last executing test programs: 3m20.199339871s ago: executing program 32 (id=85): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x200000000000007}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m11.788845859s ago: executing program 33 (id=301): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000072000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x9, 0xfffffffffffffffe, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r0, 0x1}, 0xc) 2m7.719328333s ago: executing program 34 (id=1712): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x4, @remote, 0x6}]}, &(0x7f0000000240)=0x10) 1m35.900098629s ago: executing program 6 (id=2406): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1m35.726664533s ago: executing program 6 (id=2409): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 1m35.704710734s ago: executing program 6 (id=2410): unshare(0x6020400) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m35.680125715s ago: executing program 6 (id=2411): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m35.601978847s ago: executing program 6 (id=2414): mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) 1m35.528406568s ago: executing program 6 (id=2419): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100000056", 0x19}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m24.495586671s ago: executing program 7 (id=2643): syz_io_uring_setup(0x1d10, &(0x7f0000000640)={0x0, 0x5288, 0x400, 0x1, 0x2a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000600)) r1 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x2000000, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r1, 0x9) syz_io_uring_complete(r0, r1) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m24.495309711s ago: executing program 7 (id=2644): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_register(r0, &(0x7f00000002c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x100000000, 0x3a, '@%#,-]@]', 0x3a, '|\x12}(]', 0x3a, './file0/file0', 0x3a, [0x0, 0x43, 0x43]}, 0x3d) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) 1m24.375725024s ago: executing program 7 (id=2648): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000000, @loopback, 0x402, 0x4}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x80, @loopback, 0xe6e0, 0x2004}, 0x20) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x3}, 0x20) 1m24.327288626s ago: executing program 7 (id=2650): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) 1m24.314202395s ago: executing program 7 (id=2651): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1m24.121910201s ago: executing program 7 (id=2656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002800000004"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x5, 0x50, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 1m24.071490252s ago: executing program 35 (id=2656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002800000004"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x5, 0x50, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 1m20.452553582s ago: executing program 36 (id=2419): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100000056", 0x19}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 58.503879204s ago: executing program 8 (id=3023): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 58.462029915s ago: executing program 8 (id=3025): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) 58.24804772s ago: executing program 8 (id=3039): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 58.130474223s ago: executing program 8 (id=3031): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) 58.069186414s ago: executing program 8 (id=3032): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$ptp(r2, &(0x7f0000000740)=""/123, 0x7b) 57.787592812s ago: executing program 8 (id=3038): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x0, 0x0) 57.739371512s ago: executing program 37 (id=3038): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x0, 0x0) 29.675332017s ago: executing program 9 (id=3519): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6009b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1ff, 0x4}, 0x4080, 0x35, 0x6, 0x8, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000901000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0xd8) getdents(r0, 0x0, 0x0) 29.492251931s ago: executing program 9 (id=3521): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 28.634430132s ago: executing program 9 (id=3537): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 28.518044805s ago: executing program 9 (id=3541): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200880, &(0x7f0000000680)={[{@grpquota}, {@sysvgroups}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") 28.195526373s ago: executing program 9 (id=3534): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) 27.91545602s ago: executing program 9 (id=3540): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 27.90567143s ago: executing program 38 (id=3540): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 8.872677721s ago: executing program 1 (id=3910): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0x4212, r0, 0x58, &(0x7f0000000080)) 8.768142834s ago: executing program 1 (id=3914): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.734993194s ago: executing program 1 (id=3916): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) unshare(0x22020600) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8) 8.684415436s ago: executing program 1 (id=3919): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@quota}, {@sysvgroups}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x104a}], 0x1, 0x0, 0x0, 0x9) 8.51389866s ago: executing program 1 (id=3921): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000380)=0xffffffff, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 6.639517236s ago: executing program 1 (id=3968): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 6.600846257s ago: executing program 39 (id=3968): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 2.198908906s ago: executing program 0 (id=4031): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000440cf313ac1414aa80000009000000002400000000000000000000000700000044106300000007ff0000000000007fff94040000000000001400000000000000000000000200000004"], 0x60}}], 0x1, 0x50008000) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 2.198737406s ago: executing program 3 (id=4033): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.02487848s ago: executing program 0 (id=4035): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0x1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x440e0}, 0x98) 1.745467307s ago: executing program 5 (id=4043): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 1.467240114s ago: executing program 2 (id=4046): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 1.428358315s ago: executing program 5 (id=4047): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0xc0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x8, 0x1, 0x7fffffff, 0x42}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.424176175s ago: executing program 2 (id=4048): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, 0x0, 0x44042, 0x1bf) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 1.393159446s ago: executing program 3 (id=4049): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1e, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x83a7}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xffffffffffff1810, 0xa482) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.288384479s ago: executing program 2 (id=4052): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x8) 1.243487459s ago: executing program 3 (id=4053): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@local, @in6=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8000000000000001, 0x4, 0x4, 0x100000000, 0x5, 0xb0f4, 0xe}, {0x0, 0x100000001, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in=@multicast1, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xffffdffe, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.150264252s ago: executing program 3 (id=4055): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@oldalloc}, {@nodiscard}, {@nobarrier}]}, 0xff, 0x4ce, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) 1.049021825s ago: executing program 2 (id=4057): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffffffff, 0x0, 0x8000, 0xbbd7, 0x85, "10120dfe0ef7f0220000ff490a0080002a0008"}) 1.014839945s ago: executing program 4 (id=4058): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r0) 927.446497ms ago: executing program 5 (id=4059): getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000c40)='./file2\x00', 0x808080, &(0x7f00000001c0), 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b442, 0xa) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0x6, 0x1001, 0x1, 0x1}) 922.578608ms ago: executing program 4 (id=4060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) 849.125229ms ago: executing program 0 (id=4061): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 757.033622ms ago: executing program 0 (id=4062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x3c, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x8000) 756.899772ms ago: executing program 4 (id=4063): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x7, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x20001}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xfd}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 669.042214ms ago: executing program 0 (id=4064): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 668.949064ms ago: executing program 4 (id=4065): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x1, 0x8, 0x11, 0xffffffffffffffff, 0x4a9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0xc}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x8000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x3}, 0x80, {0x3}}) 487.740518ms ago: executing program 3 (id=4066): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0xa8c01) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 470.024069ms ago: executing program 0 (id=4067): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x4}, 0x0, 0x0, 0x0) 385.886261ms ago: executing program 4 (id=4068): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0xf, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5098, 0x2, @perf_config_ext={0x9, 0x2}, 0x4590, 0xfffffffffffffffc, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 375.071361ms ago: executing program 5 (id=4069): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 259.044414ms ago: executing program 4 (id=4070): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0xc0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x8, 0x1, 0x7fffffff, 0x42}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) 257.090934ms ago: executing program 5 (id=4080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f338ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2b24", 0x5dc}], 0x1}, 0x30008b08) 256.632464ms ago: executing program 3 (id=4071): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0x10000}, 0x8) 163.150386ms ago: executing program 5 (id=4072): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x31, 0x0) 46.414839ms ago: executing program 2 (id=4073): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 2 (id=4074): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001180)='./mnt_trace/trace_marker\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): 162.781443][T10311] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2701: invalid indirect mapped block 234881024 (level 0) [ 162.830595][T10321] hsr0 speed is unknown, defaulting to 1000 [ 162.862886][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.095380][T10346] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2715'. [ 166.749439][T10393] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2729'. [ 166.857356][T10405] loop5: detected capacity change from 0 to 7 [ 166.984610][T10406] support for cryptoloop has been removed. Use dm-crypt instead. [ 167.087735][T10412] loop1: detected capacity change from 0 to 256 [ 167.225228][T10424] loop4: detected capacity change from 0 to 4096 [ 167.278162][T10424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.363038][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 167.363055][ T28] audit: type=1400 audit(1785503718.655:16030): avc: denied { write } for pid=10423 comm="syz.4.2750" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.618974][T10436] loop5: detected capacity change from 0 to 7 [ 170.161570][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.193288][T10437] support for cryptoloop has been removed. Use dm-crypt instead. [ 170.298590][T10450] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2753'. [ 171.481055][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2768'. [ 171.691149][T10510] loop1: detected capacity change from 0 to 4096 [ 171.698151][T10510] EXT4-fs: test_dummy_encryption option not supported [ 171.770379][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2786'. [ 171.856506][ T28] audit: type=1400 audit(1785503723.145:16031): avc: denied { write } for pid=10507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.905748][T10534] netlink: 'syz.1.2790': attribute type 10 has an invalid length. [ 171.972114][ T28] audit: type=1400 audit(1785503723.245:16032): avc: denied { write } for pid=10539 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.163104][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2802'. [ 172.367873][T10587] tmpfs: Bad value for 'nr_inodes' [ 172.443437][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2817'. [ 172.524169][T10607] sd 0:0:1:0: device reset [ 172.648790][T10618] tmpfs: Bad value for 'nr_inodes' [ 172.682156][ T28] audit: type=1326 audit(1785503723.975:16033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.1.2830" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49785e019 code=0x7ffc0000 [ 172.711896][ T28] audit: type=1326 audit(1785503724.005:16034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.1.2830" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49785e019 code=0x7ffc0000 [ 172.743526][ T28] audit: type=1326 audit(1785503724.005:16035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.1.2830" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb49785e019 code=0x7ffc0000 [ 172.776456][ T28] audit: type=1326 audit(1785503724.005:16036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.1.2830" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49785e019 code=0x7ffc0000 [ 172.820913][ T28] audit: type=1326 audit(1785503724.005:16037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.1.2830" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49785e019 code=0x7ffc0000 [ 172.855257][T10632] xt_hashlimit: size too large, truncated to 1048576 [ 172.865008][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2834'. [ 172.876503][ T28] audit: type=1326 audit(1785503724.005:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.1.2830" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb49785e019 code=0x7ffc0000 [ 172.930187][ T28] audit: type=1326 