last executing test programs: 8m15.055778165s ago: executing program 32 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x20004, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m48.243287052s ago: executing program 33 (id=1582): r0 = socket(0x10, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xb85) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5m58.679876278s ago: executing program 34 (id=5072): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r1], 0x1c}}, 0x2000040) 5m45.156153536s ago: executing program 35 (id=5393): sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000280)="a1", 0x1}], 0x1, 0x1ff, 0x5, 0x1a) 5m37.829559338s ago: executing program 36 (id=5566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x17, 0x0, "d86ac46a073843d9f8060941f3d77262614c3cd1ba8b023fc00414f10c2b7974289520ce79fef70f5a2483620aef97999c7e0f07caa2360fa1374ae1dea4978f54b437d900"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 4m43.621335413s ago: executing program 37 (id=7472): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 4m28.928004499s ago: executing program 38 (id=7920): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c5442, 0xb2) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x1, 0xfffffffffdffffff}) 4m26.681606054s ago: executing program 39 (id=7958): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) 4m14.597639254s ago: executing program 40 (id=8236): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 4m8.460113097s ago: executing program 41 (id=8372): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x11ea00, 0x4, 0x20da, 0x5, 0x1ff, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 3m42.68587435s ago: executing program 42 (id=9064): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000a80)="b5164ca15e0d65f87d18c5808900060a0c380ffaacf9b788d7492c7c52ad95f410052f072624d94d3ca9338bb3bb88c2df57dd5d5cc2ec1e43ad0620acd17e2e06e7f0b9b7c732c019ff030000000000002418da165ae4a868631043bc24d4144c8b00e843bb8804db390e9848773ce070fab3ecefc2e823161c974dcec9191b8fecef87168e6dfc85d4e7b298a417655e16ee9a7cd8af26ffb2c7ec0973dda9ecd8ee2b6f7d02b3aa5ac61283fcb04f1078e86dee4fbaa5e0047b0e8e8a92fbf4138bf5c3a1eeba78fab4c0", 0xcc, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x651, 0x1000}) 3m13.340241331s ago: executing program 43 (id=9838): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 2m19.810946063s ago: executing program 7 (id=11363): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x3}, 0xb2a1}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 2m19.787479214s ago: executing program 7 (id=11364): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 2m19.714639016s ago: executing program 7 (id=11365): timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) timer_gettime(r0, &(0x7f0000001040)) 2m19.366456098s ago: executing program 7 (id=11373): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xfffffffb, 0x749, 0x0, 0x3, 0x9, "0441920887e87fcb367800000000080100", 0x4, 0x2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 2m19.335287108s ago: executing program 7 (id=11376): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 2m19.257875281s ago: executing program 7 (id=11380): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x82, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x200, @empty, 0x80}}, 0x8f6, 0x1}, &(0x7f0000000000)=0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r2, 0x5b2e}, 0x8) 2m11.045666053s ago: executing program 1 (id=11539): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000280)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd, 0x0, r1, 0x0, 0x0, 0x5, 0x0, 0x2, r1}]) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) 2m10.818626111s ago: executing program 1 (id=11545): setuid(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="cc73"], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m10.774603272s ago: executing program 44 (id=11545): setuid(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="cc73"], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m4.18531166s ago: executing program 45 (id=11380): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x82, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x200, @empty, 0x80}}, 0x8f6, 0x1}, &(0x7f0000000000)=0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r2, 0x5b2e}, 0x8) 1m46.558996573s ago: executing program 6 (id=12013): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400), 0x0}, 0x20) 1m46.521748635s ago: executing program 6 (id=12016): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m46.493533236s ago: executing program 6 (id=12019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) close(0x3) 1m46.459291556s ago: executing program 6 (id=12020): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m46.37059663s ago: executing program 6 (id=12023): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m46.313735162s ago: executing program 6 (id=12026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a812000500"], 0xfdef) 1m46.313616342s ago: executing program 46 (id=12026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a812000500"], 0xfdef) 1m24.594101501s ago: executing program 4 (id=12555): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setresuid(0x0, 0xee00, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mlockall(0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 1m23.506583556s ago: executing program 4 (id=12576): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, [0x8001, 0xf, 0x8, 0x3, 0x1, 0xb4, 0x3, 0x9, 0x9, 0x1, 0x1, 0x8, 0x3, 0x4]}, &(0x7f0000000340)=0x100) 1m23.481672257s ago: executing program 4 (id=12577): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 1m23.459244668s ago: executing program 4 (id=12578): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) 1m23.41604941s ago: executing program 4 (id=12580): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={&(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4095, 0x1010}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m23.193638487s ago: executing program 4 (id=12583): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x5, 0x9334d4314ca84c50, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0xb545}, 0x8458, 0x0, 0x1000, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x1000, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x1cfe6be24aee0e21}, '\x00', "5193bb672965593497c186a80e00", "09043d2a", "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) 1m23.193440147s ago: executing program 47 (id=12583): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x5, 0x9334d4314ca84c50, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0xb545}, 0x8458, 0x0, 0x1000, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x1000, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x1cfe6be24aee0e21}, '\x00', "5193bb672965593497c186a80e00", "09043d2a", "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) 1m16.091257632s ago: executing program 2 (id=12758): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]}) 1m15.23540298s ago: executing program 2 (id=12782): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/41, 0x29}}], 0x1, 0x91, 0x0) 1m14.377564778s ago: executing program 2 (id=12809): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x29b0cfbd, 0x41001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x28254, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x1, @perf_bp={0x0}, 0x0, 0xfff9, 0x8, 0x6, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf25890000000c0099000e0000004c00000028011d80ec00007cdc000d80700000803d0002005003403d132b30514141094452094d3d35504538010a0924093d4e1c08361a4c2949290038243d501a254e51463f2f2a4a1b441f163f02574d0000000d000100180c3603480c0b0660000000190001001b18010903160c050b180b361b09160436480609300000004400018014000300ff89080000000000060006000600020014000300000002000800c1af03000001fcffa50005000400010000000500070002000000050004000100000020000380060001"], 0x14c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m14.244656483s ago: executing program 2 (id=12812): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m14.168579706s ago: executing program 2 (id=12814): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f8cc0363ac", 0x5}], 0x1}, 0x4000080) 1m13.552636816s ago: executing program 2 (id=12827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) 1m13.493910388s ago: executing program 48 (id=12827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) 8.281504546s ago: executing program 8 (id=14081): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf) 7.369053917s ago: executing program 8 (id=14109): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 7.285536249s ago: executing program 8 (id=14112): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 6.081282509s ago: executing program 3 (id=14131): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4602dc8103ffffffff0000000002003e"], 0x78) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 6.031021311s ago: executing program 3 (id=14133): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000012) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x3, 0x0, 0x100000000000047e, 0x2, 0x3e, 0xffffffeb, 0x1ea, 0x40, 0x2, 0xfffffffd, 0x6, 0x38, 0x2e, 0xfffe, 0x1, 0x3}, [{0x3, 0xf, 0x7, 0x11, 0x8000000000000, 0xe5, 0xfffffffffffffffd, 0x3}]}, 0x178) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5.952303124s ago: executing program 3 (id=14134): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20006f7}) pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.819188787s ago: executing program 3 (id=14135): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102220, 0x10000, 0xfffffffa, 0x1, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x9) 5.546240927s ago: executing program 3 (id=14136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x22, 0x1c, 0x68, 0x0, 0x9, 0x11, 0x0, @broadcast, @multicast1}, "28ca7b7d9dfbd739"}}}}}, 0x36) 5.113331641s ago: executing program 3 (id=14142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 5.069496543s ago: executing program 49 (id=14142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 3.116330307s ago: executing program 0 (id=14174): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.010374121s ago: executing program 0 (id=14175): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000200), 0x0}, 0x20) 2.949738573s ago: executing program 0 (id=14176): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getxattr(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)=""/119, 0x77) 2.515968837s ago: executing program 0 (id=14178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.085961601s ago: executing program 8 (id=14182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 2.021428384s ago: executing program 8 (id=14183): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000c00)) 1.461494712s ago: executing program 0 (id=14193): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x92, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x91}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.426044713s ago: executing program 8 (id=14194): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.361434735s ago: executing program 50 (id=14194): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.065098785s ago: executing program 1 (id=14143): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) 826.547413ms ago: executing program 5 (id=14207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@deltfilter={0xd58, 0x2d, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0xd18, 0x2, [@TCA_CGROUP_POLICE={0xc9c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0xac12, 0x1, 0xe, {0xfa, 0x1, 0x1ff, 0x3, 0x3, 0x40d7}, {0xb, 0x0, 0x0, 0x81, 0x5, 0x5}, 0xd, 0x3, 0x35a}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x8, 0x8000, 0x80000001, {0x8, 0x0, 0x1, 0xb, 0x2, 0x6}, {0xf7, 0x0, 0x1a78, 0x3ff, 0x401, 0x4}, 0x6, 0x200, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff001, 0xfffffffb, 0xa6, 0x7, 0xf2f, 0xb0, 0x1a6, 0xd, 0x40, 0xd, 0x4, 0x1, 0x9185, 0x14, 0x7, 0x3e6, 0xf, 0x371, 0x30000, 0x200, 0x5, 0x1, 0x5, 0x2, 0x0, 0x5f, 0x45, 0xff000, 0x7, 0x7fff, 0x8001, 0x0, 0x8e, 0x3ff, 0x60000, 0xfffffffb, 0x4, 0x3, 0x4, 0x80000000, 0x3, 0x9, 0xe2d, 0xf74d, 0x7, 0xc, 0x8, 0x2da7, 0x5, 0x7fffffff, 0x5, 0x1ff, 0x9f, 0x7, 0x4, 0x9, 0x400, 0x2, 0x1ff, 0x3, 0x3, 0xc238, 0x5, 0xb8, 0x5, 0x57d76d03, 0x6, 0x2116, 0x7fffffff, 0xb, 0x2, 0x9, 0x9, 0x2d, 0xe43b, 0x8, 0xa2, 0xb, 0x7, 0x0, 0x4d, 0x3, 0x0, 0xb4, 0x40, 0x4, 0x7f, 0x7, 0x88, 0x10, 0x1, 0xabb2, 0xe0000, 0x9, 0x4, 0x283e, 0x0, 0x8, 0x9, 0x9d15, 0x3, 0x3, 0x4, 0x0, 0x4, 0x1000, 0x5, 0x80000001, 0x0, 0x9, 0x7, 0xeb, 0x0, 0x72d8, 0x4, 0xfffffff8, 0x9, 0x1b6e, 0x8, 0x9, 0xfffffffe, 0x9, 0x8, 0x7, 0x3ff, 0x3, 0xfa21, 0x800, 0xffffffff, 0x1, 0x4, 0x8, 0x7, 0x80, 0x4, 0x36d, 0x9, 0x4, 0x3, 0x6d, 0x1, 0x2, 0x5, 0xfb, 0x8000, 0x9, 0x0, 0x1, 0x80000001, 0x2, 0x1, 0xfffffff4, 0x81d, 0x0, 0x0, 0x9, 0x4, 0x9, 0x3, 0x3da, 0xa77e, 0x4, 0x9, 0x546, 0x3f06, 0x5, 0x5, 0xfffffff9, 0x7, 0x2, 0x6, 0x982, 0x5b2d, 0x0, 0x7fff, 0x8, 0x4004, 0x0, 0x3, 0x6, 0x8c6, 0x1, 0x5, 0x10000, 0xfffffffa, 0x7, 0x0, 0x8, 0x1, 0xbcc, 0x6, 0x9, 0x3, 0x57ae2587, 0x0, 0x0, 0x9, 0xfffffffd, 0x81, 0xc, 0xce47, 0x10c, 0x10, 0x6901, 0x3, 0x2, 0x2, 0x400, 0xfffffcf9, 0x18000, 0xd296, 0x7f, 0x8001, 0x3, 0x6, 0x7, 0x6, 0x9, 0x8, 0x1, 0x7f, 0x3, 0x3, 0xe6, 0x31b, 0x2, 0x5, 0x6, 0x7, 0x6a, 0x8488, 0x5, 0x0, 0x8, 0xa, 0x9, 0xf4, 0x0, 0xf7, 0x8000, 0x10, 0x8, 0x3, 0xffff, 0x8, 0xdb8a, 0xfffffff2, 0x2, 0x9, 0x0, 0xfffffffc, 0x10001, 0x9, 0x1ff, 0xb5, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xc663, 0x10000, 0x42, 0x10, 0x5, 0x7, 0xd7ee, 0x100, 0xe2, 0x3, 0x2, 0xf7, 0x3, 0x8, 0x1dc5, 0x54, 0x5, 0x7, 0x0, 0x1, 0x0, 0xc, 0x1, 0x8, 0x9f5, 0x80000000, 0x8, 0xbc, 0xfffffff7, 0x2, 0x80000000, 0x8, 0xffff, 0xdc, 0x9, 0x1, 0x4, 0x2, 0xffff, 0x7f, 0x0, 0x6, 0x1, 0x0, 0x80000000, 0x1, 0x1, 0x101, 0x1, 0xffffffff, 0xfffffff8, 0x6, 0x0, 0x4, 0xffffff7f, 0x2f54f3b4, 0x3, 0x8, 0x9, 0xb, 0xff, 0x5, 0x5, 0x3, 0x40, 0xe, 0x8, 0xfffffffe, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x527, 0x9, 0x7fffffff, 0xfffffffe, 0x7, 0x4bf9, 0x1, 0x3c, 0x1, 0x3, 0x9932, 0x80000000, 0xbe, 0x0, 0x4, 0x7, 0x10001, 0x8, 0xba5, 0x7, 0x400, 0xffffffc0, 0x9, 0x7, 0x2a, 0xfffffffc, 0xfffffffb, 0x655, 0x40, 0x4, 0x4, 0x6, 0x80000001, 0x28000, 0x4, 0x1, 0x3, 0x9, 0x2, 0x8, 0xfffffff9, 0x47f48951, 0xffff, 0x3, 0x587459b4, 0x6, 0x3ff, 0x4, 0x8, 0x9, 0x7, 0xc68, 0x4, 0x2, 0x5, 0x3, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x7fffffff, 0x8, 0x0, 0x4, 0xff, 0x7, 0xa, 0x991000, 0x6, 0x0, 0xa6, 0x3, 0x3, 0x9c48, 0x8, 0x2a, 0x8, 0x2, 0x8, 0x8, 0x8, 0x2, 0x1000, 0xfffffffe, 0x400, 0x200, 0x101, 0x9, 0x2, 0xd, 0x4f, 0x4, 0x4, 0xad, 0x6, 0x2, 0x7, 0x4, 0x1, 0x3, 0x5, 0x58, 0x4, 0x401, 0x6, 0x9, 0x7b, 0xe, 0x45, 0x0, 0x56, 0x1, 0x0, 0x5, 0xe, 0xbff, 0x7, 0x8, 0x7, 0x80000001, 0x3, 0x4, 0x3, 0xf, 0xd, 0x5, 0x9, 0x1, 0x8, 0x9, 0x9, 0x80000000, 0x1, 0x7, 0x4, 0x0, 0x7c89, 0x7, 0xa, 0x7, 0x2, 0x8, 0x9, 0x3, 0x3, 0x8, 0x0, 0x7, 0x6, 0x79, 0x6, 0xc0d0, 0x4a1, 0x1, 0xc, 0x3, 0x6, 0xa, 0x9, 0x7, 0x2, 0x2, 0x7fffffff, 0x800, 0x4, 0x6, 0x7fff, 0xffff0000, 0x10, 0x3e11, 0x4, 0xb1c5, 0x1, 0xff, 0x7fffffff, 0x5, 0x4, 0x4, 0x8aa6, 0xdbe0, 0xfffffff9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x7f4, 0x6, 0x676e4ff4, 0x800, 0x7ff, 0x80, 0x3, 0x7b9d, 0x2, 0x0, 0x1, 0x6fe, 0x51e4, 0x9f47, 0x34000000, 0x7, 0xb, 0x80000001, 0x9, 0x32, 0x7, 0x2, 0x0, 0x7, 0x4, 0x2, 0x2, 0x9, 0xfffffb6f, 0xd00, 0xd, 0x2, 0x7, 0x2d, 0x7b, 0x70, 0x6b6, 0x9, 0x9, 0x5c, 0x9, 0x7, 0x81, 0x44, 0xb, 0x5, 0x40, 0x1, 0x0, 0x10, 0x2, 0xff, 0x400, 0x7ff, 0x100, 0xfffffff9, 0x2, 0x9, 0x80000000, 0x4317, 0x8000, 0x93, 0x9, 0x401, 0xc, 0x8, 0x6, 0x200, 0x7, 0x4000000, 0x6, 