last executing test programs: 1m26.048200111s ago: executing program 1 (id=4098): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000029"], 0x18}}], 0x1, 0x24008000) 1m26.048023461s ago: executing program 32 (id=4096): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x5000000000, 0x22, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x2000000010005}, 0xd, 0x0, 0x7, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400a7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfd, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 1m26.019208262s ago: executing program 1 (id=4101): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1m25.768780403s ago: executing program 1 (id=4102): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000680)=0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0xf0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@common=@ttl={{0x28}, {0x0, 0x4e}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x18, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x1, 0x4e20, 0x10, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 1m25.727418503s ago: executing program 1 (id=4106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m25.240028436s ago: executing program 1 (id=4116): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m25.101552156s ago: executing program 33 (id=4117): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff08) 1m22.166261863s ago: executing program 1 (id=4122): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000000c0)={0x4}) 1m22.084485053s ago: executing program 6 (id=4119): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1m22.008159444s ago: executing program 6 (id=4126): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e03, 0xfffffff9, @remote, 0x3}, 0x1c) setresuid(0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "50c359", 0x0, 0x0, 0x0, @private1, @private0, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) 1m21.974362013s ago: executing program 6 (id=4128): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m21.943253533s ago: executing program 6 (id=4129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) geteuid() 1m6.668373927s ago: executing program 34 (id=4129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) geteuid() 1m6.622967477s ago: executing program 35 (id=4122): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000000c0)={0x4}) 54.619616453s ago: executing program 5 (id=4532): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 54.532077133s ago: executing program 5 (id=4536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) 53.628311868s ago: executing program 5 (id=4581): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x6020400) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000011, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000000)=0xd5174bc643d21590) 53.628239728s ago: executing program 5 (id=4582): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0xa00000, &(0x7f0000000ec0)=ANY=[], 0x1, 0x1b2, &(0x7f0000000300)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 53.572135248s ago: executing program 5 (id=4584): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) 53.31623597s ago: executing program 5 (id=4586): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) 53.25253419s ago: executing program 36 (id=4586): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) 46.235031328s ago: executing program 4 (id=4698): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 46.141624169s ago: executing program 4 (id=4700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30, 0x20000044}}], 0x1, 0x0) 46.076379269s ago: executing program 4 (id=4701): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000800000000240000000000000029"], 0x40}}], 0x2, 0x6000000000000000) 46.076134709s ago: executing program 4 (id=4703): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 46.052308609s ago: executing program 4 (id=4704): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) getdents(0xffffffffffffffff, 0x0, 0x0) membarrier(0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 45.86296651s ago: executing program 4 (id=4720): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) 45.840744681s ago: executing program 37 (id=4720): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) 41.449219124s ago: executing program 7 (id=4782): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x280000000000) 41.441846734s ago: executing program 7 (id=4785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) 41.372609755s ago: executing program 7 (id=4787): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x800005, 0x80, &(0x7f0000000040)={0x20, 0x31, 0x84b9, 0x7f, 0x4}, 0x8, 0x7, 0x4, 0x0, 0x5, 0x4, &(0x7f0000000100)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x7327, &(0x7f0000000180)={0x0, 0x8532, 0x4, 0x3, 0x36}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 41.320219915s ago: executing program 7 (id=4790): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) 41.172903046s ago: executing program 7 (id=4809): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 41.140181876s ago: executing program 7 (id=4802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) 25.886838239s ago: executing program 38 (id=4802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) 1.173082304s ago: executing program 8 (id=5730): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.099966614s ago: executing program 8 (id=5735): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='.'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 1.094396854s ago: executing program 8 (id=5736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb9}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.055244334s ago: executing program 8 (id=5738): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) lseek(r2, 0x8, 0x4) 1.018591735s ago: executing program 8 (id=5741): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 881.845255ms ago: executing program 3 (id=5746): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008"], 0xec}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) 819.149526ms ago: executing program 8 (id=5748): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x28000600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 818.781356ms ago: executing program 2 (id=5749): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r0, &(0x7f0000000180)=""/174, 0xae) 760.382806ms ago: executing program 3 (id=5750): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x18, 0x48d5}, 0x20008050) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 751.928967ms ago: executing program 2 (id=5752): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 664.249857ms ago: executing program 3 (id=5755): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x6, 0x1, '\'\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x68810) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 628.649357ms ago: executing program 3 (id=5756): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x60}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001040)={[{@shortname_winnt}, {}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@check_normal}, {@uni_xlate}, {@fat=@discard}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010025"], 0x0, 0x46, 0x0, 0x1}, 0x28) 567.473497ms ago: executing program 3 (id=5757): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 508.526678ms ago: executing program 0 (id=5759): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x2109, 0x81}, 0x8) 491.603258ms ago: executing program 9 (id=5760): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r0, 0x0) 461.281618ms ago: executing program 0 (id=5761): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1a7, 0x0, &(0x7f0000000340)="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", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cf}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 408.920758ms ago: executing program 9 (id=5762): r0 = socket(0x10, 0x80003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0xfe, 0x0, 0x0, 0x41}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 408.327868ms ago: executing program 2 (id=5763): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 364.719869ms ago: executing program 0 (id=5764): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 364.459029ms ago: executing program 9 (id=5765): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x2}}, 0xfffffeb7) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 350.440178ms ago: executing program 0 (id=5766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@mcast2, 0x40004000, r1}) 350.179338ms ago: executing program 2 (id=5768): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xd, 0x7, 0x2, 0x4, 0x3, 0x3e, 0xfffffff6, 0x3da, 0x40, 0x8b, 0xd2d, 0x5, 0x38, 0x2, 0x78, 0x7, 0x4}, [{0x6474e551, 0xfffffff7, 0x7ff, 0x3ff, 0x1, 0xffff, 0x80000000, 0xffffffff}, {0x3, 0x880, 0x4, 0x6, 0x100, 0x2, 0x6, 0x7}]}, 0xb0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 319.372649ms ago: executing program 0 (id=5769): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x60}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001040)={[{@shortname_winnt}, {}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@check_normal}, {@uni_xlate}, {@fat=@discard}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010025"], 0x0, 0x46, 0x0, 0x1}, 0x28) 272.449149ms ago: executing program 9 (id=5770): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 272.210199ms ago: executing program 2 (id=5771): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x280000000000) 237.071669ms ago: executing program 2 (id=5772): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x9, @private1, 0x7177}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001e40)={r1, 0x80, 0x2}, &(0x7f0000001e80)=0x8) 186.341249ms ago: executing program 0 (id=5773): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(0x4) 107.9462ms ago: executing program 3 (id=5774): mlockall(0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) io_setup(0xb, &(0x7f0000000080)) 107.32433ms ago: executing program 9 (id=5784): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000005c0)={[{@noload}, {@noload}, {@lazytime}, {@minixdf}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106300, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000026c0)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [{0x8, 0x3}], {}, {0x20, 0x4}}, 0x2c, 0x1) 0s ago: executing program 9 (id=5775): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 213.926914][T13649] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.934175][T13649] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.941426][T13649] bridge_slave_1: entered allmulticast mode [ 213.948129][T13649] bridge_slave_1: entered promiscuous mode [ 213.960972][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.973077][T13647] team0: Port device team_slave_0 added [ 213.984028][T13647] team0: Port device team_slave_1 added [ 213.991221][T13649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.005491][T13649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.029827][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.041597][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.048564][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.074536][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.086271][T13649] team0: Port device team_slave_0 added [ 214.092350][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.099301][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.125490][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.137624][T13649] team0: Port device team_slave_1 added [ 214.155000][T13649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.162039][T13649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.188070][T13649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.200200][T13649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.207209][T13649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.233430][T13649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.283514][T13647] hsr_slave_0: entered promiscuous mode [ 214.289667][T13647] hsr_slave_1: entered promiscuous mode [ 214.295575][T13647] debugfs: 'hsr0' already exists in 'hsr' [ 214.302152][T13647] Cannot create hsr debugfs directory [ 214.309940][T13649] hsr_slave_0: entered promiscuous mode [ 214.316161][T13649] hsr_slave_1: entered promiscuous mode [ 214.321980][T13649] debugfs: 'hsr0' already exists in 'hsr' [ 214.327749][T13649] Cannot create hsr debugfs directory [ 214.349773][ T49] bridge_slave_1: left allmulticast mode [ 214.355779][ T49] bridge_slave_1: left promiscuous mode [ 214.362298][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.370062][ T49] bridge_slave_0: left allmulticast mode [ 214.375737][ T49] bridge_slave_0: left promiscuous mode [ 214.381546][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.463742][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.473957][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.483399][ T49] bond0 (unregistering): Released all slaves [ 214.542053][ T49] hsr_slave_0: left promiscuous mode [ 214.547888][ T49] hsr_slave_1: left promiscuous mode [ 214.553645][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.561251][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.568790][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.576572][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.586475][ T49] veth1_macvtap: left promiscuous mode [ 214.592383][ T49] veth0_macvtap: left promiscuous mode [ 214.597907][ T49] veth1_vlan: left promiscuous mode [ 214.603195][ T49] veth0_vlan: left promiscuous mode [ 214.662770][ T49] team0 (unregistering): Port device team_slave_1 removed [ 214.673437][ T49] team0 (unregistering): Port device team_slave_0 removed [ 214.759177][T13649] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 