audit(1785503724.005:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.1.2830" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49785e019 code=0x7ffc0000 [ 172.993630][ T28] audit: type=1326 audit(1785503724.005:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.1.2830" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49785e019 code=0x7ffc0000 [ 173.315515][ T3389] IPVS: starting estimator thread 0... [ 173.345430][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2850'. [ 173.408966][T10675] tipc: Started in network mode [ 173.419633][T10669] IPVS: using max 2304 ests per chain, 115200 per kthread [ 173.427522][T10675] tipc: Node identity 7f000001, cluster identity 4711 [ 173.455845][T10675] tipc: New replicast peer: 127.0.0.1 [ 173.480220][T10675] tipc: Enabled bearer , priority 10 [ 173.488231][ T28] audit: type=1400 audit(1785503724.775:16041): avc: denied { write } for pid=10658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.556336][ T28] audit: type=1400 audit(1785503724.845:16042): avc: denied { write } for pid=10687 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.563651][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2864'. [ 174.079717][T10733] netlink: 4616 bytes leftover after parsing attributes in process `syz.5.2865'. [ 174.101195][T10695] loop9: detected capacity change from 0 to 32768 [ 174.112731][T10733] netlink: 2356 bytes leftover after parsing attributes in process `syz.5.2865'. [ 174.138125][T10733] netlink: 4616 bytes leftover after parsing attributes in process `syz.5.2865'. [ 174.148907][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.192223][T10695] loop9: p1 p3 < > [ 174.256723][T10763] tipc: Started in network mode [ 174.274164][T10763] tipc: Node identity 7f000001, cluster identity 4711 [ 174.293876][T10763] tipc: New replicast peer: 127.0.0.1 [ 174.308457][T10763] tipc: Enabled bearer , priority 10 [ 174.464591][ T9157] udevd[9157]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 174.477026][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 174.489665][ T3410] tipc: Node number set to 2130706433 [ 174.551973][T10789] netlink: 4616 bytes leftover after parsing attributes in process `syz.1.2885'. [ 175.012122][T10824] loop9: detected capacity change from 0 to 4096 [ 175.022978][T10824] EXT4-fs: test_dummy_encryption option not supported [ 175.161752][T10834] loop9: detected capacity change from 0 to 256 [ 175.183599][T10834] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 175.196172][T10834] FAT-fs (loop9): Filesystem has been set read-only [ 175.297342][T10845] syzkaller1: entered promiscuous mode [ 175.305582][T10845] syzkaller1: entered allmulticast mode [ 175.347066][T10851] loop5: detected capacity change from 0 to 512 [ 175.362578][T10851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.430765][ T3390] tipc: Node number set to 2130706433 [ 175.526970][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.563964][T10866] loop4: detected capacity change from 0 to 256 [ 175.623002][T10866] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 175.649544][T10866] FAT-fs (loop4): Filesystem has been set read-only [ 175.914346][T10882] netlink: 'syz.9.2926': attribute type 1 has an invalid length. [ 175.984545][T10886] loop5: detected capacity change from 0 to 256 [ 176.011020][T10888] syzkaller1: entered promiscuous mode [ 176.022776][T10888] syzkaller1: entered allmulticast mode [ 176.177239][T10893] loop9: detected capacity change from 0 to 512 [ 176.209496][T10893] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.403829][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.444692][T10913] xt_hashlimit: size too large, truncated to 1048576 [ 177.169962][T10937] syzkaller1: entered promiscuous mode [ 177.187080][T10937] syzkaller1: entered allmulticast mode [ 177.232849][T10943] loop4: detected capacity change from 0 to 256 [ 177.458686][T10950] loop9: detected capacity change from 0 to 256 [ 177.519047][T10955] loop4: detected capacity change from 0 to 512 [ 177.546477][T10955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.565396][T10953] __nla_validate_parse: 11 callbacks suppressed [ 177.565418][T10953] netlink: 4616 bytes leftover after parsing attributes in process `syz.5.2950'. [ 177.581340][T10953] netlink: 2356 bytes leftover after parsing attributes in process `syz.5.2950'. [ 177.590577][T10953] netlink: 4616 bytes leftover after parsing attributes in process `syz.5.2950'. [ 177.769444][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.797145][T10965] netlink: 4616 bytes leftover after parsing attributes in process `syz.5.2969'. [ 177.831184][T10965] netlink: 2356 bytes leftover after parsing attributes in process `syz.5.2969'. [ 177.840861][T10965] netlink: 4616 bytes leftover after parsing attributes in process `syz.5.2969'. [ 178.047173][T10977] syzkaller1: entered promiscuous mode [ 178.069372][T10977] syzkaller1: entered allmulticast mode [ 178.802586][T11002] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2971: corrupted in-inode xattr: invalid ea_ino [ 178.823374][T11002] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.823625][T11002] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2971: couldn't read orphan inode 15 (err -117) [ 178.832952][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 178.832979][ C1] EXT4-fs (loop1): initial error at time 1785503730: ext4_iget_extra_inode:5180: inode 15 [ 178.833026][ C1] EXT4-fs (loop1): last error at time 1785503730: ext4_iget_extra_inode:5180: inode 15 [ 178.871816][T11002] loop1: lost filesystem error report for type 5 error -117 [ 178.884800][T11002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.914638][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 178.914653][ T28] audit: type=1400 audit(1785503730.205:16083): avc: denied { write } for pid=10998 comm="syz.1.2971" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.996889][T11008] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 179.009486][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.055862][T11014] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.073545][ T28] audit: type=1400 audit(1785503730.365:16084): avc: denied { write } for pid=11013 comm="syz.8.2973" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.182094][ T559] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 179.231233][T10066] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.671882][T11053] syzkaller1: entered promiscuous mode [ 179.681666][T11053] syzkaller1: entered allmulticast mode [ 179.702350][T11057] set_capacity_and_notify: 6 callbacks suppressed [ 179.702370][T11057] loop1: detected capacity change from 0 to 512 [ 179.762637][T11057] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 179.814180][T11061] loop8: detected capacity change from 0 to 512 [ 179.840910][T11061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.868325][ T28] audit: type=1400 audit(1785503731.155:16085): avc: denied { write } for pid=11060 comm="syz.8.2998" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.955730][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 179.994233][T10066] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.131229][T11083] loop9: detected capacity change from 0 to 512 [ 180.158441][T11083] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.3005: corrupted in-inode xattr: invalid ea_ino [ 180.188193][T11088] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.197875][T11083] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.198330][T11083] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3005: couldn't read orphan inode 15 (err -117) [ 180.207637][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 180.207663][ C0] EXT4-fs (loop9): initial error at time 1785503731: ext4_iget_extra_inode:5180: inode 15 [ 180.207697][ C0] EXT4-fs (loop9): last error at time 1785503731: ext4_iget_extra_inode:5180: inode 15 [ 180.245878][T11083] loop9: lost filesystem error report for type 5 error -117 [ 180.247507][T11083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.279592][ T28] audit: type=1400 audit(1785503731.565:16086): avc: denied { write } for pid=11082 comm="syz.9.3005" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.317653][T11088] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.332729][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.391122][T11096] loop5: detected capacity change from 0 to 512 [ 180.411832][T11095] syzkaller1: entered promiscuous mode [ 180.417428][T11095] syzkaller1: entered allmulticast mode [ 180.460044][T11088] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.462063][T11096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.508839][ T28] audit: type=1400 audit(1785503731.795:16087): avc: denied { write } for pid=11094 comm="syz.5.3012" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.601878][T11088] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.658525][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.670817][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.675394][ T559] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.691574][ T559] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.713002][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.909267][T11130] loop5: detected capacity change from 0 to 512 [ 180.934672][T11130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.958202][ T28] audit: type=1400 audit(1785503732.245:16088): avc: denied { write } for pid=11129 comm="syz.5.3028" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.064076][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.084489][ T28] audit: type=1326 audit(1785503732.375:16089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.8.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd50d5e019 code=0x7ffc0000 [ 181.113736][ T28] audit: type=1326 audit(1785503732.375:16090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.8.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd50d5e019 code=0x7ffc0000 [ 181.150217][ T28] audit: type=1326 audit(1785503732.375:16091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.8.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd50d5e019 code=0x7ffc0000 [ 181.204325][ T28] audit: type=1326 audit(1785503732.375:16092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.8.3039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fdd50d5e019 code=0x7ffc0000 [ 181.295088][T11145] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 181.347062][T11145] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 181.441342][T11145] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 181.475037][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.496942][T11145] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 181.558157][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.594912][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 55231 - 0 [ 181.617867][T11165] loop9: detected capacity change from 0 to 4096 [ 181.635703][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.649968][T11165] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.700082][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.709337][ T559] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 55231 - 0 [ 181.723446][ T559] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 55231 - 0 [ 181.767567][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.801487][ T3430] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 55231 - 0 [ 181.868989][ T49] bridge_slave_1: left allmulticast mode [ 181.875054][ T49] bridge_slave_1: left promiscuous mode [ 181.881256][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.889158][ T49] bridge_slave_0: left allmulticast mode [ 181.896573][ T49] bridge_slave_0: left promiscuous mode [ 181.902665][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.953862][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.964327][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.974057][ T49] bond0 (unregistering): Released all slaves [ 182.011659][T11168] hsr0 speed is unknown, defaulting to 1000 [ 182.036521][ T49] tipc: Disabling bearer [ 182.042037][ T49] tipc: Left network mode [ 182.059260][ T49] hsr_slave_0: left promiscuous mode [ 182.065624][ T49] hsr_slave_1: left promiscuous mode [ 182.072272][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.080630][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.088451][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.096185][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.106129][ T49] veth1_macvtap: left promiscuous mode [ 182.112495][ T49] veth0_macvtap: left promiscuous mode [ 182.118151][ T49] veth1_vlan: left promiscuous mode [ 182.123830][ T49] veth0_vlan: left promiscuous mode [ 182.191110][ T49] team0 (unregistering): Port device team_slave_1 removed [ 182.201504][ T49] team0 (unregistering): Port device team_slave_0 removed [ 182.236401][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 182.329048][T11168] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.336612][T11168] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.344104][T11168] bridge_slave_0: entered allmulticast mode [ 182.351252][T11168] bridge_slave_0: entered promiscuous mode [ 182.358513][T11168] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.365763][T11168] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.373712][T11168] bridge_slave_1: entered allmulticast mode [ 182.380711][T11168] bridge_slave_1: entered promiscuous mode [ 182.400311][T11168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.411198][T11168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.434607][T11168] team0: Port device team_slave_0 added [ 182.441916][T11168] team0: Port device team_slave_1 added [ 182.456602][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 182.472762][ T49] IPVS: stop unused estimator thread 0... [ 182.482847][T11168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.489891][T11168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.516191][T11168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.527696][T11168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.535364][T11168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.561593][T11168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.592082][T11168] hsr_slave_0: entered promiscuous mode [ 182.598391][T11168] hsr_slave_1: entered promiscuous mode [ 182.604546][T11168] debugfs: 'hsr0' already exists in 'hsr' [ 182.610704][T11168] Cannot create hsr debugfs directory [ 182.670954][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 182.797034][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 183.049365][T11168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.058515][T11168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.067017][T11168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.076381][T11168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.085058][T11168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.094463][T11168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.102790][T11168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.112169][T11168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.153084][T11168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.166230][T11168] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.177949][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.185106][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.197597][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.204802][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.348570][T11168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.434341][T11168] veth0_vlan: entered promiscuous mode [ 183.442971][T11168] veth1_vlan: entered promiscuous mode [ 183.461836][T11168] veth0_macvtap: entered promiscuous mode [ 183.471867][T11168] veth1_macvtap: entered promiscuous mode [ 183.485304][T11168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.502718][T11168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.530748][ T559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.543408][ T559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.553903][ T559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.608145][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3057'. [ 183.659894][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.735434][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3061'. [ 184.000105][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 184.000121][ T28] audit: type=1400 audit(1785503735.295:16137): avc: denied { write } for pid=11394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.059074][ T28] audit: type=1400 audit(1785503735.345:16138): avc: denied { write } for pid=11411 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.174781][T11427] loop5: detected capacity change from 0 to 7 [ 184.227110][ T28] audit: type=1400 audit(1785503735.515:16139): avc: denied { write } for pid=11416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.294262][ T28] audit: type=1400 audit(1785503735.585:16140): avc: denied { write } for pid=11435 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.379920][T11433] support for cryptoloop has been removed. Use dm-crypt instead. [ 184.512645][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3059'. [ 184.535456][T11450] netlink: 'syz.4.3059': attribute type 5 has an invalid length. [ 184.548320][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3059'. [ 184.560505][T11450] geneve3: entered promiscuous mode [ 184.566045][T11450] geneve3: entered allmulticast mode [ 184.579784][ T28] audit: type=1400 audit(1785503735.865:16141): avc: denied { write } for pid=11437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.590536][ T559] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 184.649412][ T559] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 184.662772][ T28] audit: type=1400 audit(1785503735.955:16142): avc: denied { write } for pid=11456 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.681963][ T3430] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 184.698156][ T3430] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 184.919239][ T28] audit: type=1400 audit(1785503736.205:16143): avc: denied { write } for pid=11464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.989690][ T28] audit: type=1400 audit(1785503736.275:16144): avc: denied { write } for pid=11478 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.446065][T11494] loop1: detected capacity change from 0 to 512 [ 185.459766][T11494] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.3073: corrupted in-inode xattr: invalid ea_ino [ 185.476831][T11494] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.476997][T11494] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3073: couldn't read orphan inode 15 (err -117) [ 185.486207][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 185.486230][ C1] EXT4-fs (loop1): initial error at time 1785503736: ext4_iget_extra_inode:5180: inode 15 [ 185.486276][ C1] EXT4-fs (loop1): last error at time 1785503736: ext4_iget_extra_inode:5180: inode 15 [ 185.524703][T11494] loop1: lost filesystem error report for type 5 error -117 [ 185.525447][T11494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.549025][T11494] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3073: invalid indirect mapped block 234881024 (level 0) [ 185.549890][ T28] audit: type=1400 audit(1785503736.835:16145): avc: denied { write } for pid=11493 comm="syz.1.3073" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.649446][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.686917][T11498] loop5: detected capacity change from 0 to 7 [ 185.724779][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3075'. [ 185.744734][T11505] netlink: 'syz.5.3075': attribute type 5 has an invalid length. [ 185.771761][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3075'. [ 185.824727][T11505] geneve3: entered promiscuous mode [ 185.840471][T11505] geneve3: entered allmulticast mode [ 185.880060][ T3430] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 185.888422][ T3430] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 185.905940][ T3430] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 185.922465][ T3430] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 186.590734][T11507] support for cryptoloop has been removed. Use dm-crypt instead. [ 186.633435][T11522] loop2: detected capacity change from 0 to 512 [ 186.657742][T11522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.684005][ T28] audit: type=1400 audit(1785503737.975:16146): avc: denied { write } for pid=11520 comm="syz.2.3081" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.727624][T11530] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.739866][T11530] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 186.767680][T11535] loop4: detected capacity change from 0 to 256 [ 186.821607][T11530] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.843364][T11530] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 186.879905][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.953544][T11530] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.971258][T11530] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 187.023104][T11555] loop5: detected capacity change from 0 to 7 [ 187.060581][T11530] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.071389][T11530] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 187.089362][T11559] hsr0 speed is unknown, defaulting to 1000 [ 187.178772][T11562] support for cryptoloop has been removed. Use dm-crypt instead. [ 187.197757][ T49] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 187.224202][ T49] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.281699][ T49] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 187.295340][ T49] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.303693][ T49] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 187.311922][ T49] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.327538][ T68] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 187.349067][ T68] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.392778][T11574] loop4: detected capacity change from 0 to 512 [ 187.415663][T11579] loop9: detected capacity change from 0 to 256 [ 187.425988][T11574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.593932][T11593] loop5: detected capacity change from 0 to 1024 [ 187.639707][T11596] support for cryptoloop has been removed. Use dm-crypt instead. [ 187.667546][T11593] loop5: detected capacity change from 0 to 512 [ 187.703195][T11593] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 187.722953][T11593] System zones: 0-2, 18-18, 34-35 [ 187.732908][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.746257][T11593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.759399][T11593] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.774098][T11606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.811959][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.905552][T11606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.931374][T11623] netlink: 'syz.9.3124': attribute type 9 has an invalid length. [ 187.946247][T11623] netlink: 207496 bytes leftover after parsing attributes in process `syz.9.3124'. [ 187.966926][T11614] hsr0 speed is unknown, defaulting to 1000 [ 188.019394][T11629] loop5: detected capacity change from 0 to 7 [ 188.079847][T11631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.118565][T11606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.191999][T11634] support for cryptoloop has been removed. Use dm-crypt instead. [ 188.217743][T11606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.342715][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.366929][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.409811][ T3430] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.427508][ T3430] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.450535][ T3430] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.651201][T11672] EXT4-fs: Ignoring removed bh option [ 188.696439][T11672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.710868][T11672] ext4 filesystem being mounted at /634/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.725727][T11668] support for cryptoloop has been removed. Use dm-crypt instead. [ 188.744244][T11672] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.3144: lblock 0 mapped to illegal pblock 0 (length 6) [ 188.778144][T11672] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3144: bg 0: block 112: padding at end of block bitmap is not set [ 188.808613][T11672] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 188.839673][T11672] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.839673][T11672] [ 188.857235][T11672] EXT4-fs (loop4): Total free blocks count 0 [ 188.877197][T11672] EXT4-fs (loop4): Free/Dirty block details [ 188.883608][T11672] EXT4-fs (loop4): free_blocks=0 [ 188.889640][T11672] EXT4-fs (loop4): dirty_blocks=64 [ 188.890632][T11681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.906926][T11672] EXT4-fs (loop4): Block reservation details [ 188.919284][T11672] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 188.960475][ T3294] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 188.993032][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 189.050360][T11692] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.096836][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.120357][T11692] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.192686][T11697] hsr0 speed is unknown, defaulting to 1000 [ 189.199444][T11702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.225958][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 189.225975][ T28] audit: type=1400 audit(1785503740.515:16153): avc: denied { write } for pid=11701 comm="syz.2.3163" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.269671][T11692] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.345581][T11692] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.315455][ T3430] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.331389][ T68] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.344326][ T68] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.362306][ T68] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.422007][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.628668][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 190.753316][T11756] set_capacity_and_notify: 5 callbacks suppressed [ 190.753410][T11756] loop9: detected capacity change from 0 to 512 [ 190.784654][T11756] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.800658][T11762] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.810739][ T28] audit: type=1400 audit(1785503742.095:16154): avc: denied { write } for pid=11755 comm="syz.9.3176" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.882221][T11762] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.906100][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.946130][T11762] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.996170][T11762] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.197439][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3184'. [ 191.656583][T11792] loop9: detected capacity change from 0 to 1024 [ 191.663301][T11793] loop4: detected capacity change from 0 to 512 [ 191.691638][T11792] loop9: detected capacity change from 0 to 512 [ 191.715559][T11793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.743370][T11798] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3191'. [ 191.762407][T11792] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 191.783483][T11792] System zones: 0-2, 18-18, 34-35 [ 191.795046][T11792] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.798221][ T28] audit: type=1400 audit(1785503743.085:16155): avc: denied { write } for pid=11789 comm="syz.4.3190" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.818912][T11792] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.918875][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.956247][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.102002][ T28] audit: type=1400 audit(1785503743.385:16156): avc: denied { create } for pid=11810 comm="syz.9.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.149905][ T28] audit: type=1400 audit(1785503743.395:16157): avc: denied { connect } for pid=11810 comm="syz.9.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.361684][ T28] audit: type=1400 audit(1785503743.655:16158): avc: denied { setopt } for pid=11818 comm="syz.4.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.539018][T11836] loop4: detected capacity change from 0 to 1024 [ 192.561610][T11836] loop4: detected capacity change from 0 to 512 [ 192.594164][T11836] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 192.614521][T11836] System zones: 0-2, 18-18, 34-35 [ 192.632029][T11836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.648413][T11836] ext4 filesystem being mounted at /649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.689801][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.547665][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.559802][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.577154][ T68] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.589797][ T68] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.680298][ T28] audit: type=1400 audit(1785503744.965:16159): avc: denied { write } for pid=11870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.782266][ T28] audit: type=1400 audit(1785503745.075:16160): avc: denied { write } for pid=11901 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.930330][T11917] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 193.940572][T11910] loop2: detected capacity change from 0 to 8192 [ 193.951107][T11917] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.983400][T11910] loop2: p1 < > p3 < > [ 194.007015][T11917] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 194.018716][ T28] audit: type=1400 audit(1785503745.315:16161): avc: denied { create } for pid=11909 comm="syz.2.