0x7, 0x3, 0x9, 0xfffffffb, 0xc9c4, 0x66, 0x80000001, 0x3, 0x7, 0x731e, 0xfffffeff, 0x2, 0x3, 0x9, 0x8, 0x9, 0x4, 0x3, 0x9, 0x40fb, 0xfffffff7, 0x401, 0x6f2, 0xe, 0x3, 0x5, 0x8, 0xbcfe, 0x10, 0x7ff, 0x0, 0x733c, 0xb, 0x4, 0x3ff, 0x4, 0x6, 0x0, 0x1, 0xfffffff8, 0x0, 0x8001, 0x9, 0x9, 0x4733, 0x0, 0x1, 0x6, 0x8c, 0x200, 0x290, 0x80, 0xffffffcf, 0x6, 0x3, 0x9, 0x7f, 0x2, 0x7, 0xe, 0x2, 0x3ff, 0x7, 0xe, 0x5, 0x78, 0x1, 0x3, 0x6, 0x5, 0x2, 0xeee3, 0x7fff, 0x1, 0x2, 0x6, 0x7ff, 0x58, 0x0, 0x3, 0xbe, 0x1, 0x1, 0xfff, 0x5, 0x7, 0x9, 0xf9, 0xa6e, 0x55, 0x4, 0x9, 0x3, 0x40, 0xe2c, 0x35, 0xe35, 0x0, 0xfffffffd, 0x2f3edcb3, 0xa64, 0x3ff, 0x1187, 0x3896, 0xfffffffd, 0x6682ae9f, 0xf3f8, 0x1000, 0x4, 0x4584, 0x100, 0x2, 0x6, 0xfff, 0x4, 0x3, 0x4, 0xcf4d, 0xc0000, 0x80000001, 0x1, 0x9, 0xffff5b72, 0x5, 0x2, 0x0, 0x6, 0x3, 0x6, 0x8, 0x100, 0xb, 0x2, 0xe62, 0x2, 0x6, 0xc294, 0x9, 0x6, 0x6, 0x7f, 0x7, 0x101, 0x3, 0x4, 0x80b3, 0x1f6, 0x0, 0xb6, 0x1, 0x2, 0x1c, 0x9, 0x7fff, 0x8, 0xd, 0x4, 0x8, 0xff, 0x7, 0x6, 0x4, 0x4, 0x3, 0x7fff, 0x1, 0x6babec04, 0xf, 0x3, 0x8, 0x7, 0x44d40bc9, 0x7, 0xfffeffff, 0x1, 0x7, 0xb04, 0x4, 0x4, 0x8, 0x7, 0xd, 0x7ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}]}, @TCA_CGROUP_EMATCHES={0x78, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xff80}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x8001}, {0x1, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xb335, 0x0, 0x40}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x400}, {{0x4, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xb1, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x72, 0x2}, {0x6, 0x0, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x15f4}, {0x401, 0xfffffff9, 0xd4, 0x29530faa}}}]}]}]}}]}, 0xd58}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 772.294285ms ago: executing program 9 (id=14198): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x27, 0x1, 0x70bd27, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x2008000) 771.943045ms ago: executing program 5 (id=14199): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0080, 0x0) fcntl$notify(r0, 0x402, 0x80000002) r1 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x18) fcntl$notify(r1, 0x402, 0x8000003d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001280)=""/4089, 0xff9) 759.720515ms ago: executing program 9 (id=14200): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(r0, 0x1, 0x1, &(0x7f00000002c0)=[{}], 0x0) 733.935496ms ago: executing program 1 (id=14201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1003c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="af40245bac34", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x20, 0x0, 0x0, 0x100, {[@md5sig={0x13, 0x12, "500ca883e5d7c4560780fecf2211b4ff"}, @nop, @nop]}}}}}}}, 0x0) 681.635268ms ago: executing program 5 (id=14203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 681.227728ms ago: executing program 1 (id=14204): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) acct(0x0) 641.040279ms ago: executing program 0 (id=14205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 345.675129ms ago: executing program 5 (id=14206): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x40044}}], 0x1, 0x4014) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) 336.836469ms ago: executing program 5 (id=14208): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x12f0c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 318.369719ms ago: executing program 9 (id=14209): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 227.482523ms ago: executing program 5 (id=14210): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 165.573785ms ago: executing program 1 (id=14211): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4000000000}, 0x624d, 0x0, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000019140)='@', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 157.620905ms ago: executing program 9 (id=14212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000001000000000000000080872ddd0000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700001000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 78.265658ms ago: executing program 9 (id=14213): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 9 (id=14214): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x8001) kernel console output (not intermixed with test programs): 68] gretap0: entered promiscuous mode [ 473.539325][ T3772] loop4: detected capacity change from 0 to 512 [ 473.609262][ T3772] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.12497: bg 0: block 248: padding at end of block bitmap is not set [ 473.623898][ T3772] loop4: lost filesystem error report for type 5 error -117 [ 473.626069][ T3772] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.12497: Failed to acquire dquot type 1 [ 473.633449][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 473.633470][ C0] EXT4-fs (loop4): last error at time 2000000589: ext4_validate_block_bitmap:441 [ 473.670025][ T3772] loop4: lost filesystem error report for type 5 error -28 [ 473.679432][ T3772] EXT4-fs (loop4): 1 truncate cleaned up [ 473.749299][ T3772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.801047][ T3772] ext4 filesystem being mounted at /2569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.906152][ T3801] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 473.967234][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.089924][ T3820] serio: Serial port ptm0 [ 474.426638][ T3829] bpf: Bad value for 'gid' [ 474.502482][ T3832] loop3: detected capacity change from 0 to 8192 [ 475.058240][ T3853] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12531'. [ 475.060824][ T3851] loop2: detected capacity change from 0 to 256 [ 475.084803][ T3853] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12531'. [ 476.418503][ T3894] SET target dimension over the limit! [ 476.468919][ T3353] net_ratelimit: 8 callbacks suppressed [ 476.468936][ T3353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.630907][ T3915] random: crng reseeded on system resumption [ 477.228131][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 477.228169][ T28] audit: type=1400 audit(2000000592.968:20384): avc: denied { search } for pid=3942 comm="syz.9.12568" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.265919][ T28] audit: type=1400 audit(2000000592.968:20385): avc: denied { search } for pid=3942 comm="syz.9.12568" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.296004][ T28] audit: type=1400 audit(2000000592.968:20386): avc: denied { search } for pid=3942 comm="syz.9.12568" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.325958][ T28] audit: type=1400 audit(2000000592.968:20387): avc: denied { search } for pid=3942 comm="syz.9.12568" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.357728][ T28] audit: type=1400 audit(2000000592.968:20388): avc: denied { add_name } for pid=3942 comm="syz.9.12568" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.379027][ T28] audit: type=1400 audit(2000000592.968:20389): avc: denied { create } for pid=3942 comm="syz.9.12568" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 477.428711][ T28] audit: type=1400 audit(2000000593.038:20390): avc: denied { read append } for pid=3946 comm="syz.9.12570" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 477.475377][ T28] audit: type=1400 audit(2000000593.038:20391): avc: denied { open } for pid=3946 comm="syz.9.12570" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 477.524190][ T28] audit: type=1326 audit(2000000593.098:20392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.2.12574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0165bc819 code=0x0 [ 477.543614][ T3353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.643076][ T28] audit: type=1400 audit(2000000593.388:20393): avc: denied { ioctl } for pid=3958 comm="syz.0.12575" path="socket:[109748]" dev="sockfs" ino=109748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 477.688804][T28713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.830078][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.840136][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.860105][T28713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.080799][ T3976] chnl_net:caif_netlink_parms(): no params data found [ 478.118576][ T3976] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.141807][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.162658][ T3976] bridge_slave_0: entered allmulticast mode [ 478.175775][ T3976] bridge_slave_0: entered promiscuous mode [ 478.183163][ T3976] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.198776][ T3976] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.206054][ T3976] bridge_slave_1: entered allmulticast mode [ 478.219058][ T3976] bridge_slave_1: entered promiscuous mode [ 478.248119][ T3976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.259125][ T3976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.280175][ T3976] team0: Port device team_slave_0 added [ 478.287142][ T3976] team0: Port device team_slave_1 added [ 478.305650][ T3976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.312821][ T3976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.339125][ T3976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.350809][ T3976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.357885][ T3976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.384478][ T3976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.432370][ T3976] hsr_slave_0: entered promiscuous mode [ 478.438608][ T3976] hsr_slave_1: entered promiscuous mode [ 478.444591][ T3976] debugfs: 'hsr0' already exists in 'hsr' [ 478.450792][ T3976] Cannot create hsr debugfs directory [ 478.549135][T17371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.561372][ T4014] netlink: 7 bytes leftover after parsing attributes in process `syz.3.12594'. [ 478.753092][ T3976] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.778946][ T3976] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.796665][ T3976] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.069161][ T3976] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.244633][ T3976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.275958][ T3976] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.302825][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.309935][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.334266][T25186] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.341467][T25186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.422359][ T3976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.433437][ T3976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.550202][ T3976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.591425][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.906234][ T3976] veth0_vlan: entered promiscuous mode [ 479.916780][ T3976] veth1_vlan: entered promiscuous mode [ 479.944604][ T3976] veth0_macvtap: entered promiscuous mode [ 479.962921][ T3976] veth1_macvtap: entered promiscuous mode [ 479.982176][ T3976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.997532][ T3976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.027232][T25186] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.099871][T25186] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.112952][ T4184] netlink: 204 bytes leftover after parsing attributes in process `syz.0.12617'. [ 480.124622][T25186] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.134326][T25186] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.143821][ T4184] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12617'. [ 480.185135][ T4189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12619'. [ 480.488085][ T4237] netlink: 83 bytes leftover after parsing attributes in process `syz.0.12633'. [ 480.575347][ T4253] random: crng reseeded on system resumption [ 480.629558][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.843712][ T4279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.259455][ T4336] loop9: detected capacity change from 0 to 512 [ 481.279565][ T4336] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 481.319836][ T4336] EXT4-fs (loop9): 1 orphan inode deleted [ 481.333429][ T4336] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.351858][ T4336] EXT4-fs (loop9): shut down requested (2) [ 481.376658][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.519332][ T4354] netlink: 'syz.9.12667': attribute type 29 has an invalid length. [ 481.554954][ T4354] netlink: 'syz.9.12667': attribute type 29 has an invalid length. [ 481.580020][ T4354] netlink: 500 bytes leftover after parsing attributes in process `syz.9.12667'. [ 481.637501][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12668'. [ 481.656703][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12668'. [ 481.669155][ T3398] net_ratelimit: 1 callbacks suppressed [ 481.669171][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.951885][ T4388] veth2: entered allmulticast mode [ 481.957507][ T4390] loop0: detected capacity change from 0 to 512 [ 481.994649][ T4390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.044915][ T4390] EXT4-fs (loop0): shut down requested (0) [ 482.086666][ T998] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.276770][ T4421] loop9: detected capacity change from 0 to 256 [ 482.357864][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 482.357880][ T28] audit: type=1326 audit(2000000598.098:20462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 482.390219][ T28] audit: type=1326 audit(2000000598.138:20463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 482.421287][ T4424] loop9: detected capacity change from 0 to 1024 [ 482.435863][ T4424] EXT4-fs: Ignoring removed bh option [ 482.448537][ T4424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 482.455538][ T28] audit: type=1326 audit(2000000598.168:20464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 482.479578][ T28] audit: type=1326 audit(2000000598.168:20465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 482.504802][ T4424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 482.513013][ T4424] System zones: 0-1, 3-36 [ 482.518060][ T28] audit: type=1326 audit(2000000598.168:20466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 482.518574][ T4424] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.562559][ T4429] loop2: detected capacity change from 0 to 128 [ 482.589942][ T28] audit: type=1326 audit(2000000598.168:20467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f246e96c582 code=0x7ffc0000 [ 482.643352][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.655124][ T28] audit: type=1326 audit(2000000598.168:20468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f246e92d04e code=0x7ffc0000 [ 482.700686][ T28] audit: type=1326 audit(2000000598.168:20469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f246e96c647 code=0x7ffc0000 [ 482.725090][T17371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.740897][ T28] audit: type=1326 audit(2000000598.168:20470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f246e92d04e code=0x7ffc0000 [ 482.765534][ T28] audit: type=1326 audit(2000000598.168:20471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.9.