last executing test programs: 3m53.236922878s ago: executing program 32 (id=1729): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x2, 0x7, 0xf2e, r2}, 0x10) 3m39.132647928s ago: executing program 33 (id=1700): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0x250a, &(0x7f0000000440)={0x0, 0xd2c7, 0x8, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x7, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0x1, 0x0, 0x0) 2m14.028050574s ago: executing program 34 (id=3863): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 2m12.29015083s ago: executing program 35 (id=4098): r0 = socket(0x2b, 0x80801, 0x1) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000100)=""/32, &(0x7f0000000000)=0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 1m57.490107905s ago: executing program 36 (id=4321): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x34000}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x9}, 0x106206, 0x1000, 0x20da, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) shutdown(r0, 0x1) 1m11.673623949s ago: executing program 7 (id=5514): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="458f8f0bcf5462a0985e2189fce217b7eb55964813430f58b688ce", 0x1b}], 0x1, 0x0, 0x0, 0x2c}, 0x8800) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m11.46762922s ago: executing program 7 (id=5518): capset(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000a0000002f4900007f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) 1m11.359896505s ago: executing program 7 (id=5520): creat(&(0x7f00000001c0)='./file1\x00', 0x3d) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) 1m11.275943679s ago: executing program 7 (id=5526): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x8, 0x2f6, &(0x7f0000001880)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) 1m11.07441717s ago: executing program 7 (id=5529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m10.936500716s ago: executing program 7 (id=5534): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 1m10.898243268s ago: executing program 37 (id=5534): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 47.64848798s ago: executing program 5 (id=6065): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x94}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000000)={[{@dots}, {@fat=@flush}, {@fat=@usefree}, {@nodots}, {@nodots}]}, 0x4, 0x2c1, &(0x7f0000001b40)="$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") socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) 47.475190638s ago: executing program 5 (id=6070): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x5f86, &(0x7f0000000180)={0x0, 0x2a97, 0x10000, 0x1, 0x3b7}, &(0x7f0000001040), &(0x7f0000000080)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x5f, 0x0, 0x0, 0x0, 0x0}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0xf5c}, 0xffffffffffffff8c) 46.83673977s ago: executing program 5 (id=6091): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x200}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 46.711611216s ago: executing program 5 (id=6094): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) 46.597441622s ago: executing program 5 (id=6096): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpquota}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000480)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') 46.349196564s ago: executing program 5 (id=6102): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 46.305987226s ago: executing program 38 (id=6102): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 45.932513235s ago: executing program 0 (id=6117): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) 43.020694379s ago: executing program 0 (id=6154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r2, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) 42.907707175s ago: executing program 0 (id=6157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 42.868168116s ago: executing program 0 (id=6158): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 42.822622479s ago: executing program 0 (id=6159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) 42.585691731s ago: executing program 0 (id=6162): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, r0, 0x6966c132ee9ca8e5, 0x70ad2a, 0x25df5bfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040090) 42.560861002s ago: executing program 39 (id=6162): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, r0, 0x6966c132ee9ca8e5, 0x70ad2a, 0x25df5bfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040090) 34.32147372s ago: executing program 3 (id=6350): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 34.040361443s ago: executing program 3 (id=6357): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0xfffe}, &(0x7f0000000180)=0x8) 34.003933226s ago: executing program 3 (id=6360): unshare(0x22020600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 33.965494438s ago: executing program 3 (id=6361): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) 33.755333328s ago: executing program 3 (id=6365): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0)="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", 0x383}, 0x68) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)=ANY=[], 0x200}], 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x4, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x4, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 33.429710284s ago: executing program 3 (id=6371): r0 = syz_io_uring_setup(0x873, &(0x7f00000000c0)={0x0, 0xbaf7, 0x100, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2000c8c7}) io_uring_enter(r0, 0x3d16, 0x0, 0x0, 0x0, 0x0) 33.423213244s ago: executing program 40 (id=6371): r0 = syz_io_uring_setup(0x873, &(0x7f00000000c0)={0x0, 0xbaf7, 0x100, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2000c8c7}) io_uring_enter(r0, 0x3d16, 0x0, 0x0, 0x0, 0x0) 6.032293661s ago: executing program 2 (id=6960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003003e80060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) 5.84776682s ago: executing program 2 (id=6972): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 5.807498532s ago: executing program 2 (id=6964): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x80000001, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.730580896s ago: executing program 2 (id=6965): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 5.681107168s ago: executing program 2 (id=6966): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 5.468535839s ago: executing program 2 (id=6969): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062", @ANYRES64], 0x118}, 0x1, 0x0, 0x0, 0x24000104}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 5.43933062s ago: executing program 41 (id=6969): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062", @ANYRES64], 0x118}, 0x1, 0x0, 0x0, 0x24000104}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 3.329125585s ago: executing program 4 (id=6970): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x439, &(0x7f0000000500)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) 2.916733315s ago: executing program 4 (id=6983): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>00||!') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf6700000000000026030000e433fe3f6706000009000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000070700004c00d6cfcc75000000000000bf54000000000000070400000400f9ffad4301000000000095004000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b9ff129e609f4c787c6002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d559b89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 1.981251831s ago: executing program 9 (id=7015): ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x2, [0x8000000000400402, 0x2, 0x5, 0xd, 0x729, 0x9]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) 1.81357815s ago: executing program 4 (id=7020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x1, 0x0, 0x45, 0x1, 0x0, 0x7, 0x67}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) 1.729136994s ago: executing program 4 (id=7021): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) 1.728432944s ago: executing program 8 (id=7023): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x102260, 0x10000, 0x0, 0x1, 0xc, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r1 = dup(r0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.720010904s ago: executing program 9 (id=7024): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r1, 0x49, 0x5}, &(0x7f00000003c0)=0xc) 1.61508785s ago: executing program 8 (id=7026): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendto$packet(r1, &(0x7f0000002540)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0xfcb6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @broadcast}, 0x14) 1.562312432s ago: executing program 9 (id=7028): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000004, 0x200000005c832, 0xffffffffffffffff, 0xb8f09000) 1.557244513s ago: executing program 8 (id=7029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x2, 0x1000, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000b80), &(0x7f0000000c00)='%pI4 \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 1.501423286s ago: executing program 8 (id=7030): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.323508404s ago: executing program 1 (id=7032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0x8, 0x84, 0x0, @remote, @loopback}}}}}}, 0x26) 1.185281431s ago: executing program 1 (id=7033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152829b66759750a}, &(0x7f0000000180)=0x60) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 1.087799266s ago: executing program 1 (id=7034): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/205, 0xcd}], 0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1.049654188s ago: executing program 8 (id=7035): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x0, @local}, 0x10) 809.44526ms ago: executing program 9 (id=7036): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2}, 0x8) 759.221332ms ago: executing program 4 (id=7037): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) unshare(0x22020600) readv(r0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 739.555713ms ago: executing program 9 (id=7039): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 710.234745ms ago: executing program 9 (id=7040): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) 687.752006ms ago: executing program 6 (id=7041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @random="18c45d9979c9", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 669.837987ms ago: executing program 6 (id=7042): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000005000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f"], 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000500040000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 608.816269ms ago: executing program 6 (id=7043): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x4, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) lsm_set_self_attr(0x66, 0x0, 0x0, 0x20) 512.829544ms ago: executing program 6 (id=7044): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2000000b}) 451.340937ms ago: executing program 6 (id=7045): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x1f2e, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 385.776161ms ago: executing program 8 (id=7046): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140)=0x7fff, 0xff49) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 286.513415ms ago: executing program 4 (id=7047): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 284.383066ms ago: executing program 6 (id=7048): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) 206.13421ms ago: executing program 1 (id=7049): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4}, {0x7}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 60.195357ms ago: executing program 1 (id=7050): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}}) 0s ago: executing program 1 (id=7051): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xeed, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xed, 0x9}, 0x8) kernel console output (not intermixed with test programs): [ 253.272726][ T119] hsr_slave_1: left promiscuous mode [ 253.294136][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.399680][ T119] team0 (unregistering): Port device team_slave_1 removed [ 253.446592][ T119] team0 (unregistering): Port device team_slave_0 removed [ 253.650619][T17601] chnl_net:caif_netlink_parms(): no params data found [ 253.736638][ T30] tipc: Subscription rejected, illegal request [ 253.751449][T17669] loop9: detected capacity change from 0 to 512 [ 253.762309][T17601] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.784354][T17601] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.791856][T17601] bridge_slave_0: entered allmulticast mode [ 253.821100][T17601] bridge_slave_0: entered promiscuous mode [ 253.828166][T17601] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.835340][T17601] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.852785][T17601] bridge_slave_1: entered allmulticast mode [ 253.863412][T17601] bridge_slave_1: entered promiscuous mode [ 253.890106][ T119] IPVS: stop unused estimator thread 0... [ 253.903609][T17601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.947314][T17601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.983572][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5550'. [ 253.996526][T17601] team0: Port device team_slave_0 added [ 254.005124][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5550'. [ 254.051337][T17601] team0: Port device team_slave_1 added [ 254.098246][T17601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.105473][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.142079][T17601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.163572][T17601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.173763][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.202038][T17601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.247875][T17601] hsr_slave_0: entered promiscuous mode [ 254.278805][T17601] hsr_slave_1: entered promiscuous mode [ 254.286382][T17708] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5554'. [ 254.308013][T17601] debugfs: 'hsr0' already exists in 'hsr' [ 254.317927][T17601] Cannot create hsr debugfs directory [ 254.336034][T17708] bond0: entered promiscuous mode [ 254.351391][T17708] bond_slave_0: entered promiscuous mode [ 254.361634][T17708] bond_slave_1: entered promiscuous mode [ 254.393850][T17708] bond0: left promiscuous mode [ 254.403813][T17708] bond_slave_0: left promiscuous mode [ 254.411632][T17708] bond_slave_1: left promiscuous mode [ 254.697086][T17744] loop8: detected capacity change from 0 to 128 [ 