214.767721][T13649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.779323][T13649] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 214.788267][T13649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.790315][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 214.790329][ T28] audit: type=1400 audit(1780534938.034:1266): avc: denied { write } for pid=13683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.797050][T13647] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 214.821813][ T28] audit: type=1400 audit(1780534938.044:1267): avc: denied { write } for pid=13694 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.856117][T13647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.863870][T13649] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 214.873122][T13649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.880816][T13649] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 214.889465][T13649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.896849][T13647] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 214.905348][T13647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.913439][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 214.921693][T13647] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 214.929875][T13647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.937489][T13647] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 214.947516][T13647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.003722][T13649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.013398][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.025732][T13649] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.038941][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.052120][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.059215][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.070484][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.077782][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.092835][ T28] audit: type=1400 audit(1780534938.334:1268): avc: denied { write } for pid=13709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.119835][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.126928][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.140046][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.147165][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.162488][ T28] audit: type=1400 audit(1780534938.404:1269): avc: denied { write } for pid=13720 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.186804][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.197309][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.218340][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 215.228055][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.238426][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.253792][T13649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.289445][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.301974][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.355948][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.367674][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.416290][ T28] audit: type=1400 audit(1780534938.654:1270): avc: denied { write } for pid=13727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.464778][ T28] audit: type=1400 audit(1780534938.694:1271): avc: denied { write } for pid=13751 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.487761][ T49] bridge_slave_1: left allmulticast mode [ 215.493586][ T49] bridge_slave_1: left promiscuous mode [ 215.499297][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.507547][ T49] bridge_slave_0: left allmulticast mode [ 215.514179][ T49] bridge_slave_0: left promiscuous mode [ 215.519924][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.585934][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.595968][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.605611][ T49] bond0 (unregistering): Released all slaves [ 215.614863][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.622912][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 215.644812][T13649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.671632][ T49] hsr_slave_0: left promiscuous mode [ 215.678563][ T49] hsr_slave_1: left promiscuous mode [ 215.684706][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.692294][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.699834][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.707640][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.718797][ T49] veth1_macvtap: left promiscuous mode [ 215.724528][ T49] veth0_macvtap: left promiscuous mode [ 215.730040][ T28] audit: type=1400 audit(1780534938.964:1272): avc: denied { write } for pid=13758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.753633][ T49] veth1_vlan: left promiscuous mode [ 215.759481][ T49] veth0_vlan: left promiscuous mode [ 215.764676][ T28] audit: type=1400 audit(1780534938.964:1273): avc: denied { write } for pid=13772 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.838309][ T49] team0 (unregistering): Port device team_slave_1 removed [ 215.848201][ T49] team0 (unregistering): Port device team_slave_0 removed [ 215.880593][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 216.001158][ T28] audit: type=1400 audit(1780534939.234:1274): avc: denied { write } for pid=13783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.046746][ T28] audit: type=1400 audit(1780534939.284:1275): avc: denied { write } for pid=13807 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.047533][T13649] veth0_vlan: entered promiscuous mode [ 216.080367][T13647] veth0_vlan: entered promiscuous mode [ 216.091011][T13649] veth1_vlan: entered promiscuous mode [ 216.097715][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 216.108489][T13647] veth1_vlan: entered promiscuous mode [ 216.127595][T13649] veth0_macvtap: entered promiscuous mode [ 216.140730][T13649] veth1_macvtap: entered promiscuous mode [ 216.154019][T13647] veth0_macvtap: entered promiscuous mode [ 216.163565][T13649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.172656][T13649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.182852][T13647] veth1_macvtap: entered promiscuous mode [ 216.192609][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.202326][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.217733][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.227211][ T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.240425][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.249690][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.263004][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.272023][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.292188][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.304688][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.315359][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 216.568259][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 216.800346][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 216.935179][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4183'. [ 217.092687][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4186'. [ 217.566906][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4200'. [ 217.844500][T14015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4215'. [ 218.223225][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4229'. [ 219.296958][T14154] RDS: rds_bind could not find a transport for ::400:0:4002:0:20:0, load rds_tcp or rds_rdma? [ 219.357810][T14158] loop8: detected capacity change from 0 to 1024 [ 219.384028][T14158] EXT4-fs: Ignoring removed nobh option [ 219.398530][T14158] EXT4-fs: Ignoring removed i_version option [ 219.400270][T14162] RDS: rds_bind could not find a transport for ::400:0:4002:0:20:0, load rds_tcp or rds_rdma? [ 219.439211][T14158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.501631][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.571776][T14178] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.586415][T14178] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 219.736202][ T851] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 219.755746][ T851] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.910736][T14195] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4302'. [ 219.920786][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4302'. [ 219.942255][T14195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.992348][T14206] xt_hashlimit: size too large, truncated to 1048576 [ 220.055738][T14216] loop8: detected capacity change from 0 to 512 [ 220.075142][T14216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.095184][T14216] EXT4-fs (loop8): orphan cleanup on readonly fs [ 220.108029][T14216] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4301: invalid indirect mapped block 4294967295 (level 1) [ 220.122352][T14216] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.122893][T14216] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4301: invalid indirect mapped block 4294967295 (level 1) [ 220.132063][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 220.132093][ C1] EXT4-fs (loop8): initial error at time 1780534943: ext4_free_branches:1023: inode 11 [ 220.132124][ C1] EXT4-fs (loop8): last error at time 1780534943: ext4_free_branches:1023: inode 11 [ 220.172424][T14216] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.173551][T14216] EXT4-fs (loop8): 2 truncates cleaned up [ 220.190002][T14216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.195880][T14224] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4305'. [ 220.220705][T14216] EXT4-fs: Ignoring removed orlov option [ 220.226853][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 220.226866][ T28] audit: type=1400 audit(1780534943.454:1282): avc: denied { remount } for pid=14215 comm="syz.8.4301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 220.254738][T14216] EXT4-fs: Ignoring removed orlov option [ 220.260607][T14216] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 220.272484][T14216] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 220.318089][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.336528][ T28] audit: type=1400 audit(1780534943.574:1283): avc: denied { getopt } for pid=14237 comm="syz.7.4313" laddr=fe80::11 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.391356][ T28] audit: type=1400 audit(1780534943.604:1284): avc: denied { setopt } for pid=14231 comm="syz.2.4309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.430620][ T28] audit: type=1400 audit(1780534943.664:1285): avc: denied { write } for pid=14246 comm="syz.5.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 220.459226][ T28] audit: type=1400 audit(1780534943.694:1286): avc: denied { write } for pid=14249 comm="syz.8.4317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 220.494072][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4319'. [ 220.639813][T14276] netlink: 136 bytes leftover after parsing attributes in process `syz.8.4328'. [ 220.651453][T14276] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 220.709622][ T28] audit: type=1400 audit(1780534943.944:1287): avc: denied { append } for pid=14287 comm="syz.5.4334" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 220.756221][T14292] sctp: [Deprecated]: syz.8.4336 (pid 14292) Use of int in max_burst socket option deprecated. [ 220.756221][T14292] Use struct sctp_assoc_value instead [ 220.809794][T14298] netlink: 'syz.8.4339': attribute type 1 has an invalid length. [ 220.818398][T14298] netlink: 'syz.8.4339': attribute type 2 has an invalid length. [ 220.947286][T14311] loop5: detected capacity change from 0 to 1024 [ 220.981671][T14311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 221.005366][T14311] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.022975][T14323] loop8: detected capacity change from 0 to 164 [ 221.034008][ T28] audit: type=1400 audit(1780534944.274:1288): avc: denied { read } for pid=14322 comm="syz.4.