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f246e96c4ab code=0x7ffc0000 [ 482.874272][T28716] hid_parser_main: 189 callbacks suppressed [ 482.874295][T28716] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 482.901073][T28716] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.413122][ T4489] netlink: 27 bytes leftover after parsing attributes in process `syz.5.12716'. [ 483.425157][ T4490] loop2: detected capacity change from 0 to 512 [ 483.484183][ T4490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.565794][T24476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.589405][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.725139][ T4513] xt_hashlimit: size too large, truncated to 1048576 [ 483.745305][ T4515] loop9: detected capacity change from 0 to 512 [ 483.752113][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.774006][ T4515] ext4: Bad value for 'min_batch_time' [ 483.800485][ T4515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.919022][T28713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.135987][ T4541] futex_wake_op: syz.3.12738 tries to shift op by -1; fix this program [ 484.293015][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b9e7400: rx timeout, send abort [ 484.302052][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b9e7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 484.790103][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.151752][ T4592] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 485.159298][ T4592] vhci_hcd vhci_hcd.2: default hub control req: 030f vfffa i0001 l0 [ 485.433758][ T4611] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 485.482677][ T4618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.491591][ T4618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.500161][ T4618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.405480][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.422711][ T4667] loop3: detected capacity change from 0 to 8192 [ 486.434468][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.454104][ T4667] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 486.523869][ T4683] loop0: detected capacity change from 0 to 256 [ 486.545298][ T4683] FAT-fs (loop0): Directory bread(block 64) failed [ 486.553298][ T4683] FAT-fs (loop0): Directory bread(block 65) failed [ 486.580023][ T4683] FAT-fs (loop0): Directory bread(block 66) failed [ 486.587978][ T4683] FAT-fs (loop0): Directory bread(block 67) failed [ 486.594863][ T4683] FAT-fs (loop0): Directory bread(block 68) failed [ 486.602289][ T4683] FAT-fs (loop0): Directory bread(block 69) failed [ 486.609022][ T4683] FAT-fs (loop0): Directory bread(block 70) failed [ 486.615712][ T4683] FAT-fs (loop0): Directory bread(block 71) failed [ 486.622403][ T4693] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 486.623223][ T4683] FAT-fs (loop0): Directory bread(block 72) failed [ 486.637052][ T4693] bond1: (slave lo): Enslaving as an active interface with an up link [ 486.655784][ T4683] FAT-fs (loop0): Directory bread(block 73) failed [ 486.770124][ T4705] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.12809'. [ 486.868832][ T4708] loop0: detected capacity change from 0 to 8192 [ 486.868935][ T3398] net_ratelimit: 1029 callbacks suppressed [ 486.869023][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.949854][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.065196][ T4719] loop9: detected capacity change from 0 to 256 [ 487.079180][ T4719] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 487.109656][ T4719] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 487.355004][ T4738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.375424][ T4738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.399524][ T4738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.407716][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.439540][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.461476][ T4739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.480250][ T4737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.027348][T25186] hsr_slave_0: left promiscuous mode [ 488.069488][T25186] hsr_slave_1: left promiscuous mode [ 488.551745][T17371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.583999][ T4747] chnl_net:caif_netlink_parms(): no params data found [ 489.035265][T25186] IPVS: stop unused estimator thread 0... [ 489.093004][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.108915][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.122130][ T4805] loop3: detected capacity change from 0 to 512 [ 489.159051][ T4747] bridge_slave_0: entered allmulticast mode [ 489.171867][ T4805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.193100][ T4747] bridge_slave_0: entered promiscuous mode [ 489.226288][ T4805] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.256917][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.276984][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 489.277003][ T28] audit: type=1400 audit(2000000605.018:20579): avc: denied { rename } for pid=4804 comm="syz.3.12833" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 489.309282][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.350658][ T4747] bridge_slave_1: entered allmulticast mode [ 489.369320][ T4747] bridge_slave_1: entered promiscuous mode [ 489.395259][ T28] audit: type=1400 audit(2000000605.058:20580): avc: denied { unlink } for pid=4804 comm="syz.3.12833" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 489.460772][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.482066][ T2316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.493528][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.542334][ T4747] team0: Port device team_slave_0 added [ 489.571043][ T4822] Invalid argument reading file caps for ./file0 [ 489.580454][ T4747] team0: Port device team_slave_1 added [ 489.648931][ T4827] hsr0: entered promiscuous mode [ 489.667301][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12836'. [ 489.679257][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.688688][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.719657][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.748874][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.766303][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.852108][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.888974][ T28] audit: type=1400 audit(2000000605.628:20581): avc: denied { write } for pid=4841 comm="syz.9.12839" lport=53397 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 489.966211][ T4747] hsr_slave_0: entered promiscuous mode [ 489.985702][ T28] audit: type=1400 audit(2000000605.628:20582): avc: denied { setopt } for pid=4841 comm="syz.9.12839" lport=53397 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 489.986460][ T4747] hsr_slave_1: entered promiscuous mode [ 490.027720][ T4853] loop9: detected capacity change from 0 to 512 [ 490.062423][ T4747] debugfs: 'hsr0' already exists in 'hsr' [ 490.074911][ T4853] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.088728][ T4747] Cannot create hsr debugfs directory [ 490.099837][ T4853] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.315340][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.428993][ T4865] bridge0: entered promiscuous mode [ 490.452718][ T4865] bridge0: entered allmulticast mode [ 490.526093][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12845'. [ 490.549922][ T4872] geneve0: entered promiscuous mode [ 490.565881][ T4872] macsec1: entered promiscuous mode [ 490.571782][ T4872] macsec1: entered allmulticast mode [ 490.579874][ T4872] geneve0: entered allmulticast mode [ 490.586972][ T4872] geneve0: left allmulticast mode [ 490.592895][ T4872] geneve0: left promiscuous mode [ 490.764363][ T4747] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.789112][ T4747] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 490.823350][ T4747] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 490.870285][ T4747] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.978422][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.011404][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.021040][T25186] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.028192][T25186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.072878][T25186] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.079995][T25186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.087504][ T28] audit: type=1400 audit(2000000606.828:20583): avc: denied { ioctl } for pid=4925 comm="syz.0.12854" path="socket:[111508]" dev="sockfs" ino=111508 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.184962][ T28] audit: type=1400 audit(2000000606.928:20584): avc: denied { accept } for pid=4932 comm="syz.0.12855" path="socket:[112542]" dev="sockfs" ino=112542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 491.362865][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.440887][ T4959] loop9: detected capacity change from 0 to 2048 [ 491.487180][ T4959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.518708][ T4959] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.607076][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.874373][ T4747] veth0_vlan: entered promiscuous mode [ 491.910484][ T4747] veth1_vlan: entered promiscuous mode [ 491.936618][ T28] audit: type=1400 audit(2000000607.678:20585): avc: denied { bind } for pid=5005 comm="syz.3.12867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 491.990250][ T28] audit: type=1400 audit(2000000607.728:20586): avc: denied { listen } for pid=5005 comm="syz.3.12867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 492.008672][ T4747] veth0_macvtap: entered promiscuous mode [ 492.066233][ T4747] veth1_macvtap: entered promiscuous mode [ 492.108714][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.118907][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.157700][T25188] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.185167][T25188] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.205493][T25188] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.229988][T25188] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.303763][ T5038] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.362622][ T5038] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.428058][ T5038] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.451045][ T28] audit: type=1400 audit(2000000608.198:20587): avc: denied { name_bind } for pid=5054 comm="syz.8.12878" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 492.487170][ T5059] loop8: detected capacity change from 0 to 1024 [ 492.495803][ T5038] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.529691][ T5059] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 492.559327][ T5025] loop9: detected capacity change from 0 to 32768 [ 492.560698][ T5059] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #3: block 5: comm syz.8.12880: lblock 5 mapped to illegal pblock 5 (length 1) [ 492.582782][ T5059] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 492.582936][ T5059] Quota error (device loop8): write_blk: dquota write failed [ 492.592114][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 492.592134][ C0] EXT4-fs (loop8): initial error at time 2000000608: ext4_map_blocks:828: inode 3: block 5 [ 492.592170][ C0] EXT4-fs (loop8): last error at time 2000000608: ext4_map_blocks:828: inode 3: block 5 [ 492.626247][ T5059] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.12880: Failed to acquire dquot type 0 [ 492.639800][ T5059] loop8: lost filesystem error report for type 5 error -117 [ 492.641998][ T5059] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 5: comm syz.8.12880: lblock 5 mapped to illegal pblock 5 (length 1) [ 492.663506][ T5059] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 492.663834][ T5059] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.12880: Failed to acquire dquot type 0 [ 492.684761][ T5059] loop8: lost filesystem error report for type 5 error -117 [ 492.689209][ T5059] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.12880: Freeing blocks not in datazone - block = 0, count = 4096 [ 492.690731][ T3302] loop9: p1 p3 < > [ 492.696595][ T5059] loop8: lost filesystem error report for type 5 error -117 [ 492.714144][ T5059] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 5: comm syz.8.12880: lblock 5 mapped to illegal pblock 5 (length 1) [ 492.735919][ T3391] net_ratelimit: 11 callbacks suppressed [ 492.735936][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.757018][ T5059] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 492.757177][ T5059] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.12880: Failed to acquire dquot type 0 [ 492.763570][ T5025] loop9: p1 p3 < > [ 492.767274][ T5059] loop8: lost filesystem error report for type 5 error -117 [ 492.794784][ T2999] loop9: p1 p3 < > [ 492.811572][ T5059] EXT4-fs (loop8): 1 orphan inode deleted [ 492.827393][T24389] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.834752][ T5059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.852138][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 492.875185][T24389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.885720][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 492.904530][T24389] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.951697][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 492.962991][T24389] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.972879][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 493.020954][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 493.035014][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 493.048887][T28714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.061216][ T5092] netlink: 'syz.0.12886': attribute type 7 has an invalid length. [ 493.071685][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.077990][ T5092] netlink: 'syz.0.12886': attribute type 7 has an invalid length. [ 493.199597][T28714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.345593][ T5125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12893'. [ 493.507877][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12898'. [ 493.543483][ T5138] hsr_slave_0: left promiscuous mode [ 493.559848][ T5138] hsr_slave_1: left promiscuous mode [ 493.751451][ T3353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.857281][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.075524][ T5206] loop9: detected capacity change from 0 to 128 [ 494.146370][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.146370][ T5215] loop9: rw=1, sector=145, nr_sectors = 8 limit=128 [ 494.199023][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.199023][ T5215] loop9: rw=1, sector=161, nr_sectors = 8 limit=128 [ 494.245705][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.245705][ T5215] loop9: rw=1, sector=177, nr_sectors = 8 limit=128 [ 494.275523][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.275523][ T5215] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 494.290128][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.290128][ T5215] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 494.304091][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.304091][ T5215] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 494.317488][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.317488][ T5215] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 494.339957][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.339957][ T5215] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 494.353721][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.353721][ T5215] loop9: rw=1, sector=273, nr_sectors = 8 limit=128 [ 494.367383][ T5215] syz.9.12912: attempt to access beyond end of device [ 494.367383][ T5215] loop9: rw=1, sector=289, nr_sectors = 8 limit=128 [ 494.392636][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 494.392654][ T28] audit: type=1400 audit(2000000610.138:20594): avc: denied { firmware_load } for pid=5224 