254.979292][T17601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.999904][T17601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.035732][T17601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.083015][T17601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.233051][T17601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.289622][T17601] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.319397][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.326636][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.379902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.387084][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.456090][T17601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.582145][T17601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.755276][T17601] veth0_vlan: entered promiscuous mode [ 255.771729][T17601] veth1_vlan: entered promiscuous mode [ 255.802956][T17601] veth0_macvtap: entered promiscuous mode [ 255.817375][T17601] veth1_macvtap: entered promiscuous mode [ 255.843195][T17601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.875955][T17601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.896080][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.911876][T17868] loop5: detected capacity change from 0 to 512 [ 255.927813][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.952027][T17868] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.978663][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.987514][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.998649][T17868] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (6000000) [ 256.029307][T17868] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 256.129905][T17889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5586'. [ 256.154682][T17889] bond2: option primary_reselect: invalid value (8) [ 256.162912][T17889] bond2 (unregistering): Released all slaves [ 256.298249][T17899] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5587'. [ 256.341161][T17908] loop0: detected capacity change from 0 to 256 [ 256.371254][T17908] SELinux: failed to load policy [ 256.477735][T17919] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 256.497704][T17919] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 256.672734][T17945] Cannot find add_set index 0 as target [ 256.865984][T17964] loop5: detected capacity change from 0 to 164 [ 256.886762][T17964] ISOFS: Bad logical zone size 2816 [ 256.904116][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 256.904134][ T28] audit: type=1400 audit(2000000478.650:2340): avc: denied { ioctl } for pid=17963 comm="syz.5.5603" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.942073][T17970] loop0: detected capacity change from 0 to 512 [ 256.953725][T17970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.008352][T17970] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5604: invalid indirect mapped block 4294967295 (level 1) [ 257.025800][T17970] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.028089][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 257.044023][ C1] EXT4-fs (loop0): initial error at time 2000000478: ext4_free_branches:1023: inode 11 [ 257.053736][ C1] EXT4-fs (loop0): last error at time 2000000478: ext4_free_branches:1023: inode 11 [ 257.066089][T17970] EXT4-fs (loop0): Remounting filesystem read-only [ 257.072877][T17970] EXT4-fs (loop0): 2 truncates cleaned up [ 257.079353][T17970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.106356][ T28] audit: type=1400 audit(2000000478.850:2341): avc: denied { setattr } for pid=17968 comm="syz.0.5604" path="/8/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.136944][T17601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.153917][ T28] audit: type=1400 audit(2000000478.900:2342): avc: denied { mount } for pid=17988 comm="syz.8.5609" name="/" dev="ramfs" ino=59029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 257.205974][ T28] audit: type=1400 audit(2000000478.950:2343): avc: denied { bind } for pid=17998 comm="syz.8.5613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.235211][ T28] audit: type=1400 audit(2000000478.950:2344): avc: denied { listen } for pid=17998 comm="syz.8.5613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.259557][ T28] audit: type=1400 audit(2000000478.950:2345): avc: denied { accept } for pid=17998 comm="syz.8.5613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.280366][ T28] audit: type=1400 audit(2000000478.960:2346): avc: denied { write } for pid=17996 comm="syz.0.5611" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.306633][ T28] audit: type=1400 audit(2000000479.010:2347): avc: denied { bind } for pid=17996 comm="syz.0.5611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 257.380162][T18017] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5618'. [ 257.486681][ T28] audit: type=1400 audit(2000000479.230:2348): avc: denied { bind } for pid=18028 comm="syz.8.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.551877][ T28] audit: type=1400 audit(2000000479.230:2349): avc: denied { setopt } for pid=18028 comm="syz.8.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.656386][T18043] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 257.908751][T18082] syzkaller1: entered promiscuous mode [ 257.917904][T18082] syzkaller1: entered allmulticast mode [ 257.979285][T18092] loop8: detected capacity change from 0 to 512 [ 257.992430][T18092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.016150][T18092] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5639: invalid indirect mapped block 4294967295 (level 1) [ 258.037143][T18092] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 258.037363][T18092] EXT4-fs (loop8): Remounting filesystem read-only [ 258.046719][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 258.046736][ C0] EXT4-fs (loop8): initial error at time 2000000479: ext4_free_branches:1023: inode 11 [ 258.046771][ C0] EXT4-fs (loop8): last error at time 2000000479: ext4_free_branches:1023: inode 11 [ 258.118350][T18092] EXT4-fs (loop8): 2 truncates cleaned up [ 258.128623][T18092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.155697][T18107] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 258.183841][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.313449][ T3403] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 258.328266][ T3403] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.451424][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5649'. [ 258.480365][T18131] netlink: 'syz.9.5649': attribute type 18 has an invalid length. [ 258.508113][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5649'. [ 259.118912][T18179] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 259.529110][T18200] netlink: 'syz.9.5678': attribute type 1 has an invalid length. [ 259.547714][T18200] netlink: 'syz.9.5678': attribute type 2 has an invalid length. [ 259.557864][T18200] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5678'. [ 259.651746][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5687'. [ 259.681603][T18219] macsec1: entered promiscuous mode [ 259.693003][T18219] macsec1: entered allmulticast mode [ 260.117330][T18250] tap0: tun_chr_ioctl cmd 1074025675 [ 260.140857][T18250] tap0: persist disabled [ 260.159638][T18250] tap0: tun_chr_ioctl cmd 1074025675 [ 260.170479][T18250] tap0: persist disabled [ 260.829559][T18295] loop8: detected capacity change from 0 to 512 [ 260.850521][T18295] EXT4-fs (loop8): 1 truncate cleaned up [ 260.867147][T18295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.916989][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.000201][T18313] loop8: detected capacity change from 0 to 256 [ 261.006945][T18313] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.302378][T18340] SELinux: Context : is not valid (left unmapped). [ 261.573168][T18378] loop8: detected capacity change from 0 to 128 [ 261.589122][T18378] ext4 filesystem being mounted at /279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 261.749003][T18385] loop8: detected capacity change from 0 to 1024 [ 261.776633][T18385] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.5750: Allocating blocks 449-513 which overlap fs metadata [ 262.243450][T18400] loop8: detected capacity change from 0 to 1024 [ 262.281946][T18400] EXT4-fs mount: 4 callbacks suppressed [ 262.281986][T18400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.305786][T18400] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.336030][ T28] kauditd_printk_skb: 652 callbacks suppressed [ 262.336047][ T28] audit: type=1400 audit(2000000484.080:3002): avc: denied { remove_name } for pid=18398 comm="syz.8.5765" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.365779][T18400] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5765: bg 0: block 112: padding at end of block bitmap is not set [ 262.380410][ T28] audit: type=1400 audit(2000000484.110:3003): avc: denied { unlink } for pid=18398 comm="syz.8.5765" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.389307][T18400] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.5765: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.435088][T18400] EXT4-fs error (device loop8): ext4_ext_remove_space:2954: inode #15: comm syz.8.5765: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 262.460573][ T28] audit: type=1400 audit(2000000484.210:3004): avc: denied { watch } for pid=18409 comm="syz.0.5757" path="/37" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.483345][ T28] audit: type=1400 audit(2000000484.230:3005): avc: denied { watch_reads } for pid=18409 comm="syz.0.5757" path="/37" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.527593][T18398] EXT4-fs error (device loop8): ext4_ext_remove_space:2954: inode #15: comm syz.8.5765: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 262.546367][ T3403] IPVS: starting estimator thread 0... [ 262.552718][T18398] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 262.552963][T18398] EXT4-fs error (device loop8): ext4_evict_inode:266: comm syz.8.5765: couldn't truncate inode 15 (err -117) [ 262.638276][T18415] IPVS: using max 2400 ests per chain, 120000 per kthread [ 262.680683][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.845425][ T28] audit: type=1326 audit(2000000484.590:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18428 comm="syz.8.5767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3cc0bc799 code=0x0 [ 263.756861][T18445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5772'. [ 263.783106][T18445] bond2: option primary_reselect: invalid value (8) [ 264.358800][T18445] bond2 (unregistering): Released all slaves [ 264.494606][T18471] loop0: detected capacity change from 0 to 512 [ 264.514429][T18471] EXT4-fs: Ignoring removed oldalloc option [ 264.539438][T18471] EXT4-fs (loop0): 1 truncate cleaned up [ 264.545732][T18471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.599351][T17601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.815437][T18491] loop5: detected capacity change from 0 to 1024 [ 264.843873][T18491] EXT4-fs: Ignoring removed orlov option [ 264.862708][T18491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.901820][ T7407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.071373][ T28] audit: type=1400 audit(2000000486.820:3007): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 265.170878][T18517] loop8: detected capacity change from 0 to 2048 [ 265.195072][T18517] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5798'. [ 265.220596][T18517] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5798'. [ 265.310690][ T28] audit: type=1400 audit(2000000487.050:3008): avc: denied { getopt } for pid=18525 comm="syz.0.5799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.434384][T18545] netlink: 'syz.8.5800': attribute type 16 has an invalid length. [ 265.462504][T18545] netlink: 'syz.8.5800': attribute type 17 has an invalid length. [ 265.559951][T18535] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 265.906665][ T28] audit: type=1326 audit(2000000487.650:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.8.5805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3cc0bc799 code=0x0 [ 266.072440][T18571] chnl_net:caif_netlink_parms(): no params data found [ 266.118579][T18571] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.125838][T18571] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.133077][T18571] bridge_slave_0: entered allmulticast mode [ 266.140046][T18571] bridge_slave_0: entered promiscuous mode [ 266.146914][T18571] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.154113][T18571] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.161455][T18571] bridge_slave_1: entered allmulticast mode [ 266.168049][T18571] bridge_slave_1: entered promiscuous mode [ 266.202307][T18571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.215960][T18571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.243690][T18571] team0: Port device team_slave_0 added [ 266.252013][T18571] team0: Port device team_slave_1 added [ 266.267188][T18571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.274789][T18571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.310364][T18571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.322026][T18571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.329153][T18571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.355465][T18571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.393992][T18571] hsr_slave_0: entered promiscuous mode [ 266.409229][T18571] hsr_slave_1: entered promiscuous mode [ 266.420693][T18571] debugfs: 'hsr0' already exists in 'hsr' [ 266.432994][T18571] Cannot create hsr debugfs directory [ 266.594301][T18571] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.659327][T18571] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.709563][T18571] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.780355][T18571] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.881420][T18571] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.900685][T18571] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.911480][T18571] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.946740][T18571] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.035337][T18571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.091319][T18571] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.119676][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.126927][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.162645][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.169795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.216362][ T28] audit: type=1400 audit(2000000488.960:3010): avc: denied { listen } for pid=18648 comm="syz.8.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.243384][T18571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.271893][T18571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.288447][ T28] audit: type=1400 audit(2000000488.960:3011): avc: denied { accept } for pid=18648 comm="syz.8.