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 221.055324][T13196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 221.060339][ T28] audit: type=1400 audit(1780534944.294:1289): avc: denied { write } for pid=14325 comm="syz.4.4352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 221.088471][T14323] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 221.098568][ T28] audit: type=1400 audit(1780534944.294:1290): avc: denied { connect } for pid=14325 comm="syz.4.4352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 221.099683][T14328] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 221.172220][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.395927][ T28] audit: type=1400 audit(1780534944.634:1291): avc: denied { remount } for pid=14356 comm="syz.2.4365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.425127][T14363] loop8: detected capacity change from 0 to 512 [ 221.445129][T14363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.464042][T14363] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.491535][T14371] loop5: detected capacity change from 0 to 128 [ 221.574792][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.650720][T14393] IPVS: Unknown mcast interface: vetN1_macvtap [ 221.705752][T14404] nr0: tun_chr_ioctl cmd 1074025677 [ 221.706759][T14397] syz.5.4384 (14397) used greatest stack depth: 9072 bytes left [ 221.722417][T14404] nr0: linktype set to 825 [ 222.836777][T14484] __nla_validate_parse: 6 callbacks suppressed [ 222.836791][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4421'. [ 222.873921][T14486] loop7: detected capacity change from 0 to 512 [ 222.894424][T14486] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.4422: inode has both inline data and extents flags [ 222.937158][T14486] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.937337][T14486] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4422: couldn't read orphan inode 15 (err -117) [ 222.946540][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 222.946565][ C0] EXT4-fs (loop7): initial error at time 1780534946: ext4_orphan_get:1397: inode 15 [ 222.946598][ C0] EXT4-fs (loop7): last error at time 1780534946: ext4_orphan_get:1397: inode 15 [ 222.986210][T14486] loop7: lost filesystem error report for type 5 error -117 [ 222.988395][T14486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.027662][T14494] loop5: detected capacity change from 0 to 512 [ 223.043599][T14494] EXT4-fs: Ignoring removed bh option [ 223.084799][T14494] EXT4-fs: inline encryption not supported [ 223.112664][T14494] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.125602][T13647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.149882][T14494] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 223.166208][T14494] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4425: bg 0: block 248: padding at end of block bitmap is not set [ 223.180619][T14494] loop5: lost filesystem error report for type 5 error -117 [ 223.180950][T14494] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.4425: Failed to acquire dquot type 1 [ 223.191097][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 223.199885][T14494] loop5: lost filesystem error report for type 5 error -28 [ 223.206202][ C0] EXT4-fs (loop5): last error at time 1780534946: ext4_validate_block_bitmap:441 [ 223.222253][T14514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14514 comm=syz.7.4433 [ 223.225722][T14515] atomic_op ffff88811c9f1928 conn xmit_atomic 0000000000000000 [ 223.238030][T14494] EXT4-fs (loop5): 1 truncate cleaned up [ 223.264128][T14494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 223.329596][T14494] syz.5.4425 (14494) used greatest stack depth: 9016 bytes left [ 223.363378][T13196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 223.383775][ T360] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 223.408740][ T360] loop5: lost filesystem error report for type 5 error -117 [ 223.490415][T14534] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 223.519048][T14536] loop5: detected capacity change from 0 to 1024 [ 223.530566][T14539] loop8: detected capacity change from 0 to 1024 [ 223.538804][T14536] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.553994][T14539] EXT4-fs: Ignoring removed bh option [ 223.568804][T14541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14541 comm=syz.4.4445 [ 223.588529][T14539] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.589496][T14536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.616270][T14539] EXT4-fs (loop8): shut down requested (2) [ 223.655855][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.677872][T13196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.096217][T14570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 224.106453][T14570] System zones: 1-3, 19-19, 35-36 [ 224.112218][T14570] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 224.137046][T14570] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.209298][T14570] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 224.214722][T14581] 9p: Bad value for 'rfdno' [ 224.252229][T13649] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.327789][T14603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14603 comm=syz.2.4469 [ 224.518805][T14629] set_capacity_and_notify: 1 callbacks suppressed [ 224.518821][T14629] loop7: detected capacity change from 0 to 256 [ 224.766371][T14657] loop7: detected capacity change from 0 to 1024 [ 224.786286][T14657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 224.805148][T14657] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.832965][T13647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 224.845709][T14665] loop8: detected capacity change from 0 to 2048 [ 224.875541][T14672] loop5: detected capacity change from 0 to 512 [ 224.882953][T14672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.893892][T14665] loop8: p1 p4 [ 224.897857][T14672] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.4500: iget: bad i_size value: 38620345925642 [ 224.906994][T14665] loop8: p4 size 589824 extends beyond EOD, truncated [ 224.914671][T14672] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.919311][T14672] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.4500: couldn't read orphan inode 15 (err -117) [ 224.928576][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 224.928591][ C0] EXT4-fs (loop5): initial error at time 1780534948: ext4_orphan_get:1397: inode 15 [ 224.928615][ C0] EXT4-fs (loop5): last error at time 1780534948: ext4_orphan_get:1397: inode 15 [ 224.949902][T14665] netlink: 'syz.8.4496': attribute type 3 has an invalid length. [ 224.957228][T14672] loop5: lost filesystem error report for type 5 error -117 [ 224.978646][T14672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.981168][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4496'. [ 225.073213][T13679] udevd[13679]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 225.086603][T13665] udevd[13665]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 225.098533][T14688] program syz.8.4507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.117498][T13196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.283879][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 225.283892][ T28] audit: type=1400 audit(1780534948.524:1324): avc: denied { ioctl } for pid=14711 comm="syz.8.4519" path="socket:[41697]" dev="sockfs" ino=41697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.369545][T14721] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 225.389647][T14723] netlink: 'syz.4.4523': attribute type 15 has an invalid length. [ 225.397751][T14723] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4523'. [ 225.414923][T14727] netlink: 'syz.8.4525': attribute type 10 has an invalid length. [ 225.424184][T14727] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4525'. [ 225.444064][T14727] bond0: entered promiscuous mode [ 225.449420][T14727] bond_slave_0: entered promiscuous mode [ 225.455624][T14727] bond_slave_1: entered promiscuous mode [ 225.462044][T14727] bridge0: port 3(bond0) entered blocking state [ 225.468804][T14727] bridge0: port 3(bond0) entered disabled state [ 225.477346][T14727] bond0: entered allmulticast mode [ 225.484227][T14727] bond_slave_0: entered allmulticast mode [ 225.490222][T14727] bond_slave_1: entered allmulticast mode [ 225.499991][T14727] bridge0: port 3(bond0) entered blocking state [ 225.506476][T14727] bridge0: port 3(bond0) entered forwarding state [ 225.552733][ T28] audit: type=1400 audit(1780534948.784:1325): avc: denied { ioctl } for pid=14741 comm="syz.5.4532" path="socket:[41746]" dev="sockfs" ino=41746 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.610132][T14748] loop8: detected capacity change from 0 to 256 [ 225.617046][T14748] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.637635][T14748] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.666676][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4539'. [ 225.706557][ T28] audit: type=1400 audit(1780534948.944:1326): avc: denied { create } for pid=14761 comm="syz.4.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 225.802282][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4545'. [ 225.917609][T14798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4555'. [ 225.962518][T14805] program syz.8.4559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.207929][T14838] sctp: [Deprecated]: syz.7.4573 (pid 14838) Use of int in max_burst socket option. [ 226.207929][T14838] Use struct sctp_assoc_value instead [ 226.262493][T14840] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.416530][ T28] audit: type=1400 audit(1780534949.654:1327): avc: denied { write } for pid=14848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.463694][ T28] audit: type=1400 audit(1780534949.704:1328): avc: denied { write } for pid=14863 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.553861][T14873] loop5: detected capacity change from 0 to 128 [ 226.561238][T14872] program syz.7.4583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.590897][T13196] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 226.599551][T13196] FAT-fs (loop5): Filesystem has been set read-only [ 226.607132][T13196] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 226.815640][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.835738][T14876] loop7: detected capacity change from 0 to 2048 [ 226.854763][T14876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.885744][T14876] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 226.897822][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.911232][T13647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.960276][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.982205][ T28] audit: type=1400 audit(1780534950.214:1329): avc: denied { ioctl } for pid=14883 comm="syz.7.4588" path="socket:[42298]" dev="sockfs" ino=42298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.039066][ T28] audit: type=1400 audit(1780534950.274:1330): avc: denied { sys_module } for pid=14888 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 227.071872][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.125392][ T28] audit: type=1400 audit(1780534950.364:1331): avc: denied { write } for pid=14879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.184876][ T28] audit: type=1400 audit(1780534950.414:1332): avc: denied { write } for pid=14910 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.374400][ T28] audit: type=1400 audit(1780534950.614:1333): avc: denied { write } for pid=14924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.567659][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4606'. [ 227.577945][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4606'. [ 230.260919][ T40] bridge_slave_1: left allmulticast mode [ 230.266796][ T40] bridge_slave_1: left promiscuous mode [ 230.278865][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.295824][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 230.295850][ T28] audit: type=1400 audit(1780534953.534:1336): avc: denied { create } for pid=14982 comm="syz.7.4618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 230.329007][ T40] bridge_slave_0: left allmulticast mode [ 230.340679][ T40] bridge_slave_0: left promiscuous mode [ 230.346657][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.357651][T14991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4622'. [ 230.367814][T14991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4622'. [ 230.385377][T14993] loop8: detected capacity change from 0 to 512 [ 230.504170][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.514915][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.525836][ T40] bond0 (unregistering): Released all slaves [ 230.587571][T15010] loop7: detected capacity change from 0 to 1024 [ 230.603430][ T40] hsr_slave_0: left promiscuous mode [ 230.609753][T15010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.622780][T15010] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.633647][ T40] hsr_slave_1: left promiscuous mode [ 230.644516][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.652575][T13647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.653631][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.676351][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.687417][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.703291][ T40] veth1_macvtap: left promiscuous mode [ 230.715639][ T40] veth0_macvtap: left promiscuous mode [ 230.728685][ T40] veth1_vlan: left promiscuous mode [ 230.734480][ T40] veth0_vlan: left promiscuous mode [ 230.754684][T15027] program syz.7.4630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.768157][ T28] audit: type=1400 audit(2000000000.430:1337): avc: denied { write } for pid=15000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.825409][ T28] audit: type=1400 audit(2000000000.480:1338): avc: denied { write } for pid=15034 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.879485][ T40] team0 (unregistering): Port device team_slave_1 removed [ 230.889727][ T40] team0 (unregistering): Port device team_slave_0 removed [ 230.926150][T15031] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4632'. [ 230.935212][T15031] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4632'. [ 231.028705][T14888] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.036585][T14888] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.044038][T14888] bridge_slave_0: entered allmulticast mode [ 231.049829][ T28] audit: type=1400 audit(2000000000.710:1339): avc: denied { write } for pid=15047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.050653][T14888] bridge_slave_0: entered promiscuous mode [ 231.080498][T14888] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.087676][T14888] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.095019][T14888] bridge_slave_1: entered allmulticast mode [ 231.101362][ T28] audit: type=1400 audit(2000000000.760:1340): avc: denied { write } for pid=15063 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.101495][T14888] bridge_slave_1: entered promiscuous mode [ 231.141880][T14888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.153028][T14888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.172439][T14888] team0: Port device team_slave_0 added [ 231.179166][T14888] team0: Port device team_slave_1 added [ 231.196901][T14888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.203930][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.212403][ T28] audit: type=1400 audit(2000000000.880:1341): avc: denied { write } for pid=15066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.230421][T14888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.288868][ T28] audit: type=1400 audit(2000000000.930:1342): avc: denied { write } for pid=15077 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.289545][T14888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.318524][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.345721][T14888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.370582][ T28] audit: type=1400 audit(2000000001.030:1343): avc: denied { write } for pid=15080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.374009][T14888] hsr_slave_0: entered promiscuous mode [ 231.400358][T14888] hsr_slave_1: entered promiscuous mode [ 231.414624][ T28] audit: type=1400 audit(2000000001.080:1344): avc: denied { write } for pid=15091 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.495000][T14888] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 231.505689][T14888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.514165][T14888] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 231.523637][T14888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.531510][T14888] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 231.534235][ T28] audit: type=1400 audit(2000000001.200:1345): avc: denied { write } for pid=15095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.563628][T14888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.571645][T14888] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 231.580519][T14888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.622274][T14888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.634309][T14888] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.643512][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.650680][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.661972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.669088][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.741839][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 231.789217][T14888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.863477][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 231.910486][T14888] veth0_vlan: entered promiscuous mode [ 231.918627][T14888] veth1_vlan: entered promiscuous mode [ 231.935457][T14888] veth0_macvtap: entered promiscuous mode [ 231.945013][T14888] veth1_macvtap: entered promiscuous mode [ 231.956265][T14888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.969455][T14888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.980551][ T3447] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.990628][ T3447] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.000326][ T3447] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.009770][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 232.017460][ T3447] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.158868][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 232.995577][T15234] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4646'. [ 233.019174][T15237] loop7: detected capacity change from 0 to 1024 [ 233.045159][T15237] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.149044][T13647] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.158191][T15264] xt_hashlimit: size too large, truncated to 1048576 [ 233.685023][T15319] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4690'. [ 233.742513][T15323] loop9: detected capacity change from 0 to 512 [ 233.775985][T15323] EXT4-fs (loop9): 1 truncate cleaned up [ 233.789609][T15323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.861561][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.970226][T15342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.989088][T15342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.302422][ T3447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.322886][ T3447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.408243][ T3447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.422615][ T3447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.492689][ T3447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.513888][ T3447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.592379][ T3447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.622559][ T3447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.838563][ T3447] bridge_slave_1: left promiscuous mode [ 234.851776][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.889685][ T3447] bridge_slave_0: left allmulticast mode [ 234.902601][ T3447] bridge_slave_0: left promiscuous mode [ 234.921471][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.119316][ T3447] gretap0 (unregistering): left allmulticast mode [ 235.198417][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.218402][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.235711][ T3447] bond0 (unregistering): Released all slaves [ 235.257424][ T3447] bond1 (unregistering): Released all slaves [ 235.278320][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 235.375421][ T3447] hsr_slave_0: left promiscuous mode [ 235.395104][ T3447] hsr_slave_1: left promiscuous mode [ 235.407928][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.450363][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.459279][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.479604][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.510152][ T3447] veth1_macvtap: left promiscuous mode [ 235.522603][ T3447] veth0_macvtap: left promiscuous mode [ 235.533081][ T3447] veth1_vlan: left promiscuous mode [ 235.545304][ T3447] veth0_vlan: left promiscuous mode [ 235.620289][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 235.620305][ T28] audit: type=1400 audit(2000000005.280:1376): avc: denied { write } for pid=15436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.681567][ T28] audit: type=1400 audit(2000000005.340:1377): avc: denied { write } for pid=15457 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.741786][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 235.760672][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 235.832995][T15363] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.840132][T15363] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.860842][T15465] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4746'. [ 235.872907][T15363] bridge_slave_0: entered allmulticast mode [ 235.879485][T15363] bridge_slave_0: entered promiscuous mode [ 235.886817][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 235.897183][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4746'. [ 235.907335][T15465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.924151][T15363] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.934298][T15363] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.951231][T15363] bridge_slave_1: entered allmulticast mode [ 235.973180][T15363] bridge_slave_1: entered promiscuous mode [ 236.048106][T15363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.083755][T15363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.133604][T15483] loop9: detected capacity change from 0 to 1024 [ 236.155916][T15363] team0: Port device team_slave_0 added [ 236.163400][T15483] EXT4-fs: Ignoring removed bh option [ 236.174687][T15363] team0: Port device team_slave_1 added [ 236.188266][ T28] audit: type=1400 audit(2000000005.850:1378): avc: denied { write } for pid=15473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.230874][T15363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.245541][T15483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.269570][ T28] audit: type=1400 audit(2000000005.910:1379): avc: denied { write } for pid=15497 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.294779][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.350266][T15483] EXT4-fs (loop9): shut down requested (2) [ 236.391275][ T28] audit: type=1400 audit(2000000006.050:1380): avc: denied { setopt } for pid=15506 comm="syz.8.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.394421][T15363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.423250][T15363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.430199][T15363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.436303][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.456481][T15363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.484159][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 236.568574][T15363] hsr_slave_0: entered promiscuous mode [ 236.578736][T15363] hsr_slave_1: entered promiscuous mode [ 236.588068][T15363] debugfs: 'hsr0' already exists in 'hsr' [ 236.594942][T15363] Cannot create hsr debugfs directory [ 236.799233][ T28] audit: type=1400 audit(2000000006.460:1381): avc: denied { write } for pid=15524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.843191][T15543] loop8: detected capacity change from 0 to 512 [ 236.845904][ T28] audit: type=1400 audit(2000000006.500:1382): avc: denied { write } for pid=15542 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.882749][T15543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.898511][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 236.916349][T15543] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.930559][ T28] audit: type=1400 audit(2000000006.600:1383): avc: denied { write } for pid=15539 comm="syz.8.4758" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.954961][ T28] audit: type=1400 audit(2000000006.600:1384): avc: denied { create } for pid=15539 comm="syz.8.4758" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 236.987199][T15543] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 237.041750][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.111970][ T28] audit: type=1400 audit(2000000006.770:1385): avc: denied { write } for pid=15553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.136068][T15566] netlink: 4560 bytes leftover after parsing attributes in process `syz.8.4763'. [ 237.162514][T15566] netlink: 4560 bytes leftover after parsing attributes in process `syz.8.4763'. [ 237.328551][T15363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.357201][T15363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.385226][T15363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.408131][T15363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.417979][T15590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4768'. [ 237.438447][T15363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.465907][T15363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.515674][T15363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.548466][T15363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.615208][T15611] loop7: detected capacity change from 0 to 128 [ 237.652941][T15363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.678708][T15363] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.704703][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.711879][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.744470][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.751648][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.993539][T15363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.030778][T15664] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4776'. [ 238.045848][T15664] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4776'. [ 238.133644][T15363] veth0_vlan: entered promiscuous mode [ 238.144156][T15681] loop8: detected capacity change from 0 to 512 [ 238.155692][T15363] veth1_vlan: entered promiscuous mode [ 238.166116][T15681] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 238.187268][T15681] EXT4-fs (loop8): 1 truncate cleaned up [ 238.194153][T15363] veth0_macvtap: entered promiscuous mode [ 238.200595][T15681] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.214920][T15363] veth1_macvtap: entered promiscuous mode [ 238.230657][T15363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.240155][T15363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.255967][ T3447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.266274][ T3447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.277645][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.289944][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.651805][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.737413][T15711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4784'. [ 238.798023][T15719] SELinux: failed to load policy [ 239.427487][T15821] loop9: detected capacity change from 0 to 512 [ 239.444982][T15821] EXT4-fs: dax option not supported [ 239.479216][T15833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4824'. [ 239.799724][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4837'. [ 240.096705][T15924] veth3: entered allmulticast mode [ 240.501758][T15963] netlink: 'syz.3.4867': attribute type 21 has an invalid length. [ 240.692857][T15974] tun0: tun_chr_ioctl cmd 1074812117 [ 240.736945][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 240.736960][ T28] audit: type=1326 audit(2000000010.400:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 240.822363][T15979] loop3: detected capacity change from 0 to 128 [ 240.830110][ T28] audit: type=1326 audit(2000000010.400:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 240.906449][ T28] audit: type=1326 audit(2000000010.460:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 240.923573][T15988] loop9: detected capacity change from 0 to 512 [ 240.959601][T15992] __nla_validate_parse: 4 callbacks suppressed [ 240.959617][T15992] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4881'. [ 240.969591][ T28] audit: type=1326 audit(2000000010.460:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 241.011977][ T28] audit: type=1326 audit(2000000010.460:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 241.022426][T15988] Quota error (device loop9): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 241.047637][ T28] audit: type=1326 