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 194.050007][T11917] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 194.077622][ T28] audit: type=1400 audit(1785503745.315:16162): avc: denied { write } for pid=11909 comm="syz.2.3232" path="socket:[37238]" dev="sockfs" ino=37238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 194.152958][T11917] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 194.163281][T11917] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 194.225287][T11917] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 194.235634][T11917] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 194.312449][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 194.320869][ T36] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 55231 - 0 [ 194.333668][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 194.350577][ T36] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 55231 - 0 [ 194.378069][ T559] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 194.386855][ T559] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 55231 - 0 [ 194.406802][ T559] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 194.424729][ T559] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 55231 - 0 [ 194.832186][ T28] audit: type=1400 audit(1785503746.125:16163): avc: denied { write } for pid=11934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.947722][ T28] audit: type=1400 audit(1785503746.235:16164): avc: denied { write } for pid=11961 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.972757][T11965] loop9: detected capacity change from 0 to 512 [ 194.994223][T11965] EXT4-fs: Ignoring removed i_version option [ 195.040167][T11965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.074859][T11965] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.135787][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.201856][T11969] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 195.421727][ T28] audit: type=1400 audit(1785503746.715:16165): avc: denied { write } for pid=11984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.457132][ T28] audit: type=1400 audit(1785503746.745:16166): avc: denied { write } for pid=11995 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.989681][T12004] Invalid argument reading file caps for ./file0 [ 196.002796][T12006] hsr0 speed is unknown, defaulting to 1000 [ 196.018886][T12008] bridge0: port 3(vlan2) entered blocking state [ 196.036250][T12008] bridge0: port 3(vlan2) entered disabled state [ 196.059235][T12008] vlan2: entered allmulticast mode [ 196.073637][T12008] bridge0: entered allmulticast mode [ 196.109917][T12008] vlan2: left allmulticast mode [ 196.121310][T12008] bridge0: left allmulticast mode [ 196.298360][T12034] loop2: detected capacity change from 0 to 512 [ 196.306355][T12028] loop9: detected capacity change from 0 to 4096 [ 196.313792][T12034] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 196.333100][T12028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.348096][T12034] EXT4-fs (loop2): 1 truncate cleaned up [ 196.362654][T12034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.411035][ T28] audit: type=1400 audit(1785503747.705:16167): avc: denied { write } for pid=12027 comm="syz.9.3271" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.471174][ T28] audit: type=1400 audit(1785503747.735:16168): avc: denied { write } for pid=12033 comm="syz.2.3275" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.534828][T12046] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 196.563621][T12046] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 55231 - 0 [ 196.667502][T12046] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 196.693919][T12046] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 55231 - 0 [ 196.724424][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.766277][T12046] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 196.795195][T12046] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 55231 - 0 [ 196.876271][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.894837][T12046] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 196.918678][T12046] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 55231 - 0 [ 197.020539][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 197.041310][ T36] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 55231 - 0 [ 197.065350][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 197.083607][ T36] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 55231 - 0 [ 197.099051][ T3430] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 197.107475][ T3430] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 55231 - 0 [ 197.139042][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 197.147476][ T36] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 55231 - 0 [ 197.173791][T12078] hsr0 speed is unknown, defaulting to 1000 [ 197.221423][T12075] hsr0 speed is unknown, defaulting to 1000 [ 197.287331][T12094] loop5: detected capacity change from 0 to 512 [ 197.310314][ T28] audit: type=1400 audit(1785503748.605:16169): avc: denied { write } for pid=12082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.338127][T12094] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 197.373539][T12094] EXT4-fs (loop5): 1 truncate cleaned up [ 197.404349][T12094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.423847][ T28] audit: type=1400 audit(1785503748.715:16170): avc: denied { write } for pid=12100 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.513208][ T28] audit: type=1400 audit(1785503748.745:16171): avc: denied { write } for pid=12092 comm="syz.5.3294" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.647465][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.893470][T12114] loop5: detected capacity change from 0 to 4096 [ 197.925786][T12114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.951945][ T28] audit: type=1400 audit(1785503749.235:16172): avc: denied { write } for pid=12113 comm="syz.5.3297" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.432377][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.586667][T12156] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3315'. [ 198.789101][T12152] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.615909][T12181] loop1: detected capacity change from 0 to 512 [ 199.623108][T12181] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 199.633369][T12181] EXT4-fs (loop1): 1 truncate cleaned up [ 199.649691][T12181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.677481][T12179] loop4: detected capacity change from 0 to 4096 [ 199.696427][T12179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.872433][T12198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3330'. [ 199.969117][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.017081][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 200.017108][ T28] audit: type=1400 audit(1785503751.305:16223): avc: denied { create } for pid=12207 comm="syz.1.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.052623][T12208] lo speed is unknown, defaulting to 1000 [ 200.059684][T12208] lo speed is unknown, defaulting to 1000 [ 200.066003][T12208] lo speed is unknown, defaulting to 1000 [ 200.072071][ T28] audit: type=1400 audit(1785503751.335:16224): avc: denied { write } for pid=12207 comm="syz.1.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.085100][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.167144][T12208] infiniband sz1: set active [ 200.172078][ T3388] lo speed is unknown, defaulting to 1000 [ 200.182052][T12208] infiniband sz1: added lo [ 200.202457][T12208] RDS/IB: sz1: added [ 200.209642][ T3411] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec [ 200.215347][T12208] smc: adding ib device sz1 with port count 1 [ 200.229655][T12208] smc: ib device sz1 port 1 has no pnetid [ 200.236077][T12208] lo speed is unknown, defaulting to 1000 [ 200.243588][ T3411] lo speed is unknown, defaulting to 1000 [ 200.269713][ T28] audit: type=1400 audit(1785503751.555:16225): avc: denied { module_request } for pid=12214 comm="syz.4.3339" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 200.314859][ T28] audit: type=1400 audit(1785503751.595:16226): avc: denied { sys_module } for pid=12214 comm="syz.4.3339" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 200.360958][T12208] lo speed is unknown, defaulting to 1000 [ 200.406782][T12208] lo speed is unknown, defaulting to 1000 [ 200.443739][T12208] lo speed is unknown, defaulting to 1000 [ 200.484494][T12208] lo speed is unknown, defaulting to 1000 [ 200.519229][T12208] lo speed is unknown, defaulting to 1000 [ 200.555730][T12208] lo speed is unknown, defaulting to 1000 [ 200.670937][T12223] loop4: detected capacity change from 0 to 164 [ 200.697356][T12223] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 200.712052][ T28] audit: type=1400 audit(1785503752.005:16227): avc: denied { mount } for pid=12221 comm="syz.4.3342" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 200.750106][ T28] audit: type=1400 audit(1785503752.045:16228): avc: denied { getopt } for pid=12221 comm="syz.4.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.792172][ T28] audit: type=1400 audit(1785503752.085:16229): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 200.844492][T12235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3345'. [ 200.944836][T12244] loop4: detected capacity change from 0 to 512 [ 200.960655][T12244] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 200.972437][T12242] loop1: detected capacity change from 0 to 4096 [ 200.990691][T12244] EXT4-fs (loop4): 1 truncate cleaned up [ 201.014392][T12242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.018025][T12244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.044629][T12246] hsr0 speed is unknown, defaulting to 1000 [ 201.056912][ T28] audit: type=1400 audit(1785503752.345:16230): avc: denied { write } for pid=12241 comm="syz.1.3349" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.089317][T12246] lo speed is unknown, defaulting to 1000 [ 201.111054][ T28] audit: type=1400 audit(1785503752.405:16231): avc: denied { write } for pid=12243 comm="syz.4.3348" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.401659][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.463477][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.491233][T12263] loop4: detected capacity change from 0 to 128 [ 201.498604][T12264] loop1: detected capacity change from 0 to 164 [ 201.505825][T12263] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 201.529363][T12264] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 201.532702][ T9157] udevd[9157]: incorrect ext4 checksum on /dev/loop4 [ 201.632541][T12268] rdma_rxe: rxe_newlink: failed to add lo [ 201.708019][T12272] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.729218][ T28] audit: type=1400 audit(1785503753.015:16232): avc: denied { mmap_zero } for pid=12274 comm="syz.9.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 201.911848][T12288] loop2: detected capacity change from 0 to 4096 [ 201.929021][T12288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.953375][T12294] loop5: detected capacity change from 0 to 164 [ 202.004295][T12294] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 202.200293][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.200611][T12309] hsr0 speed is unknown, defaulting to 1000 [ 202.232518][T12307] loop9: detected capacity change from 0 to 8192 [ 202.251271][T12309] lo speed is unknown, defaulting to 1000 [ 202.301185][T12307] loop9: p1 < > p3 < > [ 202.338960][T12314] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 202.438208][T12312] rdma_rxe: rxe_newlink: failed to add lo [ 202.526076][T12318] netlink: 996 bytes leftover after parsing attributes in process `syz.2.3390'. [ 202.538703][T12318] netlink: 996 bytes leftover after parsing attributes in process `syz.2.3390'. [ 202.715165][T12325] loop5: detected capacity change from 0 to 8192 [ 202.945888][T12346] loop5: detected capacity change from 0 to 4096 [ 202.974859][T12346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.238224][T12364] hsr0 speed is unknown, defaulting to 1000 [ 203.244840][T12364] lo speed is unknown, defaulting to 1000 [ 203.523185][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.571813][T12377] netlink: 996 bytes leftover after parsing attributes in process `syz.9.3403'. [ 203.601855][T12377] netlink: 996 bytes leftover after parsing attributes in process `syz.9.3403'. [ 203.725937][T12385] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 203.787946][T12388] loop2: detected capacity change from 0 to 8192 [ 203.796524][T12390] loop5: detected capacity change from 0 to 8192 [ 203.851938][T12390] loop5: p1 < > p3 < > [ 204.970359][T12433] loop9: detected capacity change from 0 to 512 [ 204.979376][T12433] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 204.991016][T12433] EXT4-fs (loop9): 1 truncate cleaned up [ 205.006337][T12433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.068075][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 205.068094][ T28] audit: type=1400 audit(1785503756.355:16305): avc: denied { write } for pid=12432 comm="syz.9.3421" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.193676][T12455] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 205.262380][ T36] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 205.279293][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.865458][T12475] hsr0 speed is unknown, defaulting to 1000 [ 205.872485][T12475] lo speed is unknown, defaulting to 1000 [ 205.915235][ T28] audit: type=1400 audit(1785503757.205:16306): avc: denied { create } for pid=12476 comm="syz.9.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.951755][ T28] audit: type=1400 audit(1785503757.205:16307): avc: denied { write } for pid=12476 comm="syz.9.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.004340][ T28] audit: type=1400 audit(1785503757.205:16308): avc: denied { create } for pid=12476 comm="syz.9.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.037908][ T28] audit: type=1400 audit(1785503757.205:16309): avc: denied { ioctl } for pid=12476 comm="syz.9.3437" path="socket:[39196]" dev="sockfs" ino=39196 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.072767][ T28] audit: type=1400 audit(1785503757.205:16310): avc: denied { module_request } for pid=12476 comm="syz.9.3437" kmod=6E65746465762DFFFFFFFF scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 206.151291][T12492] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 206.178795][ T28] audit: type=1400 audit(1785503757.275:16311): avc: denied { sys_module } for pid=12476 comm="syz.9.3437" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 206.213808][T12492] EXT4-fs (loop1): 1 truncate cleaned up [ 206.222860][T12497] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 206.237127][T12492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.255952][ T28] audit: type=1400 audit(1785503757.395:16312): avc: denied { bind } for pid=12488 comm="syz.1.