last executing test programs: 41.574165623s ago: executing program 4 (id=21): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5bd7, 0x2}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 41.155920587s ago: executing program 4 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f00000001c0)='h?\x00W', 0x4}], 0x2) 40.91453326s ago: executing program 4 (id=28): setresgid(0x0, 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) 40.847954511s ago: executing program 4 (id=31): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 40.788752351s ago: executing program 4 (id=32): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0) 40.426485876s ago: executing program 4 (id=37): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 40.396162416s ago: executing program 32 (id=37): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 27.56377842s ago: executing program 1 (id=332): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 27.510524841s ago: executing program 1 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 27.371345572s ago: executing program 1 (id=340): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x14) 27.279388783s ago: executing program 1 (id=343): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ2afZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpfH5XYKrPcgAAAOAMKbXHwCalSj4WYCZKpUqlM4b3Y3GpVG9sNT9zq7G9sdIZKzsX5dKttXrtRj5WeC7KSVafb5f36i/31Bci4umI+N7sxXa9styor4z64QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP3Hcz/9bLvnhjNOJ4fzq+fw/nR1VIsCpaz/3H3Qgj4sFGCvlgUYAAuPs//38/2hp+lgJAQAAQzfTnpJSJX+8NxOlUqUScaX9tYDl5NZavXYjIp6KiN/Nli9k9fn2nsmR9wwAAAAAAAAAAAAAAAAAAAAAAAAAQEeaJpECAAAAYy2i9OfkV513+V+dfXGm9/nAVPLv9lcCT0XEOz966wd3l5rNzfls+d8fLW/+MF/+8iieYAAAAAC9uvfp7fm/Rp0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPm/YfvLnenATa/OKy4f/1iRMwVxZ+M6fZ8OsoRcekfSUzu2y+JiIkhxG/di4iPF8VPsrQehSyKP4wfQute0krbCuPHXP5TKIp/eQjx4Ty7n51/3ijq/6V4vj0v7n+TEf9TP67+5794dP6b6NP/rwwY45kHP6/2jX8v4pnJ4vNfN37SJ/4LA0Uvxze+vrvbb23644ir3b8/7TPe/gh7pWpz/U51a2f3+tr60mpttbaxsDD/6uJri68s3qjeWqvX8n8LY3z32V98eFj7LxX+/UvybPq3/8WC400U5P+fB3cffrRbaR2Mf+2Fgvi//km+xcH4pTzOp/Nytv5qt9zqlPd77me/fe6w9q/stb/8OP//1/odtNeBjvLsYL86AMCJ2NrZvb1Ur9c2x7aQ3aU/AWkcpzAVT0Qa41v4dlZ4MKwDpmmaZn2qYNX9iBjkOEkMuaWl4nz2Cn3PAKM+MwEAAMO2d9E/6kwAAAAAAAAAAAAAAAAAAADg/DqNt6z1xtx7BXIyjFdoAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMxX8DAAD//0tG3AI=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24000894) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) file_getattr(r0, 0x0, &(0x7f0000000040), 0x64, 0x1000) 26.798629549s ago: executing program 1 (id=354): prctl$PR_SET_MM(0x23, 0x5, &(0x7f000005c000/0x1000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 26.486482203s ago: executing program 1 (id=364): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.485973243s ago: executing program 33 (id=364): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.077757857s ago: executing program 5 (id=371): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x824002, &(0x7f0000003100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@discard}, {@usrjquota_path={'usrjquota', 0x3d, './file3'}}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000001140)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) recvfrom(r0, 0x0, 0x0, 0x11100, 0x0, 0x0) 25.941160678s ago: executing program 5 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 25.854750799s ago: executing program 5 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x4, 0x2, 0xff, 0xf, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) 25.78155225s ago: executing program 5 (id=377): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x201d810, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 25.725164431s ago: executing program 5 (id=378): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 25.299773116s ago: executing program 5 (id=386): mkdir(&(0x7f0000000200)='./bus\x00', 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(&(0x7f0000000080)='./bus\x00', 0x0) 25.266700116s ago: executing program 34 (id=386): mkdir(&(0x7f0000000200)='./bus\x00', 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(&(0x7f0000000080)='./bus\x00', 0x0) 17.886445499s ago: executing program 7 (id=486): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000740)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 17.216478367s ago: executing program 7 (id=489): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002020100"], 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) 16.304406617s ago: executing program 7 (id=510): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 15.433170636s ago: executing program 7 (id=529): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b4fb9b81300b11a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000003280)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0x13) 15.12407985s ago: executing program 7 (id=542): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14.805179133s ago: executing program 7 (id=554): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 14.731218484s ago: executing program 35 (id=554): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 11.332153303s ago: executing program 8 (id=608): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 11.179686484s ago: executing program 8 (id=611): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e12080018", 0x2b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a00", 0x1e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 11.043736756s ago: executing program 8 (id=616): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 10.977153606s ago: executing program 8 (id=617): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000003280)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0x13) 10.523656832s ago: executing program 8 (id=626): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 8.193524148s ago: executing program 8 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464658713696d300000080003"], 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 8.114740249s ago: executing program 36 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464658713696d300000080003"], 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 5.249817421s ago: executing program 2 (id=692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x820000000000) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000002c0)) 3.215699714s ago: executing program 9 (id=660): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x6, 0x37, 0x2, 0x9}]}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x40444c4) 3.187200654s ago: executing program 9 (id=720): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) unshare(0x20000400) recvfrom(r0, 0x0, 0x0, 0x2020, &(0x7f0000000080)=@sco={0x1f, @none}, 0x80) 3.156547414s ago: executing program 9 (id=721): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_open_dev$MSR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 2.202992775s ago: executing program 2 (id=731): syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000440)="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", 0x360}], 0x1) 1.967709708s ago: executing program 9 (id=733): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.78400603s ago: executing program 0 (id=735): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x10, &(0x7f00000005c0)=ANY=[], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x23) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) 1.7838139s ago: executing program 6 (id=736): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 1.73799593s ago: executing program 6 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) 1.615277062s ago: executing program 6 (id=738): unshare(0x22020400) r0 = syz_open_dev$evdev(&(0x7f0000002000), 0x0, 0x20441) syz_usb_disconnect(r0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc1}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 1.232625966s ago: executing program 2 (id=739): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f40000000002000a0000000000000000000000070800044000000004080005400000000e060007400003000013000b0063616c6c666f7277617264696e670000080008"], 0xf4}, 0x1, 0x0, 0x0, 0x24000800}, 0x20004080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 1.153010407s ago: executing program 2 (id=740): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@errors_continue}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x183042, 0x2) lseek(r1, 0x8, 0x3) 1.004064689s ago: executing program 3 (id=742): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 946.559619ms ago: executing program 3 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x30, 0x80, 0x5, 0xfffff01c}, {0x6, 0x0, 0x0, 0x5387cf8b}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000013f00000000000003000000850000002c0000001800000001000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 794.680251ms ago: executing program 0 (id=744): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000440)={0x2, 0x6e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 780.848711ms ago: executing program 2 (id=745): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b703000002000000850000001700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 