comm="syz.8.12914" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 494.465583][ T28] audit: type=1400 audit(2000000610.208:20595): avc: denied { create } for pid=5230 comm="syz.9.12917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 494.486749][ T28] audit: type=1400 audit(2000000610.238:20596): avc: denied { connect } for pid=5230 comm="syz.9.12917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 494.538238][ T28] audit: type=1400 audit(2000000610.278:20597): avc: denied { read } for pid=5230 comm="syz.9.12917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 494.594019][ T28] audit: type=1400 audit(2000000610.338:20598): avc: denied { write } for pid=5230 comm="syz.9.12917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 494.706871][ T5246] netlink: 'syz.8.12923': attribute type 1 has an invalid length. [ 494.889177][ T5258] loop8: detected capacity change from 0 to 128 [ 494.896766][ T5258] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 494.921366][ T5258] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 494.929608][ T5258] FAT-fs (loop8): Filesystem has been set read-only [ 494.936225][ T5258] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 494.949744][ T5258] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 495.084146][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12935'. [ 495.166577][ T5298] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 495.366797][ T5328] netlink: 168 bytes leftover after parsing attributes in process `syz.9.12941'. [ 495.543346][ T28] audit: type=1400 audit(2000000611.288:20599): avc: denied { relabelfrom } for pid=5355 comm="syz.8.12943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 495.565536][ T28] audit: type=1400 audit(2000000611.288:20600): avc: denied { relabelto } for pid=5355 comm="syz.8.12943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 495.701661][ T5382] netlink: 'syz.8.12945': attribute type 18 has an invalid length. [ 495.710262][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12945'. [ 495.724101][ T5382] netlink: 'syz.8.12945': attribute type 18 has an invalid length. [ 495.724108][T24389] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.732351][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12945'. [ 495.749801][T24389] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.759579][T24389] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.768440][T24389] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.030671][ T5425] loop8: detected capacity change from 0 to 512 [ 496.051739][ T5425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.064323][ T5425] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.107301][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.336892][ T5437] loop9: detected capacity change from 0 to 8192 [ 496.381428][ T5433] loop3: detected capacity change from 0 to 32768 [ 496.436928][ T5439] loop8: detected capacity change from 0 to 512 [ 496.446896][ T3302] loop3: p1 p3 < > [ 496.465122][ T5433] loop3: p1 p3 < > [ 496.486767][ T5439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.576299][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.714872][ T2999] loop3: p1 p3 < > [ 496.773730][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 496.785993][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 496.884138][ T5457] loop8: detected capacity change from 0 to 256 [ 496.901770][ T5457] FAT-fs (loop8): bogus number of FAT sectors [ 496.917129][ T5457] FAT-fs (loop8): Can't find a valid FAT filesystem [ 497.053330][ T5467] loop9: detected capacity change from 0 to 1024 [ 497.106866][ T5467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.155655][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.504812][ T28] audit: type=1400 audit(2000000613.248:20601): avc: denied { create } for pid=5497 comm="syz.9.12976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 497.567239][ T5503] xt_hashlimit: size too large, truncated to 1048576 [ 497.580624][ T28] audit: type=1400 audit(2000000613.268:20602): avc: denied { ioctl } for pid=5497 comm="syz.9.12976" path="socket:[113297]" dev="sockfs" ino=113297 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 498.605235][ T28] audit: type=1326 audit(2000000614.348:20603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.3.13002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7fc00000 [ 498.903014][ T5587] netlink: 876 bytes leftover after parsing attributes in process `syz.9.13014'. [ 498.932743][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13014'. [ 499.598502][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 499.598520][ T28] audit: type=1400 audit(2000000615.338:20605): avc: denied { read } for pid=5604 comm="syz.5.13020" path="socket:[114480]" dev="sockfs" ino=114480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 499.682438][ T5605] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 499.683742][ T5611] netlink: 'syz.8.13021': attribute type 15 has an invalid length. [ 499.779548][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13021'. [ 499.817113][ T5620] loop9: detected capacity change from 0 to 128 [ 499.826297][ T5611] netlink: 'syz.8.13021': attribute type 15 has an invalid length. [ 499.855602][ T5620] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 499.876654][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13021'. [ 499.908873][ T5620] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 499.938684][ T5620] FAT-fs (loop9): Filesystem has been set read-only [ 499.945533][ T5620] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 499.999663][ T5620] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 501.001940][ T5636] loop8: detected capacity change from 0 to 512 [ 501.033597][T24387] bridge_slave_1: left allmulticast mode [ 501.157188][T24387] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.167561][ T5636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.183878][T24387] bridge_slave_0: left allmulticast mode [ 501.201851][T24387] bridge_slave_0: left promiscuous mode [ 501.207727][ T5636] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 501.211795][T24387] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.326502][ T28] audit: type=1400 audit(2000000617.068:20606): avc: denied { write } for pid=5635 comm="syz.8.13034" name="file3" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.328416][ T5648] EXT4-fs error (device loop8): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.8.13034: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=8, size=2048 fake=0 [ 501.370283][ T5648] EXT4-fs (loop8): Remounting filesystem read-only [ 501.402120][ T28] audit: type=1400 audit(2000000617.068:20607): avc: denied { rename } for pid=5635 comm="syz.8.13034" name="file3" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.430878][ T28] audit: type=1400 audit(2000000617.068:20608): avc: denied { reparent } for pid=5635 comm="syz.8.13034" name="file3" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.454992][T24387] bond1 (unregistering): Released all slaves [ 501.461549][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.464683][ T28] audit: type=1400 audit(2000000617.068:20609): avc: denied { write } for pid=5635 comm="syz.8.13034" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.493521][ T28] audit: type=1400 audit(2000000617.068:20610): avc: denied { add_name } for pid=5635 comm="syz.8.13034" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.532872][ T28] audit: type=1400 audit(2000000617.068:20611): avc: denied { write } for pid=5635 comm="syz.8.13034" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.570020][ T28] audit: type=1400 audit(2000000617.068:20612): avc: denied { write } for pid=5635 comm="syz.8.13034" name="file0" dev="loop8" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 501.618188][T24387] tipc: Disabling bearer [ 501.624289][T24387] tipc: Left network mode [ 501.641937][ T5662] loop9: detected capacity change from 0 to 128 [ 501.651597][T24387] hsr_slave_0: left promiscuous mode [ 501.671967][ T5662] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 501.693542][ T28] audit: type=1400 audit(2000000617.068:20613): avc: denied { reparent } for pid=5635 comm="syz.8.13034" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 501.751218][ T5662] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 501.768711][ T5662] FAT-fs (loop9): Filesystem has been set read-only [ 501.784129][ T5662] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 501.792112][ T28] audit: type=1400 audit(2000000617.068:20614): avc: denied { remove_name } for pid=5635 comm="syz.8.13034" name="file0" dev="loop8" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 502.152831][T24387] hsr_slave_1: left promiscuous mode [ 502.158609][T24387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.198930][T24387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.273481][T24387] team0 (unregistering): Port device team_slave_1 removed [ 502.365529][ T5695] loop9: detected capacity change from 0 to 32768 [ 502.413477][ T3299] loop9: p1 p3 < > [ 502.422326][ T5695] loop9: p1 p3 < > [ 502.552890][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13057'. [ 502.578551][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13057'. [ 502.594579][T24387] IPVS: stop unused estimator thread 0... [ 503.556580][ T5799] loop0: detected capacity change from 0 to 512 [ 503.586277][ T5799] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 503.617513][ T5799] EXT4-fs (loop0): 1 truncate cleaned up [ 503.633013][ T5799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.656911][ T5804] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.13084'. [ 503.741518][ T998] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.633960][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 504.633978][ T28] audit: type=1400 audit(2000000620.378:20686): avc: denied { read } for pid=5863 comm="syz.8.13101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.744471][ T28] audit: type=1326 audit(2000000620.488:20687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 504.814108][ T28] audit: type=1326 audit(2000000620.488:20688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 504.876602][ T28] audit: type=1326 audit(2000000620.488:20689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 504.954485][ T28] audit: type=1326 audit(2000000620.488:20690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 505.018679][ T28] audit: type=1326 audit(2000000620.488:20691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 505.084495][ T28] audit: type=1326 audit(2000000620.488:20692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 505.144288][ T28] audit: type=1326 audit(2000000620.488:20693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 505.188748][ T28] audit: type=1326 audit(2000000620.488:20694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 505.248685][ T28] audit: type=1326 audit(2000000620.488:20695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5877 comm="syz.3.13108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 505.874057][ T5917] tipc: Started in network mode [ 505.889011][ T5917] tipc: Node identity 84e, cluster identity 4711 [ 505.908009][ T5917] tipc: Node number set to 2126 [ 506.279116][ T5954] syz.3.13140 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 506.327135][ T5928] loop0: detected capacity change from 0 to 256 [ 506.394436][ T5928] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 507.827503][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13171'. [ 507.856468][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13171'. [ 507.902834][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13171'. [ 507.936588][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13171'. [ 508.518586][ T6024] Set syz1 is full, maxelem 65536 reached [ 508.525918][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13182'. [ 508.730756][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13188'. [ 509.007019][ T6077] loop9: detected capacity change from 0 to 1024 [ 509.047199][ T6077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.073104][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.496243][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 510.496261][ T28] audit: type=1400 audit(2000000626.238:20744): avc: denied { ioctl } for pid=6116 comm="syz.0.13209" path="socket:[116245]" dev="sockfs" ino=116245 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 510.752931][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13211'. [ 510.890768][T24387] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.964133][T24395] Bluetooth: hci0: Frame reassembly failed (-84) [ 510.983312][ T6127] gretap1: entered promiscuous mode [ 511.020276][T24387] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.156775][T24387] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.218593][T24387] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.621118][T24387] bond0 (unregistering): Released all slaves [ 511.786513][T24395] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 511.796827][T24387] veth1_macvtap: left promiscuous mode [ 511.817438][T24387] veth0_macvtap: left promiscuous mode [ 511.823515][T24387] veth1_vlan: left promiscuous mode [ 511.829082][T24387] veth0_vlan: left promiscuous mode [ 511.883575][ T6182] netlink: 'syz.9.13230': attribute type 1 has an invalid length. [ 512.079142][ T6191] netlink: 'syz.3.13233': attribute type 1 has an invalid length. [ 512.102371][ T6191] netlink: 'syz.3.13233': attribute type 22 has an invalid length. [ 512.195207][ T6182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.215438][ T6188] bond1: (slave geneve2): making interface the new active one [ 512.230263][ T6188] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 512.239299][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.246618][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.466861][ T6223] netlink: 'syz.9.13241': attribute type 10 has an invalid length. [ 512.494218][ T6223] team0: Port device dummy0 added [ 512.514956][ T6223] netlink: 'syz.9.13241': attribute type 10 has an invalid length. [ 512.569131][ T6223] team0: Port device dummy0 removed [ 512.593717][ T6223] dummy0: entered promiscuous mode [ 512.607206][ T6223] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 512.912932][ T28] audit: type=1326 audit(2000000884.659:20745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 512.983755][ T28] audit: type=1326 audit(2000000884.679:20746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 513.027461][ T6271] netlink: 'syz.3.13249': attribute type 1 has an invalid length. [ 513.029033][ T4066] Bluetooth: hci0: command 0x1003 tx timeout [ 513.036057][T13644] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 513.073601][ T28] audit: type=1326 audit(2000000884.689:20747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 513.101437][ T6271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.110648][ T28] audit: type=1326 audit(2000000884.689:20748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 513.134942][ T28] audit: type=1326 audit(2000000884.689:20749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 513.141909][ T6277] bond2: (slave geneve2): making interface the new active one [ 513.160279][ T28] audit: type=1326 audit(2000000884.689:20750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 513.190268][ T28] audit: type=1326 audit(2000000884.689:20751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 513.216726][ T28] audit: type=1326 audit(2000000884.689:20752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 513.242256][ T6281] block device autoloading is deprecated and will be removed. [ 513.258165][ T28] audit: type=1326 audit(2000000884.689:20753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.13246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0f7c819 code=0x7ffc0000 [ 513.261153][ T6277] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 513.407110][ T6297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13258'. [ 513.438220][ T6299] bond1: option mode: unable to set because the bond device has slaves [ 513.455835][ T6299] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 513.713705][ T6319] loop8: detected capacity change from 0 to 2048 [ 513.772864][ T6319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.828765][ T6330] netlink: 'syz.5.13269': attribute type 10 has an invalid length. [ 513.838791][ T6319] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.872024][ T6334] netlink: 'syz.5.13269': attribute type 10 has an invalid length. [ 513.890731][ T6330] team0: Port device dummy0 added [ 513.931717][ T6334] team0: Port device dummy0 removed [ 513.939768][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.943616][ T6334] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 514.660548][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13283'. [ 514.920788][ T6380] loop3: detected capacity change from 0 to 512 [ 514.955116][ T6380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.967933][ T6380] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.994291][ T2316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.089928][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.102697][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.149825][ T6403] gretap1: entered promiscuous mode [ 515.288760][ T6416] SELinux: failed to load policy [ 515.421027][T28713] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 515.430269][T28713] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 515.927841][ T6448] loop9: detected capacity change from 0 to 512 [ 515.936205][ T6448] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 515.947701][ T6448] EXT4-fs (loop9): 1 truncate cleaned up [ 515.954105][ T6448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.978473][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.002701][ T6451] loop9: detected capacity change from 0 to 512 [ 516.031498][ T6451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.056071][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.114373][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13320'. [ 516.190244][ T6463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.217188][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13322'. [ 517.033529][ T6475] loop3: detected capacity change from 0 to 2048 [ 517.049922][ T6475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.079042][ T2316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.364640][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13331'. [ 517.385516][ T6497] loop3: detected capacity change from 0 to 1024 [ 517.397830][ T6497] EXT4-fs: inline encryption not supported [ 517.407803][ T6497] EXT4-fs: Ignoring removed nobh option [ 517.422472][ T6497] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 517.430932][ T6497] System zones: 0-1, 3-12 [ 517.436109][ T6497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.440971][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 517.440988][ T28] audit: type=1400 audit(2000000889.189:20890): avc: denied { name_connect } for pid=6502 comm="syz.8.13334" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 517.549145][ T2316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.703715][ T6517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.729563][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13340'. [ 517.821729][ T6370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.839654][ T6470] netlink: 'syz.9.13324': attribute type 1 has an invalid length. [ 517.970881][ T6531] netlink: 'syz.5.13346': attribute type 3 has an invalid length. [ 517.985604][ T6531] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13346'. [ 517.995039][ T6527] loop8: detected capacity change from 0 to 4096 [ 518.057373][ T6527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.109213][ T28] audit: type=1400 audit(2000000889.849:20891): avc: denied { mounton } for pid=6526 comm="syz.8.13345" path="/124/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 518.198196][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.335970][ T28] audit: type=1400 audit(2000000890.079:20892): avc: denied { nlmsg_read } for pid=6546 comm="syz.0.13352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 518.509632][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13359'. [ 518.523779][ T6558] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.537173][ T6561] netlink: 'syz.3.13359': attribute type 26 has an invalid length. [ 518.555468][ T6558] bond1: (slave lo): Enslaving as an active interface with an up link [ 518.561073][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13359'. [ 518.569570][ T6558] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 518.599132][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13359'. [ 518.608175][ T6561] netlink: 'syz.3.13359': attribute type 26 has an invalid length. [ 518.616586][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13359'. [ 518.668254][ T6567] loop0: detected capacity change from 0 to 128 [ 518.689308][ T6567] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 518.713316][ T6567] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 518.739300][ T28] audit: type=1400 audit(2000000890.489:20893): avc: denied { setattr } for pid=6566 comm="syz.0.13362" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 518.790470][ T998] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.919087][ T6580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.974222][ T6591] loop3: detected capacity change from 0 to 128 [ 519.413875][ T6620] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.13381'. [ 519.462358][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13382'. [ 519.722985][ T6633] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13385'. [ 519.784409][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13387'. [ 519.819052][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13387'. [ 519.836982][ T6639] syzkaller1: entered promiscuous mode [ 519.858836][ T6639] syzkaller1: entered allmulticast mode [ 520.077833][ T6660] loop8: detected capacity change from 0 to 512 [ 520.114576][ T6666] netlink: 'syz.5.13401': attribute type 1 has an invalid length. [ 520.124166][ T6660] EXT4-fs error (device loop8): ext4_iget_extra_inode:5040: inode #12: comm syz.8.13398: corrupted in-inode xattr: bad e_name length [ 520.157268][ T6660] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 520.158722][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 520.174331][ C1] EXT4-fs (loop8): initial error at time 2000000891: ext4_iget_extra_inode:5040: inode 12 [ 520.184490][ C1] EXT4-fs (loop8): last error at time 2000000891: ext4_iget_extra_inode:5040: inode 12 [ 520.194823][ T6660] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.13398: couldn't read orphan inode 12 (err -117) [ 520.212038][ T6660] loop8: lost filesystem error report for type 5 error -117 [ 520.214837][ T6660] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.260196][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13398'. [ 520.354842][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.421252][ T6671] loop3: detected capacity change from 0 to 256 [ 520.490546][ T6671] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 520.599357][ T28] audit: type=1400 audit(2000000892.349:20894): avc: denied { read } for pid=6694 comm="syz.0.13414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 520.891090][ T28] audit: type=1400 audit(2000000892.639:20895): avc: denied { accept } for pid=6703 comm="syz.8.13418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 521.007040][ T28] audit: type=1400 audit(2000000892.749:20896): avc: denied { create } for pid=6715 comm="syz.5.13421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 521.382225][ T6731] netlink: 'syz.9.13427': attribute type 1 has an invalid length. [ 521.397502][ T6731] bond2: entered promiscuous mode [ 521.403079][ T6731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.425132][ T6731] bond2: (slave bridge1): making interface the new active one [ 521.436928][ T6731] bridge1: entered promiscuous mode [ 521.449853][ T6731] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 521.580850][ T6738] loop9: detected capacity change from 0 to 4096 [ 521.587759][ T6738] EXT4-fs: Ignoring removed bh option [ 521.596750][ T6738] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.653886][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.704126][ T6741] loop9: detected capacity change from 0 to 512 [ 521.712593][ T6741] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 521.759030][ T6741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 521.784610][ T6741] System zones: 1-12 [ 521.793382][ T28] audit: type=1400 audit(2000000893.539:20897): avc: denied { mounton } for pid=6745 comm="syz.3.13433" path="/proc/574/cgroup" dev="proc" ino=118377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 521.818745][ T6741] EXT4-fs (loop9): orphan cleanup on readonly fs [ 521.842006][ T6741] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13431: bg 0: block 361: padding at end of block bitmap is not set [ 521.897027][ T6741] loop9: lost filesystem error report for type 5 error -117 [ 521.897199][ T6741] EXT4-fs (loop9): Remounting filesystem read-only [ 521.904569][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 521.904596][ C0] EXT4-fs (loop9): initial error at time 2000000893: ext4_validate_block_bitmap:441 [ 521.904622][ C0] EXT4-fs (loop9): last error at time 2000000893: ext4_validate_block_bitmap:441 [ 521.982085][ T6741] EXT4-fs (loop9): 1 truncate cleaned up [ 522.003733][ T6741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 522.029937][ T6762] netlink: 'syz.8.13441': attribute type 12 has an invalid length. [ 522.050440][ T6762] netlink: 'syz.8.13441': attribute type 12 has an invalid length. [ 522.068913][ T28] audit: type=1400 audit(2000000893.809:20898): avc: denied { ioctl } for pid=6764 comm="syz.5.13442" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=117384 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.106777][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 522.122020][ T6767] netlink: 'syz.5.13444': attribute type 1 has an invalid length. [ 522.172172][ T6767] bond2: entered promiscuous mode [ 522.188715][ T6767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.256914][ T6775] bond2: (slave bridge1): making interface the new active one [ 522.291753][ T6775] bridge1: entered promiscuous mode [ 522.309340][ T6775] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 522.381308][ T28] audit: type=1400 audit(2000000894.129:20899): avc: denied { read } for pid=6790 comm="syz.5.13452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 522.838773][ T6812] loop3: detected capacity change from 0 to 256 [ 522.851905][ T6784] loop8: detected capacity change from 0 to 32768 [ 522.919459][ T3299] loop8: p1 p3 < > [ 522.940365][ T6784] loop8: p1 p3 < > [ 523.083573][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 523.094902][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 523.099303][ T6822] loop8: detected capacity change from 0 to 512 [ 523.118527][ T6822] EXT4-fs: Ignoring removed nobh option [ 523.148230][ T6822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.161888][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 523.163624][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 523.182905][ T6822] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.244388][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.247105][ T6834] netlink: 'syz.3.13469': attribute type 13 has an invalid length. [ 523.266352][ T6834] netlink: 'syz.3.13469': attribute type 13 has an invalid length. [ 523.272149][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.293679][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.320745][ T6836] netlink: 'syz.5.13471': attribute type 11 has an invalid length. [ 523.330345][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.346186][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.355104][ T6836] netlink: 'syz.5.13471': attribute type 11 has an invalid length. [ 523.369191][ T59] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.404254][ T59] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.434352][T24389] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.461771][T24389] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.649905][ T6868] loop9: detected capacity change from 0 to 512 [ 523.695076][ T6868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.748351][ T6868] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 523.787076][T24891] kernel write not supported for file bpf-prog (pid: 24891 comm: kworker/0:8) [ 523.789781][ T28] audit: type=1400 audit(2000000895.539:20900): avc: denied { ioctl } for pid=6867 comm="syz.9.13484" path="/457/bus/file1" dev="loop9" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 523.871342][ T518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.949994][ T6889] ip6gre2: entered allmulticast mode [ 524.106628][ T6904] syzkaller1: entered promiscuous mode [ 524.130110][ T6904] syzkaller1: entered allmulticast mode [ 524.265893][ T6921] loop0: detected capacity change from 0 to 128 [ 524.284243][ T6921] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 524.313628][ T6921] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 524.386031][ T59] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 524.429011][ T6933] syzkaller1: entered promiscuous mode [ 524.443712][ T6933] syzkaller1: entered allmulticast mode [ 524.687756][ T6959] SELinux: Context system_u:object is not valid (left unmapped). [ 524.696299][ T28] audit: type=1400 audit(2000000896.429:20901): avc: denied { mac_admin } for pid=6956 comm="syz.9.13502" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 524.754672][ T28] audit: type=1400 audit(2000000896.469:20902): avc: denied { relabelto } for pid=6956 comm="syz.9.13502" name="cgroup.procs" dev="cgroup" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 524.813472][ T28] audit: type=1400 audit(2000000896.469:20903): avc: denied { associate } for pid=6956 comm="syz.9.13502" name="cgroup.procs" dev="cgroup" ino=886 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 525.010783][ T6991] netlink: 'syz.0.13511': attribute type 7 has an invalid length. [ 525.036258][ T6991] netlink: 'syz.0.13511': attribute type 7 has an invalid length. [ 525.036226][T24387] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.036396][T24387] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.091278][T24387] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.109218][T24387] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.191149][ T28] audit: type=1326 audit(2000000896.919:20904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.0.13514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f40afc819 code=0x0 [ 525.266070][ T7006] loop8: detected capacity change from 0 to 164 [ 525.275880][ T7006] rock: directory entry would overflow storage [ 525.282533][ T7006] rock: sig=0x5252, size=5, remaining=3 [ 525.377684][ T7014] __nla_validate_parse: 9 callbacks suppressed [ 525.377701][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13519'. [ 525.498384][ T7022] xt_bpf: check failed: parse error [ 525.679018][ T7038] loop8: detected capacity change from 0 to 512 [ 525.701843][ T7038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 525.753634][ T7038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.798837][ T7038] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 525.878972][ T7038] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.13531: corrupted xattr block 33: invalid ea_ino [ 525.897628][ T7038] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 525.906919][ T7038] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.13531: corrupted xattr block 33: invalid ea_ino [ 525.922057][ T7053] netlink: 'syz.9.13538': attribute type 1 has an invalid length. [ 525.945899][ T7053] netlink: 'syz.9.13538': attribute type 2 has an invalid length. [ 526.444005][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.161785][ T7086] loop3: detected capacity change from 0 to 2048 [ 527.236722][ T7099] IPv6: Can't replace route, no match found [ 527.317341][ T7086] loop3: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 527.322729][ T7086] loop3: p4 size 8388608 extends beyond EOD, truncated [ 527.496780][ T7107] loop8: detected capacity change from 0 to 512 [ 527.520031][ T7107] EXT4-fs: Ignoring removed nobh option [ 527.548873][ T7107] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 527.561647][ T7107] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.13560: attempt to clear invalid blocks 1 len 1 [ 527.591729][ T7107] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 527.592227][ T7107] EXT4-fs (loop8): Remounting filesystem read-only [ 527.601408][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 527.601427][ C0] EXT4-fs (loop8): initial error at time 2000000899: ext4_clear_blocks:876: inode 13 [ 527.601456][ C0] EXT4-fs (loop8): last error at time 2000000899: ext4_clear_blocks:876: inode 13 [ 527.666995][ T7107] EXT4-fs (loop8): 1 truncate cleaned up [ 527.680603][ T7107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.726743][ T7107] EXT4-fs (loop8): shut down requested (0) [ 527.771151][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.918862][ T7086] loop3: p155 could not be added: -ENOMEM [ 527.938184][ T7086] loop3: p161 could not be added: -ENOMEM [ 528.317442][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13572'. [ 528.346071][ T7135] ipip1: entered promiscuous mode [ 528.357783][ T7135] ipip1: entered allmulticast mode [ 528.403590][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 528.413521][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 528.416575][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 528.425591][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 528.435697][ T3898] udevd[3898]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 528.497126][ T7147] udevd[7147]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory [ 528.503795][ T7145] udevd[7145]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 528.531077][ T7150] udevd[7150]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 528.534063][ T7149] udevd[7149]: inotify_add_watch(7, /dev/loop3p12, 10) failed: No such file or directory [ 528.541752][ T28] audit: type=1400 audit(2000000900.279:20905): avc: denied { write } for pid=7152 comm="syz.9.13577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 528.560878][ T7144] udevd[7144]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 528.634824][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13580'. [ 528.690229][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13580'. [ 528.715192][ T7164] netlink: 104 bytes leftover after parsing attributes in process `syz.8.13582'. [ 528.930706][ T7173] loop8: detected capacity change from 0 to 4096 [ 528.992721][ T7173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.014983][ T7183] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13589'. [ 529.205299][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.483044][ T28] audit: type=1400 audit(2000000901.229:20906): avc: denied { read } for pid=7217 comm="syz.3.13606" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 529.514527][ T7221] loop8: detected capacity change from 0 to 1024 [ 529.527012][ T28] audit: type=1400 audit(2000000901.229:20907): avc: denied { open } for pid=7217 comm="syz.3.13606" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 529.557935][ T28] audit: type=1400 audit(2000000901.269:20908): avc: denied { ioctl } for pid=7217 comm="syz.3.13606" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 529.601490][ T7221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.634491][ T7221] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.669388][ T7221] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13604: bg 0: block 112: padding at end of block bitmap is not set [ 530.301635][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 530.339450][ T7247] tipc: Started in network mode [ 530.344511][ T7247] tipc: Node identity , cluster identity 4711 [ 530.441827][ T7262] sctp: [Deprecated]: syz.9.13620 (pid 7262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.441827][ T7262] Use struct sctp_sack_info instead [ 530.488501][ T7264] netlink: 'syz.5.13621': attribute type 34 has an invalid length. [ 530.579640][ T7260] loop8: detected capacity change from 0 to 32768 [ 530.619385][ T3299] loop8: p1 p3 < > [ 530.629811][ T7260] loop8: p1 p3 < > [ 531.055519][ T28] audit: type=1326 audit(2000000902.799:20909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.5.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 531.098494][ T28] audit: type=1326 audit(2000000902.799:20910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.5.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 531.148843][ T28] audit: type=1326 audit(2000000902.829:20911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.5.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 531.207399][ T28] audit: type=1326 audit(2000000902.829:20912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.5.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 531.232283][ T28] audit: type=1326 audit(2000000902.829:20913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.5.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 531.257192][ T7284] netlink: 'syz.5.13629': attribute type 19 has an invalid length. [ 531.265474][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13629'. [ 531.278790][ T7284] netlink: 'syz.5.13629': attribute type 19 has an invalid length. [ 531.286708][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13629'. [ 531.296356][ T28] audit: type=1326 audit(2000000902.829:20914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.5.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 531.308844][ T7282] IPv6: Can't replace route, no match found [ 531.324129][ T28] audit: type=1326 audit(2000000902.829:20915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.5.13627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 531.605475][ T7297] netlink: 'syz.5.13636': attribute type 64 has an invalid length. [ 531.621626][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7297 comm=syz.5.13636 [ 531.640438][ T7297] netlink: 'syz.5.13636': attribute type 64 has an invalid length. [ 532.316630][ T7337] tipc: Started in network mode [ 532.329844][ T7337] tipc: Node identity ac1414aa, cluster identity 4711 [ 532.342069][ T7337] tipc: Enabled bearer , priority 10 [ 532.356416][ T7339] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.13654'. [ 532.381966][ T7339] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.13654'. [ 532.618239][ T7356] loop3: detected capacity change from 0 to 4096 [ 532.718092][ T7356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.904594][ T7363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.077746][ T2316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.203475][ T7378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.234591][ T7378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.312827][ T7378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.343576][ T7378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.375588][T24891] tipc: Node number set to 2886997162 [ 533.423219][ T7378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.443559][ T7378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.539078][ T7378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.588858][ T7378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.706996][T25186] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.715486][T25186] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.736995][T25186] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.756491][T25186] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.779533][T25186] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.798056][T25186] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.832859][T25186] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.841265][T25186] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.563677][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 534.563762][ T28] audit: type=1326 audit(2000000906.309:20973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 534.642927][ T28] audit: type=1326 audit(2000000906.309:20974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 534.717904][ T28] audit: type=1326 audit(2000000906.319:20975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 534.768654][ T28] audit: type=1326 audit(2000000906.319:20976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 534.835682][ T28] audit: type=1326 audit(2000000906.319:20977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 534.886044][ T28] audit: type=1326 audit(2000000906.319:20978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 534.923603][ T28] audit: type=1326 audit(2000000906.319:20979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 534.952649][ T28] audit: type=1326 audit(2000000906.319:20980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 535.271457][ T7451] loop8: detected capacity change from 0 to 512 [ 535.292599][ T7451] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 535.322245][ T7451] EXT4-fs (loop8): 1 truncate cleaned up [ 535.334153][ T7451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.364357][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.542710][ T28] audit: type=1400 audit(2000000907.289:20981): avc: denied { map } for pid=7462 comm="syz.0.13703" path="socket:[119490]" dev="sockfs" ino=119490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 535.563885][ T7465] block device autoloading is deprecated and will be removed. [ 535.617230][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13706'. [ 535.647070][ T28] audit: type=1401 audit(2000000907.389:20982): op=setxattr invalid_context="" [ 535.937940][ T7486] 9p: Bad value for 'rfdno' [ 535.987830][ T7490] netlink: 'syz.5.13715': attribute type 2 has an invalid length. [ 535.995916][ T7490] netlink: 'syz.5.13715': attribute type 1 has an invalid length. [ 536.011444][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13715'. [ 536.568665][ T7514] tipc: Started in network mode [ 536.573581][ T7514] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 536.583018][ T7514] tipc: Enabling of bearer rejected, failed to enable media [ 537.029137][ T7556] loop8: detected capacity change from 0 to 1024 [ 537.077354][ T7561] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.13745'. [ 537.092937][ T7556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 537.110915][ T7561] netlink: zone id is out of range [ 537.122046][ T7561] netlink: zone id is out of range [ 537.128661][ T7556] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.164228][ T7561] netlink: set zone limit has 8 unknown bytes [ 537.172206][ T7556] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: block 3: comm syz.8.13744: lblock 3 mapped to illegal pblock 3 (length 3) [ 537.215895][ T7556] EXT4-fs (loop8): Remounting filesystem read-only [ 537.354103][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 537.619379][ T7584] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.664540][ T7592] loop8: detected capacity change from 0 to 512 [ 537.673165][ T7584] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.708849][ T7592] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 537.727316][ T7592] System zones: 0-2, 18-18, 34-35 [ 537.739639][ T7592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.752630][ T7592] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.825978][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.868457][ T7584] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.885030][ T7584] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.909684][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13765'. [ 537.964079][ T7584] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.985185][ T7584] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.043514][ T7632] blktrace: Concurrent blktraces are not allowed on loop6 [ 538.059978][ T7584] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.085742][ T7584] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.162887][T24389] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.177023][T24389] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.193118][T24389] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.211162][T24389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.226148][T24389] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.236431][T24389] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.246615][T24389] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.256807][T24389] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.273247][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13783'. [ 538.413214][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13790'. [ 539.194004][ T7724] Invalid argument reading file caps for ./file0 [ 539.371892][T17276] IPVS: starting estimator thread 0... [ 539.478788][ T7742] IPVS: using max 2688 ests per chain, 134400 per kthread [ 539.940187][ T7792] netlink: 'syz.5.13843': attribute type 12 has an invalid length. [ 539.960984][ T7792] netlink: 'syz.5.13843': attribute type 2 has an invalid length. [ 539.991147][ T7792] netlink: 128 bytes leftover after parsing attributes in process `syz.5.13843'. [ 540.008969][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.182618][ T7804] Process accounting resumed [ 540.241615][ T7810] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.13852'. [ 540.277542][ T7810] netlink: zone id is out of range [ 540.284841][ T7810] netlink: zone id is out of range [ 540.312263][ T7810] netlink: set zone limit has 8 unknown bytes [ 540.370523][ T7817] netlink: 'syz.9.13855': attribute type 4 has an invalid length. [ 540.957770][T17276] kernel read not supported for file /vcs (pid: 17276 comm: kworker/1:5) [ 540.976112][ T7872] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 541.083829][ T7896] xt_hashlimit: size too large, truncated to 1048576 [ 541.137070][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 541.137088][ T28] audit: type=1400 audit(2000000912.879:21010): avc: denied { write } for pid=7902 comm="syz.8.13887" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 541.246246][ T7912] netlink: 'syz.8.13891': attribute type 4 has an invalid length. [ 541.295030][ T7917] loop8: detected capacity change from 0 to 512 [ 541.304707][ T28] audit: type=1326 audit(2000000913.059:21011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.5.13894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 541.329369][ T28] audit: type=1326 audit(2000000913.059:21012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.5.13894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 541.353767][ T28] audit: type=1326 