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.276890][ T28] audit: type=1400 audit(1785503757.395:16313): avc: denied { setopt } for pid=12488 comm="syz.1.3442" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.297773][ T28] audit: type=1400 audit(1785503757.395:16314): avc: denied { connect } for pid=12488 comm="syz.1.3442" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.441628][ T36] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 206.525911][T12508] set_capacity_and_notify: 3 callbacks suppressed [ 206.525932][T12508] loop5: detected capacity change from 0 to 4096 [ 206.548508][T12508] EXT4-fs: Ignoring removed bh option [ 206.563567][T12508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.622657][T12508] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 206.707400][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.738377][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.752934][T12516] loop4: detected capacity change from 0 to 512 [ 206.771754][T12516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.794499][T12516] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3453: bg 0: block 393: padding at end of block bitmap is not set [ 206.821422][T12516] loop4: lost filesystem error report for type 5 error -117 [ 206.821796][T12516] EXT4-fs (loop4): Remounting filesystem read-only [ 206.835806][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 206.835823][ C0] EXT4-fs (loop4): initial error at time 1785503758: ext4_validate_block_bitmap:441 [ 206.835848][ C0] EXT4-fs (loop4): last error at time 1785503758: ext4_validate_block_bitmap:441 [ 206.861317][T12516] EXT4-fs (loop4): 2 truncates cleaned up [ 206.867822][T12516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.910981][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.621445][T12562] loop9: detected capacity change from 0 to 512 [ 207.735311][T12571] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.741779][T12571] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.900170][T12587] sctp: [Deprecated]: syz.1.3482 (pid 12587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.900170][T12587] Use struct sctp_sack_info instead [ 207.995683][T12598] loop1: detected capacity change from 0 to 512 [ 208.018858][T12596] loop9: detected capacity change from 0 to 4096 [ 208.026109][T12596] EXT4-fs: Ignoring removed bh option [ 208.046251][T12596] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.064722][T12596] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 208.086127][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.681564][T12641] loop5: detected capacity change from 0 to 512 [ 208.708403][T12641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.721035][T12641] ext4 filesystem being mounted at /639/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.753711][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.807174][T12645] loop5: detected capacity change from 0 to 2048 [ 208.824874][T12649] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3503'. [ 208.836616][T12645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.862409][T12645] EXT4-fs (loop5): shut down requested (1) [ 208.888280][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.899819][T12653] loop2: detected capacity change from 0 to 512 [ 208.930483][T12653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.965715][T12653] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3504: bg 0: block 393: padding at end of block bitmap is not set [ 208.999471][T12653] loop2: lost filesystem error report for type 5 error -117 [ 208.999587][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 209.013499][ C0] EXT4-fs (loop2): initial error at time 1785503760: ext4_validate_block_bitmap:441 [ 209.022960][ C0] EXT4-fs (loop2): last error at time 1785503760: ext4_validate_block_bitmap:441 [ 209.069636][T12653] EXT4-fs (loop2): Remounting filesystem read-only [ 209.079510][T12653] EXT4-fs (loop2): 2 truncates cleaned up [ 209.088918][T12653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.102137][T12660] loop5: detected capacity change from 0 to 4096 [ 209.142170][T12660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.165927][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.416093][T12677] sctp: [Deprecated]: syz.2.3512 (pid 12677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.416093][T12677] Use struct sctp_sack_info instead [ 209.448091][T12679] loop4: detected capacity change from 0 to 512 [ 209.457542][T12679] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 209.467490][T12679] EXT4-fs (loop4): 1 truncate cleaned up [ 209.474562][T12679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.584194][T12687] sctp: [Deprecated]: syz.9.3527 (pid 12687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.584194][T12687] Use struct sctp_sack_info instead [ 209.617648][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.670670][T12694] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.691177][T12694] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3519: bg 0: block 393: padding at end of block bitmap is not set [ 209.711177][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.724132][T12694] loop9: lost filesystem error report for type 5 error -117 [ 209.724323][T12694] EXT4-fs (loop9): Remounting filesystem read-only [ 209.731923][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 209.731947][ C1] EXT4-fs (loop9): initial error at time 1785503761: ext4_validate_block_bitmap:441 [ 209.731989][ C1] EXT4-fs (loop9): last error at time 1785503761: ext4_validate_block_bitmap:441 [ 209.764271][T12694] EXT4-fs (loop9): 2 truncates cleaned up [ 209.776652][T12694] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.819826][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.839915][T12700] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 209.850843][T12700] EXT4-fs (loop5): 1 truncate cleaned up [ 209.857994][T12700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.059726][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.712145][T12714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.781984][T12714] EXT4-fs (loop1): shut down requested (1) [ 210.810981][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 210.811000][ T28] audit: type=1400 audit(1785503762.105:16347): avc: denied { write } for pid=12712 comm="syz.1.3536" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.868402][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.896096][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3543'. [ 210.917986][T12733] sctp: [Deprecated]: syz.5.3530 (pid 12733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.917986][T12733] Use struct sctp_sack_info instead [ 210.972687][T12725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.059058][T10108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.095075][ T28] audit: type=1400 audit(1785503762.385:16348): avc: denied { unmount } for pid=10108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 211.097980][T12749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.164670][ T28] audit: type=1400 audit(1785503762.455:16349): avc: denied { write } for pid=12747 comm="syz.5.3533" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.211829][T12753] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.235329][ T28] audit: type=1400 audit(1785503762.525:16350): avc: denied { remount } for pid=12752 comm="syz.2.3538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 211.287318][T12756] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 211.307148][T12756] FAT-fs (loop2): Filesystem has been set read-only [ 211.318545][T12756] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 211.319540][T12755] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.355394][ T36] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 211.392183][ T36] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 211.460316][ T36] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 211.490457][ T36] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 211.540930][ T28] audit: type=1400 audit(1785503762.835:16351): avc: denied { mounton } for pid=12765 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 211.579154][ T36] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 211.602942][ T36] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 211.643213][ T36] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 211.656783][ T28] audit: type=1400 audit(1785503762.945:16352): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 211.684032][ T36] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 211.694517][ T28] audit: type=1400 audit(1785503762.945:16353): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 211.769166][ T28] audit: type=1400 audit(1785503763.055:16354): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 211.770459][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.799960][ T28] audit: type=1400 audit(1785503763.085:16355): avc: denied { setopt } for pid=12774 comm="syz.2.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 211.869988][ T36] bridge_slave_1: left allmulticast mode [ 211.875898][ T36] bridge_slave_1: left promiscuous mode [ 211.881963][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.890193][ T36] bridge_slave_0: left allmulticast mode [ 211.896012][ T36] bridge_slave_0: left promiscuous mode [ 211.902025][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.956359][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.966619][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.976471][ T36] bond0 (unregistering): Released all slaves [ 211.983593][T12765] hsr0 speed is unknown, defaulting to 1000 [ 211.995024][T12765] lo speed is unknown, defaulting to 1000 [ 212.000894][ T28] audit: type=1400 audit(1785503763.285:16356): avc: denied { search } for pid=3019 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.032807][ T36] tipc: Disabling bearer [ 212.043705][ T36] tipc: Left network mode [ 212.126908][ T36] hsr_slave_0: left promiscuous mode [ 212.132738][ T36] hsr_slave_1: left promiscuous mode [ 212.138534][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.147332][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.155285][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.162842][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.173059][ T36] veth1_macvtap: left promiscuous mode [ 212.178631][ T36] veth0_macvtap: left promiscuous mode [ 212.184962][ T36] veth1_vlan: left promiscuous mode [ 212.190295][ T36] veth0_vlan: left promiscuous mode [ 212.258180][ T36] team0 (unregistering): Port device team_slave_1 removed [ 212.268323][ T36] team0 (unregistering): Port device team_slave_0 removed [ 212.304890][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 212.399515][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.406798][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.414085][T12765] bridge_slave_0: entered allmulticast mode [ 212.421032][T12765] bridge_slave_0: entered promiscuous mode [ 212.427894][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.435243][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.442491][T12765] bridge_slave_1: entered allmulticast mode [ 212.449135][T12765] bridge_slave_1: entered promiscuous mode [ 212.469197][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.481422][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.496104][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 212.509961][T12765] team0: Port device team_slave_0 added [ 212.516852][T12765] team0: Port device team_slave_1 added [ 212.533609][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.540698][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.566779][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.578353][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.585591][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.611732][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.639986][T12765] hsr_slave_0: entered promiscuous mode [ 212.646159][T12765] hsr_slave_1: entered promiscuous mode [ 212.769945][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 212.880314][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 213.050672][T12765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.060125][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.068194][T12765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.077298][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.085674][T12765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.104467][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.116769][T12765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.125777][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.142458][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.149679][T12765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.157023][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.164197][T12765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.197352][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.210289][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.218415][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.231730][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.243502][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.250691][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.262138][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.269240][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.409263][T12765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.495433][T12765] veth0_vlan: entered promiscuous mode [ 213.504533][T12765] veth1_vlan: entered promiscuous mode [ 213.532326][T12765] veth0_macvtap: entered promiscuous mode [ 213.542501][T12765] veth1_macvtap: entered promiscuous mode [ 213.554680][T12765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.566667][T12765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.600205][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.611790][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.640421][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.672483][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.685063][T12948] set_capacity_and_notify: 8 callbacks suppressed [ 213.685082][T12948] loop2: detected capacity change from 0 to 1764 [ 214.552232][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'. [ 214.565160][T13042] loop3: detected capacity change from 0 to 512 [ 214.577228][T13042] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 214.596497][T13042] EXT4-fs (loop3): 1 truncate cleaned up [ 214.603767][T13042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.814457][T12765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.051980][T13081] loop3: detected capacity change from 0 to 4096 [ 215.064897][T13081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.237036][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3569'. [ 215.246524][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3569'. [ 215.256287][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3569'. [ 215.265915][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3569'. [ 215.311979][T12765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.337410][T13102] loop5: detected capacity change from 0 to 128 [ 215.359498][T13102] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.364825][T13107] loop3: detected capacity change from 0 to 128 [ 215.375350][T13102] ext4 filesystem being mounted at /657/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.421937][ T3705] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.543606][T13111] SELinux: failed to load policy [ 215.576979][T13119] syzkaller1: entered promiscuous mode [ 215.587213][T13119] syzkaller1: entered allmulticast mode [ 215.660633][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 215.671869][T13127] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.679144][T13127] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.684547][T13130] loop2: detected capacity change from 0 to 512 [ 215.718159][T13130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.784651][T13139] loop1: detected capacity change from 0 to 128 [ 215.810480][T13130] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 215.832596][T13130] EXT4-fs (loop2): 1 truncate cleaned up [ 215.839716][T13137] loop5: detected capacity change from 0 to 1764 [ 215.855628][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 215.855642][ T28] audit: type=1400 audit(1785503767.145:16424): avc: denied { mount } for pid=13136 comm="syz.5.3588" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 215.856821][T13130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.938117][ T28] audit: type=1400 audit(1785503767.225:16425): avc: denied { unmount } for pid=3705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 215.967644][ T28] audit: type=1400 audit(1785503767.235:16426): avc: denied { write } for pid=13129 comm="syz.2.3587" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.990339][ T28] audit: type=1400 audit(1785503767.235:16427): avc: denied { link } for pid=13129 comm="syz.2.3587" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.014587][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.035494][ T28] audit: type=1400 audit(1785503767.325:16428): avc: denied { create } for pid=13147 comm="syz.5.