712.012492ms ago: executing program 3 (id=746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x124, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf4, 0x2, {{0x1, 0x3fe, 0x3, 0x7, 0x4}, [@TCA_NETEM_LOSS={0xd8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x2}}, @NETEM_LOSS_GI={0xfffffffffffffe97, 0x1, {0x7, 0x7, 0x8, 0x1, 0xc003}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffff7, 0x6, 0xfff, 0x9, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40c, 0x6, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x8, 0x3, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x6, 0x8, 0x3}}, @NETEM_LOSS_GE={0x8, 0x2, {0x7fffffff, 0x3823, 0x3, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x60000, 0x6b, 0x72b5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x80000000, 0x6, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x5, 0x1, 0x7, 0xfff}}]}]}}}]}, 0x124}, 0x1, 0x0, 0x0, 0xc000041}, 0x20008000) 632.541283ms ago: executing program 3 (id=747): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080), 0x4) 624.524743ms ago: executing program 6 (id=748): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=', @ANYRESHEX=r0]) 598.852643ms ago: executing program 0 (id=749): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 547.076164ms ago: executing program 0 (id=750): syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000440)="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", 0x360}], 0x1) 541.214194ms ago: executing program 3 (id=751): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f40000000002000a0000000000000000000000070800044000000004080005400000000e060007400003000013000b0063616c6c666f7277617264696e670000080008"], 0xf4}, 0x1, 0x0, 0x0, 0x24000800}, 0x20004080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 378.045436ms ago: executing program 6 (id=752): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x40086602, 0x1000000000000000) 342.850316ms ago: executing program 9 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r2, 0x1, 0x2, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000004}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40010) 318.895156ms ago: executing program 2 (id=754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 305.493386ms ago: executing program 9 (id=755): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x10, &(0x7f00000005c0)=ANY=[], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x23) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) 304.801696ms ago: executing program 6 (id=765): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b703000002000000850000001700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 144.317128ms ago: executing program 3 (id=756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 76.253169ms ago: executing program 0 (id=757): r0 = socket(0x1e, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xffffffff) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/156, 0x9c}, {0x0}], 0x2}, 0x8000}], 0x1, 0x2142, 0x0) recvfrom$inet_nvme(r0, &(0x7f0000000740)=""/181, 0xb5, 0x40000000, 0x0, 0x0) 0s ago: executing program 0 (id=758): r0 = syz_io_uring_setup(0x14e9, &(0x7f0000000340)={0x0, 0xe63b, 0x1, 0x0, 0x119}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x3205, &(0x7f00000004c0)={0x0, 0x9c67, 0x11128, 0x3, 0x27, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000540), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000000580), 0x1) kernel console output (not intermixed with test programs): d impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.919155][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.938694][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.946031][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.972042][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.990841][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.005954][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.013002][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.039218][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.057349][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.064399][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.090622][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.102369][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.122705][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.129717][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.155768][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.190803][ T3302] team0: Port device team_slave_0 added [ 30.208711][ T3302] team0: Port device team_slave_1 added [ 30.216821][ T3297] hsr_slave_0: entered promiscuous mode [ 30.222873][ T3297] hsr_slave_1: entered promiscuous mode [ 30.228764][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 30.234522][ T3297] Cannot create hsr debugfs directory [ 30.247205][ T3303] hsr_slave_0: entered promiscuous mode [ 30.253310][ T3303] hsr_slave_1: entered promiscuous mode [ 30.259146][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 30.264890][ T3303] Cannot create hsr debugfs directory [ 30.294018][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.301148][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.327259][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.345318][ T3301] hsr_slave_0: entered promiscuous mode [ 30.351341][ T3301] hsr_slave_1: entered promiscuous mode [ 30.357156][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.363012][ T3301] Cannot create hsr debugfs directory [ 30.375119][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.382354][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.408588][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.484698][ T3302] hsr_slave_0: entered promiscuous mode [ 30.490851][ T3302] hsr_slave_1: entered promiscuous mode [ 30.496842][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 30.502637][ T3302] Cannot create hsr debugfs directory [ 30.583645][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.592471][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.607513][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.616651][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.635982][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.644323][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.652055][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.660781][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.698130][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.706473][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.714395][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.723381][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.731202][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.740239][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.754143][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.763075][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.792203][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.801028][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.812774][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.821379][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.829470][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.837851][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.848493][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.857306][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.901900][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.910867][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.918591][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.927627][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.943714][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.952487][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.960159][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.968740][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.983626][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.005038][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.014119][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.027411][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.036536][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.045933][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.057604][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.066199][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.073970][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.082456][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.094040][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.101153][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.115996][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.123162][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.133084][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.158239][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.168096][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.184792][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.191982][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