audit(2000000010.460:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 241.073451][ T28] audit: type=1326 audit(2000000010.460:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 241.099395][ T28] audit: type=1326 audit(2000000010.460:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 241.125155][ T28] audit: type=1326 audit(2000000010.460:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.2.4872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f67a536ce59 code=0x7ffc0000 [ 241.139013][T15988] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4880: Failed to acquire dquot type 1 [ 241.205161][T15988] loop9: lost filesystem error report for type 5 error -117 [ 241.210275][T15988] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4880: bg 0: block 495: padding at end of block bitmap is not set [ 241.217654][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 241.217686][ C0] EXT4-fs (loop9): initial error at time 2000000010: ext4_acquire_dquot:7034 [ 241.217713][ C0] EXT4-fs (loop9): last error at time 2000000010: ext4_acquire_dquot:7034 [ 241.261538][T15988] loop9: lost filesystem error report for type 5 error -117 [ 241.261771][T15988] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 241.295259][T15988] loop9: lost filesystem error report for type 5 error -117 [ 241.299791][T15988] EXT4-fs (loop9): 1 truncate cleaned up [ 241.339536][T15988] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.391231][T15988] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.455321][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.783731][T16056] loop3: detected capacity change from 0 to 512 [ 241.789574][T16054] PID 16054 killed due to inadequate hugepage pool [ 241.845099][T16056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.861586][T16056] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.915344][T16056] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 241.994295][T15363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.033431][T16087] program syz.3.4920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.304068][T16120] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 242.446877][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4943'. [ 242.670462][T16153] netlink: 'syz.2.4952': attribute type 4 has an invalid length. [ 242.675052][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4951'. [ 242.692777][T16153] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4952'. [ 242.882549][T16170] loop8: detected capacity change from 0 to 512 [ 242.910285][T16170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.983261][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.139796][T16187] Process accounting resumed [ 243.185380][T16199] loop8: detected capacity change from 0 to 2048 [ 243.289981][T16206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4967'. [ 243.446275][T16222] netlink: 'syz.3.4971': attribute type 1 has an invalid length. [ 243.467745][T16226] loop9: detected capacity change from 0 to 256 [ 248.332398][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 248.332412][ T28] audit: type=1400 audit(2000000018.000:1443): avc: denied { write } for pid=16268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.382571][ T28] audit: type=1400 audit(2000000018.050:1444): avc: denied { write } for pid=16279 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.764642][ T28] audit: type=1400 audit(2000000020.430:1445): avc: denied { write } for pid=16282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.805581][ T28] audit: type=1400 audit(2000000020.470:1446): avc: denied { write } for pid=16293 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.539029][ T28] audit: type=1400 audit(2000000021.200:1447): avc: denied { write } for pid=16296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.574700][ T28] audit: type=1400 audit(2000000021.200:1448): avc: denied { write } for pid=16307 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.621424][ T28] audit: type=1400 audit(2000000022.290:1449): avc: denied { write } for pid=16310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.664721][ T28] audit: type=1400 audit(2000000022.330:1450): avc: denied { write } for pid=16321 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.293333][T16332] netlink: 424 bytes leftover after parsing attributes in process `syz.2.4978'. [ 254.314364][T16332] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 254.327416][T16335] loop8: detected capacity change from 0 to 512 [ 254.359694][T16335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.378267][T16341] loop3: detected capacity change from 0 to 512 [ 254.387146][T16335] EXT4-fs (loop8): shut down requested (1) [ 254.389147][ T28] audit: type=1400 audit(2000000024.040:1451): avc: denied { write } for pid=16334 comm="syz.8.4981" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.419989][T16335] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 254.462976][T16341] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4982: invalid indirect mapped block 256 (level 2) [ 254.471332][T16335] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 254.485534][T16335] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 254.494564][T16341] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 254.494895][T16341] EXT4-fs (loop3): 2 truncates cleaned up [ 254.504164][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 254.504187][ C0] EXT4-fs (loop3): initial error at time 2000000024: ext4_free_branches:1023: inode 11 [ 254.504233][ C0] EXT4-fs (loop3): last error at time 2000000024: ext4_free_branches:1023: inode 11 [ 254.543909][T16341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.558377][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.574479][ T28] audit: type=1400 audit(2000000024.240:1452): avc: denied { write } for pid=16339 comm="syz.3.4982" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.597935][T16341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4982: bg 0: block 5: invalid block bitmap [ 254.611187][T16341] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 254.632913][T16341] EXT4-fs (loop3): This should not happen!! Data will be lost [ 254.632913][T16341] [ 254.643467][T16341] EXT4-fs (loop3): Total free blocks count 0 [ 254.656225][T16341] EXT4-fs (loop3): Free/Dirty block details [ 254.669377][T16341] EXT4-fs (loop3): free_blocks=0 [ 254.691010][T16341] EXT4-fs (loop3): dirty_blocks=45 [ 254.714729][T16341] EXT4-fs (loop3): Block reservation details [ 254.725842][T16341] EXT4-fs (loop3): i_reserved_data_blocks=45 [ 254.732452][T16370] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 254.748257][ T40] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.768015][T16341] syz.3.4982 (16341) used greatest stack depth: 8944 bytes left [ 254.778693][T15363] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 254.823692][ T40] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.913499][ T40] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.955543][T16389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4998'. [ 254.969403][T16389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4998'. [ 254.986075][ T40] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.045334][T16343] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.062789][T16343] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.090566][T16343] bridge_slave_0: entered allmulticast mode [ 255.090785][T16403] loop8: detected capacity change from 0 to 512 [ 255.108348][T16343] bridge_slave_0: entered promiscuous mode [ 255.115410][T16343] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.122866][T16343] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.130175][T16343] bridge_slave_1: entered allmulticast mode [ 255.136943][T16343] bridge_slave_1: entered promiscuous mode [ 255.216955][ T40] bridge_slave_1: left allmulticast mode [ 255.228285][ T40] bridge_slave_1: left promiscuous mode [ 255.244340][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.277347][ T40] bridge_slave_0: left allmulticast mode [ 255.283170][ T40] bridge_slave_0: left promiscuous mode [ 255.297172][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.311034][ T28] audit: type=1400 audit(2000000024.970:1453): avc: denied { write } for pid=16427 comm="syz.8.5011" path="socket:[46653]" dev="sockfs" ino=46653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 255.335834][ T28] audit: type=1400 audit(2000000024.980:1454): avc: denied { write } for pid=16412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.359523][ T28] audit: type=1400 audit(2000000025.010:1455): avc: denied { write } for pid=16434 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.406545][T16440] loop9: detected capacity change from 0 to 512 [ 255.414563][T16440] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.446036][T16440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.471124][T16440] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 18: comm syz.9.5013: lblock 23 mapped to illegal pblock 18 (length 1) [ 255.472265][ T28] audit: type=1400 audit(2000000025.130:1456): avc: denied { write } for pid=16439 comm="syz.9.5013" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.510694][T16440] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.5013: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 255.533705][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.543128][T16440] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 12: comm syz.9.5013: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 255.566063][T16440] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 13: comm syz.9.5013: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 255.587081][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.604734][ T40] bond0 (unregistering): Released all slaves [ 255.615685][T16343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.634740][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.647700][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.660840][T16343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.672668][T16465] loop9: detected capacity change from 0 to 128 [ 255.721467][ T40] hsr_slave_0: left promiscuous mode [ 255.731045][ T40] hsr_slave_1: left promiscuous mode [ 255.743135][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.757057][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.779724][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.797087][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.832501][ T40] veth1_macvtap: left promiscuous mode [ 255.843965][ T40] veth0_macvtap: left promiscuous mode [ 255.853531][ T40] veth1_vlan: left promiscuous mode [ 255.859539][T16481] loop3: detected capacity change from 0 to 512 [ 255.866358][ T40] veth0_vlan: left promiscuous mode [ 255.879041][T16481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.894050][ T28] audit: type=1400 audit(2000000025.560:1457): avc: denied { write } for pid=16480 comm="syz.3.5031" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.004132][T15363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.184343][ T28] audit: type=1400 audit(2000000025.850:1458): avc: denied { mount } for pid=16492 comm="syz.2.5036" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 256.227086][ T40] team0 (unregistering): Port device team_slave_1 removed [ 256.263196][ T40] team0 (unregistering): Port device team_slave_0 removed [ 256.298276][T16343] team0: Port device team_slave_0 added [ 256.313363][T16343] team0: Port device team_slave_1 added [ 256.383468][T16343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.397735][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.424175][T16343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.435845][T16343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.442950][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.476462][T16522] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 256.481156][T16343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.531682][ T28] audit: type=1400 audit(2000000026.190:1459): avc: denied { write } for pid=16509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.594134][T16343] hsr_slave_0: entered promiscuous mode [ 256.649350][T16343] hsr_slave_1: entered promiscuous mode [ 256.656382][T16539] netlink: 'syz.3.5049': attribute type 11 has an invalid length. [ 256.669464][ T28] audit: type=1400 audit(2000000026.300:1460): avc: denied { write } for pid=16534 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.675670][T16343] debugfs: 'hsr0' already exists in 'hsr' [ 256.692107][T16539] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5049'. [ 256.697595][T16343] Cannot create hsr debugfs directory [ 256.712096][T16522] @0Ù: renamed from bond_slave_1 (while UP) [ 256.719317][T16541] tipc: Enabling of bearer rejected, failed to enable media [ 256.739976][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 257.071954][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 257.274073][T16343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.312113][T16343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.331679][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 257.342873][T16343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.351512][T16343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.366876][T16343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.389875][T16343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.411968][T16343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.431030][T16343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.479659][T16644] loop8: detected capacity change from 0 to 128 [ 257.529682][T16343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.556695][T16343] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.566413][T16654] netlink: 'syz.3.5080': attribute type 10 has an invalid length. [ 