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 216.075636][ T28] audit: type=1400 audit(1785503767.365:16429): avc: denied { sys_admin } for pid=13147 comm="syz.5.3594" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 216.111827][T13148] hsr0 speed is unknown, defaulting to 1000 [ 216.118683][T13148] lo speed is unknown, defaulting to 1000 [ 216.146135][ T28] audit: type=1400 audit(1785503767.435:16430): avc: denied { map } for pid=13155 comm="syz.1.3597" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.179266][ T28] audit: type=1400 audit(1785503767.435:16431): avc: denied { read write } for pid=13155 comm="syz.1.3597" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.206285][ T28] audit: type=1400 audit(1785503767.465:16432): avc: denied { mounton } for pid=13155 comm="syz.1.3597" path="/754/file0" dev="tmpfs" ino=3942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.230583][ T28] audit: type=1400 audit(1785503767.465:16433): avc: denied { write } for pid=3388 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40853 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.769904][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.789399][T13192] hsr0 speed is unknown, defaulting to 1000 [ 216.797530][T13192] lo speed is unknown, defaulting to 1000 [ 216.821952][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3620'. [ 216.851516][T13206] loop2: detected capacity change from 0 to 1024 [ 216.862560][T13206] EXT4-fs: Ignoring removed bh option [ 216.912209][T13206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.943456][T13210] loop5: detected capacity change from 0 to 512 [ 217.004032][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3624'. [ 217.022987][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.055895][T13210] EXT4-fs (loop5): 1 orphan inode deleted [ 217.082327][ T68] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 217.131504][T13210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.161223][ T68] loop5: lost filesystem error report for type 5 error -117 [ 217.168497][T13224] netlink: 'syz.2.3626': attribute type 4 has an invalid length. [ 217.244999][T13234] sctp: [Deprecated]: syz.3.3630 (pid 13234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.244999][T13234] Use struct sctp_sack_info instead [ 217.282632][T13210] ext4 filesystem being mounted at /666/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.380187][T13241] EXT4-fs: Ignoring removed bh option [ 217.404169][T13241] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.432028][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.432233][T13241] EXT4-fs (loop1): 1 truncate cleaned up [ 217.616402][T13252] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.656792][T13252] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.841611][T13268] EXT4-fs: Ignoring removed orlov option [ 217.856091][T13265] program syz.2.3643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.866586][T13268] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.249624][T13296] syzkaller1: entered promiscuous mode [ 218.272550][T13296] syzkaller1: entered allmulticast mode [ 218.890619][T13361] veth0: entered promiscuous mode [ 218.913253][T13358] veth0: left promiscuous mode [ 219.218724][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'. [ 219.255662][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'. [ 219.667861][T13397] set_capacity_and_notify: 3 callbacks suppressed [ 219.667883][T13397] loop2: detected capacity change from 0 to 8192 [ 219.675913][T13390] loop5: detected capacity change from 0 to 512 [ 219.804162][T13400] __nla_validate_parse: 4 callbacks suppressed [ 219.804183][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3702'. [ 219.833880][T13390] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 219.863524][T13390] EXT4-fs (loop5): orphan cleanup on readonly fs [ 219.866274][T13400] netlink: 'syz.2.3702': attribute type 15 has an invalid length. [ 219.885262][T13390] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3698: bad orphan inode 15 [ 219.897449][T13390] loop5: lost filesystem error report for type 5 error -117 [ 219.899604][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 219.913600][ C1] EXT4-fs (loop5): initial error at time 1785503771: ext4_orphan_get:1425 [ 219.922186][ C1] EXT4-fs (loop5): last error at time 1785503771: ext4_orphan_get:1425 [ 219.933713][T13390] ext4_test_bit(bit=14, block=5) = 0 [ 219.994589][T13410] pim6reg: entered allmulticast mode [ 220.017239][T13410] pim6reg: left allmulticast mode [ 220.135553][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3709'. [ 220.719717][T13452] loop5: detected capacity change from 0 to 256 [ 220.750215][T13452] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.784332][T13452] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.452671][T13500] geneve0: entered promiscuous mode [ 221.474312][T13500] batadv0: entered promiscuous mode [ 221.590107][T13508] SELinux: security policydb version 18 (MLS) not backwards compatible [ 221.628397][T13508] SELinux: failed to load policy [ 221.810972][T13516] loop5: detected capacity change from 0 to 8192 [ 222.081381][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3758'. [ 222.111623][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3761'. [ 222.189079][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 222.189093][ T28] audit: type=1326 audit(1785503773.475:16510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.261088][ T28] audit: type=1326 audit(1785503773.515:16511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.303028][ T28] audit: type=1326 audit(1785503773.515:16512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.329395][ T28] audit: type=1326 audit(1785503773.515:16513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.355435][ T28] audit: type=1326 audit(1785503773.515:16514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.384509][ T28] audit: type=1326 audit(1785503773.515:16515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.457647][ T28] audit: type=1326 audit(1785503773.515:16516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.513682][T13547] hsr0 speed is unknown, defaulting to 1000 [ 222.519905][ T28] audit: type=1326 audit(1785503773.515:16517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.523395][T13547] lo speed is unknown, defaulting to 1000 [ 222.561058][ T28] audit: type=1326 audit(1785503773.515:16518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.587420][ T28] audit: type=1326 audit(1785503773.525:16519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13537 comm="syz.3.3763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c478e019 code=0x7ffc0000 [ 222.782556][T13562] loop5: detected capacity change from 0 to 256 [ 222.808451][T13562] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.900075][T13570] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 222.930601][T13570] FAT-fs (loop5): Filesystem has been set read-only [ 222.955441][T13570] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 223.128840][T13583] hsr0 speed is unknown, defaulting to 1000 [ 223.160322][T13583] lo speed is unknown, defaulting to 1000 [ 223.474090][T13599] netlink: 'syz.3.3790': attribute type 3 has an invalid length. [ 223.503982][T13599] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3790'. [ 223.726362][T13618] loop1: detected capacity change from 0 to 256 [ 223.752051][T13618] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.842709][T13625] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 223.870377][T13625] FAT-fs (loop1): Filesystem has been set read-only [ 223.906402][T13625] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 223.946270][T13613] loop2: detected capacity change from 0 to 512 [ 224.109682][T13613] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 224.135000][T13613] EXT4-fs (loop2): orphan cleanup on readonly fs [ 224.149109][T13613] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3796: bad orphan inode 15 [ 224.162347][T13613] loop2: lost filesystem error report for type 5 error -117 [ 224.163969][T13613] ext4_test_bit(bit=14, block=5) = 0 [ 224.172032][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 224.172362][ C0] EXT4-fs (loop2): initial error at time 1785503775: ext4_orphan_get:1425 [ 224.172550][ C0] EXT4-fs (loop2): last error at time 1785503775: ext4_orphan_get:1425 [ 224.321437][T13640] loop4: detected capacity change from 0 to 256 [ 224.358834][T13644] netlink: 730 bytes leftover after parsing attributes in process `syz.2.3803'. [ 224.567834][T13654] hsr0 speed is unknown, defaulting to 1000 [ 224.592254][T13654] lo speed is unknown, defaulting to 1000 [ 225.608162][T13735] loop5: detected capacity change from 0 to 1024 [ 225.664927][T13735] EXT4-fs: Ignoring removed orlov option [ 225.735148][T13735] EXT4-fs mount: 8 callbacks suppressed [ 225.735165][T13735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.776695][T13746] loop1: detected capacity change from 0 to 256 [ 226.017201][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.154930][T13772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3833'. [ 226.567799][T13790] loop5: detected capacity change from 0 to 512 [ 226.620788][T13790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.699693][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.148670][T13816] loop4: detected capacity change from 0 to 512 [ 227.150135][T13775] loop3: detected capacity change from 0 to 512 [ 227.177342][T13816] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3856: corrupted in-inode xattr: invalid ea_ino [ 227.184315][T13813] netlink: 'syz.5.3854': attribute type 8 has an invalid length. [ 227.211141][T13816] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.213114][T13816] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3856: couldn't read orphan inode 15 (err -117) [ 227.222389][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 227.222412][ C1] EXT4-fs (loop4): initial error at time 1785503778: ext4_iget_extra_inode:5180: inode 15 [ 227.222450][ C1] EXT4-fs (loop4): last error at time 1785503778: ext4_iget_extra_inode:5180: inode 15 [ 227.263338][T13820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3857'. [ 227.266366][T13816] loop4: lost filesystem error report for type 5 error -117 [ 227.272653][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'. [ 227.285067][T13775] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.289502][T13816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.317092][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 227.317110][ T28] audit: type=1400 audit(1785503778.605:16578): avc: denied { write } for pid=13815 comm="syz.4.3856" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.333944][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3857'. [ 227.347393][ T28] audit: type=1400 audit(1785503778.605:16579): avc: denied { read append open } for pid=13815 comm="syz.4.3856" path="/769/file0/file0/blkio.bfq.group_wait_time" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 227.370554][T13775] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 227.388388][T13820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3857'. [ 227.399822][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3857'. [ 227.430726][T13775] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 227.475666][T13775] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 227.487556][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.498404][T13775] System zones: 0-2, 18-18, 34-35 [ 227.515193][T13775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.543864][ T28] audit: type=1400 audit(1785503778.835:16580): avc: denied { write } for pid=13774 comm="syz.3.3838" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.576982][ T28] audit: type=1400 audit(1785503778.855:16581): avc: denied { append } for pid=13774 comm="syz.3.3838" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.602986][ T28] audit: type=1400 audit(1785503778.865:16582): avc: denied { ioctl } for pid=13774 comm="syz.3.3838" path="/45/file2/file2" dev="loop3" ino=16 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.651939][T13775] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3838: bg 0: block 353: padding at end of block bitmap is not set [ 227.672883][T13775] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 227.702601][T13831] syzkaller1: entered promiscuous mode [ 227.726337][T12765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.729408][T13831] syzkaller1: entered allmulticast mode [ 227.782410][T13838] loop3: detected capacity change from 0 to 512 [ 227.806253][T13838] EXT4-fs: Ignoring removed i_version option [ 227.828657][T13838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.844216][T13838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.872727][T13838] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.945826][T13838] EXT4-fs (loop3): shut down requested (2) [ 227.960031][T13838] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 227.990109][T13838] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 228.017460][ T28] audit: type=1400 audit(1785503779.305:16583): avc: denied { setattr } for pid=13836 comm="syz.3.3864" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.092003][T12765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.308096][ T28] audit: type=1400 audit(1785503779.595:16584): avc: denied { read } for pid=13857 comm="syz.2.