth0_macvtap: left promiscuous mode [ 289.656064][ T49] veth1_vlan: left promiscuous mode [ 289.661483][ T49] veth0_vlan: left promiscuous mode [ 289.667266][ T49] hsr0: left allmulticast mode [ 289.672089][ T49] veth1_macvtap: left promiscuous mode [ 289.678112][ T49] veth0_macvtap: left allmulticast mode [ 289.683855][ T49] veth0_macvtap: left promiscuous mode [ 289.689533][ T49] veth1_vlan: left promiscuous mode [ 289.694956][ T49] veth0_vlan: left promiscuous mode [ 289.700649][ T49] veth1_macvtap: left promiscuous mode [ 289.706147][ T49] veth0_macvtap: left promiscuous mode [ 289.711960][ T49] veth1_vlan: left promiscuous mode [ 289.717277][ T49] veth0_vlan: left promiscuous mode [ 289.722736][ T49] veth1_macvtap: left promiscuous mode [ 289.728307][ T49] veth0_macvtap: left promiscuous mode [ 289.733913][ T49] veth1_vlan: left promiscuous mode [ 289.739252][ T49] veth0_vlan: left promiscuous mode [ 289.853259][ T49] team0 (unregistering): Port device team_slave_1 removed [ 289.864541][ T49] team0 (unregistering): Port device team_slave_0 removed [ 289.926355][ T49] team0 (unregistering): Port device team_slave_1 removed [ 289.936328][ T49] team0 (unregistering): Port device team_slave_0 removed [ 289.998308][ T49] team0 (unregistering): Port device team_slave_1 removed [ 290.007820][ T49] team0 (unregistering): Port device team_slave_0 removed [ 290.066998][ T49] team0 (unregistering): Port device team_slave_1 removed [ 290.077896][ T49] team0 (unregistering): Port device team_slave_0 removed [ 290.109898][ T3048] 8021q: adding VLAN 0 to HW filter on device eth31 [ 290.226007][ T3048] 8021q: adding VLAN 0 to HW filter on device eth32 [ 290.331637][ T3048] 8021q: adding VLAN 0 to HW filter on device eth33 [ 290.433781][ T3048] 8021q: adding VLAN 0 to HW filter on device eth34 [ 290.550887][ T3048] 8021q: adding VLAN 0 to HW filter on device eth35 [ 290.653722][ T3048] 8021q: adding VLAN 0 to HW filter on device eth36 [ 290.771059][ T3048] 8021q: adding VLAN 0 to HW filter on device eth37 [ 290.873860][ T3048] 8021q: adding VLAN 0 to HW filter on device eth38 [ 290.977924][ T3048] 8021q: adding VLAN 0 to HW filter on device eth39 [ 291.079890][ T3048] 8021q: adding VLAN 0 to HW filter on device eth40 [ 291.096518][ T49] IPVS: stop unused estimator thread 0... [ 291.102949][ T49] IPVS: stop unused estimator thread 0...