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.440980][T18571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.602498][T18571] veth0_vlan: entered promiscuous mode [ 267.613632][T18571] veth1_vlan: entered promiscuous mode [ 267.646175][T18571] veth0_macvtap: entered promiscuous mode [ 267.665056][T18571] veth1_macvtap: entered promiscuous mode [ 267.684803][T18571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.711507][T18571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.732087][T11261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.753405][T11261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.783600][T11261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.820898][T16355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.833674][T11261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.519496][ T28] audit: type=1400 audit(2000000490.260:3012): avc: denied { create } for pid=18717 comm="syz.0.5844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.522525][T18721] hugetlbfs: syz.8.5845 (18721): Using mlock ulimits for SHM_HUGETLB is obsolete [ 268.568561][ T28] audit: type=1400 audit(2000000490.300:3013): avc: denied { setopt } for pid=18717 comm="syz.0.5844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.800118][T18735] loop8: detected capacity change from 0 to 4096 [ 268.823297][T18735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.843391][ T28] audit: type=1400 audit(2000000490.590:3014): avc: denied { setopt } for pid=18738 comm="syz.3.5852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.876987][T18735] EXT4-fs (loop8): shut down requested (1) [ 268.880712][ T28] audit: type=1400 audit(2000000490.590:3015): avc: denied { getopt } for pid=18738 comm="syz.3.5852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.888415][T18735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 269.002820][ T28] audit: type=1400 audit(2000000490.750:3016): avc: denied { bind } for pid=18746 comm="syz.3.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.005729][T18735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 269.115366][ T28] audit: type=1400 audit(2000000490.850:3017): avc: denied { setattr } for pid=18734 comm="syz.8.5851" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.185340][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.559022][T18777] loop8: detected capacity change from 0 to 512 [ 269.568439][T18777] EXT4-fs: Ignoring removed nobh option [ 269.591512][T18777] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 269.632654][T18777] EXT4-fs (loop8): 1 truncate cleaned up [ 269.658624][T18777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.709892][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.719441][T16355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.845509][ T28] audit: type=1400 audit(2000000491.590:3018): avc: denied { wake_alarm } for pid=18791 comm="syz.8.5877" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 270.004646][T18811] netlink: 236 bytes leftover after parsing attributes in process `syz.8.5885'. [ 270.026982][T18811] netlink: 236 bytes leftover after parsing attributes in process `syz.8.5885'. [ 270.038258][ T28] audit: type=1400 audit(2000000491.790:3019): avc: denied { write } for pid=18812 comm="syz.3.5886" path="socket:[60945]" dev="sockfs" ino=60945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 270.132108][T16356] kernel write not supported for file bpf-prog (pid: 16356 comm: kworker/1:10) [ 270.150975][T18823] loop5: detected capacity change from 0 to 128 [ 270.212070][T18831] GUP no longer grows the stack in syz.3.5895 (18831): 200000004000-20000000a000 (200000002000) [ 270.240896][T18831] CPU: 0 UID: 0 PID: 18831 Comm: syz.3.5895 Tainted: G W syzkaller #0 PREEMPT(full) [ 270.240936][T18831] Tainted: [W]=WARN [ 270.240943][T18831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.240973][T18831] Call Trace: [ 270.240980][T18831] [ 270.240989][T18831] __dump_stack+0x1d/0x30 [ 270.241015][T18831] dump_stack_lvl+0x95/0xd0 [ 270.241039][T18831] dump_stack+0x15/0x1b [ 270.241060][T18831] __get_user_pages+0x195b/0x1ea0 [ 270.241116][T18831] ? xfd_validate_state+0x45/0xf0 [ 270.241149][T18831] ? __rcu_read_unlock+0x4e/0x70 [ 270.241172][T18831] get_user_pages_remote+0x1d5/0x6b0 [ 270.241355][T18831] __access_remote_vm+0x15c/0x580 [ 270.241400][T18831] access_remote_vm+0x32/0x40 [ 270.241429][T18831] proc_pid_cmdline_read+0x32b/0x6b0 [ 270.241505][T18831] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 270.241531][T18831] vfs_readv+0x432/0x6e0 [ 270.241561][T18831] __x64_sys_preadv+0xfd/0x1c0 [ 270.241583][T18831] x64_sys_call+0x2915/0x3020 [ 270.241631][T18831] do_syscall_64+0x12c/0x370 [ 270.241655][T18831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.241677][T18831] RIP: 0033:0x7fdbf2ffc799 [ 270.241739][T18831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.241787][T18831] RSP: 002b:00007fdbf1a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 270.241820][T18831] RAX: ffffffffffffffda RBX: 00007fdbf3275fa0 RCX: 00007fdbf2ffc799 [ 270.241835][T18831] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 270.241849][T18831] RBP: 00007fdbf3092c99 R08: 00000000fffffff9 R09: 0000000000000000 [ 270.241862][T18831] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 270.241907][T18831] R13: 00007fdbf3276038 R14: 00007fdbf3275fa0 R15: 00007ffec2eadbb8 [ 270.241925][T18831] [ 270.524694][ T28] audit: type=1400 audit(2000000492.270:3020): avc: denied { bind } for pid=18845 comm="syz.8.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 270.642019][T18864] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5909'. [ 270.651413][T18864] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5909'. [ 270.674344][T18868] loop0: detected capacity change from 0 to 764 [ 270.684406][T18864] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5909'. [ 270.699963][T18864] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5909'. [ 270.769492][ T28] audit: type=1400 audit(2000000492.520:3021): avc: denied { getopt } for pid=18875 comm="syz.8.5914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.021184][T18897] loop0: detected capacity change from 0 to 512 [ 271.049574][T18897] EXT4-fs: test_dummy_encryption option not supported [ 271.166828][T18911] sd 0:0:1:0: device reset [ 271.284062][T18925] loop0: detected capacity change from 0 to 1024 [ 271.311793][T18925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.334321][T18934] netlink: 116 bytes leftover after parsing attributes in process `syz.8.5940'. [ 271.483872][T17601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.522914][T18954] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5950'. [ 271.545412][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5950'. [ 271.561324][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5950'. [ 271.805672][T18991] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 271.840211][T18995] netlink: 'syz.8.5969': attribute type 30 has an invalid length. [ 271.865886][T11261] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.879606][T11261] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.891585][T11261] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.900287][T11261] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.952840][T19008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.971823][T19008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.982632][T19007] loop8: detected capacity change from 0 to 512 [ 272.009561][T19007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.022219][T19007] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.035980][T19007] EXT4-fs (loop8): shut down requested (0) [ 272.065795][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.382258][T19040] loop8: detected capacity change from 0 to 1024 [ 272.400066][T19040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.421684][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.607838][T19061] SELinux: failed to load policy [ 272.802081][T19083] loop9: detected capacity change from 0 to 512 [ 272.824046][T19083] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #3: comm syz.9.6006: corrupted inode contents [ 272.835846][T19083] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 272.836057][T19083] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #3: comm syz.9.6006: mark_inode_dirty error [ 272.845207][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 272.845221][ C1] EXT4-fs (loop9): initial error at time 2000000494: ext4_do_update_inode:5569: inode 3 [ 272.845250][ C1] EXT4-fs (loop9): last error at time 2000000494: ext4_do_update_inode:5569: inode 3 [ 272.882561][T19083] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 272.882947][T19083] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #3: comm syz.9.6006: corrupted inode contents [ 272.904558][T19083] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 272.904746][T19083] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.6006: mark_inode_dirty error [ 272.925288][T19083] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 272.925660][T19083] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.6006: Failed to acquire dquot type 0 [ 272.949338][T19083] loop9: lost filesystem error report for type 5 error -117 [ 272.949799][T19083] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.6006: corrupted inode contents [ 272.969425][T19083] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 272.969604][T19083] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #16: comm syz.9.6006: mark_inode_dirty error [ 272.990220][T19083] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 272.990446][T19083] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.6006: corrupted inode contents [ 273.011785][T19083] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 273.011944][T19083] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.6006: mark_inode_dirty error [ 273.032708][T19083] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 273.033477][T19083] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.6006: corrupted inode contents [ 273.054491][T19083] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 273.054766][T19083] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 273.072457][T19083] loop9: lost filesystem error report for type 5 error -117 [ 273.072798][T19083] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.6006: corrupted inode contents [ 273.092032][T19083] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 273.092222][T19083] EXT4-fs error (device loop9): ext4_truncate:4587: inode #16: comm syz.9.6006: mark_inode_dirty error [ 273.112625][T19083] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 273.121603][T19083] loop9: lost filesystem error report for type 5 error -117 [ 273.122131][T19083] EXT4-fs (loop9): 1 truncate cleaned up [ 273.135681][T19083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.148595][T19083] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.199062][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.565930][T19115] loop5: detected capacity change from 0 to 136 [ 273.581851][T19115] Attempt to read inode for relocated directory [ 273.607293][T19112] syz.5.6018: attempt to access beyond end of device [ 273.607293][T19112] loop5: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 273.657748][T19112] syz.5.6018: attempt to access beyond end of device [ 273.657748][T19112] loop5: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 273.672314][T19112] syz.5.6018: attempt to access beyond end of device [ 273.672314][T19112] loop5: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 273.672739][T19120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.687063][T19115] syz.5.6018: attempt to access beyond end of device [ 273.687063][T19115] loop5: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 273.715071][T19115] syz.5.6018: attempt to access beyond end of device [ 273.715071][T19115] loop5: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 273.730880][T19115] syz.5.6018: attempt to access beyond end of device [ 273.730880][T19115] loop5: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 273.748169][T19120] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.774437][T19115] syz.5.6018: attempt to access beyond end of device [ 273.774437][T19115] loop5: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 273.823128][T18571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.907565][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 273.907584][ T28] audit: type=1400 audit(2000000495.650:3039): avc: denied { mounton } for pid=19126 comm="syz.3.6023" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 274.047297][T19143] set_capacity_and_notify: 1 callbacks suppressed [ 274.047313][T19143] loop8: detected capacity change from 0 to 512 [ 274.078673][T19146] netlink: 'syz.3.6030': attribute type 30 has an invalid length. [ 274.104601][T19143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.125208][ T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.144407][T19143] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.159878][ T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.160097][T19143] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.6029: corrupted inode contents [ 274.174698][ T28] audit: type=1400 audit(2000000495.910:3040): avc: denied { create } for pid=19142 comm="syz.8.6029" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 274.216155][T19143] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.6029: mark_inode_dirty error [ 274.223225][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.238684][T19143] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.6029: corrupted inode contents [ 274.263418][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.278412][T19143] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.6029: mark_inode_dirty error [ 274.283660][ T28] audit: type=1400 audit(2000000496.010:3041): avc: denied { view } for pid=19157 comm="syz.5.6034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 274.312230][T19155] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.6029: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 274.312230][T19155] [ 274.312711][ T28] audit: type=1326 audit(2000000496.010:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19156 comm="syz.3.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf2ffc799 code=0x7ffc0000 [ 274.356385][ T28] audit: type=1326 audit(2000000496.010:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19156 comm="syz.3.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf2ffc799 code=0x7ffc0000 [ 274.380257][ T28] audit: type=1326 audit(2000000496.010:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19156 comm="syz.3.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fdbf2ffc799 code=0x7ffc0000 [ 274.404033][ T28] audit: type=1326 audit(2000000496.010:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19156 comm="syz.3.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf2ffc799 code=0x7ffc0000 [ 274.447672][ T28] audit: type=1326 audit(2000000496.010:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19156 comm="syz.3.