257.585032][T16654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5080'. [ 257.603774][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.610886][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.627810][T16654] bond0: entered promiscuous mode [ 257.639795][T16654] bond_slave_0: entered promiscuous mode [ 257.652584][T16654] bond_slave_1: entered promiscuous mode [ 257.660755][T16654] bridge0: port 3(bond0) entered blocking state [ 257.667685][T16654] bridge0: port 3(bond0) entered disabled state [ 257.674634][T16654] bond0: entered allmulticast mode [ 257.679965][T16654] bond_slave_0: entered allmulticast mode [ 257.695131][T16654] bond_slave_1: entered allmulticast mode [ 257.705502][T16654] bridge0: port 3(bond0) entered blocking state [ 257.712003][T16654] bridge0: port 3(bond0) entered forwarding state [ 257.730833][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.738098][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.825325][T16677] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5083'. [ 257.918042][T16698] loop3: detected capacity change from 0 to 512 [ 257.981845][T16343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.992870][T16698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 258.012464][T16698] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.045295][T15363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 258.142978][T16733] loop9: detected capacity change from 0 to 128 [ 258.146459][T16730] loop3: detected capacity change from 0 to 256 [ 258.209342][T16343] veth0_vlan: entered promiscuous mode [ 258.236521][T16343] veth1_vlan: entered promiscuous mode [ 258.281850][T16752] sctp: [Deprecated]: syz.3.5099 (pid 16752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.281850][T16752] Use struct sctp_sack_info instead [ 258.306165][T16343] veth0_macvtap: entered promiscuous mode [ 258.326942][T16343] veth1_macvtap: entered promiscuous mode [ 258.341865][T16343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.352190][T16343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.364256][ T360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.373671][ T360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.385414][ T360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.394580][ T360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.519525][T16781] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 258.569220][T16781] bridge0: port 3(bond0) entered disabled state [ 258.575826][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.583129][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.859876][T16834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 258.885320][T16834] System zones: 1-12 [ 258.910933][T16834] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5116: error while reading EA inode 32 err=-116 [ 258.961839][T16834] loop3: lost filesystem error report for type 5 error -117 [ 258.964044][T16834] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5116: error while reading EA inode 32 err=-116 [ 258.971521][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 258.971544][ C0] EXT4-fs (loop3): initial error at time 2000000028: ext4_xattr_inode_iget:446 [ 258.971567][ C0] EXT4-fs (loop3): last error at time 2000000028: ext4_xattr_inode_iget:446 [ 259.008291][T16834] loop3: lost filesystem error report for type 5 error -117 [ 259.010156][T16834] EXT4-fs (loop3): 1 orphan inode deleted [ 259.027444][T16834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.053587][T15363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.116237][T16868] batman_adv: batadv0: Adding interface: vlan2 [ 259.133716][T16868] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.170211][T16868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.189272][T16868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.199580][T16868] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 259.339892][T16895] set_capacity_and_notify: 1 callbacks suppressed [ 259.339906][T16895] loop0: detected capacity change from 0 to 512 [ 259.387108][T16895] EXT4-fs: Ignoring removed nobh option [ 259.387631][T16903] loop3: detected capacity change from 0 to 1024 [ 259.404396][T16895] EXT4-fs: Ignoring removed oldalloc option [ 259.428841][T16908] loop9: detected capacity change from 0 to 512 [ 259.440464][T16903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.445134][T16895] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 259.457544][T16903] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.466466][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 259.466480][ T28] audit: type=1400 audit(2000000029.130:1491): avc: denied { write } for pid=16909 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.468265][T16895] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5137: invalid indirect mapped block 256 (level 1) [ 259.477280][T16908] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 259.496249][T16895] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 259.537905][T16903] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 259.551093][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 259.561551][ C1] EXT4-fs (loop0): initial error at time 2000000029: ext4_free_branches:1023: inode 13 [ 259.571242][ C1] EXT4-fs (loop0): last error at time 2000000029: ext4_free_branches:1023: inode 13 [ 259.575030][T16908] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 259.581046][T16895] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5137: invalid indirect mapped block 2683928664 (level 1) [ 259.594934][T16903] EXT4-fs (loop3): orphan cleanup on readonly fs [ 259.605890][T16895] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 259.611063][T16908] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.5132: Corrupt directory, running e2fsck is recommended [ 259.633727][T16895] EXT4-fs (loop0): 1 truncate cleaned up [ 259.637825][T16903] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.5131: Freeing blocks not in datazone - block = 0, count = 4096 [ 259.639906][T16895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.665769][T16903] loop3: lost filesystem error report for type 5 error -117 [ 259.667721][T16908] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 259.675061][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 259.675083][ C1] EXT4-fs (loop3): initial error at time 2000000029: ext4_free_blocks:6718 [ 259.675106][ C1] EXT4-fs (loop3): last error at time 2000000029: ext4_free_blocks:6718 [ 259.708267][T16903] EXT4-fs (loop3): 1 orphan inode deleted [ 259.731753][T16903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.731753][T16908] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.5132: corrupted in-inode xattr: e_name out of bounds [ 259.731788][T16908] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.752842][T16895] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.5137: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 259.791108][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 259.794111][T16908] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.5132: couldn't read orphan inode 15 (err -117) [ 259.797568][ C1] EXT4-fs (loop9): initial error at time 2000000029: ext4_iget_extra_inode:5128: inode 15 [ 259.819328][ C1] EXT4-fs (loop9): last error at time 2000000029: ext4_iget_extra_inode:5128: inode 15 [ 259.823242][T16908] loop9: lost filesystem error report for type 5 error -117 [ 259.839615][ T28] audit: type=1400 audit(2000000029.500:1492): avc: denied { write } for pid=16915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.867090][T16908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.883173][T16343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.905574][ T28] audit: type=1400 audit(2000000029.540:1493): avc: denied { write } for pid=16933 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.954755][T15363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.973824][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.013920][ T28] audit: type=1400 audit(2000000029.680:1494): avc: denied { write } for pid=16935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.041576][T16951] loop7: detected capacity change from 0 to 7 [ 260.059339][T16951] buffer_io_error: 50 callbacks suppressed [ 260.059355][T16951] Buffer I/O error on dev loop7, logical block 0, async page read [ 260.060361][ T28] audit: type=1400 audit(2000000029.720:1495): avc: denied { write } for pid=16952 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.110986][T16951] Buffer I/O error on dev loop7, logical block 0, async page read [ 260.140201][T16951] loop7: unable to read partition table [ 260.156484][T16951] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 260.167287][T16408] Buffer I/O error on dev loop7, logical block 0, async page read [ 260.184292][T16408] Buffer I/O error on dev loop7, logical block 0, async page read [ 260.192476][T16408] Buffer I/O error on dev loop7, logical block 0, async page read [ 260.218873][T16408] Buffer I/O error on dev loop7, logical block 0, async page read [ 260.235961][T16408] Buffer I/O error on dev loop7, logical block 0, async page read [ 260.253598][T16966] loop0: detected capacity change from 0 to 256 [ 260.277632][T16968] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5145'. [ 260.279426][T16966] FAT-fs (loop0): Directory bread(block 64) failed [ 260.300076][T16966] FAT-fs (loop0): Directory bread(block 65) failed [ 260.317030][T16966] FAT-fs (loop0): Directory bread(block 66) failed [ 260.323965][T16966] FAT-fs (loop0): Directory bread(block 67) failed [ 260.337085][T16966] FAT-fs (loop0): Directory bread(block 68) failed [ 260.343790][T16966] FAT-fs (loop0): Directory bread(block 69) failed [ 260.350546][T16966] FAT-fs (loop0): Directory bread(block 70) failed [ 260.357312][T16966] FAT-fs (loop0): Directory bread(block 71) failed [ 260.364063][T16966] FAT-fs (loop0): Directory bread(block 72) failed [ 260.376671][T16966] FAT-fs (loop0): Directory bread(block 73) failed [ 260.414167][T16976] sctp: [Deprecated]: syz.2.5148 (pid 16976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.414167][T16976] Use struct sctp_sack_info instead [ 260.906588][ T28] audit: type=1400 audit(2000000030.570:1496): avc: denied { ioctl } for pid=17017 comm="syz.3.5167" path="socket:[49191]" dev="sockfs" ino=49191 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 260.977296][ T28] audit: type=1400 audit(2000000030.600:1497): avc: denied { accept } for pid=17017 comm="syz.3.5167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 261.100056][T17027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5171'. [ 261.120479][T17027] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5171'. [ 261.130499][T17027] netlink: 'syz.2.5171': attribute type 5 has an invalid length. [ 261.147055][T17027] netlink: 'syz.2.5171': attribute type 6 has an invalid length. [ 261.155017][T17027] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5171'. [ 261.191249][ T28] audit: type=1400 audit(2000000030.850:1498): avc: denied { read } for pid=17030 comm="syz.3.5173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.227802][T17037] netlink: 'syz.8.5175': attribute type 1 has an invalid length. [ 261.314654][T17048] netlink: 'syz.9.5179': attribute type 10 has an invalid length. [ 261.334929][T17048] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5179'. [ 261.365813][T17048] bond0: entered promiscuous mode [ 261.374025][ T28] audit: type=1400 audit(2000000031.030:1499): avc: denied { write } for pid=17053 comm="syz.3.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.381863][T17048] bond_slave_0: entered promiscuous mode [ 261.435432][T17048] bond_slave_1: entered promiscuous mode [ 261.445907][T17061] loop8: detected capacity change from 0 to 1764 [ 261.453073][T17048] bridge0: port 3(bond0) entered blocking state [ 261.470186][T17048] bridge0: port 3(bond0) entered disabled state [ 261.477816][T17048] bond0: entered allmulticast mode [ 261.483403][T17048] bond_slave_0: entered allmulticast mode [ 261.489286][T17048] bond_slave_1: entered allmulticast mode [ 261.498506][T17048] bridge0: port 3(bond0) entered blocking state [ 261.505254][T17048] bridge0: port 3(bond0) entered forwarding state [ 261.514893][T17063] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 261.834267][T17085] loop3: detected capacity change from 0 to 128 [ 261.841274][T17085] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.873400][T17085] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.916509][ T40] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.942838][T17093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5199'. [ 262.240288][T17108] veth1_macvtap: left promiscuous mode [ 262.262234][T17108] macsec0: entered promiscuous mode [ 262.290714][T17108] veth1_macvtap: entered promiscuous mode [ 262.312249][T17108] macsec0: left promiscuous mode [ 262.410728][T17114] loop3: detected capacity change from 0 to 512 [ 262.449696][T17114] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.481163][T17120] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5214'. [ 262.501411][T17114] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5211: invalid indirect mapped block 83886080 (level 1) [ 262.551851][T17114] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.552212][T17114] EXT4-fs (loop3): Remounting filesystem read-only [ 262.561475][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 262.561502][ C0] EXT4-fs (loop3): initial error at time 2000000032: ext4_free_branches:1023: inode 16 [ 262.561604][ C0] EXT4-fs (loop3): last error at time 2000000032: ext4_free_branches:1023: inode 16 [ 262.628785][T17114] EXT4-fs (loop3): 1 orphan inode deleted [ 262.678994][T17114] EXT4-fs (loop3): 1 truncate cleaned up [ 262.692739][ T3406] kernel read not supported for file [fscontext] (pid: 3406 comm: kworker/1:6) [ 262.696972][T17114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.802923][ T28] audit: type=1400 audit(2000000032.470:1500): avc: denied { name_bind } for pid=17143 comm="syz.2.5225" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 262.825447][T15363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.854483][T17150] loop8: detected capacity change from 0 to 128 [ 263.014866][T17166] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5234'. [ 263.068384][T17169] loop8: detected capacity change from 0 to 512 [ 263.104144][T17169] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 263.138011][T17169] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.5235: invalid indirect mapped block 83886080 (level 1) [ 263.161327][T17169] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.161610][T17169] EXT4-fs (loop8): Remounting filesystem read-only [ 263.177387][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 263.177433][ C1] EXT4-fs (loop8): initial error at time 2000000032: ext4_free_branches:1023: inode 16 [ 263.177579][ C1] EXT4-fs (loop8): last error at time 2000000032: ext4_free_branches:1023: inode 16 [ 263.263392][T17169] EXT4-fs (loop8): 1 orphan inode deleted [ 263.284304][T17169] EXT4-fs (loop8): 1 truncate cleaned up [ 263.309573][T17169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.371320][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.846251][T17217] ip6gre1: entered promiscuous mode [ 263.864658][T17217] ip6gre1: entered allmulticast mode [ 263.880057][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5257'. [ 263.894778][T17219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.898186][T17215] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5255'. [ 263.917453][T17219] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5254: invalid indirect mapped block 83886080 (level 1) [ 263.941265][T17219] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.948241][T17219] EXT4-fs (loop0): Remounting filesystem read-only [ 263.957582][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 263.957631][ C1] EXT4-fs (loop0): initial error at time 2000000033: ext4_free_branches:1023: inode 16 [ 263.957698][ C1] EXT4-fs (loop0): last error at time 2000000033: ext4_free_branches:1023: inode 16 [ 264.113040][T17219] EXT4-fs (loop0): 1 orphan inode deleted [ 264.153063][T17219] EXT4-fs (loop0): 1 truncate cleaned up [ 264.162496][T17219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.314213][T16343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.323506][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.335969][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.351212][ T3406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.415520][ T11] kernel write not supported for file [eventfd] (pid: 11 comm: kworker/0:1) [ 264.485101][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 264.485115][ T28] audit: type=1400 audit(2000000034.150:1504): avc: denied { bind } for pid=17258 comm="syz.0.5275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 264.568162][T17262] netlink: 'syz.2.5278': attribute type 2 has an invalid length. [ 264.646482][T17269] set_capacity_and_notify: 4 callbacks suppressed [ 264.646570][T17269] loop9: detected capacity change from 0 to 512 [ 264.686156][T17269] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 264.714912][T17269] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.5276: invalid indirect mapped block 83886080 (level 1) [ 264.738103][T17269] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 264.738480][T17269] EXT4-fs (loop9): Remounting filesystem read-only [ 264.747752][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 264.747784][ C0] EXT4-fs (loop9): initial error at time 2000000034: ext4_free_branches:1023: inode 16 [ 264.747850][ C0] EXT4-fs (loop9): last error at time 2000000034: ext4_free_branches:1023: inode 16 [ 264.769774][T17292] loop8: detected capacity change from 0 to 1024 [ 264.774620][T17269] EXT4-fs (loop9): 1 orphan inode deleted [ 264.792845][T17269] EXT4-fs (loop9): 1 truncate cleaned up [ 264.799451][T17292] EXT4-fs: Ignoring removed orlov option [ 264.810552][T17269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.889875][T17292] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.924045][ T28] audit: type=1400 audit(2000000034.590:1505): avc: denied { write } for pid=17289 comm="syz.8.5290" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.954440][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.954781][ T28] audit: type=1400 audit(2000000034.590:1506): avc: denied { write } for pid=17289 comm="syz.8.5290" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.986055][ T28] audit: type=1400 audit(2000000034.590:1507): avc: denied { rename } for pid=17289 comm="syz.8.5290" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 265.008489][ T28] audit: type=1400 audit(2000000034.590:1508): avc: denied { unlink } for pid=17289 comm="syz.8.5290" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 265.014562][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.031703][ T28] audit: type=1400 audit(2000000034.590:1509): avc: denied { bind } for pid=17302 comm="syz.0.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.088827][T17308] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 265.101325][ T3406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 265.238935][T17324] devpts: Bad value for 'gid' [ 265.246122][T17324] devpts: Bad value for 'gid' [ 265.261438][ T3406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 265.328315][T17337] __nla_validate_parse: 6 callbacks suppressed [ 265.328329][T17337] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5311'. [ 265.404422][T17343] loop0: detected capacity change from 0 to 512 [ 265.423752][T17343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.438683][T17343] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.462815][ T28] audit: type=1400 audit(2000000035.130:1510): avc: denied { write } for pid=17342 comm="syz.0.5313" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.658008][ T28] audit: type=1400 audit(2000000035.320:1511): avc: denied { write } for pid=17362 comm="syz.9.5320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 265.693780][T16343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.816072][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5326'. [ 265.839881][ T28] audit: type=1400 audit(2000000035.500:1512): avc: denied { read } for pid=17378 comm="syz.2.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 265.855757][T17381] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5329'. [ 265.890709][ T28] audit: type=1400 audit(2000000035.550:1513): avc: denied { setopt } for pid=17378 comm="syz.2.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 266.142771][T17415] loop3: detected capacity change from 0 to 8192 [ 266.180942][T17422] ip6gre1: entered allmulticast mode [ 266.194601][T17422] team0: Device ip6gre1 is of different type [ 266.309864][T17436] SELinux: failed to load policy [ 266.847307][T17480] loop0: detected capacity change from 0 to 1024 [ 266.861048][T17480] EXT4-fs: Ignoring removed bh option [ 266.897945][T17480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.931682][T16343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.969287][T17496] loop3: detected capacity change from 0 to 512 [ 267.015135][T17496] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.5378: iget: bad i_size value: 38620345925642 [ 267.034845][T17502] loop9: detected capacity change from 0 to 1024 [ 267.051172][T17496] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.051715][T17502] EXT4-fs: Ignoring removed bh option [ 267.066287][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 267.066303][ C0] EXT4-fs (loop3): initial error at time 2000000036: ext4_orphan_get:1397: inode 15 [ 267.066329][ C0] EXT4-fs (loop3): last error at time 2000000036: ext4_orphan_get:1397: inode 15 [ 267.099157][T17496] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5378: couldn't read orphan inode 15 (err -117) [ 267.117142][T17496] loop3: lost filesystem error report for type 5 error -117 [ 267.121513][T17496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.127326][T17502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.196962][T15363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.306546][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.384027][T17522] SELinux: policydb table sizes (8,11) do not match mine (8,7) [ 267.401280][T17522] SELinux: failed to load policy [ 267.839607][T17561] loop9: detected capacity change from 0 to 512 [ 267.862097][T17561] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.5407: iget: bad i_size value: 38620345925642 [ 267.875069][T17561] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.877801][T17561] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.5407: couldn't read orphan inode 15 (err -117) [ 267.886985][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 267.887059][ C1] EXT4-fs (loop9): initial error at time 2000000037: ext4_orphan_get:1397: inode 15 [ 267.887089][ C1] EXT4-fs (loop9): last error at time 2000000037: ext4_orphan_get:1397: inode 15 [ 267.919840][T17564] dvmrp1: tun_chr_ioctl cmd 35108 [ 267.924336][T17561] loop9: lost filesystem error report for type 5 error -117 [ 267.931442][T17561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.975281][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.151156][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.199396][T17576] loop3: detected capacity change from 0 to 8192 [ 268.281476][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5416'. [ 268.629900][T17621] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5427'. [ 269.193574][T17679] loop0: detected capacity change from 0 to 2048 [ 269.251589][T17679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.274839][T17679] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.5455: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 269.322648][T17679] EXT4-fs (loop0): Remounting filesystem read-only [ 269.352704][T17690] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 269.954016][T17700] loop8: detected capacity change from 0 to 512 [ 269.966859][T17700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.979737][T17700] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.993972][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 269.993986][ T28] audit: type=1400 audit(2000000039.660:1543): avc: denied { write } for pid=17699 comm="syz.8.5464" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.104190][T16343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.107358][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.213076][T17715] loop8: detected capacity change from 0 to 512 [ 270.232805][T17715] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 270.251623][T17715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e01c, mo2=0102] [ 270.259792][T17715] System zones: 1-12 [ 270.264033][T17715] EXT4-fs (loop8): orphan cleanup on readonly fs [ 270.271967][T17715] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5469: invalid indirect mapped block 2 (level 2) [ 270.285373][T17715] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 270.286986][T17715] EXT4-fs (loop8): 1 truncate cleaned up [ 270.296161][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 270.296179][ C1] EXT4-fs (loop8): initial error at time 2000000039: ext4_free_branches:1023: inode 11 [ 270.296206][ C1] EXT4-fs (loop8): last error at time 2000000039: ext4_free_branches:1023: inode 11 [ 270.328387][T17715] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 270.336051][T17728] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5476'. [ 270.358646][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 270.368509][T17729] netlink: 'syz.3.5475': attribute type 10 has an invalid length. [ 270.381482][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5478'. [ 270.394788][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5478'. [ 270.395444][T17729] bridge0: port 3(bond0) entered blocking state [ 270.410120][T17729] bridge0: port 3(bond0) entered forwarding state [ 270.416662][T17729] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.423774][T17729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.431047][T17729] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.438199][T17729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.449756][T17729] bridge0: port 3(bond0) entered disabled state [ 270.456470][T17729] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.463658][T17729] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.507000][T17738] sctp: [Deprecated]: syz.2.5480 (pid 17738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.507000][T17738] Use struct sctp_sack_info instead [ 270.561404][T17741] loop3: detected capacity change from 0 to 256 [ 270.579530][T17741] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.664020][ T28] audit: type=1400 audit(2000000040.330:1544): avc: denied { write } for pid=17755 comm="syz.2.5483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 270.723370][ T28] audit: type=1400 audit(2000000040.340:1545): avc: denied { write } for pid=17742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.772586][ T28] audit: type=1400 audit(2000000040.370:1546): avc: denied { write } for pid=17759 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.795475][ T28] audit: type=1400 audit(2000000040.420:1547): avc: denied { attach_queue } for pid=17762 comm="syz.8.5486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 270.817888][ T28] audit: type=1400 audit(2000000040.430:1548): avc: denied { name_bind } for pid=17768 comm="syz.9.5488" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 271.019980][T17789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5495'. [ 271.090635][T17800] bridge0: port 3(syz_tun) entered blocking state [ 271.098887][T17800] bridge0: port 3(syz_tun) entered disabled