.214664][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.221887][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.231995][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.251342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.258470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.270092][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.292581][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.299782][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.323356][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.343051][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.363984][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.374069][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.389666][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.396839][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.413828][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.420973][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.433347][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.440478][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.458881][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.466061][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.514758][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.528267][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.540326][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.564778][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.687632][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.729772][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.806031][ T3296] veth0_vlan: entered promiscuous mode [ 31.818939][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.835560][ T3296] veth1_vlan: entered promiscuous mode [ 31.851866][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.894761][ T3296] veth0_macvtap: entered promiscuous mode [ 31.915622][ T3297] veth0_vlan: entered promiscuous mode [ 31.928089][ T3296] veth1_macvtap: entered promiscuous mode [ 31.948589][ T3297] veth1_vlan: entered promiscuous mode [ 31.963527][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.988552][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.005424][ T312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.023725][ T312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.033226][ T312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.042736][ T3297] veth0_macvtap: entered promiscuous mode [ 32.052940][ T312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.063408][ T3297] veth1_macvtap: entered promiscuous mode [ 32.077827][ T3303] veth0_vlan: entered promiscuous mode [ 32.093937][ T3301] veth0_vlan: entered promiscuous mode [ 32.105126][ T3302] veth0_vlan: entered promiscuous mode [ 32.118721][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 32.118737][ T28] audit: type=1400 audit(1778451453.790:146): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.k0NknU/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.123074][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.136462][ T28] audit: type=1400 audit(1778451453.810:147): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.153851][ T3303] veth1_vlan: entered promiscuous mode [ 32.159978][ T28] audit: type=1400 audit(1778451453.810:148): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.k0NknU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.191745][ T3301] veth1_vlan: entered promiscuous mode [ 32.215434][ T28] audit: type=1400 audit(1778451453.810:149): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.221809][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.245169][ T28] audit: type=1400 audit(1778451453.810:150): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.k0NknU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.274049][ T28] audit: type=1400 audit(1778451453.810:151): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.k0NknU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.274568][ T3302] veth1_vlan: entered promiscuous mode [ 32.302790][ T28] audit: type=1400 audit(1778451453.810:152): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.308805][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.327344][ T28] audit: type=1400 audit(1778451453.830:153): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.349319][ T3303] veth0_macvtap: entered promiscuous mode [ 32.367592][ T28] audit: type=1400 audit(1778451453.840:154): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="gadgetfs" ino=4699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.398222][ T312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.401078][ T28] audit: type=1400 audit(1778451454.080:155): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.410622][ T312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.452015][ T3303] veth1_macvtap: entered promiscuous mode [ 32.464085][ T312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.488655][ T312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.491062][ T3501] loop1: detected capacity change from 0 to 8192 [ 32.514513][ T3301] veth0_macvtap: entered promiscuous mode [ 32.524784][ T3302] veth0_macvtap: entered promiscuous mode [ 32.532759][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.546127][ T3301] veth1_macvtap: entered promiscuous mode [ 32.558423][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.570853][ T3302] veth1_macvtap: entered promiscuous mode [ 32.591098][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.609998][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.629840][ T310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.638968][ T3504] loop3: detected capacity change from 0 to 4096 [ 32.640695][ T310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.655664][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.656730][ T3504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.680184][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.694971][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.696265][ T3504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.734664][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.757393][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.776775][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.785783][ T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.812700][ T310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.819764][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.833320][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.849876][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.873026][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.902360][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.002838][ T3522] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 33.081470][ T3528] loop3: detected capacity change from 0 to 512 [ 33.098788][ T3528] EXT4-fs: Ignoring removed i_version option [ 33.125206][ T3528] EXT4-fs: Ignoring removed bh option [ 33.153628][ T3532] loop4: detected capacity change from 0 to 512 [ 33.164980][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.193376][ T3532] EXT4-fs (loop4): 1 truncate cleaned up [ 33.214906][ T3528] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.225622][ T3532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.278815][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.302875][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.468558][ T3550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 33.522715][ T3552] loop4: detected capacity change from 0 to 4096 [ 33.547779][ T3552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.551936][ T3520] loop2: detected capacity change from 0 to 1024 [ 33.594533][ T3520] EXT4-fs: Ignoring removed orlov option [ 33.669340][ T3520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.760290][ T3520] syz.2.3 (3520) used greatest stack depth: 10816 bytes left [ 33.850786][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.876032][ T3552] syz.4.21 (3552) used greatest stack depth: 10456 bytes left [ 33.898178][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.346889][ T3600] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 34.346889][ T3600] Please contact the netfilter-devel mailing list or update your nftables rules. [ 34.565192][ T3620] loop0: detected capacity change from 0 to 256 [ 34.591137][ T176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.691873][ T176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.780558][ T176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.979501][ T176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.206060][ T176] bridge_slave_1: left allmulticast mode [ 35.226534][ T176] bridge_slave_1: left promiscuous mode [ 35.244689][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.265663][ T176] bridge_slave_0: left allmulticast mode [ 35.275599][ T176] bridge_slave_0: left promiscuous mode [ 35.289276][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.450910][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.473414][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.491858][ T176] bond0 (unregistering): Released all slaves [ 35.599797][ T176] hsr_slave_0: left promiscuous mode [ 35.608548][ T3730] program syz.0.