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf2ffc799 code=0x7ffc0000 [ 274.468349][T19143] EXT4-fs error (device loop8): ext4_get_first_dir_block:3538: inode #18: comm syz.8.6029: directory missing '.' [ 274.472155][ T28] audit: type=1400 audit(2000000496.060:3047): avc: denied { create } for pid=19142 comm="syz.8.6029" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 274.540640][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.545179][ T28] audit: type=1400 audit(2000000496.220:3048): avc: denied { rename } for pid=19142 comm="syz.8.6029" name="file0" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 275.082529][T19194] loop9: detected capacity change from 0 to 2048 [ 275.135310][T19194] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.179879][T19194] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 275.210005][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.341432][T19217] netlink: 'syz.5.6053': attribute type 16 has an invalid length. [ 275.364818][T19217] netlink: 'syz.5.6053': attribute type 17 has an invalid length. [ 275.411660][T19217] ip6erspan0: left allmulticast mode [ 275.443901][T19223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.452557][T19223] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.462345][T19223] bridge0: port 1(vlan2) entered blocking state [ 275.468675][T19223] bridge0: port 1(vlan2) entered listening state [ 275.478776][T19223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.531125][T19230] loop3: detected capacity change from 0 to 512 [ 275.569740][T19230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.605639][T19230] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.648001][T19230] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.6061: corrupted inode contents [ 275.665003][T19230] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.6061: mark_inode_dirty error [ 275.714075][T19230] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.6061: corrupted inode contents [ 275.775224][T19230] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.6061: mark_inode_dirty error [ 275.794267][T19245] loop5: detected capacity change from 0 to 512 [ 275.811273][T19242] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.6061: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 275.811273][T19242] [ 275.849996][T19230] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #18: comm syz.3.6061: directory missing '.' [ 275.908244][T19254] __nla_validate_parse: 6 callbacks suppressed [ 275.908262][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6069'. [ 275.936403][T18571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.004240][T19260] loop8: detected capacity change from 0 to 1024 [ 276.021966][T19260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.059587][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.118626][T11256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.451174][T19294] loop3: detected capacity change from 0 to 512 [ 276.489431][T19294] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6088: invalid indirect mapped block 256 (level 2) [ 276.520451][T19294] EXT4-fs (loop3): 2 truncates cleaned up [ 276.526917][T19294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.635161][T19302] loop0: detected capacity change from 0 to 1024 [ 276.652429][T18571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.668045][T19302] EXT4-fs: inline encryption not supported [ 276.722558][T19306] netlink: 'syz.3.6093': attribute type 6 has an invalid length. [ 276.738672][T19302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.911744][T17601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.259026][T19356] netlink: 'syz.9.6113': attribute type 45 has an invalid length. [ 277.303955][T19361] bpf: Bad value for 'gid' [ 277.333822][T11256] Bluetooth: hci0: Frame reassembly failed (-84) [ 277.350022][T19339] chnl_net:caif_netlink_parms(): no params data found [ 277.383285][T19339] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.390554][T19339] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.397755][T19339] bridge_slave_0: entered allmulticast mode [ 277.407767][T19339] bridge_slave_0: entered promiscuous mode [ 277.415248][ T3424] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.427266][T19339] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.436573][T19339] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.444060][T19339] bridge_slave_1: entered allmulticast mode [ 277.450751][T19339] bridge_slave_1: entered promiscuous mode [ 277.470074][T19339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.480859][T19339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.501357][T19339] team0: Port device team_slave_0 added [ 277.508356][T19339] team0: Port device team_slave_1 added [ 277.524191][T19339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.531239][T19339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.557633][T19339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.568979][T19339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.575927][T19339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.602208][T19339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.629209][T19339] hsr_slave_0: entered promiscuous mode [ 277.635385][T19339] hsr_slave_1: entered promiscuous mode [ 277.641455][T19339] debugfs: 'hsr0' already exists in 'hsr' [ 277.647244][T19339] Cannot create hsr debugfs directory [ 277.846345][T19392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19392 comm=syz.3.6120 [ 277.923073][T19339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.934051][T19339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.952799][T19339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.962652][T19339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.016424][T19339] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.023574][T19339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.031023][T19339] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.038263][T19339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.142104][T19339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.179238][T11256] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.193484][T11256] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.223598][T19339] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.242321][T11261] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.249535][T11261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.272037][T11256] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.279188][T11256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.484006][T19339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.661447][T19339] veth0_vlan: entered promiscuous mode [ 278.686827][T19339] veth1_vlan: entered promiscuous mode [ 278.716822][T19339] veth0_macvtap: entered promiscuous mode [ 278.780443][T19339] veth1_macvtap: entered promiscuous mode [ 278.839410][T19339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.864734][T19339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.931524][ T119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.956084][ T119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.981237][ T119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.018196][ T119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.171541][T11256] vlan2: left allmulticast mode [ 279.178588][T11256] dummy0: left allmulticast mode [ 279.199363][T11256] vlan2: left promiscuous mode [ 279.225583][T11256] dummy0: left promiscuous mode [ 279.241308][T11256] bridge0: port 1(vlan2) entered disabled state [ 279.325999][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6129'. [ 279.398405][T11986] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 279.432190][T11256] bond0 (unregistering): Released all slaves [ 279.448271][T11256] bond1 (unregistering): Released all slaves [ 279.469995][T19508] syzkaller1: entered promiscuous mode [ 279.481153][T19508] syzkaller1: entered allmulticast mode [ 279.497462][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6130'. [ 279.522203][T19517] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6130'. [ 279.548688][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6130'. [ 279.574831][T11256] tipc: Left network mode [ 279.615929][T11256] hsr_slave_0: left promiscuous mode [ 279.635011][T11256] hsr_slave_1: left promiscuous mode [ 279.864160][T19552] Invalid argument reading file caps for ./file0 [ 279.864164][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 279.864181][ T28] audit: type=1400 audit(2000000501.610:3062): avc: denied { execute_no_trans } for pid=19551 comm="syz.9.6140" path="/337/file0" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 279.913763][T19549] loop3: detected capacity change from 0 to 512 [ 279.947862][T19549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 280.005239][T19549] EXT4-fs (loop3): 1 truncate cleaned up [ 280.029237][T19549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.129118][T18571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.303224][T19574] loop9: detected capacity change from 0 to 8192 [ 280.313320][T11256] IPVS: stop unused estimator thread 0... [ 280.370711][ T28] audit: type=1400 audit(2000000502.120:3063): avc: denied { watch watch_reads } for pid=19573 comm="syz.9.6149" path="/341/file2/file2" dev="loop9" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 280.421462][ T28] audit: type=1326 audit(2000000502.170:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19604 comm="syz.3.6153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbf2ffc799 code=0x0 [ 280.641009][ T28] audit: type=1400 audit(2000000502.390:3065): avc: denied { name_connect } for pid=19627 comm="syz.9.6160" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 280.766812][T11256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.842526][T11256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.923661][T11256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.983100][T11256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.184615][T11256] bridge_slave_1: left allmulticast mode [ 281.200066][T11256] bridge_slave_1: left promiscuous mode [ 281.226122][T11256] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.255042][T11256] bridge_slave_0: left allmulticast mode [ 281.263183][T11256] bridge_slave_0: left promiscuous mode [ 281.284899][T11256] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.312507][ T28] audit: type=1400 audit(2000000503.060:3066): avc: denied { mount } for pid=19679 comm="syz.3.6167" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 281.348579][ T28] audit: type=1400 audit(2000000503.080:3067): avc: denied { mounton } for pid=19679 comm="syz.3.6167" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 281.386453][T19686] loop3: detected capacity change from 0 to 1024 [ 281.401586][ T28] audit: type=1400 audit(2000000503.090:3068): avc: denied { unmount } for pid=18571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 281.446634][T19686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.519030][T18571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.603526][T19698] loop9: detected capacity change from 0 to 764 [ 281.615557][T11256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.616869][ T28] audit: type=1326 audit(2000000503.360:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19699 comm="syz.3.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf2ffc799 code=0x7ffc0000 [ 281.652475][ T28] audit: type=1326 audit(2000000503.360:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19699 comm="syz.3.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fdbf2ffc799 code=0x7ffc0000 [ 281.682262][T11256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.685134][ T28] audit: type=1326 audit(2000000503.360:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19699 comm="syz.3.6174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf2ffc799 code=0x7ffc0000 [ 281.720216][T11256] bond0 (unregistering): Released all slaves [ 281.837102][T19712] sg_read: process 184 (syz.3.6178) changed security contexts after opening file descriptor, this is not allowed. [ 281.865668][T11256] hsr_slave_0: left promiscuous mode [ 281.899460][T11256] hsr_slave_1: left promiscuous mode [ 281.918690][T11256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.944519][T11256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.951945][T19731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6179'. [ 281.974076][T19729] loop8: detected capacity change from 0 to 4096 [ 281.981208][T11256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.992017][T11256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.996868][T19734] loop2: detected capacity change from 0 to 512 [ 282.016372][T11256] veth1_macvtap: left promiscuous mode [ 282.020891][T19734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 282.023842][T11256] veth0_macvtap: left promiscuous mode [ 282.038786][T11256] veth1_vlan: left promiscuous mode [ 282.050799][T11256] veth0_vlan: left promiscuous mode [ 282.056306][T19734] EXT4-fs (loop2): 1 truncate cleaned up [ 282.057023][T19729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.062532][T19734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.112123][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.264486][T11256] team0 (unregistering): Port device team_slave_1 removed [ 282.284718][T11256] team0 (unregistering): Port device team_slave_0 removed [ 282.411232][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.461115][T19646] chnl_net:caif_netlink_parms(): no params data found [ 282.472866][T19744] loop3: detected capacity change from 0 to 4096 [ 282.489899][T19744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.550731][T18571] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.617269][T19646] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.672911][T19646] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.704991][T19646] bridge_slave_0: entered allmulticast mode [ 282.726906][T19646] bridge_slave_0: entered promiscuous mode [ 282.734575][T19646] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.735399][T11256] IPVS: stop unused estimator thread 0... [ 282.741902][T19646] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.771746][T19646] bridge_slave_1: entered allmulticast mode [ 282.778482][T19646] bridge_slave_1: entered promiscuous mode [ 282.813125][T19646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.823924][T19646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.848558][T19646] team0: Port device team_slave_0 added [ 282.861286][T19646] team0: Port device team_slave_1 added [ 282.880549][T19646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.888271][T19646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.924723][T19646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.936215][T19646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.944159][T19646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.971697][T19646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.005621][T19646] hsr_slave_0: entered promiscuous mode [ 283.017136][T19646] hsr_slave_1: entered promiscuous mode [ 283.041574][T19646] debugfs: 'hsr0' already exists in 'hsr' [ 283.048593][T19646] Cannot create hsr debugfs directory [ 283.308447][T19809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6196'. [ 