audit(2000000913.059:21013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.5.13894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 541.377906][ T28] audit: type=1326 audit(2000000913.059:21014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.5.13894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 541.403595][ T28] audit: type=1326 audit(2000000913.059:21015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.5.13894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 541.437942][ T7917] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.461166][ T28] audit: type=1400 audit(2000000913.209:21016): avc: denied { ioctl } for pid=7925 comm="syz.5.13896" path="socket:[121278]" dev="sockfs" ino=121278 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 541.464203][ T7922] Invalid option length (63724) for dns_resolver key [ 541.486442][ T7917] ext4 filesystem being mounted at /233/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.517328][ T7928] netlink: 'syz.5.13897': attribute type 12 has an invalid length. [ 541.528724][ T7928] netlink: 'syz.5.13897': attribute type 29 has an invalid length. [ 541.536726][ T7928] netlink: 148 bytes leftover after parsing attributes in process `syz.5.13897'. [ 541.558302][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.623818][ T7936] dvmrp0: entered allmulticast mode [ 541.949412][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.957874][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.988231][ T7950] loop3: detected capacity change from 0 to 128 [ 542.331212][ T28] audit: type=1400 audit(2000000914.069:21017): avc: denied { shutdown } for pid=7958 comm="syz.8.13910" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 542.585776][ T7975] syzkaller1: entered promiscuous mode [ 542.598586][ T7975] syzkaller1: entered allmulticast mode [ 542.660284][ T28] audit: type=1400 audit(2000000914.409:21018): avc: denied { mount } for pid=7981 comm="syz.8.13921" name="/" dev="autofs" ino=122496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 543.314028][ T8021] loop3: detected capacity change from 0 to 1024 [ 543.340756][ T8021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.367852][ T2316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.405249][ T28] audit: type=1326 audit(2000000915.149:21019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.5.13939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 543.776665][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13946'. [ 543.867504][ T12] tipc: Subscription rejected, illegal request [ 544.312551][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13956'. [ 544.322542][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13956'. [ 544.332044][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13956'. [ 544.341374][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13956'. [ 544.781633][ T8084] loop8: detected capacity change from 0 to 2048 [ 544.823007][ T8084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.939157][ T4747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.301154][ T8114] uprobe: syz.9.13972:8114 failed to unregister, leaking uprobe [ 548.337630][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13979'. [ 548.395158][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 548.395175][ T28] audit: type=1400 audit(2000000920.139:21030): avc: denied { read } for pid=8140 comm="syz.8.13984" lport=52440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 548.439179][ T8141] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13983'. [ 549.180958][ T28] audit: type=1400 audit(2000000920.929:21031): avc: denied { read open } for pid=8181 comm="syz.9.13999" path="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 549.448980][ T8202] loop3: detected capacity change from 0 to 1024 [ 549.465744][ T8202] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 549.474126][ T8202] System zones: 0-1, 3-36 [ 549.482170][ T8202] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.14009: bad orphan inode 134217728 [ 549.497409][ T8202] loop3: lost filesystem error report for type 5 error -117 [ 549.498006][ T8202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.531091][ T8202] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.556117][ T8208] ip6gre1: entered promiscuous mode [ 549.561545][ T8208] ip6gre1: entered allmulticast mode [ 549.730922][ T8219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14016'. [ 549.745716][ T8222] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8222 comm=syz.8.14017 [ 549.869627][ T8239] loop3: detected capacity change from 0 to 128 [ 549.876864][ T8239] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 549.890461][ T8239] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 549.922379][ T28] audit: type=1400 audit(2000000921.669:21032): avc: denied { getopt } for pid=8238 comm="syz.3.14024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 549.952012][T25188] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 550.000481][ T8249] loop3: detected capacity change from 0 to 256 [ 550.061898][ T8257] vcan0: tx drop: invalid sa for name 0x0001000000000000 [ 550.114581][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14030'. [ 550.234249][ T8276] ip6gre2: entered promiscuous mode [ 550.236571][ T8278] loop3: detected capacity change from 0 to 256 [ 550.240395][ T8276] ip6gre2: entered allmulticast mode [ 550.275590][ T8276] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 550.398675][T13644] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 550.405014][ T4066] Bluetooth: hci0: command 0x1003 tx timeout [ 550.489080][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14045'. [ 550.698784][T23899] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 550.724585][ T8309] ip6gre1: entered promiscuous mode [ 550.738771][ T8309] ip6gre1: entered allmulticast mode [ 550.820878][ T8311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.860554][ T8311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.932329][ T8311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.957657][ T8311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.019014][ T8311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.041133][ T8311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.061435][ T28] audit: type=1326 audit(2000000922.809:21033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8327 comm="syz.9.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 551.122567][ T28] audit: type=1326 audit(2000000922.809:21034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8327 comm="syz.9.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 551.139008][ T8311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.184400][ T8335] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14062'. [ 551.197466][ T8311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.200135][ T28] audit: type=1326 audit(2000000922.839:21035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8327 comm="syz.9.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 551.246268][ T28] audit: type=1326 audit(2000000922.839:21036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8327 comm="syz.9.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 551.270062][T23899] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 551.296421][ T28] audit: type=1326 audit(2000000922.839:21037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8327 comm="syz.9.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 551.331028][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.331582][ T28] audit: type=1326 audit(2000000922.839:21038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.9.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f246e92d04e code=0x7ffc0000 [ 551.364381][ T28] audit: type=1326 audit(2000000922.859:21039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8327 comm="syz.9.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 551.365330][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.459986][T24395] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.468306][T24395] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.519515][ T8340] ip6gre3: entered promiscuous mode [ 551.531649][ T8340] ip6gre3: entered allmulticast mode [ 551.547111][T24395] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.556224][ T8340] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 551.578723][T24395] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.597259][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 551.619658][T24891] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 551.627321][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 551.662079][ T8346] process '/newroot/441/file0' started with executable stack [ 551.670055][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.688447][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.707291][ T8344] sit2: entered allmulticast mode [ 551.738975][ T3353] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 552.468715][ T3353] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 552.834874][ T8333] kexec: Could not allocate control_code_buffer [ 552.936511][ T8389] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 552.952484][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14084'. [ 552.964077][ T8386] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 553.051379][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14086'. [ 553.061443][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14086'. [ 553.070743][ T8395] netlink: 'syz.3.14086': attribute type 6 has an invalid length. [ 553.092571][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14086'. [ 553.102479][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14086'. [ 553.111550][ T8395] netlink: 'syz.3.14086': attribute type 6 has an invalid length. [ 553.147985][ T8399] loop3: detected capacity change from 0 to 256 [ 553.326628][ T8412] loop3: detected capacity change from 0 to 164 [ 553.351673][ T8412] rock: directory entry would overflow storage [ 553.357872][ T8412] rock: sig=0x4f50, size=4, remaining=3 [ 553.385886][ T8412] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 553.428201][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 553.428218][ T28] audit: type=1326 audit(2000000925.169:21075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.476433][ T28] audit: type=1326 audit(2000000925.169:21076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.500192][ T28] audit: type=1326 audit(2000000925.169:21077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.525866][ T8421] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 553.551471][ T28] audit: type=1326 audit(2000000925.179:21078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.599073][ T28] audit: type=1326 audit(2000000925.179:21079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.680091][ T28] audit: type=1326 audit(2000000925.179:21080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.718255][ T28] audit: type=1326 audit(2000000925.209:21081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.742244][ T28] audit: type=1326 audit(2000000925.209:21082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.774262][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14110'. [ 553.783633][ T28] audit: type=1326 audit(2000000925.209:21083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.809172][ T28] audit: type=1326 audit(2000000925.209:21084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.9.14098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246e96c819 code=0x7ffc0000 [ 553.834119][ T8455] FAT-fs (loop17): unable to read boot sector [ 554.148810][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 555.339862][ T8587] loop3: detected capacity change from 0 to 512 [ 555.358253][ T8587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 555.410003][ T8587] EXT4-fs (loop3): 1 truncate cleaned up [ 555.416295][ T8587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.474463][ T8587] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 555.557421][ T2316] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 555.589359][ T2316] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 555.601314][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 555.695308][ T2844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.518470][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 556.624757][ T8636] xt_hashlimit: size too large, truncated to 1048576 [ 556.765920][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.799733][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.831235][ T8609] bridge_slave_0: entered allmulticast mode [ 556.846835][ T8609] bridge_slave_0: entered promiscuous mode [ 556.862488][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.869755][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.877190][ T8609] bridge_slave_1: entered allmulticast mode [ 556.883748][ T8609] bridge_slave_1: entered promiscuous mode [ 556.931276][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.960254][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.001323][ T8609] team0: Port device team_slave_0 added [ 557.019795][ T8609] team0: Port device team_slave_1 added [ 557.067722][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.082814][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.135947][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.172036][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.179663][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.207102][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.236187][ T8609] hsr_slave_0: entered promiscuous mode [ 557.243215][ T8609] hsr_slave_1: entered promiscuous mode [ 557.528579][ T8674] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 557.658970][ T8688] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 557.730347][ T8609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.766128][ T8609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.801631][ T8609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.833193][ T8609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.998998][T25186] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.010850][T25186] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.026078][ T8728] __nla_validate_parse: 1 callbacks suppressed [ 558.026096][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14173'. [ 558.043433][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.063808][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14173'. [ 558.074767][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.086858][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14173'. [ 558.098959][T24399] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.106130][T24399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.153034][T24399] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.160226][T24399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.204847][T25186] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.217950][T25186] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.289858][T25186] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.319073][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14173'. [ 558.327931][T25186] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.341007][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14173'. [ 558.371499][T25186] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.378758][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14173'. [ 558.397436][T25186] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.486928][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.560735][T25186] bridge_slave_1: left allmulticast mode [ 