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.637705][ T176] hsr_slave_1: left promiscuous mode [ 35.649496][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.676027][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.688753][ T3742] loop3: detected capacity change from 0 to 512 [ 35.699678][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.706772][ T3742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.729791][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.750770][ T3742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.766696][ T176] veth1_macvtap: left promiscuous mode [ 35.772493][ T176] veth0_macvtap: left promiscuous mode [ 35.778265][ T176] veth1_vlan: left promiscuous mode [ 35.790853][ T3742] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.802645][ T176] veth0_vlan: left promiscuous mode [ 35.868166][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.927183][ T176] team0 (unregistering): Port device team_slave_1 removed [ 35.937875][ T176] team0 (unregistering): Port device team_slave_0 removed [ 36.041152][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 36.100252][ T3768] loop2: detected capacity change from 0 to 2048 [ 36.108722][ T3768] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.116449][ T3768] EXT4-fs: Ignoring removed i_version option [ 36.148937][ T3768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.206377][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.290296][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.305663][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.314093][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.322557][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.331048][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.334576][ T3680] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.339398][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.362495][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.370583][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.380100][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.388256][ T3795] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 36.397129][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.404851][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.418271][ T3633] bridge_slave_0: entered allmulticast mode [ 36.431841][ T3633] bridge_slave_0: entered promiscuous mode [ 36.446316][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.458420][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.466053][ T3633] bridge_slave_1: entered allmulticast mode [ 36.472729][ T3633] bridge_slave_1: entered promiscuous mode [ 36.480723][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 36.529928][ T3633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.541336][ T3633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.566451][ T3633] team0: Port device team_slave_0 added [ 36.577462][ T3633] team0: Port device team_slave_1 added [ 36.606232][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.614457][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.641425][ T3633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.653380][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.676569][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.703670][ T3633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.767151][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 36.779882][ T3840] batadv_slave_0: entered promiscuous mode [ 36.796709][ T3633] hsr_slave_0: entered promiscuous mode [ 36.803226][ T3633] hsr_slave_1: entered promiscuous mode [ 36.809457][ T3633] debugfs: 'hsr0' already exists in 'hsr' [ 36.815442][ T3633] Cannot create hsr debugfs directory [ 36.821458][ T3839] batadv_slave_0: left promiscuous mode [ 37.011468][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 37.042530][ T3633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.057521][ T3633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.073274][ T3633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.089592][ T3633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.106006][ T3633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.124505][ T3633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.141694][ T3633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.160183][ T3633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.204331][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 37.204349][ T28] audit: type=1400 audit(1778451458.880:301): avc: denied { append } for pid=3875 comm="syz.3.84" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.215255][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.240347][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.247676][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.254775][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.275150][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.277491][ T28] audit: type=1400 audit(1778451458.920:302): avc: denied { read } for pid=3875 comm="syz.3.84" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.306304][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.323900][ T28] audit: type=1400 audit(1778451458.920:303): avc: denied { open } for pid=3875 comm="syz.3.84" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.348686][ T28] audit: type=1400 audit(1778451458.920:304): avc: denied { ioctl } for pid=3875 comm="syz.3.84" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.403983][ T3881] loop1: detected capacity change from 0 to 512 [ 37.408377][ T28] audit: type=1400 audit(1778451459.080:305): avc: denied { bind } for pid=3878 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.411359][ T3881] EXT4-fs: Ignoring removed i_version option [ 37.440390][ T3633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.473994][ T3633] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.479958][ T3881] EXT4-fs: Ignoring removed bh option [ 37.496038][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.503235][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.513812][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.520972][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.536965][ T3881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.555445][ T3881] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.599989][ T28] audit: type=1400 audit(1778451459.270:306): avc: denied { write } for pid=3880 comm="syz.1.86" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.630667][ T3895] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 37.637231][ T3895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 37.651780][ T3895] vhci_hcd vhci_hcd.0: Device attached [ 37.663824][ T3895] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 37.670437][ T3895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 37.685071][ T3895] vhci_hcd vhci_hcd.0: Device attached [ 37.693318][ T3895] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 37.695451][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.699925][ T3895] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 37.711766][ T3895] vhci_hcd vhci_hcd.0: Device attached [ 37.746363][ T3895] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 37.752946][ T3895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 37.770673][ T3895] vhci_hcd vhci_hcd.0: Device attached [ 37.786561][ T3912] Illegal XDP return value 3522 on prog (id 11) dev syz_tun, expect packet loss! [ 37.805698][ T3633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.813561][ T3895] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 37.820352][ T3895] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 37.847065][ T28] audit: type=1400 audit(1778451459.520:307): avc: denied { mount } for pid=3919 comm="syz.1.92" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.881611][ T3895] vhci_hcd vhci_hcd.0: Device attached [ 37.889219][ T10] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 37.891720][ T3913] vhci_hcd: connection closed [ 37.896574][ T3896] vhci_hcd: connection closed [ 37.901478][ T3904] vhci_hcd: connection closed [ 37.906213][ T3900] vhci_hcd: connection closed [ 37.916423][ T3668] vhci_hcd vhci_hcd.0: stop threads [ 37.918628][ T3897] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 37.925482][ T3668] vhci_hcd vhci_hcd.0: release socket [ 37.926606][ T3908] vhci_hcd: connection closed [ 37.943948][ T3668] vhci_hcd vhci_hcd.0: disconnect device [ 37.954825][ T3668] vhci_hcd vhci_hcd.0: stop threads [ 37.969445][ T3668] vhci_hcd vhci_hcd.0: release socket [ 37.975110][ T3668] vhci_hcd vhci_hcd.0: disconnect device [ 37.981296][ T28] audit: type=1400 audit(1778451459.650:308): avc: denied { write } for pid=3925 comm="syz.3.94" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.008938][ T3668] vhci_hcd vhci_hcd.0: stop threads [ 38.016405][ T3668] vhci_hcd vhci_hcd.0: release socket [ 38.030079][ T28] audit: type=1400 audit(1778451459.690:309): avc: denied { create } for pid=3922 