283.323703][T19809] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.331029][T19809] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.343668][T19809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6196'. [ 283.376575][T19816] netlink: 148 bytes leftover after parsing attributes in process `syz.8.6198'. [ 283.468149][T19646] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.491796][T19646] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.505215][T19646] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.524026][T19646] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.623792][T19646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.656750][T19646] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.699912][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.707044][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.760051][T11256] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.767152][T11256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.025724][T19646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.368770][T19646] veth0_vlan: entered promiscuous mode [ 284.397030][T19646] veth1_vlan: entered promiscuous mode [ 284.428822][T19646] veth0_macvtap: entered promiscuous mode [ 284.446317][T19646] veth1_macvtap: entered promiscuous mode [ 284.468333][T19934] netlink: 'syz.8.6225': attribute type 3 has an invalid length. [ 284.507893][T19646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.539645][T19646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.582940][ T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.629618][T19955] loop2: detected capacity change from 0 to 512 [ 284.637643][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.691466][T19955] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.6232: inode has both inline data and extents flags [ 284.694430][ T69] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.717605][ T69] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.727672][T19955] fserror_report: 2 callbacks suppressed [ 284.727688][T19955] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 284.733838][T19955] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6232: couldn't read orphan inode 15 (err -117) [ 284.743006][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 284.743029][ C0] EXT4-fs (loop2): initial error at time 2000000506: ext4_orphan_get:1391: inode 15 [ 284.743078][ C0] EXT4-fs (loop2): last error at time 2000000506: ext4_orphan_get:1391: inode 15 [ 284.783900][T19955] loop2: lost filesystem error report for type 5 error -117 [ 284.784856][T19955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.869400][T19969] Invalid argument reading file caps for ./file0 [ 285.059628][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6241'. [ 285.070764][T19992] team0: Port device syz_tun added [ 285.095445][T19989] netlink: 'syz.9.6241': attribute type 30 has an invalid length. [ 285.114305][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 285.114323][ T28] audit: type=1400 audit(2000000506.860:3093): avc: denied { append } for pid=19997 comm="syz.8.6244" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 285.127306][T19989] netlink: 'syz.9.6241': attribute type 29 has an invalid length. [ 285.180596][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6241'. [ 285.265597][T20008] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 285.295470][T20008] SELinux: failed to load policy [ 285.302905][T20011] loop9: detected capacity change from 0 to 1024 [ 285.340631][T20011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.368393][T20011] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.6247: inode #3237228: comm syz.9.6247: iget: illegal inode # [ 285.382313][T20011] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.6247: error while reading EA inode 3237228 err=-117 [ 285.433254][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.443174][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.654945][ T28] audit: type=1400 audit(2000000507.400:3094): avc: denied { mount } for pid=20037 comm="syz.9.6254" name="/" dev="configfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 285.714668][T20040] syzkaller1: entered promiscuous mode [ 285.725726][ T28] audit: type=1400 audit(2000000507.400:3095): avc: denied { search } for pid=20037 comm="syz.9.6254" name="/" dev="configfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 285.754026][T20040] syzkaller1: entered allmulticast mode [ 285.794830][ T28] audit: type=1400 audit(2000000507.400:3096): avc: denied { search } for pid=20037 comm="syz.9.6254" name="/" dev="configfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 285.915800][T20053] loop2: detected capacity change from 0 to 1024 [ 285.961547][T20053] EXT4-fs: Ignoring removed orlov option [ 286.002009][T20053] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 286.046985][T20053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.117537][ T28] audit: type=1400 audit(2000000507.860:3097): avc: denied { rename } for pid=20052 comm="syz.2.6259" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.191757][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.515766][ T28] audit: type=1400 audit(2000000508.260:3098): avc: denied { write } for pid=20110 comm="syz.3.6275" path="socket:[66673]" dev="sockfs" ino=66673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 286.637181][T20138] loop2: detected capacity change from 0 to 1024 [ 286.645231][T20138] EXT4-fs: inline encryption not supported [ 286.661532][T20138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.688916][T20138] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.722166][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 286.791491][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6283'. [ 286.833685][ T28] audit: type=1400 audit(2000000508.580:3099): avc: denied { create } for pid=20156 comm="syz.9.6285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_iscsi_socket permissive=1 [ 287.001041][ T28] audit: type=1400 audit(2000000508.750:3100): avc: denied { shutdown } for pid=20169 comm="syz.9.6288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.151418][T20192] loop2: detected capacity change from 0 to 128 [ 287.158502][T20192] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.177778][ T28] audit: type=1400 audit(2000000508.920:3101): avc: denied { watch watch_reads } for pid=20191 comm="syz.2.6292" path="/37/file0/file0" dev="loop2" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 287.259312][ T28] audit: type=1400 audit(2000000508.970:3102): avc: denied { listen } for pid=20195 comm="syz.9.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.270551][T20203] dvmrp1: entered allmulticast mode [ 287.492592][T20225] loop2: detected capacity change from 0 to 1024 [ 287.522586][T20225] EXT4-fs: Ignoring removed orlov option [ 287.555763][T20225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.571946][T20234] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 287.591472][T20234] vhci_hcd vhci_hcd.2: invalid port number 96 [ 287.597584][T20234] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 287.618349][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.897917][T20285] SELinux: failed to load policy [ 288.688109][T20370] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 289.430585][T20446] loop3: detected capacity change from 0 to 512 [ 289.454575][T20446] EXT4-fs: Ignoring removed nobh option [ 289.474563][T20446] EXT4-fs: Ignoring removed bh option [ 289.508568][T20446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.537601][T20446] EXT4-fs (loop3): 1 truncate cleaned up [ 289.566983][T20446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.621375][T18571] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 289.672901][T20458] loop6: detected capacity change from 0 to 512 [ 289.687780][T18571] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 289.700954][T20458] msdos: Bad value for 'umask' [ 289.712300][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6366'. [ 289.723463][T18571] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 289.736479][T20458] netlink: 'syz.6.6366': attribute type 1 has an invalid length. [ 289.759393][T20458] netlink: 'syz.6.6366': attribute type 2 has an invalid length. [ 289.784415][T19172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.838079][T19172] team0: Port device syz_tun removed [ 290.465561][T20470] chnl_net:caif_netlink_parms(): no params data found [ 290.586059][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 290.586076][ T28] audit: type=1400 audit(2000000512.330:3113): avc: denied { connect } for pid=20498 comm="syz.9.6379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.612351][ T28] audit: type=1400 audit(2000000512.330:3114): avc: denied { shutdown } for pid=20498 comm="syz.9.6379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.659147][T20504] loop9: detected capacity change from 0 to 512 [ 290.692057][T20504] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.6381: inode has both inline data and extents flags [ 290.708220][T20470] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.726206][T20470] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.744382][T20504] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.744549][T20504] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6381: couldn't read orphan inode 15 (err -117) [ 290.753697][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 290.753718][ C0] EXT4-fs (loop9): initial error at time 2000000512: ext4_orphan_get:1391: inode 15 [ 290.753746][ C0] EXT4-fs (loop9): last error at time 2000000512: ext4_orphan_get:1391: inode 15 [ 290.792780][T20470] bridge_slave_0: entered allmulticast mode [ 290.818849][T20470] bridge_slave_0: entered promiscuous mode [ 290.827916][T20470] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.851686][T20470] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.866554][T20470] bridge_slave_1: entered allmulticast mode [ 290.878912][T20470] bridge_slave_1: entered promiscuous mode [ 290.916168][T20504] loop9: lost filesystem error report for type 5 error -117 [ 290.916709][T20504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 290.980211][T20470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.005624][T20470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.037933][ T28] audit: type=1400 audit(2000000512.780:3115): avc: denied { setattr } for pid=20502 comm="syz.9.6381" name="file0" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 291.082028][T20525] netlink: 'syz.6.6388': attribute type 4 has an invalid length. [ 291.089391][T20470] team0: Port device team_slave_0 added [ 291.107091][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 291.117847][T20470] team0: Port device team_slave_1 added [ 291.174518][T20535] loop2: detected capacity change from 0 to 512 [ 291.183400][T11261] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.207920][T20470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.217012][T20538] loop8: detected capacity change from 0 to 512 [ 291.226755][T20535] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6392: bg 0: block 248: padding at end of block bitmap is not set [ 291.231384][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.241646][T20535] loop2: lost filesystem error report for type 5 error -117 [ 291.268090][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 291.281872][ C1] EXT4-fs (loop2): last error at time 2000000513: ext4_validate_block_bitmap:441 [ 291.291430][T20535] Quota error (device loop2): write_blk: dquota write failed [ 291.299242][T20535] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 291.309398][T20535] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6392: Failed to acquire dquot type 1 [ 291.321007][T20535] loop2: lost filesystem error report for type 5 error -117 [ 291.321619][T20538] EXT4-fs (loop8): orphan cleanup on readonly fs [ 291.321640][T20535] EXT4-fs (loop2): 1 truncate cleaned up [ 291.333326][T20538] EXT4-fs error (device loop8): ext4_quota_enable:7188: comm syz.8.6394: Bad quota inum: 2, type: 1 [ 291.335883][T20535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.364674][T20535] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.364755][T20538] loop8: lost filesystem error report for type 5 error -117 [ 291.364945][T20538] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 291.375132][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 291.375154][ C0] EXT4-fs (loop8): last error at time 2000000513: ext4_quota_enable:7188 [ 291.408379][T20470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.416184][T20538] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 291.429981][T20538] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.447040][T11261] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 291.458015][T11261] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1 [ 291.470043][ T28] audit: type=1400 audit(2000000513.190:3116): avc: denied { remount } for pid=20532 comm="syz.2.6392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 291.490422][T20470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.497374][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.527845][T20470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.539097][T20535] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 291.555569][T20470] hsr_slave_0: entered promiscuous mode [ 291.562540][T20470] hsr_slave_1: entered promiscuous mode [ 291.568771][T20470] debugfs: 'hsr0' already exists in 'hsr' [ 291.574607][T20470] Cannot create hsr debugfs directory [ 291.600596][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.610448][T20538] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 291.620597][T20538] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 8 [ 291.694851][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.720904][T20552] loop8: detected capacity change from 0 to 1024 [ 291.748335][T20552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.773447][ T28] audit: type=1400 audit(2000000513.520:3117): avc: denied { write } for pid=20551 comm="syz.8.6399" name="file3" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 291.829736][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.015676][ T28] audit: type=1400 audit(2000000513.760:3118): avc: denied { read } for pid=20580 comm="syz.6.6406" path="socket:[66474]" dev="sockfs" ino=66474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 292.047923][T20470] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.069303][T20585] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6406'. [ 292.210685][T20470] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.253158][T20470] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.270311][T20594] sock: sock_set_timeout: `syz.8.6409' (pid 20594) tries to set negative timeout [ 292.334138][T20470] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.451453][T20470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.475038][T11256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.494434][T11256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.534188][T20470] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.545632][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.552776][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.571497][T11256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.582014][T11256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.608211][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.615337][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.637753][T11256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.659635][ T28] audit: type=1326 audit(2000000514.410:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.2.