558.566545][T25186] bridge_slave_1: left promiscuous mode [ 558.586275][T25186] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.607552][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 558.607615][ T28] audit: type=1326 audit(2000000930.349:21105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.14177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 558.639847][T25186] bridge_slave_0: left allmulticast mode [ 558.656146][T25186] bridge_slave_0: left promiscuous mode [ 558.665284][T25186] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.677898][ T28] audit: type=1326 audit(2000000930.349:21106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.14177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 558.706669][ T28] audit: type=1326 audit(2000000930.349:21107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.14177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 558.745491][ T28] audit: type=1326 audit(2000000930.349:21108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.14177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 558.772637][ T28] audit: type=1326 audit(2000000930.349:21109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.14177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 558.813915][ T28] audit: type=1326 audit(2000000930.349:21110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.14177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 558.838414][ T28] audit: type=1326 audit(2000000930.349:21111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.14177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 558.909636][ T8791] netlink: 'syz.5.14181': attribute type 21 has an invalid length. [ 558.917726][ T8791] IPv6: NLM_F_CREATE should be specified when creating new route [ 558.939597][ T8791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.946937][ T8791] IPv6: NLM_F_CREATE should be set when creating new route [ 558.954268][ T8791] IPv6: NLM_F_CREATE should be set when creating new route [ 558.959396][ T28] audit: type=1326 audit(2000000930.349:21112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8774 comm="syz.5.14177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e359c819 code=0x7ffc0000 [ 558.961513][ T8791] IPv6: NLM_F_CREATE should be set when creating new route [ 559.071461][T25186] bond2 (unregistering): (slave geneve2): Releasing active interface [ 559.130076][T25186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.161199][T25186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.198599][T25186] bond0 (unregistering): Released all slaves [ 559.228374][T25186] bond1 (unregistering): (slave vlan0): Releasing backup interface [ 559.261061][T25186] bond1 (unregistering): Released all slaves [ 559.290628][T25186] bond2 (unregistering): Released all slaves [ 559.402577][T25186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.428725][T25186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.437307][T25186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.449788][T25186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.461775][T25186] veth1_macvtap: left promiscuous mode [ 559.473176][T25186] veth0_macvtap: left promiscuous mode [ 559.488816][T25186] veth1_vlan: left promiscuous mode [ 559.498795][T25186] veth0_vlan: left promiscuous mode [ 559.732560][ T8609] veth0_vlan: entered promiscuous mode [ 559.754263][ T8609] veth1_vlan: entered promiscuous mode [ 559.798873][ T8609] veth0_macvtap: entered promiscuous mode [ 559.823409][ T8609] veth1_macvtap: entered promiscuous mode [ 559.857500][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.887594][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.924490][T24387] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.950605][T24387] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.967543][T24387] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.997574][T24387] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.108529][ T28] audit: type=1326 audit(2000000931.849:21113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.1.14143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247506c819 code=0x7ffc0000 [ 560.176061][ T28] audit: type=1326 audit(2000000931.889:21114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.1.14143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247506c819 code=0x7ffc0000 [ 560.220017][ T8860] chnl_net:caif_netlink_parms(): no params data found [ 560.275331][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.302132][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.328530][ T8860] bridge_slave_0: entered allmulticast mode [ 560.356429][ T8860] bridge_slave_0: entered promiscuous mode [ 560.386014][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.410740][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.446464][ T8860] bridge_slave_1: entered allmulticast mode [ 560.484157][ T8860] bridge_slave_1: entered promiscuous mode [ 560.544269][T17276] Process accounting resumed [ 560.567365][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.619496][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.681367][ T8860] team0: Port device team_slave_0 added [ 560.714073][ T8860] team0: Port device team_slave_1 added [ 560.735351][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.755472][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.821179][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.835368][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.842692][ T8955] loop6: detected capacity change from 0 to 7 [ 560.852407][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.891898][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.955609][ T8860] hsr_slave_0: entered promiscuous mode [ 560.989370][ T8860] hsr_slave_1: entered promiscuous mode [ 561.008793][ T8971] netlink: 36 bytes leftover after parsing attributes in process `syz.9.14212'. [ 561.029268][ T8860] debugfs: 'hsr0' already exists in 'hsr' [ 561.035052][ T8860] Cannot create hsr debugfs directory [ 561.161588][ T8985] loop1: detected capacity change from 0 to 4096 [ 561.187543][ T8974] ================================================================== [ 561.194958][ T8985] EXT4-fs: Ignoring removed bh option [ 561.195691][ T8974] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 561.209701][ T8974] [ 561.212046][ T8974] write to 0xffff888104a26768 of 8 bytes by task 8963 on cpu 0: [ 561.219866][ T8974] shmem_file_splice_read+0x470/0x600 [ 561.225284][ T8974] splice_direct_to_actor+0x26e/0x670 [ 561.230695][ T8974] do_splice_direct+0x119/0x1a0 [ 561.235724][ T8974] do_sendfile+0x382/0x650 [ 561.240150][ T8974] __x64_sys_sendfile64+0x105/0x150 [ 561.245355][ T8974] x64_sys_call+0x2dc4/0x3020 [ 561.250053][ T8974] do_syscall_64+0x12c/0x370 [ 561.254649][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.260633][ T8974] [ 561.262960][ T8974] write to 0xffff888104a26768 of 8 bytes by task 8974 on cpu 1: [ 561.270589][ T8974] shmem_file_splice_read+0x470/0x600 [ 561.276062][ T8974] splice_direct_to_actor+0x26e/0x670 [ 561.281489][ T8974] do_splice_direct+0x119/0x1a0 [ 561.286369][ T8974] do_sendfile+0x382/0x650 [ 561.290809][ T8974] __x64_sys_sendfile64+0x105/0x150 [ 561.296016][ T8974] x64_sys_call+0x2dc4/0x3020 [ 561.300704][ T8974] do_syscall_64+0x12c/0x370 [ 561.305299][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.311196][ T8974] [ 561.313519][ T8974] value changed: 0x0000000000001af8 -> 0x0000000000001afa [ 561.320620][ T8974] [ 561.322938][ T8974] Reported by Kernel Concurrency Sanitizer on: [ 561.329089][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.5.14210 Tainted: G W syzkaller #0 PREEMPT(full) [ 561.340029][ T8974] Tainted: [W]=WARN [ 561.343832][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.353884][ T8974] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 561.559405][ T8985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.785392][T25186] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.870411][T25186] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.970593][T25186] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.070806][T25186] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.308696][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.316542][T25186] bond1 (unregistering): (slave geneve2): Releasing active interface [ 562.360305][T25186] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 562.368638][T25186] bridge1 (unregistering): left promiscuous mode [ 562.405122][ T8984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.420901][T25186] bond0 (unregistering): left promiscuous mode [ 562.427144][T25186] dummy0: left promiscuous mode [ 562.433134][T25186] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 562.442918][T25186] bond0 (unregistering): Released all slaves [ 562.451103][T25186] bond1 (unregistering): Released all slaves [ 562.461359][T25186] bond2 (unregistering): Released all slaves [ 562.493955][T25186] batadv0: left promiscuous mode [ 562.501151][T25186] hsr_slave_0: left promiscuous mode [ 562.506768][T25186] hsr_slave_1: left promiscuous mode [ 562.515351][T25186] veth1_macvtap: left promiscuous mode [ 562.521053][T25186] veth0_macvtap: left promiscuous mode [ 562.526526][T25186] veth1_vlan: left promiscuous mode [ 562.532084][T25186] veth0_vlan: left promiscuous mode [ 562.793201][T25186] IPVS: stop unused estimator thread 0... [ 562.884429][T25186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.912233][T25186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.969063][T25186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.022024][T25186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.103629][T25186] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.113581][T25186] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.170178][T25186] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.180126][T25186] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.235676][T25186] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.247541][T25186] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.279906][T25186] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.289827][T25186] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.368028][T25186] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.378805][T25186] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.433588][T25186] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.443464][T25186] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.480443][T25186] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.491643][T25186] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.540299][T25186] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.550184][T25186] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.588720][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 563.630143][T25186] bridge_slave_1: left allmulticast mode [ 563.635929][T25186] bridge_slave_1: left promiscuous mode [ 563.641922][T25186] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.650358][T25186] bridge_slave_0: left allmulticast mode [ 563.656034][T25186] bridge_slave_0: left promiscuous mode [ 563.662189][T25186] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.673971][T25186] bridge_slave_1: left allmulticast mode [ 563.680576][T25186] bridge_slave_1: left promiscuous mode [ 563.686339][T25186] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.695228][T25186] bridge_slave_0: left allmulticast mode [ 563.701000][T25186] bridge_slave_0: left promiscuous mode [ 563.706711][T25186] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.715177][T25186] bridge_slave_1: left allmulticast mode [ 563.721146][T25186] bridge_slave_1: left promiscuous mode [ 563.726782][T25186] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.734547][T25186] bridge_slave_0: left allmulticast mode [ 563.740376][T25186] bridge_slave_0: left promiscuous mode [ 563.746100][T25186] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.891167][T25186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.901307][T25186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.911076][T25186] bond0 (unregistering): Released all slaves [ 563.941031][T25186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.950744][T25186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.960068][T25186] bond0 (unregistering): Released all slaves [ 563.991315][T25186] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 563.999496][T25186] bridge1 (unregistering): left promiscuous mode [ 564.040736][T25186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.050370][T25186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.060311][T25186] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 564.069538][T25186] bond0 (unregistering): Released all slaves [ 564.077142][T25186] bond1 (unregistering): (slave lo): Releasing backup interface [ 564.085245][T25186] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 564.096488][T25186] bond1 (unregistering): Released all slaves [ 564.104642][T25186] bond2 (unregistering): Released all slaves [ 564.142302][T25186] bond0 (unregistering): Released all slaves [ 564.150403][T25186] bond1 (unregistering): (slave lo): Releasing backup interface [ 564.158330][T25186] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 564.170349][T25186] bond1 (unregistering): Released all slaves [ 564.196146][T25186] tipc: Disabling bearer [ 564.201632][T25186] tipc: Left network mode [ 564.206159][T25186] tipc: Left network mode [ 564.215282][T25186] hsr_slave_0: left promiscuous mode [ 564.221242][T25186] hsr_slave_1: left promiscuous mode [ 564.227019][T25186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.235962][T25186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.244194][T25186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.252485][T25186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.262712][T25186] hsr_slave_0: left promiscuous mode [ 564.268877][T25186] hsr_slave_1: left promiscuous mode [ 564.274705][T25186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.282543][T25186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.292144][T25186] hsr_slave_0: left promiscuous mode [ 564.297840][T25186] hsr_slave_1: left promiscuous mode [ 564.304178][T25186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.311706][T25186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.319278][T25186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.326709][T25186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.342154][T25186] veth1_macvtap: left promiscuous mode [ 564.347641][T25186] veth0_macvtap: left promiscuous mode [ 564.353258][T25186] veth1_vlan: left promiscuous mode [ 564.358516][T25186] veth0_vlan: left promiscuous mode [ 564.364636][T25186] veth1_macvtap: left promiscuous mode [ 564.370179][T25186] veth1_vlan: left promiscuous mode [ 564.375496][T25186] veth0_vlan: left promiscuous mode [ 564.381603][T25186] veth1_macvtap: left promiscuous mode [ 564.387233][T25186] veth0_macvtap: left promiscuous mode [ 564.392774][T25186] veth1_vlan: left promiscuous mode [ 564.398238][T25186] veth0_vlan: left promiscuous mode [ 564.532254][T25186] team0 (unregistering): Port device team_slave_1 removed [ 564.541691][T25186] team0 (unregistering): Port device team_slave_0 removed [ 564.594027][T25186] team0 (unregistering): Port device team_slave_1 removed [ 564.604642][T25186] team0 (unregistering): Port device team_slave_0 removed [ 564.655104][T25186] team0 (unregistering): Port device team_slave_1 removed [ 564.665771][T25186] team0 (unregistering): Port device team_slave_0 removed [ 565.461064][T25186] IPVS: stop unused estimator thread 0... [ 565.467178][T25186] IPVS: stop unused estimator thread 0...