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.036738][ T3932] loop3: detected capacity change from 0 to 1024 [ 38.050551][ T3668] vhci_hcd vhci_hcd.0: disconnect device [ 38.057050][ T3932] ======================================================= [ 38.057050][ T3932] WARNING: The mand mount option has been deprecated and [ 38.057050][ T3932] and is ignored by this kernel. Remove the mand [ 38.057050][ T3932] option from the mount to silence this warning. [ 38.057050][ T3932] ======================================================= [ 38.064815][ T3668] vhci_hcd vhci_hcd.0: stop threads [ 38.101630][ T28] audit: type=1400 audit(1778451459.690:310): avc: denied { setopt } for pid=3922 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.103766][ T3668] vhci_hcd vhci_hcd.0: release socket [ 38.130622][ T3668] vhci_hcd vhci_hcd.0: disconnect device [ 38.136517][ T3668] vhci_hcd vhci_hcd.0: stop threads [ 38.142169][ T3668] vhci_hcd vhci_hcd.0: release socket [ 38.158112][ T3932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.175222][ T3932] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.195699][ T3931] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.95: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.206260][ T3668] vhci_hcd vhci_hcd.0: disconnect device [ 38.212360][ T3931] EXT4-fs (loop3): Remounting filesystem read-only [ 38.236682][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.239970][ T3633] veth0_vlan: entered promiscuous mode [ 38.259004][ T3633] veth1_vlan: entered promiscuous mode [ 38.315453][ T3633] veth0_macvtap: entered promiscuous mode [ 38.325692][ T3633] veth1_macvtap: entered promiscuous mode [ 38.337420][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.350280][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.350389][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.378401][ T3668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.419807][ T3668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.490744][ T3960] loop2: detected capacity change from 0 to 256 [ 38.504807][ T3960] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.538381][ T3668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.552064][ T3961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 38.669451][ T3964] syz.1.107 (3964) used greatest stack depth: 9344 bytes left [ 38.703311][ T3668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.776559][ T3977] netlink: 132 bytes leftover after parsing attributes in process `syz.5.38'. [ 38.817647][ T3982] syzkaller1: entered promiscuous mode [ 38.850457][ T3982] syzkaller1: entered allmulticast mode [ 39.105032][ T4014] loop1: detected capacity change from 0 to 736 [ 39.148015][ T4017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 39.181660][ T4017] netem: incorrect gi model size [ 39.197657][ T4017] netem: change failed [ 39.499836][ T4036] netlink: 120 bytes leftover after parsing attributes in process `syz.1.133'. [ 39.528219][ T4038] netlink: 236 bytes leftover after parsing attributes in process `syz.0.134'. [ 39.537733][ T4038] netlink: 236 bytes leftover after parsing attributes in process `syz.0.134'. [ 40.145361][ T4044] loop3: detected capacity change from 0 to 512 [ 40.153820][ T4044] EXT4-fs: inline encryption not supported [ 40.166884][ T4044] EXT4-fs: inline encryption not supported [ 40.173378][ T4044] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.208755][ T4044] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 40.265684][ T4044] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.136: bg 0: block 248: padding at end of block bitmap is not set [ 40.308238][ T4044] loop3: lost filesystem error report for type 5 error -117 [ 40.308498][ T4044] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.136: Failed to acquire dquot type 1 [ 40.315993][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 40.316027][ C1] EXT4-fs (loop3): last error at time 1778451461: ext4_validate_block_bitmap:441 [ 40.389165][ T4044] loop3: lost filesystem error report for type 5 error -28 [ 40.412269][ T4044] EXT4-fs (loop3): 1 truncate cleaned up [ 40.426860][ T4055] loop1: detected capacity change from 0 to 128 [ 40.431462][ T4044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 40.467996][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.488912][ T4055] FAT-fs (loop1): Filesystem has been set read-only [ 40.502472][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.503763][ T4044] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 40.511439][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.536536][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.544962][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.553385][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.577683][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.592568][ T4063] loop5: detected capacity change from 0 to 512 [ 40.593503][ T4044] syz.3.136 (4044) used greatest stack depth: 9152 bytes left [ 40.624476][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 40.634652][ T4063] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.642765][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.654649][ T4063] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 40.697528][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.697898][ T4063] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.711075][ T4055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 40.769398][ T4063] EXT4-fs (loop5): 1 truncate cleaned up [ 40.791623][ T4063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.930569][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.001713][ T4088] loop5: detected capacity change from 0 to 512 [ 41.036960][ T4088] EXT4-fs: Ignoring removed i_version option [ 41.054856][ T4088] EXT4-fs: Ignoring removed bh option [ 41.081497][ T4088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.119797][ T4088] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.157860][ T4097] tipc: Started in network mode [ 41.162869][ T4097] tipc: Node identity ac14140f, cluster identity 4711 [ 41.173005][ T4097] tipc: New replicast peer: 255.255.255.255 [ 41.179140][ T4097] tipc: Enabled bearer , priority 10 [ 41.244463][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.522793][ T4111] mmap: syz.3.162 (4111) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.720922][ T4118] loop3: detected capacity change from 0 to 8192 [ 41.917123][ T4129] loop2: detected capacity change from 0 to 4096 [ 41.941846][ T4129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.958485][ T4135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'. [ 41.983279][ T4129] EXT4-fs (loop2): shut down requested (1) [ 42.004868][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.048184][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.061524][ T3297] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 42.070024][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.075884][ T3297] FAT-fs (loop3): Filesystem has been set read-only [ 42.085016][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.102519][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.159648][ T4150] process 'syz.1.180' launched './file0' with NULL argv: empty string added [ 42.196893][ T4154] loop3: detected capacity change from 0 to 512 [ 42.214359][ T4154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.250464][ T4154] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.276168][ T4154] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 42.294015][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 42.294032][ T28] audit: type=1400 audit(1778451463.970:377): avc: denied { lock } for pid=4159 comm="syz.1.183" path="socket:[7174]" dev="sockfs" ino=7174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 42.299115][ T3377] tipc: Node number set to 2886997007 [ 42.300727][ T4154] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 42.339180][ T28] audit: type=1400 audit(1778451463.970:378): avc: denied { ioctl } for pid=4164 comm="syz.0.185" path="socket:[6837]" dev="sockfs" ino=6837 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.366122][ T4154] EXT4-fs (loop3): 1 truncate cleaned up [ 42.372391][ T28] audit: type=1326 audit(1778451464.010:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.2.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5463ccdd9 code=0x7ffc0000 [ 42.398442][ T4154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.413623][ T28] audit: type=1326 audit(1778451464.010:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.2.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5463ccdd9 code=0x7ffc0000 [ 42.441107][ T28] audit: type=1326 audit(1778451464.010:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.2.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5463ccdd9 code=0x7ffc0000 [ 42.466657][ T4163] loop2: p1 [ 42.466994][ T28] audit: type=1326 audit(1778451464.010:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.2.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5463ccdd9 code=0x7ffc0000 [ 42.470645][ T4163] loop2: p1 size 5119 extends beyond EOD, [ 42.495949][ T28] audit: type=1326 audit(1778451464.010:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.2.