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 292.659701][T11256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.704390][T20470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.719052][T20470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.760493][T11256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.792505][T11256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.925193][T11256] bridge_slave_1: left allmulticast mode [ 292.939315][T11256] bridge_slave_1: left promiscuous mode [ 292.955063][T11256] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.989332][T11256] bridge_slave_0: left allmulticast mode [ 292.999828][T11256] bridge_slave_0: left promiscuous mode [ 293.018009][T11256] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.184207][T11256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.194753][T11256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.204747][T11256] bond0 (unregistering): Released all slaves [ 293.229940][T20470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.238204][ T9650] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 293.238325][T11986] Bluetooth: hci0: command 0x1003 tx timeout [ 293.261653][T11256] IPVS: stopping master sync thread 20370 ... [ 293.308374][T11256] hsr_slave_0: left promiscuous mode [ 293.339317][T11256] hsr_slave_1: left promiscuous mode [ 293.361631][T11256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.382148][T11256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.400294][T11256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.429675][T11256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.452570][T11256] veth1_vlan: left promiscuous mode [ 293.457879][T11256] veth0_vlan: left promiscuous mode [ 293.593010][T11256] team0 (unregistering): Port device team_slave_1 removed [ 293.626359][T11256] team0 (unregistering): Port device team_slave_0 removed [ 293.820367][T20470] veth0_vlan: entered promiscuous mode [ 293.835094][T20470] veth1_vlan: entered promiscuous mode [ 293.883597][T20470] veth0_macvtap: entered promiscuous mode [ 293.897208][T20470] veth1_macvtap: entered promiscuous mode [ 293.915236][T20470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.929928][T20470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.950275][T11261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.986945][T11261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.009679][T11261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.061667][T11261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.130487][T20749] loop1: detected capacity change from 0 to 512 [ 294.153718][T20749] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.6372: inode has both inline data and extents flags [ 294.228558][T20749] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.228740][T20749] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6372: couldn't read orphan inode 15 (err -117) [ 294.249969][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 294.249989][ C0] EXT4-fs (loop1): initial error at time 2000000515: ext4_orphan_get:1391: inode 15 [ 294.250035][ C0] EXT4-fs (loop1): last error at time 2000000515: ext4_orphan_get:1391: inode 15 [ 294.366738][T20749] loop1: lost filesystem error report for type 5 error -117 [ 294.367357][T20749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.428732][T20470] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.647401][T20798] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 294.937257][T20830] loop6: detected capacity change from 0 to 1024 [ 294.987937][T20830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.024240][T19646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.077566][T20849] netlink: 792 bytes leftover after parsing attributes in process `syz.1.6458'. [ 295.098425][T20849] netlink: 792 bytes leftover after parsing attributes in process `syz.1.6458'. [ 295.118696][T20849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6458'. [ 295.280273][T20863] SELinux: ebitmap: empty map [ 295.285008][T20863] SELinux: failed to load policy [ 295.398500][T11986] Bluetooth: hci0: command 0x1003 tx timeout [ 295.404635][ T9650] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.500275][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6468'. [ 295.547922][T20893] bond1: Invalid ad_actor_system MAC address. [ 295.571216][T20893] bond1: option ad_actor_system: invalid value (4294967295) [ 295.580567][T20893] bond1 (unregistering): Released all slaves [ 295.956521][T20935] loop2: detected capacity change from 0 to 1024 [ 295.991819][T20935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.158283][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.217092][T20965] loop2: detected capacity change from 0 to 512 [ 296.275277][T20965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.326866][T20965] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.347307][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 296.347321][ T28] audit: type=1400 audit(2000000518.090:3125): avc: denied { map } for pid=20963 comm="syz.2.6484" path="/84/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 296.354320][T20974] pim6reg1: entered promiscuous mode [ 296.406574][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.424290][ T28] audit: type=1326 audit(2000000518.170:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 296.425259][T20974] pim6reg1: entered allmulticast mode [ 296.449660][ T28] audit: type=1326 audit(2000000518.170:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 296.477602][ T28] audit: type=1326 audit(2000000518.170:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 296.511734][ T28] audit: type=1326 audit(2000000518.170:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 296.535797][ T28] audit: type=1326 audit(2000000518.170:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 296.574909][T20990] netlink: 'syz.8.6494': attribute type 3 has an invalid length. [ 296.583143][ T28] audit: type=1326 audit(2000000518.170:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 296.599826][T20990] netlink: 'syz.8.6494': attribute type 4 has an invalid length. [ 296.616262][T20990] netlink: 9067 bytes leftover after parsing attributes in process `syz.8.6494'. [ 296.625976][ T28] audit: type=1326 audit(2000000518.170:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 296.649772][ T28] audit: type=1326 audit(2000000518.170:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.6.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 296.765010][T21008] loop8: detected capacity change from 0 to 1024 [ 296.788341][T21008] EXT4-fs: inline encryption not supported [ 296.807907][T21008] EXT4-fs: Ignoring removed bh option [ 296.830207][T21008] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.891175][T13986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.242119][ T28] audit: type=1400 audit(2000000518.980:3134): avc: denied { listen } for pid=21051 comm="syz.1.6509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.425310][T21081] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6518'. [ 297.440329][T21081] bond0: ARP target 8.4.0.0 is already present [ 297.456370][T21081] bond0: option arp_ip_target: invalid value (1032) [ 297.802766][T21112] futex_wake_op: syz.2.6529 tries to shift op by -1; fix this program [ 297.906978][T21115] tun0: tun_chr_ioctl cmd 1074025675 [ 297.924841][T21115] tun0: persist enabled [ 297.933553][T21115] tun0: tun_chr_ioctl cmd 1074025675 [ 297.944746][T21115] tun0: persist disabled [ 298.360738][T21141] loop1: detected capacity change from 0 to 1024 [ 298.398838][T21141] EXT4-fs: Ignoring removed orlov option [ 298.429492][T21141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.531844][T20470] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.090389][T21182] Process accounting resumed [ 299.182711][T21189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.193588][T21190] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6561'. [ 299.627026][T21214] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6571'. [ 299.694366][T21220] loop6: detected capacity change from 0 to 512 [ 299.717866][T21220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.757968][T21220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.774206][T21220] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.853092][T19646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.992696][T21233] loop2: detected capacity change from 0 to 512 [ 300.012548][T21233] EXT4-fs: Ignoring removed orlov option [ 300.028232][T21233] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.068840][T21233] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.6578: corrupted in-inode xattr: e_value size too large [ 300.103474][T21233] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.103806][T21233] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6578: couldn't read orphan inode 15 (err -117) [ 300.113025][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 300.113048][ C1] EXT4-fs (loop2): initial error at time 2000000521: ext4_iget_extra_inode:5025: inode 15 [ 300.113073][ C1] EXT4-fs (loop2): last error at time 2000000521: ext4_iget_extra_inode:5025: inode 15 [ 300.158139][T21233] loop2: lost filesystem error report for type 5 error -117 [ 300.182373][T21233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.257564][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.663948][T21305] bridge0: port 3(syz_tun) entered blocking state [ 300.680467][T21305] bridge0: port 3(syz_tun) entered disabled state [ 300.702796][T21305] syz_tun: entered allmulticast mode [ 300.720826][T21305] syz_tun: entered promiscuous mode [ 300.743405][T21305] bridge0: port 3(syz_tun) entered blocking state [ 300.749934][T21305] bridge0: port 3(syz_tun) entered forwarding state [ 301.069790][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6604'. [ 301.122739][T21348] netlink: 'syz.6.6604': attribute type 1 has an invalid length. [ 301.142465][T21348] netlink: 'syz.6.6604': attribute type 2 has an invalid length. [ 301.524213][T21395] loop2: detected capacity change from 0 to 512 [ 301.557633][T21395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.677764][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.769954][T21422] loop1: detected capacity change from 0 to 128 [ 301.780252][T21420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6621'. [ 301.965657][T21439] loop9: detected capacity change from 0 to 512 [ 301.994242][T21439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 302.017970][T21439] System zones: 1-12 [ 302.026942][T21439] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.6627: corrupted in-inode xattr: e_value size too large [ 302.044189][T21439] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 302.048079][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 302.051643][T21439] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6627: couldn't read orphan inode 15 (err -117) [ 302.057257][ C0] EXT4-fs (loop9): initial error at time 2000000523: ext4_iget_extra_inode:5025: inode 15 [ 302.085927][ C0] EXT4-fs (loop9): last error at time 2000000523: ext4_iget_extra_inode:5025: inode 15 [ 302.103615][T21439] loop9: lost filesystem error report for type 5 error -117 [ 302.104276][T21439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.202255][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.250293][T21465] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6634'. [ 302.664412][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 302.664433][ T28] audit: type=1400 audit(2000000524.410:3143): avc: denied { connect } for pid=21493 comm="syz.6.6643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.285201][T21512] xt_connbytes: Forcing CT accounting to be enabled [ 303.325668][T21515] loop1: detected capacity change from 0 to 256 [ 303.370281][T21512] program syz.6.6651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.606020][T21530] netlink: 'syz.6.6659': attribute type 13 has an invalid length. [ 303.625153][T21530] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.6659'. [ 304.007239][T21547] loop1: detected capacity change from 0 to 8192 [ 304.060448][T21558] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6671'. [ 304.842032][T21566] loop9: detected capacity change from 0 to 512 [ 304.866329][T21566] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 304.908857][T21566] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 305.298010][ T28] audit: type=1400 audit(2000000527.040:3144): avc: denied { read } for pid=21583 comm="syz.8.6681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.536636][T21595] loop1: detected capacity change from 0 to 256 [ 305.736301][ T28] audit: type=1326 audit(2000000527.480:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.1.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95156c799 code=0x7ffc0000 [ 305.768165][ T28] audit: type=1326 audit(2000000527.480:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.1.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95156c799 code=0x7ffc0000 [ 305.848679][ T28] audit: type=1326 audit(2000000527.480:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.1.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb95156c799 code=0x7ffc0000 [ 305.874788][ T28] audit: type=1326 audit(2000000527.480:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.1.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95156c799 code=0x7ffc0000 [ 305.898908][ T28] audit: type=1326 audit(2000000527.480:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.1.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95156c799 code=0x7ffc0000 [ 305.922860][ T28] audit: type=1326 audit(2000000527.510:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.1.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb95156c799 code=0x7ffc0000 [ 305.987096][ T28] audit: type=1326 audit(2000000527.590:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.1.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95156c799 code=0x7ffc0000 [ 306.094261][ T28] audit: type=1326 audit(2000000527.590:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.1.6691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95156c799 code=0x7ffc0000 [ 306.330402][T21642] loop6: detected capacity change from 0 to 764 [ 306.346690][T21642] iso9660: Unknown parameter 'B\àXz­záB‰p¥8p@ªÔªBHA3»Ž¿í|ØI[~?