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.354217][T13853] loop3: detected capacity change from 0 to 512 [ 228.389516][T13853] EXT4-fs: Ignoring removed nobh option [ 228.456089][T13867] vlan2: entered allmulticast mode [ 228.464751][T13867] bond0: entered allmulticast mode [ 228.478407][T13867] bond_slave_0: entered allmulticast mode [ 228.488458][T13867] bond_slave_1: entered allmulticast mode [ 228.491340][T13853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.514024][T13870] loop1: detected capacity change from 0 to 128 [ 228.533384][T13853] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.543766][T13870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 228.560424][T13870] System zones: 1-3, 19-19, 35-36 [ 228.566357][T13870] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 228.583193][T13870] ext4 filesystem being mounted at /818/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.642380][ T28] audit: type=1400 audit(1785503779.925:16585): avc: denied { write } for pid=13869 comm="syz.1.3876" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.674219][ T28] audit: type=1400 audit(1785503779.925:16586): avc: denied { write } for pid=13869 comm="syz.1.3876" path="/818/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 228.719020][ T28] audit: type=1400 audit(1785503779.925:16587): avc: denied { mount } for pid=13875 comm="syz.5.3878" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 228.757830][T12765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.823811][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.063269][T13894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3885'. [ 229.081033][T13898] 9pnet: p9_errstr2errno: server reported unknown error [ 229.218030][T13894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3885'. [ 229.241246][T13894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3885'. [ 229.383287][T13894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3885'. [ 229.517486][T13908] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 229.525293][T13908] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 229.893601][T13930] loop5: detected capacity change from 0 to 256 [ 229.908822][T13930] FAT-fs (loop5): data area starts beyond volume (32 > 0) [ 229.916589][T13930] FAT-fs (loop5): Can't find a valid FAT filesystem [ 230.308284][T13894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.345639][T13894] veth1_macvtap: left allmulticast mode [ 230.358445][ T3410] lo speed is unknown, defaulting to 1000 [ 230.365485][ T3410] sz1: Port: 1 Link DOWN [ 230.370054][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.390130][ T559] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.425762][ T23] lo speed is unknown, defaulting to 1000 [ 230.439909][ T3430] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.470304][ T3430] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.648348][T13988] loop1: detected capacity change from 0 to 512 [ 230.676905][T13988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 230.705196][T13988] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3919: bad orphan inode 131083 [ 230.717770][T13991] loop4: detected capacity change from 0 to 512 [ 230.732830][T13988] loop1: lost filesystem error report for type 5 error -117 [ 230.744779][T13988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.794196][ T3300] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 230.823250][T13991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.842756][T13991] ext4 filesystem being mounted at /785/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.924524][T11358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.924552][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.067230][T14011] loop2: detected capacity change from 0 to 512 [ 231.081430][T14011] EXT4-fs: Ignoring removed nobh option [ 231.116098][T14011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.130662][T14011] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.177709][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.314915][T14020] __nla_validate_parse: 132 callbacks suppressed [ 231.314959][T14020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3931'. [ 231.588824][T14054] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3946'. [ 231.878594][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3950'. [ 231.906573][T14066] tipc: Enabling of bearer <&:> rejected, media not registered [ 232.036005][T14076] loop3: detected capacity change from 0 to 512 [ 232.046187][T14076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.067157][T14076] EXT4-fs (loop3): 1 truncate cleaned up [ 232.074095][T14076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.103821][T12765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.699769][ T3388] IPVS: starting estimator thread 0... [ 232.792956][T14104] IPVS: using max 2352 ests per chain, 117600 per kthread [ 232.874551][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.881546][T14115] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.018964][T14108] hsr0 speed is unknown, defaulting to 1000 [ 233.019343][T14108] lo speed is unknown, defaulting to 1000 [ 233.308797][T14129] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3976'. [ 233.419123][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 233.419141][ T28] audit: type=1400 audit(1785503784.705:16613): avc: denied { read } for pid=14143 comm="syz.4.3982" name="trace_pipe" dev="tracefs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 233.468096][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3981'. [ 233.571226][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.621575][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.639366][ T28] audit: type=1400 audit(1785503784.925:16614): avc: denied { write } for pid=14146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.680021][ T36] bond0 (unregistering): Released all slaves [ 233.717924][ T28] audit: type=1400 audit(1785503785.005:16615): avc: denied { write } for pid=14169 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.833319][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 233.877977][T14183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14183 comm=syz.2.3991 [ 233.923256][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.939114][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.952341][T14108] bridge_slave_0: entered allmulticast mode [ 233.959175][T14108] bridge_slave_0: entered promiscuous mode [ 233.966630][ T36] tipc: Left network mode [ 234.025402][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.056587][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.078915][T14108] bridge_slave_1: entered allmulticast mode [ 234.089765][T14190] loop4: detected capacity change from 0 to 1764 [ 234.102643][T14108] bridge_slave_1: entered promiscuous mode [ 234.121451][T14188] loop2: detected capacity change from 0 to 512 [ 234.133299][ T36] hsr_slave_0: left promiscuous mode [ 234.146859][ T36] hsr_slave_1: left promiscuous mode [ 234.150066][T14188] EXT4-fs: Ignoring removed nobh option [ 234.167729][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.265853][ T28] audit: type=1400 audit(1785503785.545:16616): avc: denied { write } for pid=14191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.309821][T14188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.335487][T14188] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.347223][ T36] team0 (unregistering): Port device team_slave_1 removed [ 234.366434][ T36] team0 (unregistering): Port device team_slave_0 removed [ 234.380431][ T28] audit: type=1400 audit(1785503785.675:16617): avc: denied { write } for pid=14206 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.445491][T11168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.501347][ T559] smc: removing ib device sz1 [ 234.528594][T14209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3995'. [ 234.554846][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 234.605359][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.613415][T14212] loop2: detected capacity change from 0 to 256 [ 234.680333][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.850692][ T28] audit: type=1400 audit(1785503786.135:16618): avc: denied { write } for pid=14214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.929754][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.959600][ T28] audit: type=1400 audit(1785503786.235:16619): avc: denied { write } for pid=14235 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.982294][T14108] team0: Port device team_slave_0 added [ 234.989072][T14108] team0: Port device team_slave_1 added [ 235.015115][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 235.080302][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.087392][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.142449][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.162696][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.179411][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.206587][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.286713][T14108] hsr_slave_0: entered promiscuous mode [ 235.310848][T14108] hsr_slave_1: entered promiscuous mode [ 235.329120][T14108] debugfs: 'hsr0' already exists in 'hsr' [ 235.350400][T14108] Cannot create hsr debugfs directory [ 235.487339][ T28] audit: type=1400 audit(1785503786.775:16620): avc: denied { write } for pid=14250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.541392][ T28] audit: type=1400 audit(1785503786.825:16621): avc: denied { write } for pid=14263 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.580453][T14108] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.602751][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 235.655081][T14108] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.744169][T14108] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.832296][T14108] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.965794][T14108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.982999][T14292] loop2: detected capacity change from 0 to 128 [ 235.988337][T14108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.997285][ T28] audit: type=1400 audit(1785503787.285:16622): avc: denied { read } for pid=14289 comm="syz.4.4016" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.030990][T14292] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.035523][T14108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.073557][T14108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.085027][T14292] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.120762][T14108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.130002][T14108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.143739][T14108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.161848][T14108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.170892][T11168] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.239707][T14108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.251912][T14108] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.262555][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.269725][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.280944][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.288092][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.409938][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.484834][T14108] veth0_vlan: entered promiscuous mode [ 236.493345][T14108] veth1_vlan: entered promiscuous mode [ 236.510299][T14108] veth0_macvtap: entered promiscuous mode [ 236.517929][T14108] veth1_macvtap: entered promiscuous mode [ 236.530099][T14108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.542380][T14108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.569717][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.579106][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.600017][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.615873][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.674972][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4019'. [ 236.799936][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'. [ 236.808254][T14329] loop3: detected capacity change from 0 to 512 [ 236.894911][T14351] loop5: detected capacity change from 0 to 256 [ 236.916134][T14351] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.921698][T14329] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 236.955883][T14329] EXT4-fs (loop3): orphan cleanup on readonly fs [ 236.964042][T14329] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.4029: bad orphan inode 15 [ 236.980383][T14329] loop3: lost filesystem error report for type 5 error -117 [ 236.982158][T14329] ext4_test_bit(bit=14, block=5) = 0 [ 236.990331][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 236.990421][ C1] EXT4-fs (loop3): initial error at time 1785503788: ext4_orphan_get:1425 [ 236.990489][ C1] EXT4-fs (loop3): last error at time 1785503788: ext4_orphan_get:1425 [ 237.047075][T14329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 237.087402][T12765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.302652][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4035'. [ 237.922799][T14404] loop2: detected capacity change from 0 to 256 [ 237.952690][T14402] loop5: detected capacity change from 0 to 512 [ 237.968312][T14406] program syz.3.4049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.976590][T14402] EXT4-fs: Ignoring removed nobh option [ 238.117401][T14410] SELinux: failed to load policy [ 238.162115][T14418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4054'. [ 238.187737][T14421] loop3: detected capacity change from 0 to 512 [ 238.196053][T14421] EXT4-fs: Ignoring removed oldalloc option [ 238.204109][T14402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.221858][T14402] ext4 filesystem being mounted at /761/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.237701][T14421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.276907][T14421] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.305190][T14421] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.305377][T14421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.305433][T14421] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.305525][T14421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.305758][T14421] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.305854][T14421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.311309][T14421] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.387418][T14421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.387458][T14421] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.415999][T14432] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.416207][T14432] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.416239][T14432] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.416354][T14432] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.433046][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.436655][T14434] syzkaller1: entered promiscuous mode [ 238.436672][T14434] syzkaller1: entered allmulticast mode [ 