state [ 271.109567][T17800] syz_tun: entered allmulticast mode [ 271.123654][T17800] syz_tun: entered promiscuous mode [ 271.129272][T17800] bridge0: port 3(syz_tun) entered blocking state [ 271.135750][T17800] bridge0: port 3(syz_tun) entered forwarding state [ 271.150069][ T28] audit: type=1400 audit(2000000040.810:1549): avc: denied { write } for pid=17788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.209645][ T28] audit: type=1400 audit(2000000040.850:1550): avc: denied { write } for pid=17810 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.207438][ T28] audit: type=1400 audit(2000000041.870:1551): avc: denied { write } for pid=17857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.240479][T17884] loop9: detected capacity change from 0 to 512 [ 272.259630][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5528'. [ 272.283091][ T28] audit: type=1400 audit(2000000041.950:1552): avc: denied { write } for pid=17888 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.307936][T17884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.322415][T17884] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.337396][T17884] EXT4-fs (loop9): shut down requested (1) [ 272.371371][T17884] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 272.404125][T17884] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 272.428130][T17884] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 272.463059][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.671201][T17926] loop3: detected capacity change from 0 to 128 [ 272.707220][T17926] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.740792][T17926] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.787216][T17938] sctp: [Deprecated]: syz.2.5549 (pid 17938) Use of int in max_burst socket option. [ 272.787216][T17938] Use struct sctp_assoc_value instead [ 272.860582][T15363] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.888245][T17953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5559'. [ 272.924191][T17959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5561'. [ 272.933335][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5561'. [ 272.980167][T17967] netlink: 748 bytes leftover after parsing attributes in process `syz.8.5563'. [ 273.203257][T17982] 9p: Bad value for 'rfdno' [ 273.592143][T18009] pim6reg: entered allmulticast mode [ 273.614893][T18009] team0: entered allmulticast mode [ 273.636581][T18009] team_slave_0: entered allmulticast mode [ 273.651817][T18009] team_slave_1: entered allmulticast mode [ 274.081926][T17961] kexec: Could not allocate control_code_buffer [ 274.153501][T18034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5596'. [ 274.232461][T18038] loop9: detected capacity change from 0 to 512 [ 274.275172][T18038] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 274.303800][T18038] EXT4-fs (loop9): orphan cleanup on readonly fs [ 274.316256][T18038] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.5598: bad orphan inode 15 [ 274.326630][T18038] loop9: lost filesystem error report for type 5 error -117 [ 274.330833][T18038] ext4_test_bit(bit=14, block=18) = 1 [ 274.338242][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 274.338276][ C0] EXT4-fs (loop9): initial error at time 2000000044: ext4_orphan_get:1423 [ 274.338299][ C0] EXT4-fs (loop9): last error at time 2000000044: ext4_orphan_get:1423 [ 274.367249][T18038] is_bad_inode(inode)=0 [ 274.373042][T18038] NEXT_ORPHAN(inode)=1023 [ 274.377385][T18038] max_ino=32 [ 274.380617][T18038] i_nlink=0 [ 274.388632][T18038] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5598: bg 0: block 161: padding at end of block bitmap is not set [ 274.409354][T18038] loop9: lost filesystem error report for type 5 error -117 [ 274.410722][T18038] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 274.433591][T18038] loop9: lost filesystem error report for type 5 error -117 [ 274.435530][T18038] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 274.489138][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.533956][T18057] program syz.9.5606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.559630][T18058] loop3: detected capacity change from 0 to 1764 [ 274.790636][T18075] netlink: 'syz.2.5614': attribute type 15 has an invalid length. [ 274.835745][T18074] loop8: detected capacity change from 0 to 128 [ 274.940686][T18086] loop0: detected capacity change from 0 to 512 [ 274.963137][T18086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.978796][T18086] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.098263][T16343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.173654][T18103] loop0: detected capacity change from 0 to 512 [ 275.203374][T18103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.309476][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 275.309490][ T28] audit: type=1400 audit(2000000044.970:1571): avc: denied { write } for pid=18102 comm="syz.0.5625" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.993164][T16343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.123058][T18141] loop9: detected capacity change from 0 to 1024 [ 276.141144][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.165436][T18141] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.210910][T18141] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.238460][ T28] audit: type=1400 audit(2000000045.900:1572): avc: denied { write } for pid=18139 comm="syz.9.5643" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 276.332092][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.396642][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5651'. [ 277.130974][T18206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.153066][ T28] audit: type=1400 audit(2000000046.820:1573): avc: denied { shutdown } for pid=18222 comm="syz.8.5680" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.153149][T18206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.221511][T18227] loop8: detected capacity change from 0 to 512 [ 277.275028][T18227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.299209][T18227] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.336204][ T28] audit: type=1400 audit(2000000047.000:1574): avc: denied { write } for pid=18226 comm="syz.8.5682" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.371470][ T28] audit: type=1400 audit(2000000047.030:1575): avc: denied { write } for pid=18226 comm="syz.8.5682" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.397183][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.827466][T18284] loop9: detected capacity change from 0 to 512 [ 277.862696][T18284] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 277.873117][T18284] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 277.892149][T18284] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.5707: Failed to acquire dquot type 1 [ 277.922577][T18284] loop9: lost filesystem error report for type 5 error -117 [ 277.922775][T18284] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 277.940386][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 277.940406][ C1] EXT4-fs (loop9): last error at time 2000000047: ext4_acquire_dquot:7034 [ 278.002262][T18284] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 278.030542][T18284] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.5707: Failed to acquire dquot type 1 [ 278.054841][T15873] kernel read not supported for file /mdstat (pid: 15873 comm: kworker/0:7) [ 278.063537][T18284] loop9: lost filesystem error report for type 5 error -117 [ 278.063944][T18284] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5707: bg 0: block 248: padding at end of block bitmap is not set [ 278.096658][T18284] loop9: lost filesystem error report for type 5 error -117 [ 278.098175][T18284] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 278.122401][T18284] loop9: lost filesystem error report for type 5 error -117 [ 278.122885][T18284] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 278.156963][T18284] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.5707: Failed to acquire dquot type 1 [ 278.183536][T18284] loop9: lost filesystem error report for type 5 error -117 [ 278.183765][T18284] EXT4-fs (loop9): 1 orphan inode deleted [ 278.213703][T18284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.238770][T18284] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.262470][T18284] EXT4-fs (loop9): shut down requested (1) [ 278.414017][T14888] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.520444][T18307] loop8: detected capacity change from 0 to 1024 [ 278.530586][T18307] EXT4-fs: inline encryption not supported [ 278.551159][T18307] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.571936][T18307] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #3: block 1: comm syz.8.5716: lblock 1 mapped to illegal pblock 1 (length 1) [ 278.595902][T18307] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 278.596069][T18307] EXT4-fs (loop8): Remounting filesystem read-only [ 278.605175][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 278.605197][ C0] EXT4-fs (loop8): initial error at time 2000000048: ext4_map_blocks:833: inode 3: block 1 [ 278.605239][ C0] EXT4-fs (loop8): last error at time 2000000048: ext4_map_blocks:833: inode 3: block 1 [ 278.722027][T18307] EXT4-fs (loop8): 1 orphan inode deleted [ 278.745885][T18307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.806891][T13649] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.840352][T18323] loop8: detected capacity change from 0 to 256 [ 278.952454][T18335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5729'. [ 278.972486][T18335] netlink: 'syz.3.5729': attribute type 5 has an invalid length. [ 279.064872][T18347] program syz.0.5734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.135330][T18357] loop0: detected capacity change from 0 to 512 [ 279.156889][T18359] loop8: detected capacity change from 0 to 256 [ 279.178490][T18357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.208499][T18357] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.220857][T18364] netlink: 884 bytes leftover after parsing attributes in process `syz.2.5742'. [ 279.263476][T16343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.296770][T18370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5746'. [ 279.306622][T18370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5746'. [ 279.494944][T18389] loop0: detected capacity change from 0 to 128 [ 279.544477][T18394] loop3: detected capacity change from 0 to 256 [ 279.569067][T18394] FAT-fs (loop3): codepage cp857 not found [ 279.728449][T18408] program syz.0.5761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.874115][T18424] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.904104][T18423] FAT-fs (loop0): codepage cp857 not found [ 280.062473][T18439] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 280.080119][T18439] EXT4-fs (loop9): 1 truncate cleaned up [ 280.167840][T14888] ================================================================== [ 280.175961][T14888] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 280.183457][T14888] [ 280.185774][T14888] read-write to 0xffff888237c27248 of 1 bytes by task 18438 on cpu 0: [ 280.193914][T14888] mlock_new_folio+0x143/0x240 [ 280.198683][T14888] folio_add_lru_vma+0x5f/0x70 [ 280.203461][T14888] map_anon_folio_pte_nopf+0x1c2/0x3d0 [ 280.208938][T14888] map_anon_folio_pte_pf+0x6b/0x160 [ 280.214256][T14888] handle_mm_fault+0x2db0/0x2e70 [ 280.219198][T14888] __get_user_pages+0x1290/0x1f10 [ 280.224228][T14888] __mm_populate+0x242/0x390 [ 280.228821][T14888] __se_sys_mlockall+0x35f/0x3c0 [ 280.233764][T14888] __x64_sys_mlockall+0x1f/0x30 [ 280.238610][T14888] x64_sys_call+0xf90/0x3020 [ 280.243192][T14888] do_syscall_64+0x12c/0x3b0 [ 280.247779][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.253659][T14888] [ 280.255972][T14888] read to 0xffff888237c27248 of 1 bytes by task 14888 on cpu 1: [ 280.263608][T14888] need_mlock_drain+0x30/0x50 [ 280.268296][T14888] __lru_add_drain_all+0x273/0x450 [ 280.273393][T14888] lru_add_drain_all+0x10/0x20 [ 280.278145][T14888] invalidate_bdev+0x47/0x70 [ 280.282759][T14888] ext4_put_super+0x610/0x7b0 [ 280.287461][T14888] generic_shutdown_super+0xee/0x220 [ 280.292737][T14888] kill_block_super+0x2a/0x70 [ 280.297422][T14888] ext4_kill_sb+0x42/0x80 [ 280.301739][T14888] deactivate_locked_super+0x75/0x1c0 [ 280.307103][T14888] deactivate_super+0x97/0xa0 [ 280.311781][T14888] cleanup_mnt+0x2bb/0x330 [ 280.316187][T14888] __cleanup_mnt+0x19/0x20 [ 280.320589][T14888] task_work_run+0x130/0x1a0 [ 280.325168][T14888] exit_to_user_mode_loop+0x211/0x820 [ 280.330531][T14888] do_syscall_64+0x232/0x3b0 [ 280.335115][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.341028][T14888] [ 280.343337][T14888] value changed: 0x19 -> 0x1e [ 280.348014][T14888] [ 280.350322][T14888] Reported by Kernel Concurrency Sanitizer on: [ 280.356471][T14888] CPU: 1 UID: 0 PID: 14888 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 280.366012][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.376097][T14888] ================================================================== [ 280.465724][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 280.465737][ T28] audit: type=1400 audit(2000000050.130:1584): avc: denied { create } for pid=18442 comm="syz.9.5775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 280.503439][ T28] audit: type=1400 audit(2000000050.160:1585): avc: denied { listen } for pid=18442 comm="syz.9.5775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 280.544854][ T28] audit: type=1400 audit(2000000050.160:1586): avc: denied { setopt } for pid=18442 comm="syz.9.5775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 280.580315][ T28] audit: type=1400 audit(2000000050.160:1587): avc: denied { accept } for pid=18442 comm="syz.9.5775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1