«ûÎÎ>ûÎóÎnçÙÙìÌ' [ 306.388224][T21642] netlink: 220 bytes leftover after parsing attributes in process `syz.6.6706'. [ 306.401072][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6706'. [ 306.572999][T21652] loop8: detected capacity change from 0 to 256 [ 306.989942][T21667] loop2: detected capacity change from 0 to 128 [ 307.000641][T21667] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.043915][T21667] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.719377][T19339] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.736834][T21685] loop9: detected capacity change from 0 to 1024 [ 307.772145][T21685] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.780941][T21688] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.6720'. [ 307.787845][T21685] EXT4-fs (loop9): shut down requested (1) [ 307.834075][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.848257][T21692] netlink: 'syz.1.6726': attribute type 10 has an invalid length. [ 307.891049][T21692] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.6726'. [ 307.974619][T21716] loop8: detected capacity change from 0 to 512 [ 308.004349][T21722] loop9: detected capacity change from 0 to 512 [ 308.030108][T21722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.058161][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 308.058181][ T28] audit: type=1400 audit(2000000529.800:3159): avc: denied { read } for pid=21709 comm="syz.2.6733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 308.067671][T21722] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.282590][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.310008][ T28] audit: type=1326 audit(2000000530.050:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.356111][ T28] audit: type=1326 audit(2000000530.050:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.420738][ T28] audit: type=1326 audit(2000000530.060:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.456393][ T28] audit: type=1326 audit(2000000530.060:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.480496][ T28] audit: type=1326 audit(2000000530.060:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.511545][ T28] audit: type=1326 audit(2000000530.090:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.547828][ T28] audit: type=1326 audit(2000000530.090:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.576516][ T28] audit: type=1326 audit(2000000530.100:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.648961][ T28] audit: type=1326 audit(2000000530.100:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21760 comm="syz.2.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffbf2c799 code=0x7ffc0000 [ 308.883332][T21823] IPv6: NLM_F_REPLACE set, but no existing node found! [ 309.507875][T21905] loop2: detected capacity change from 0 to 512 [ 309.515633][T21905] ext4: Unknown parameter 'uid<00000000000000060929' [ 309.542086][T21905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6797'. [ 309.548562][T21909] loop9: detected capacity change from 0 to 512 [ 309.555956][T21908] syzkaller1: entered promiscuous mode [ 309.572296][T21908] syzkaller1: entered allmulticast mode [ 309.574692][T21909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 309.596557][T21909] EXT4-fs (loop9): 1 truncate cleaned up [ 309.604204][T21909] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.695831][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.295239][T21958] loop6: detected capacity change from 0 to 1024 [ 310.307261][T21958] EXT4-fs: Ignoring removed bh option [ 310.329593][T21958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.342440][T21958] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.357441][T21958] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.6821: lblock 0 mapped to illegal pblock 0 (length 1) [ 310.377897][T21958] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 310.390476][T21958] EXT4-fs (loop6): This should not happen!! Data will be lost [ 310.390476][T21958] [ 310.410890][T21958] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 1: comm syz.6.6821: lblock 1 mapped to illegal pblock 1 (length 5) [ 310.426302][T21958] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 310.439148][T21958] EXT4-fs (loop6): This should not happen!! Data will be lost [ 310.439148][T21958] [ 310.513221][ T30] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 310.534951][ T30] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 310.548369][ T30] EXT4-fs (loop6): This should not happen!! Data will be lost [ 310.548369][ T30] [ 310.561846][T19646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 310.601841][T21972] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6823'. [ 312.957468][T21991] loop9: detected capacity change from 0 to 128 [ 313.078754][T22004] loop6: detected capacity change from 0 to 164 [ 313.107218][T22004] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 313.220226][T22018] loop6: detected capacity change from 0 to 512 [ 313.228450][T22018] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 313.278415][T22018] EXT4-fs (loop6): 1 truncate cleaned up [ 313.287042][T22025] macvlan0: entered allmulticast mode [ 313.299206][T22018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.301934][T21991] syz.9.6835: attempt to access beyond end of device [ 313.301934][T21991] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 313.325602][T22025] macvlan0 (unregistering): left allmulticast mode [ 313.333699][T21991] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 313.368721][T22027] syzkaller1: entered promiscuous mode [ 313.403722][T22027] syzkaller1: entered allmulticast mode [ 313.434493][T19646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.471703][T22036] loop9: detected capacity change from 0 to 2048 [ 313.494566][ T3403] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 313.514786][ T3403] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.534952][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 313.534969][ T28] audit: type=1400 audit(2000000535.280:3203): avc: denied { watch } for pid=22041 comm="syz.2.6857" path="/160/file1" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 313.575826][T22036] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.615505][T22046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6858'. [ 313.699146][T22039] hid-generic 0000:0000:0000.0006: pid 22039 passed too large report [ 313.728303][ T28] audit: type=1400 audit(2000000535.470:3204): avc: denied { map } for pid=22035 comm="syz.9.6856" path="/456/bus/cgroup.controllers" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 313.833091][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.297319][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6883'. [ 314.312425][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6883'. [ 314.577560][T22129] 9pnet: p9_errstr2errno: server reported unknown error  [ 314.607229][ T28] audit: type=1400 audit(2000000536.350:3205): avc: denied { ioctl } for pid=22131 comm="syz.8.6893" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 314.714314][T22145] loop2: detected capacity change from 0 to 512 [ 314.721483][T22145] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 314.740967][T22145] EXT4-fs (loop2): 1 truncate cleaned up [ 314.767214][T22145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.815239][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.181541][T22200] loop2: detected capacity change from 0 to 8192 [ 315.245483][ T3408] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 315.271123][ T3408] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.502557][T22232] hid-generic 0000:0000:0000.0007: pid 22232 passed too large report [ 315.752777][ T28] audit: type=1326 audit(2000000537.500:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22260 comm="syz.8.6912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3cc0bc799 code=0x0 [ 316.172184][ T28] audit: type=1400 audit(2000000537.920:3207): avc: denied { ioctl } for pid=22279 comm="syz.6.6920" path="socket:[71909]" dev="sockfs" ino=71909 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 316.214326][ T28] audit: type=1400 audit(2000000537.950:3208): avc: denied { write } for pid=22282 comm="syz.6.6922" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.330062][T22297] loop1: detected capacity change from 0 to 512 [ 316.358688][T22297] EXT4-fs (loop1): 1 truncate cleaned up [ 316.364917][T22297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.385752][T22297] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6927: bg 0: block 465: padding at end of block bitmap is not set [ 316.394265][ T3408] IPVS: starting estimator thread 0... [ 316.406786][T22298] serio: Serial port ttyS3 [ 316.417760][T20470] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.463461][ T28] audit: type=1400 audit(2000000538.210:3209): avc: denied { read write } for pid=22304 comm="syz.2.6931" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 316.495571][ T28] audit: type=1400 audit(2000000538.210:3210): avc: denied { open } for pid=22304 comm="syz.2.6931" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 316.522908][T22308] loop1: detected capacity change from 0 to 128 [ 316.533944][T22301] IPVS: using max 2640 ests per chain, 132000 per kthread [ 316.596240][ T28] audit: type=1400 audit(2000000538.340:3211): avc: denied { ioctl } for pid=22315 comm="syz.2.6936" path="/173/file0" dev="tmpfs" ino=912 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.625356][T22314] loop6: detected capacity change from 0 to 512 [ 316.663010][T22314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.679842][T22314] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.781910][T22325] loop2: detected capacity change from 0 to 4096 [ 316.812595][ T28] audit: type=1326 audit(2000000538.560:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22326 comm="syz.9.6941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1a31c799 code=0x7ffc0000 [ 316.844680][T22325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.918139][T19646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.976304][T22332] EXT4-fs (loop9): 1 truncate cleaned up [ 317.000195][T19339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.014181][T22332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.103912][T22343] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6944: bg 0: block 465: padding at end of block bitmap is not set [ 317.118701][T22343] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 317.127866][T22343] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.6944: invalid indirect mapped block 234881024 (level 0) [ 317.160533][T22345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6948'. [ 317.224106][T14469] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.361507][T22369] syzkaller1: entered promiscuous mode [ 317.377279][T22369] syzkaller1: entered allmulticast mode [ 317.422263][T22371] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 317.428304][T22371] syzkaller0: ignored: set checksum disabled [ 317.434844][T22371] syzkaller0: tun_chr_ioctl cmd 35111 [ 317.739404][T22377] syz.8.6963: attempt to access beyond end of device [ 317.739404][T22377] loop8: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 317.754815][T22377] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 317.841661][T22384] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.873578][T22384] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.921563][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.951860][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.016087][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.065729][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.118906][T22411] set_capacity_and_notify: 3 callbacks suppressed [ 318.118923][T22411] loop1: detected capacity change from 0 to 128 [ 318.168647][T22416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.191719][T22416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.220502][ T40] bridge_slave_1: left allmulticast mode [ 318.226518][ T40] bridge_slave_1: left promiscuous mode [ 318.240736][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.249314][ T40] bridge_slave_0: left allmulticast mode [ 318.254982][ T40] bridge_slave_0: left promiscuous mode [ 318.260924][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.318995][T22411] syz.1.6979: attempt to access beyond end of device [ 318.318995][T22411] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 318.332877][T22411] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 318.341906][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.352124][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.364147][ T40] bond0 (unregistering): Released all slaves [ 318.371940][ T40] bond1 (unregistering): Released all slaves [ 318.421929][ T40] hsr_slave_0: left promiscuous mode [ 318.435235][ T40] hsr_slave_1: left promiscuous mode [ 318.441674][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.449685][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.457305][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.464976][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.478796][ T40] veth1_macvtap: left promiscuous mode [ 318.484319][ T40] veth0_macvtap: left promiscuous mode [ 318.490088][ T40] veth1_vlan: left promiscuous mode [ 318.495377][ T40] veth0_vlan: left promiscuous mode [ 318.561560][ T40] team0 (unregistering): Port device team_slave_1 removed [ 318.571300][ T40] team0 (unregistering): Port device team_slave_0 removed [ 318.640826][T22392] chnl_net:caif_netlink_parms(): no params data found [ 318.684926][T22392] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.692165][T22392] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.699749][T22392] bridge_slave_0: entered allmulticast mode [ 318.706285][T22392] bridge_slave_0: entered promiscuous mode [ 318.714701][T22392] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.722026][T22392] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.729603][T22392] bridge_slave_1: entered allmulticast mode [ 318.736198][T22392] bridge_slave_1: entered promiscuous mode [ 318.754666][T22392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.765961][T22392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.785483][T22392] team0: Port device team_slave_0 added [ 318.792334][T22392] team0: Port device team_slave_1 added [ 318.808155][T22392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.815162][T22392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.841374][T22392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.852631][T22392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.860281][T22392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.888097][T22392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.901009][ T40] IPVS: stop unused estimator thread 0... [ 318.942783][T22392] hsr_slave_0: entered promiscuous mode [ 318.949488][T22392] hsr_slave_1: entered promiscuous mode [ 318.955503][T22392] debugfs: 'hsr0' already exists in 'hsr' [ 318.961377][T22392] Cannot create hsr debugfs directory [ 