238.597216][T14432] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.618597][T14432] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.618637][T14432] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4055: corrupted xattr block 32: invalid ea_ino [ 238.618802][T14432] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.630312][T14436] loop5: detected capacity change from 0 to 512 [ 238.703879][T14436] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.703909][T14436] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 238.714725][T14436] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 238.715496][T14436] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 238.715757][T14436] System zones: 0-2, 18-18, 34-35 [ 238.735525][T14436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.768178][T14449] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 238.768206][T14449] SELinux: failed to load policy [ 238.774730][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 238.774746][ T28] audit: type=1400 audit(1785503790.055:16658): avc: denied { write } for pid=14435 comm="syz.5.4059" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.827847][T12765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.834265][T14436] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4059: bg 0: block 353: padding at end of block bitmap is not set [ 238.866197][T14436] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 238.936261][ T3705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.190753][ T559] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.239433][ T559] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.314420][ T559] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.325437][T14466] ================================================================== [ 239.333600][T14466] BUG: KCSAN: data-race in do_readlinkat / ring_buffer_unlock_commit [ 239.341839][T14466] [ 239.344202][T14466] read to 0xffff888100074cb4 of 1 bytes by task 14450 on cpu 1: [ 239.351863][T14466] [ 239.351859][T14462] loop4: detected capacity change from 0 to 512 [ 239.354208][T14466] write to 0xffff888100074cb4 of 1 bytes by task 14466 on cpu 0: [ 239.354231][T14466] ring_buffer_unlock_commit+0x6a/0x440 [ 239.354263][T14466] trace_buffer_unlock_commit_regs+0x43/0x310 [ 239.354287][T14466] trace_event_buffer_commit+0x149/0x590 [ 239.354310][T14466] trace_event_raw_event_x86_fpu+0x165/0x200 [ 239.354338][T14466] fpregs_mark_activate+0xff/0x120 [ 239.354365][T14466] fpu__restore_sig+0x5a0/0xad0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 239.354394][T14466] __ia32_sys_rt_sigreturn+0x29b/0x350 [ 239.354430][T14466] x64_sys_call+0x2823/0x3020 [ 239.354461][T14466] do_syscall_64+0x136/0x3c0 [ 239.354490][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.354512][T14466] [ 239.354516][T14466] value changed: 0x01 -> 0x00 [ 239.354530][T14466] [ 239.354535][T14466] Reported by Kernel Concurrency Sanitizer on: [ 239.354573][T14466] CPU: 0 UID: 0 PID: 14466 Comm: syz.5.4072 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 239.354613][T14466] Tainted: [W]=WARN [ 239.354623][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.354640][T14466] ================================================================== [ 239.500108][ T28] audit: type=1400 audit(1785503790.705:16659): avc: denied { write } for pid=3282 comm="syz-executor" path="pipe:[491]" dev="pipefs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 239.500148][ T28] audit: type=1400 audit(1785503790.725:16660): avc: denied { recv } for pid=14459 comm="syz.4.4070" saddr=10.128.0.163 src=43272 daddr=10.128.0.219 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 239.637973][ T559] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.042781][ T559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.068544][ T559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.093286][ T559] bond0 (unregistering): Released all slaves [ 240.101575][ T559] bond1 (unregistering): Released all slaves [ 240.165763][ T559] hsr_slave_0: left promiscuous mode [ 240.171865][ T559] hsr_slave_1: left promiscuous mode [ 240.179096][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.187710][ T559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.198612][ T559] veth1_macvtap: left promiscuous mode [ 240.204319][ T559] veth0_macvtap: left promiscuous mode [ 240.210609][ T559] veth1_vlan: left promiscuous mode [ 240.216012][ T559] veth0_vlan: left promiscuous mode [ 240.285966][ T28] audit: type=1400 audit(1785503791.575:16661): avc: denied { write } for pid=14473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.314753][ T559] team0 (unregistering): Port device team_slave_1 removed [ 240.326477][ T28] audit: type=1400 audit(1785503791.615:16662): avc: denied { write } for pid=14484 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.353642][ T559] team0 (unregistering): Port device team_slave_0 removed [ 240.392495][ T4520] syz_tun (unregistering): left allmulticast mode [ 240.401164][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 240.487312][ T28] audit: type=1400 audit(1785503791.775:16663): avc: denied { write } for pid=14487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.520409][ T28] audit: type=1400 audit(1785503791.815:16664): avc: denied { write } for pid=14498 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.555923][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 240.637438][ T28] audit: type=1400 audit(1785503791.925:16665): avc: denied { write } for pid=14501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.670582][ T28] audit: type=1400 audit(1785503791.965:16666): avc: denied { write } for pid=14512 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.704126][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 240.713547][ T559] IPVS: stop unused estimator thread 0... [ 240.785273][ T559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.800019][ T28] audit: type=1400 audit(1785503792.095:16667): avc: denied { write } for pid=14515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.833185][ T559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.857419][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 240.893109][ T559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.933214][ T559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.002608][ T559] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.051389][ T559] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.101270][ T559] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.131321][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 241.152020][ T559] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.225442][ T559] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 241.235440][ T559] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 55231 - 0 [ 241.282703][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 241.290998][ T559] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 241.301210][ T559] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 55231 - 0 [ 241.351161][ T559] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 241.361158][ T559] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 55231 - 0 [ 241.421073][ T559] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 241.431073][ T559] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 55231 - 0 [ 241.452136][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 241.539958][ T559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.581355][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 241.593239][ T559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.653464][ T559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.713955][ T559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.737347][ T3019] 8021q: adding VLAN 0 to HW filter on device eth25 [ 241.782299][ T559] bridge_slave_1: left allmulticast mode [ 241.788063][ T559] bridge_slave_1: left promiscuous mode [ 241.794073][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.802336][ T559] bridge_slave_0: left allmulticast mode [ 241.808021][ T559] bridge_slave_0: left promiscuous mode [ 241.814133][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.823862][ T559] bridge_slave_1: left allmulticast mode [ 241.829807][ T559] bridge_slave_1: left promiscuous mode [ 241.835663][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.843740][ T559] bridge_slave_0: left allmulticast mode [ 241.849458][ T559] bridge_slave_0: left promiscuous mode [ 241.855571][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.866332][ T559] bridge_slave_1: left allmulticast mode [ 241.872084][ T559] bridge_slave_1: left promiscuous mode [ 241.877899][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.886110][ T559] bridge_slave_0: left allmulticast mode [ 241.892815][ T559] bridge_slave_0: left promiscuous mode [ 241.898660][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.908282][ T559] bridge_slave_1: left allmulticast mode [ 241.914107][ T559] bridge_slave_1: left promiscuous mode [ 241.920139][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.928147][ T559] bridge_slave_0: left allmulticast mode [ 241.935078][ T559] bridge_slave_0: left promiscuous mode [ 241.941289][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.043340][ T559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.054065][ T559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.063970][ T559] bond0 (unregistering): Released all slaves [ 242.088412][ T559] geneve0 (unregistering): left promiscuous mode [ 242.099159][ T559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.108041][ T559] bond_slave_0: left allmulticast mode [ 242.115024][ T559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.124287][ T559] bond_slave_1: left allmulticast mode [ 242.130796][ T559] bond0 (unregistering): Released all slaves [ 242.181349][ T559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.191577][ T559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.201325][ T559] bond0 (unregistering): Released all slaves [ 242.209896][ T3019] 8021q: adding VLAN 0 to HW filter on device eth26 [ 242.245578][ T559] tipc: Disabling bearer [ 242.250937][ T559] tipc: Left network mode [ 242.261876][ T559] hsr_slave_0: left promiscuous mode [ 242.267715][ T559] hsr_slave_1: left promiscuous mode [ 242.273806][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.281393][ T559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.289028][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.299781][ T559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.307984][ T559] batadv0: left promiscuous mode [ 242.315476][ T559] hsr_slave_0: left promiscuous mode [ 242.321603][ T559] hsr_slave_1: left promiscuous mode [ 242.327320][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.335748][ T559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.343893][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.351685][ T559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.361738][ T559] hsr_slave_0: left promiscuous mode [ 242.367632][ T559] hsr_slave_1: left promiscuous mode [ 242.374385][ T559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.382314][ T559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.392212][ T559] hsr_slave_0: left promiscuous mode [ 242.398071][ T559] hsr_slave_1: left promiscuous mode [ 242.405867][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.413627][ T559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.421437][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.428936][ T559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.447320][ T559] veth1_macvtap: left promiscuous mode [ 242.452939][ T559] veth0_macvtap: left promiscuous mode [ 242.458549][ T559] veth1_vlan: left promiscuous mode [ 242.464162][ T559] veth0_vlan: left promiscuous mode [ 242.469966][ T559] veth1_macvtap: left promiscuous mode [ 242.475525][ T559] veth0_macvtap: left promiscuous mode [ 242.481363][ T559] veth1_vlan: left promiscuous mode [ 242.486682][ T559] veth0_vlan: left promiscuous mode [ 242.492696][ T559] veth1_macvtap: left promiscuous mode [ 242.498189][ T559] veth0_macvtap: left promiscuous mode [ 242.503824][ T559] veth1_vlan: left promiscuous mode [ 242.509099][ T559] veth0_vlan: left promiscuous mode [ 242.654886][ T559] team0 (unregistering): Port device team_slave_1 removed [ 242.665314][ T559] team0 (unregistering): Port device team_slave_0 removed [ 242.728443][ T559] team0 (unregistering): Port device team_slave_1 removed [ 242.738692][ T559] team0 (unregistering): Port device team_slave_0 removed [ 242.802344][ T559] team0 (unregistering): Port device team_slave_1 removed [ 242.813942][ T559] team0 (unregistering): Port device team_slave_0 removed [ 242.872628][ T559] team0 (unregistering): Port device team_slave_1 removed [ 242.882974][ T559] team0 (unregistering): Port device team_slave_0 removed [ 242.915368][ T3019] 8021q: adding VLAN 0 to HW filter on device eth27 [ 243.031712][ T3019] 8021q: adding VLAN 0 to HW filter on device eth28 [ 243.143652][ T3019] 8021q: adding VLAN 0 to HW filter on device eth29 [ 243.256719][ T3019] 8021q: adding VLAN 0 to HW filter on device eth30 [ 243.383603][ T3019] 8021q: adding VLAN 0 to HW filter on device eth31 [ 243.498294][ T3019] 8021q: adding VLAN 0 to HW filter on device eth32 [ 243.621784][ T3019] 8021q: adding VLAN 0 to HW filter on device eth33 [ 243.730529][ T559] IPVS: stop unused estimator thread 0... [ 243.736623][ T559] IPVS: stop unused estimator thread 0... [ 243.744487][ T3019] 8021q: adding VLAN 0 to HW filter on device eth34 [ 243.831370][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 243.831409][ T28] audit: type=1400 audit(1785503795.125:16697): avc: denied { write } for pid=14742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.868633][ T28] audit: type=1400 audit(1785503795.155:16698): avc: denied { write } for pid=14753 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.901973][ T3019] 8021q: adding VLAN 0 to HW filter on device eth35 [ 243.985450][ T28] audit: type=1400 audit(1785503795.275:16699): avc: denied { write } for pid=14756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.018220][ T28] audit: type=1400 audit(1785503795.305:16700): avc: denied { write } for pid=14767 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.051046][ T3019] 8021q: adding VLAN 0 to HW filter on device eth36 [ 246.368812][ T28] audit: type=1400 audit(1785503797.655:16701): avc: denied { write } for pid=14799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.401558][ T28] audit: type=1400 audit(1785503797.695:16702): avc: denied { write } for pid=14810 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.943049][ T28] audit: type=1400 audit(1785503798.235:16703): avc: denied { write } for pid=14814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.976401][ T28] audit: type=1400 audit(1785503798.265:16704): avc: denied { write } for pid=14825 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.069485][ T28] audit: type=1400 audit(1785503798.355:16705): avc: denied { write } for pid=14828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.103819][ T28] audit: type=1400 audit(1785503798.395:16706): avc: denied { write } for pid=14839 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1