319.558760][T22392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.568848][T22392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.577779][T22392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.586906][T22392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.637909][T22392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.652514][T22392] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.662674][T22256] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.669773][T22256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.681589][T22256] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.688860][T22256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.769060][T22392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.898685][T22392] veth0_vlan: entered promiscuous mode [ 319.906919][T22392] veth1_vlan: entered promiscuous mode [ 319.925883][T22392] veth0_macvtap: entered promiscuous mode [ 319.934626][T22392] veth1_macvtap: entered promiscuous mode [ 319.947048][T22392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.962329][T22392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.974299][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.984764][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.004651][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.023727][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.072734][T22643] loop1: detected capacity change from 0 to 512 [ 320.098715][T22637] loop6: detected capacity change from 0 to 1024 [ 320.105305][T22646] loop4: detected capacity change from 0 to 512 [ 320.115979][T22637] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 320.137726][T22643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.162985][T22646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.168581][T22637] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 320.177644][T22646] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.238330][T22643] EXT4-fs (loop1): 1 truncate cleaned up [ 320.244516][T22643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.257110][T22637] EXT4-fs (loop6): orphan cleanup on readonly fs [ 320.269532][T22637] __quota_error: 33 callbacks suppressed [ 320.269552][T22637] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 320.287934][T22637] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 320.318104][T22637] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 320.340027][T22637] EXT4-fs (loop6): 1 truncate cleaned up [ 320.346147][T22637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.436167][T22637] EXT4-fs (loop6): shut down requested (0) [ 320.471107][T22392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.495808][T19646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.612768][T20470] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.125386][T22753] loop6: detected capacity change from 0 to 128 [ 321.333519][ T28] audit: type=1400 audit(2000000543.080:3246): avc: denied { connect } for pid=22763 comm="syz.8.7013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.479392][T22753] syz.6.7008: attempt to access beyond end of device [ 321.479392][T22753] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 321.505813][T22753] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 321.678338][ T28] audit: type=1400 audit(2000000543.420:3247): avc: denied { name_bind } for pid=22781 comm="syz.8.7023" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 321.713589][T22784] sctp: [Deprecated]: syz.9.7024 (pid 22784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.713589][T22784] Use struct sctp_sack_info instead [ 321.774929][T22780] loop4: detected capacity change from 0 to 8192 [ 321.788505][ T28] audit: type=1400 audit(2000000543.520:3248): avc: denied { ioctl } for pid=22787 comm="syz.8.7026" path="socket:[72654]" dev="sockfs" ino=72654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.897366][ T28] audit: type=1326 audit(2000000543.570:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.6.7025" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x0 [ 321.953225][T22804] tipc: Started in network mode [ 321.969258][T22805] loop6: detected capacity change from 0 to 2048 [ 321.976965][T22804] tipc: Node identity ac14140f, cluster identity 4711 [ 322.000775][T22804] tipc: Enabled bearer , priority 10 [ 322.036986][T22801] loop8: detected capacity change from 0 to 128 [ 322.056470][ T5255] loop6: p1 < > p4 [ 322.064735][ T5255] loop6: p4 size 722688 extends beyond EOD, truncated [ 322.093323][T22805] loop6: p1 < > p4 [ 322.107190][T22805] loop6: p4 size 722688 extends beyond EOD, truncated [ 322.347405][T22814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.356177][T22814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.775520][ T28] audit: type=1326 audit(2000000544.520:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22833 comm="syz.6.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 322.802748][ T28] audit: type=1326 audit(2000000544.520:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22833 comm="syz.6.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 322.827202][ T28] audit: type=1326 audit(2000000544.520:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22833 comm="syz.6.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 322.865355][ T28] audit: type=1326 audit(2000000544.520:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22833 comm="syz.6.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 322.890831][ T28] audit: type=1326 audit(2000000544.550:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22833 comm="syz.6.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81296fc799 code=0x7ffc0000 [ 323.118071][T12044] tipc: Node number set to 2886997007 [ 323.160337][T22843] loop6: detected capacity change from 0 to 8192 [ 323.182812][T22845] bridge1: entered promiscuous mode [ 323.191269][T22845] bridge1: entered allmulticast mode [ 323.199629][T22845] team0: Port device bridge1 added [ 323.209988][T22845] bridge0: port 3(team0) entered blocking state [ 323.216376][T22845] bridge0: port 3(team0) entered disabled state [ 323.223031][T22845] team0: entered allmulticast mode [ 323.228900][T22845] team_slave_0: entered allmulticast mode [ 323.235351][T22845] team_slave_1: entered allmulticast mode [ 323.244738][T22845] team0: entered promiscuous mode [ 323.250192][T22845] team_slave_0: entered promiscuous mode [ 323.256021][T22845] team_slave_1: entered promiscuous mode [ 323.262971][T22845] bridge0: port 3(team0) entered blocking state [ 323.269314][T22845] bridge0: port 3(team0) entered forwarding state [ 323.332301][ T119] ================================================================== [ 323.340444][ T119] BUG: KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic [ 323.349111][ T119] [ 323.351452][ T119] write to 0xffff88814975637c of 4 bytes by task 22843 on cpu 0: [ 323.359278][ T119] __fat_write_inode+0x236/0x530 [ 323.364259][ T119] fat_sync_inode+0x1a/0x30 [ 323.368802][ T119] fat_truncate_blocks+0x1cc/0x5a0 [ 323.374022][ T119] fat_write_end+0xba/0x160 [ 323.378546][ T119] generic_perform_write+0x311/0x490 [ 323.383938][ T119] __generic_file_write_iter+0x9e/0x120 [ 323.389508][ T119] generic_file_write_iter+0x8d/0x310 [ 323.395066][ T119] vfs_write+0x5a6/0x9f0 [ 323.399322][ T119] ksys_write+0xdc/0x1a0 [ 323.403561][ T119] __x64_sys_write+0x40/0x50 [ 323.408244][ T119] x64_sys_call+0x27e1/0x3020 [ 323.413100][ T119] do_syscall_64+0x12c/0x370 [ 323.417691][ T119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.423629][ T119] [ 323.425951][ T119] read to 0xffff888149756200 of 512 bytes by task 119 on cpu 1: [ 323.433669][ T119] copy_folio_from_iter_atomic+0x75f/0x1170 [ 323.439573][ T119] generic_perform_write+0x2c1/0x490 [ 323.444861][ T119] shmem_file_write_iter+0xc5/0xf0 [ 323.449979][ T119] lo_rw_aio+0x67d/0x730 [ 323.454338][ T119] loop_process_work+0x56c/0xac0 [ 323.459293][ T119] loop_workfn+0x31/0x40 [ 323.463542][ T119] process_scheduled_works+0x513/0xa10 [ 323.469008][ T119] worker_thread+0x58a/0x780 [ 323.473612][ T119] kthread+0x22a/0x280 [ 323.477683][ T119] ret_from_fork+0x150/0x360 [ 323.482287][ T119] ret_from_fork_asm+0x1a/0x30 [ 323.487058][ T119] [ 323.489377][ T119] Reported by Kernel Concurrency Sanitizer on: [ 323.495627][ T119] CPU: 1 UID: 0 PID: 119 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 323.506657][ T119] Tainted: [W]=WARN [ 323.510465][ T119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.520531][ T119] Workqueue: loop6 loop_workfn [ 323.525306][ T119] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 323.727522][T22843] bridge0: port 3(syz_tun) entered disabled state [ 323.735202][T22843] syz_tun (unregistering): left allmulticast mode [ 323.741820][T22843] syz_tun (unregistering): left promiscuous mode [ 323.748456][T22843] bridge0: port 3(syz_tun) entered disabled state [ 324.009843][ T119] vlan0: left promiscuous mode [ 324.014816][ T119] dummy0: left promiscuous mode [ 324.019998][ T119] bridge0: port 3(vlan0) entered disabled state [ 324.026847][ T119] bridge_slave_1: left allmulticast mode [ 324.032515][ T119] bridge_slave_1: left promiscuous mode [ 324.038400][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.046134][ T119] bridge_slave_0: left allmulticast mode [ 324.051902][ T119] bridge_slave_0: left promiscuous mode [ 324.057641][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.078797][ T119] dvmrp1 (unregistering): left allmulticast mode [ 324.129879][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.139300][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.148348][ T119] bond0 (unregistering): Released all slaves [ 324.190752][ T119] hsr_slave_0: left promiscuous mode [ 324.196461][ T119] hsr_slave_1: left promiscuous mode [ 324.202517][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.240017][ T119] team0 (unregistering): Port device team_slave_1 removed [ 324.250550][ T119] team0 (unregistering): Port device team_slave_0 removed [ 324.531597][ T119] IPVS: stop unused estimator thread 0... [ 324.564878][ T119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.610331][ T119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.660757][ T119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.730609][ T119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.790753][ T119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.841313][ T119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.872326][ T119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.937933][ T119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.990608][ T119] debugfs: 'netdev@ffff88811abe0560' already exists in 'ref_tracker' [ 325.030518][ T119] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.101064][ T119] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.150673][ T119] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.191296][ T119] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.269812][ T119] team0: left allmulticast mode [ 325.274764][ T119] team_slave_0: left allmulticast mode [ 325.280593][ T119] team_slave_1: left allmulticast mode [ 325.286096][ T119] team0: left promiscuous mode [ 325.291167][ T119] team_slave_0: left promiscuous mode [ 325.296720][ T119] team_slave_1: left promiscuous mode [ 325.302666][ T119] bridge0: port 3(team0) entered disabled state [ 325.309618][ T119] bridge_slave_1: left allmulticast mode [ 325.315273][ T119] bridge_slave_1: left promiscuous mode [ 325.321222][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.328965][ T119] bridge_slave_0: left allmulticast mode [ 325.334619][ T119] bridge_slave_0: left promiscuous mode [ 325.340413][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.348803][ T119] bridge_slave_1: left allmulticast mode [ 325.354495][ T119] bridge_slave_1: left promiscuous mode [ 325.360389][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.368099][ T119] bridge_slave_0: left allmulticast mode [ 325.373897][ T119] bridge_slave_0: left promiscuous mode [ 325.379615][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.387658][ T119] bridge_slave_1: left allmulticast mode [ 325.393379][ T119] bridge_slave_1: left promiscuous mode [ 325.399284][ T119] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.407090][ T119] bridge_slave_0: left allmulticast mode [ 325.412865][ T119] bridge_slave_0: left promiscuous mode [ 325.418604][ T119] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.529416][ T119] team0: Port device bridge1 removed [ 325.600090][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.609832][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.619309][ T119] bond0 (unregistering): Released all slaves [ 325.689959][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.699698][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.709347][ T119] bond0 (unregistering): Released all slaves [ 325.770267][ T119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.780436][ T119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.790509][ T119] bond0 (unregistering): Released all slaves [ 325.831889][ T119] tipc: Disabling bearer [ 325.837250][ T119] tipc: Left network mode [ 325.849823][ T119] hsr_slave_0: left promiscuous mode [ 325.855567][ T119] hsr_slave_1: left promiscuous mode [ 325.861485][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.869455][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.877000][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.885303][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.896643][ T119] hsr_slave_0: left promiscuous mode [ 325.902573][ T119] hsr_slave_1: left promiscuous mode [ 325.908942][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.916399][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.924353][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.932325][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.942268][ T119] hsr_slave_0: left promiscuous mode [ 325.947992][ T119] hsr_slave_1: left promiscuous mode [ 325.953821][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.961394][ T119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.968980][ T119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.976401][ T119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.990521][ T119] veth1_macvtap: left promiscuous mode [ 325.996023][ T119] veth0_macvtap: left promiscuous mode [ 326.001775][ T119] veth1_vlan: left promiscuous mode [ 326.006999][ T119] veth0_vlan: left promiscuous mode [ 326.013049][ T119] veth1_macvtap: left promiscuous mode [ 326.018625][ T119] veth0_macvtap: left promiscuous mode [ 326.024195][ T119] veth1_vlan: left promiscuous mode [ 326.029441][ T119] veth0_vlan: left promiscuous mode [ 326.035266][ T119] veth1_macvtap: left promiscuous mode [ 326.040864][ T119] veth0_macvtap: left promiscuous mode [ 326.046396][ T119] veth1_vlan: left promiscuous mode [ 326.052190][ T119] veth0_vlan: left promiscuous mode [ 326.164710][ T119] team0 (unregistering): Port device team_slave_1 removed [ 326.175198][ T119] team0 (unregistering): Port device team_slave_0 removed [ 326.221659][ T119] team0 (unregistering): Port device team_slave_1 removed [ 326.230935][ T119] team0 (unregistering): Port device team_slave_0 removed [ 326.279936][ T119] team0 (unregistering): Port device team_slave_1 removed [ 326.289177][ T119] team0 (unregistering): Port device team_slave_0 removed