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe5463ccdd9 code=0x7ffc0000 [ 42.529866][ T28] audit: type=1326 audit(1778451464.010:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.2.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe5463ccb42 code=0x7ffc0000 [ 42.542814][ T4163] truncated [ 42.559083][ T28] audit: type=1326 audit(1778451464.010:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.2.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5463ccdd9 code=0x7ffc0000 [ 42.585314][ T4154] EXT4-fs (loop3): shut down requested (1) [ 42.596264][ T28] audit: type=1326 audit(1778451464.010:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4162 comm="syz.2.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe54638d60e code=0x7ffc0000 [ 42.667297][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.781162][ T4181] 9pnet: p9_errstr2errno: server reported unknown error  [ 42.807456][ T4186] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 42.944081][ T4198] vhci_hcd vhci_hcd.4: invalid port number 255 [ 42.979633][ T4198] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 42.981216][ T10] usb 1-1: enqueue for inactive port 0 [ 43.016904][ T10] usb 1-1: enqueue for inactive port 0 [ 43.099991][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 43.137510][ T4221] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 43.161594][ T4225] set_capacity_and_notify: 1 callbacks suppressed [ 43.161680][ T4225] loop0: detected capacity change from 0 to 128 [ 43.196984][ T4225] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.224105][ T4225] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.302759][ T4233] loop5: detected capacity change from 0 to 256 [ 43.363146][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.381665][ T4233] FAT-fs (loop5): Directory bread(block 64) failed [ 43.389866][ T4233] FAT-fs (loop5): Directory bread(block 65) failed [ 43.409673][ T4233] FAT-fs (loop5): Directory bread(block 66) failed [ 43.424455][ T4233] FAT-fs (loop5): Directory bread(block 67) failed [ 43.427632][ T4235] random: crng reseeded on system resumption [ 43.447298][ T4233] FAT-fs (loop5): Directory bread(block 68) failed [ 43.461655][ T4233] FAT-fs (loop5): Directory bread(block 69) failed [ 43.479679][ T4233] FAT-fs (loop5): Directory bread(block 70) failed [ 43.501367][ T4233] FAT-fs (loop5): Directory bread(block 71) failed [ 43.522916][ T4233] FAT-fs (loop5): Directory bread(block 72) failed [ 43.532957][ T4233] FAT-fs (loop5): Directory bread(block 73) failed [ 44.624845][ T4283] syz.2.236 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 44.641314][ T4283] CPU: 1 UID: 0 PID: 4283 Comm: syz.2.236 Not tainted syzkaller #0 PREEMPT(full) [ 44.641350][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 44.641363][ T4283] Call Trace: [ 44.641370][ T4283] [ 44.641378][ T4283] __dump_stack+0x1d/0x30 [ 44.641409][ T4283] dump_stack_lvl+0x95/0xd0 [ 44.641435][ T4283] dump_stack+0x15/0x1b [ 44.641534][ T4283] dump_header+0x80/0x240 [ 44.641556][ T4283] oom_kill_process+0x295/0x350 [ 44.641728][ T4283] out_of_memory+0x97d/0xb80 [ 44.641761][ T4283] try_charge_memcg+0x62f/0xa10 [ 44.641820][ T4283] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 44.641917][ T4283] __alloc_frozen_pages_noprof+0x18a/0x350 [ 44.641950][ T4283] alloc_pages_mpol+0xb3/0x260 [ 44.641980][ T4283] alloc_pages_noprof+0x8f/0x140 [ 44.642055][ T4283] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 44.642084][ T4283] __kvmalloc_node_noprof+0x3d4/0x640 [ 44.642165][ T4283] ? futex_hash_allocate+0x190/0x9a0 [ 44.642204][ T4283] ? futex_hash_allocate+0x190/0x9a0 [ 44.642299][ T4283] futex_hash_allocate+0x190/0x9a0 [ 44.642394][ T4283] ? cap_task_prctl+0x13f/0x6b0 [ 44.642426][ T4283] futex_hash_prctl+0xd8/0xf0 [ 44.642491][ T4283] __se_sys_prctl+0x4f4/0x1400 [ 44.642526][ T4283] __x64_sys_prctl+0x67/0x80 [ 44.642557][ T4283] x64_sys_call+0x2533/0x3020 [ 44.642583][ T4283] do_syscall_64+0x12c/0x3b0 [ 44.642696][ T4283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.642718][ T4283] RIP: 0033:0x7fe5463ccdd9 [ 44.642739][ T4283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.642809][ T4283] RSP: 002b:00007fe544e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 44.642833][ T4283] RAX: ffffffffffffffda RBX: 00007fe546645fa0 RCX: 00007fe5463ccdd9 [ 44.642846][ T4283] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 44.642859][ T4283] RBP: 00007fe546462d69 R08: 0000000000000000 R09: 0000000000000000 [ 44.642874][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.642943][ T4283] R13: 00007fe546646038 R14: 00007fe546645fa0 R15: 00007fff5f673988 [ 44.642966][ T4283] [ 44.644812][ T4283] memory: usage 307200kB, limit 307200kB, failcnt 338 [ 44.665145][ T4299] loop3: detected capacity change from 0 to 1024 [ 44.665629][ T4299] EXT4-fs: Ignoring removed orlov option [ 44.707410][ T4283] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 44.896767][ T4283] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 44.905462][ T4299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.917995][ T4283] Memory cgroup stats for /syz2: [ 44.918211][ T4283] cache 0 [ 44.934320][ T4283] rss 0 [ 44.938667][ T4283] shmem 0 [ 44.949180][ T4283] mapped_file 0 [ 44.952864][ T4283] dirty 0 [ 44.956271][ T4283] writeback 0 [ 44.957761][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.960137][ T4283] workingset_refault_anon 54 [ 44.973494][ T4283] workingset_refault_file 135 [ 44.978347][ T4283] swap 200704 [ 44.982675][ T4283] swapcached 2191360 [ 45.002753][ T4283] pgpgin 9317 [ 45.010795][ T4283] pgpgout 9317 [ 45.017532][ T4283] pgfault 11437 [ 45.029903][ T4283] pgmajfault 32 [ 45.033661][ T4283] inactive_anon 0 [ 45.044533][ T4311] tipc: Started in network mode [ 45.045294][ T4283] active_anon 0 [ 45.054122][ T4283] inactive_file 0 [ 45.057957][ T4283] active_file 0 [ 45.062307][ T4283] unevictable 0 [ 45.070391][ T4311] tipc: Node identity ac14140f, cluster identity 4711 [ 45.072088][ T4283] hierarchical_memory_limit 314572800 [ 45.085377][ T4283] hierarchical_memsw_limit 9223372036854771712 [ 45.089523][ T4311] tipc: New replicast peer: 172.20.20.54 [ 45.091983][ T4283] total_cache 0 [ 45.097999][ T4311] tipc: Enabled bearer , priority 10 [ 45.102546][ T4283] total_rss 0 [ 45.138986][ T4283] total_shmem 0 [ 45.146037][ T4283] total_mapped_file 0 [ 45.150797][ T4283] total_dirty 0 [ 45.161949][ T4283] total_writeback 0 [ 45.174903][ T4283] total_workingset_refault_anon 54 [ 45.185560][ T4283] total_workingset_refault_file 135 [ 45.194716][ T4283] total_swap 200704 [ 45.207548][ T4329] batadv_slave_0: entered promiscuous mode [ 45.215261][ T4328] batadv_slave_0: left promiscuous mode [ 45.215944][ T4283] total_swapcached 2191360 [ 45.229629][ T4283] total_pgpgin 9317 [ 45.235677][ T4283] total_pgpgout 9317 [ 45.240034][ T4283] total_pgfault 11437 [ 45.244198][ T4283] total_pgmajfault 32 [ 45.248370][ T4283] total_inactive_anon 0 [ 45.252921][ T4283] total_active_anon 0 [ 45.262061][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 45.265012][ T4283] total_inactive_file 0 [ 45.275686][ T4283] total_active_file 0 [ 45.280753][ T4283] total_unevictable 0 [ 45.284986][ T4283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.236,pid=4282,uid=0 [ 45.287669][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 45.302616][ T4283] Memory cgroup out of memory: Killed process 4282 (syz.2.236) total-vm:96216kB, anon-rss:1232kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 45.526795][ T4354] can0: slcan on ptm0. [ 45.578651][ T4285] syz.2.236 (4285) used greatest stack depth: 8520 bytes left [ 45.609228][ T4352] can0 (unregistered): slcan off ptm0. [ 45.724372][ T4374] loop2: detected capacity change from 0 to 256 [ 45.775276][ T4374] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.862581][ T4389] loop1: detected capacity change from 0 to 512 [ 45.886287][ T4389] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.912697][ T4389] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 45.929245][ T4389] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.278: Corrupt directory, running e2fsck is recommended [ 46.036955][ T4389] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 46.064574][ T4389] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.278: corrupted in-inode xattr: e_name out of bounds [ 46.104670][ T4389] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.104910][ T4389] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.278: couldn't read orphan inode 15 (err -117) [ 46.114248][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 46.114272][ C0] EXT4-fs (loop1): initial error at time 1778451467: ext4_iget_extra_inode:5128: inode 15 [ 46.114308][ C0] EXT4-fs (loop1): last error at time 1778451467: ext4_iget_extra_inode:5128: inode 15 [ 46.168983][ T4389] loop1: lost filesystem error report for type 5 error -117 [ 46.172191][ T4389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.209141][ T10] tipc: Node number set to 2886997007 [ 46.240546][ T4426] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.294743][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.616399][ T4460] syzkaller1: entered promiscuous mode [ 46.625148][ T4460] syzkaller1: entered allmulticast mode [ 46.703058][ T4471] loop0: detected capacity change from 0 to 512 [ 46.711411][ T4471] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.723554][ T4471] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 46.737558][ T4471] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.306: inode #15: comm syz.0.306: iget: illegal inode # [ 46.755230][ T4471] loop0: lost filesystem error report for type 5 error -117 [ 46.756744][ T4471] EXT4-fs (loop0): Remounting filesystem read-only [ 46.764155][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 46.764178][ C1] EXT4-fs (loop0): initial error at time 1778451468: ext4_orphan_get:1397 [ 46.764204][ C1] EXT4-fs (loop0): last error at time 1778451468: ext4_orphan_get:1397 [ 46.796253][ T4471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.826264][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.890496][ T4480] ALSA: seq fatal error: cannot create timer (-22) [ 46.919677][ T4475] loop1: detected capacity change from 0 to 8192 [ 47.041821][ T4488] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 47.197501][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 47.292701][ T4521] loop5: detected capacity change from 0 to 256 [ 47.309533][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 47.309552][ T28] audit: type=1400 audit(1778451468.980:492): avc: denied { getopt } for pid=4522 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.367703][ T28] audit: type=1400 audit(1778451468.990:493): avc: denied { write } for pid=4525 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.392532][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 47.425522][ T4536] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.331'. [ 47.499857][ T28] audit: type=1400 audit(1778451469.170:494): avc: denied { shutdown } for pid=4541 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.555924][ T4550] loop2: detected capacity change from 0 to 164 [ 47.560081][ T28] audit: type=1400 audit(1778451469.170:495): avc: denied { read } for pid=4541 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.684585][ T28] audit: type=1326 audit(1778451469.360:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c9b7cdd9 code=0x7ffc0000 [ 47.756886][ T28] audit: type=1326 audit(1778451469.390:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c9b7cdd9 code=0x7ffc0000 [ 47.788264][ T4564] loop1: detected capacity change from 0 to 512 [ 47.808597][ T4564] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.823478][ T28] audit: type=1326 audit(1778451469.390:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c9b7cdd9 code=0x7ffc0000 [ 47.873918][ T4564] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 47.888586][ T28] audit: type=1326 audit(1778451469.390:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c9b7cdd9 code=0x7ffc0000 [ 47.914522][ T28] audit: type=1326 audit(1778451469.390:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.3.341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4c9b7cdd9 code=0x7ffc0000 [ 47.923492][ T4564] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.343: Failed to acquire dquot type 1 [ 48.043448][ T4564] loop1: lost filesystem error report for type 5 error -5 [ 48.044964][ T4564] EXT4-fs (loop1): 1 truncate cleaned up [ 48.052209][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 48.052232][ C0] EXT4-fs (loop1): last error at time 1778451469: ext4_acquire_dquot:7034 [ 48.082307][ T4582] netlink: 116 bytes leftover after parsing attributes in process `syz.2.350'. [ 48.092447][ T4564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 48.107114][ T4582] Zero length message leads to an empty skb [ 48.221920][ T3296] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz-executor: Failed to acquire dquot type 1 [ 48.463058][ T4588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 48.478167][ T3668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.557160][ T3668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.626809][ T3668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.699719][ T3668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.807109][ T4649] loop5: detected capacity change from 0 to 512 [ 48.833220][ T3668] bridge_slave_1: left allmulticast mode [ 48.836393][ T4649] EXT4-fs: Ignoring removed nobh option [ 48.860064][ T3668] bridge_slave_1: left promiscuous mode [ 48.871467][ T4649] EXT4-fs (loop5): 1 truncate cleaned up [ 48.878508][ T3668] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.885651][ T4649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.911280][ T3668] bridge_slave_0: left allmulticast mode [ 48.923216][ T3668] bridge_slave_0: left promiscuous mode [ 48.929183][ T3668] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.959594][ T3633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.042092][ T4660] loop5: detected capacity change from 0 to 4096 [ 49.103743][ T3668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.139886][ T3668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.166776][ T3668] bond0 (unregistering): Released all slaves [ 49.174979][ T4664] Invalid argument reading file caps for ./file0 [ 49.243649][ T3668] tipc: Disabling bearer [ 49.266919][ T3668] tipc: Left network mode [ 49.299007][ T4678] loop3: detected capacity change from 0 to 512 [ 49.317061][ T3668] hsr_slave_0: left promiscuous mode [ 49.332554][ T3668] hsr_slave_1: left promiscuous mode [ 49.338454][ T4678] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.352462][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.370817][ T3668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.389348][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.406234][ T3668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.426900][ T3668] veth1_macvtap: left promiscuous mode [ 49.432767][ T3668] veth0_macvtap: left promiscuous mode [ 49.444225][ T3668] veth1_vlan: left promiscuous mode [ 49.444462][ T4694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.381'. [ 49.455225][ T3668] veth0_vlan: left promiscuous mode [ 49.512740][ T4699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.381'. [ 49.850536][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.857727][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.868845][ T4634] bridge_slave_0: entered allmulticast mode [ 49.875493][ T4634] bridge_slave_0: entered promiscuous mode [ 49.891845][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.900868][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.910462][ T4634] bridge_slave_1: entered allmulticast mode [ 49.917350][ T4634] bridge_slave_1: entered promiscuous mode [ 49.940611][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 49.969927][ T4634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.984511][ T4634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.047011][ T3668] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.091279][ T4634] team0: Port device team_slave_0 added [ 50.117895][ T4634] team0: Port device team_slave_1 added [ 50.155439][ T4634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.170436][ T4634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.250189][ T4634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.294835][ T3668] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.317316][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 50.338528][ T4634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.353894][ T4634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.411069][ T4634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.423685][ T4773] loop2: detected capacity change from 0 to 512 [ 50.442605][ T4773] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.475647][ T4773] EXT4-fs (loop2): 1 truncate cleaned up [ 50.486936][ T4773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.515992][ T3668] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.540220][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.585135][ T4634] hsr_slave_0: entered promiscuous mode [ 50.599686][ T4634] hsr_slave_1: entered promiscuous mode [ 50.605672][ T4786] loop3: detected capacity change from 0 to 512 [ 50.641777][ T3668] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.689837][ T4786] EXT4-fs (loop3): 1 truncate cleaned up [ 50.721560][ T4786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.770147][ T4786] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.401: bg 0: block 465: padding at end of block bitmap is not set [ 50.815326][ T4786] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 50.834712][ T4797] sctp: [Deprecated]: syz.2.403 (pid 4797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.834712][ T4797] Use struct sctp_sack_info instead [ 50.857337][ T4786] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.857337][ T4786] [ 50.883514][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 50.890006][ T4786] EXT4-fs (loop3): Total free blocks count 0 [ 50.907258][ T4786] EXT4-fs (loop3): Free/Dirty block details [ 50.922205][ T4786] EXT4-fs (loop3): free_blocks=0 [ 50.927683][ T3668] bridge_slave_1: left allmulticast mode [ 50.933686][ T3668] bridge_slave_1: left promiscuous mode [ 50.939740][ T4786] EXT4-fs (loop3): dirty_blocks=10 [ 50.945140][ T3668] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.953095][ T4786] EXT4-fs (loop3): Block reservation details [ 50.960139][ T3668] bridge_slave_0: left allmulticast mode [ 50.965933][ T4786] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 50.972366][ T3668] bridge_slave_0: left promiscuous mode [ 50.978369][ T3668] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.002223][ T3297] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 51.022075][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.142195][ T3668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.156824][ T3668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.170225][ T3668] bond0 (unregistering): Released all slaves [ 51.226938][ T3668] hsr_slave_0: left promiscuous mode [ 51.236842][ T3668] hsr_slave_1: left promiscuous mode [ 51.245987][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.260456][ T3668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.270896][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.289233][ T3668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.306699][ T3668] veth1_macvtap: left promiscuous mode [ 51.319097][ T3668] veth0_macvtap: left promiscuous mode [ 51.329260][ T3668] veth1_vlan: left promiscuous mode [ 51.339395][ T3668] veth0_vlan: left promiscuous mode [ 51.347492][ T4821] loop3: detected capacity change from 0 to 512 [ 51.375790][ T4821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.451604][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.462756][ T3668] team0 (unregistering): Port device team_slave_1 removed [ 51.475421][ T3668] team0 (unregistering): Port device team_slave_0 removed [ 51.627503][ T4634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.648065][ T4839] loop0: detected capacity change from 0 to 128 [ 51.650466][ T4634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.672892][ T4839] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 51.680105][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.689449][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.696835][ T4728] bridge_slave_0: entered allmulticast mode [ 51.703742][ T4728] bridge_slave_0: entered promiscuous mode [ 51.712757][ T4634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.725983][ T4634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.738819][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.746476][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.753841][ T4728] bridge_slave_1: entered allmulticast mode [ 51.776977][ T4728] bridge_slave_1: entered promiscuous mode [ 51.796245][ T4634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.821838][ T4634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.877363][ T4634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.068861][ T4634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.084959][ T4728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.094980][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 52.118844][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.143912][ T4728] team0: Port device team_slave_0 added [ 52.163513][ T4728] team0: Port device team_slave_1 added [ 52.193434][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.204561][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.232215][ T4728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.251982][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.259249][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.285619][ T4728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.351766][ T4728] hsr_slave_0: entered promiscuous mode [ 52.358093][ T4728] hsr_slave_1: entered promiscuous mode [ 52.366256][ T4728] debugfs: 'hsr0' already exists in 'hsr' [ 52.372273][ T4728] Cannot create hsr debugfs directory [ 52.384786][ T4896] netlink: 52 bytes leftover after parsing attributes in process `syz.2.424'. [ 52.453240][ T28] kauditd_printk_skb: 118 callbacks suppressed [ 52.453255][ T28] audit: type=1400 audit(1778451474.130:616): avc: denied { write } for pid=4894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.525785][ T28] audit: type=1400 audit(1778451474.200:617): avc: denied { write } for pid=4916 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.569418][ T4634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.578540][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 52.601224][ T4634] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.618370][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.625699][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.642778][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.650068][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.694135][ T4634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.705232][ T4634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.767056][ T4728] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 52.806632][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.825612][ T4951] loop2: detected capacity change from 0 to 512 [ 52.828652][ T4728] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 52.869412][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.880237][ T28] audit: type=1400 audit(1778451474.550:618): avc: denied { write } for pid=4937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.913296][ T4728] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 52.927280][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.936776][ T4728] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 52.976442][ T4951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.001649][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.033147][ T4951] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.122017][ T4951] capability: warning: `syz.2.429' uses 32-bit capabilities (legacy support in use) [ 53.170559][ T28] audit: type=1400 audit(1778451474.840:619): avc: denied { write } for pid=4966 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.216752][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.252978][ T28] audit: type=1400 audit(1778451474.850:620): avc: denied { write } for pid=4949 comm="syz.2.429" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.254337][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.276795][ T4728] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.305312][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 53.312255][ T28] audit: type=1400 audit(1778451474.850:621): avc: denied { write } for pid=4949 comm="syz.2.429" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.337269][ T4634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.349310][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.356412][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.377050][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.384209][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.648115][ T28] audit: type=1400 audit(1778451475.320:622): avc: denied { write } for pid=5031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.723971][ T28] audit: type=1400 audit(1778451475.380:623): avc: denied { write } for pid=5060 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.747768][ T4634] veth0_vlan: entered promiscuous mode [ 53.765308][ T4634] veth1_vlan: entered promiscuous mode [ 53.804361][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 53.814431][ T5049] ------------[ cut here ]------------ [ 53.819943][ T5049] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.3.432/5049 [ 53.829697][ T5049] Modules linked in: [ 53.833616][ T5049] CPU: 1 UID: 0 PID: 5049 Comm: syz.3.432 Not tainted syzkaller #0 PREEMPT(full) [ 53.842836][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 53.852906][ T5049] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 53.858638][ T5049] Code: 8b 05 d1 79 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9e 1a 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 90 1a 1e 00 90 0f 0b 90 e9 af fa ff ff [ 53.878594][ T5049] RSP: 0018:ffffc90001327dd8 EFLAGS: 00010093 [ 53.884669][ T5049] RAX: ffffffff813b1672 RBX: ffff88810245b300 RCX: ffff88810245b300 [ 53.892767][ T5049] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 53.900875][ T5049] RBP: 0000000000000080 R08: ffff88810245be00 R09: 0000000000000000 [ 53.908873][ T5049] R10: ffffc90001327df0 R11: 0001c90001327df0 R12: ffff88810245b300 [ 53.917119][ T5049] R13: ffff88810245bb28 R14: ffff8881050b4490 R15: 0000000000000080 [ 53.925344][ T5049] FS: 0000000000000000(0000) GS:ffff8882ae9fb000(0000) knlGS:0000000000000000 [ 53.934452][ T5049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.941046][ T5049] CR2: 000020000029d000 CR3: 000000010f46c000 CR4: 00000000003506f0 [ 53.949164][ T5049] Call Trace: [ 53.952450][ T5049] [ 53.955392][ T5049] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 53.960819][ T5049] ? __list_add_valid_or_report+0x38/0xe0 [ 53.966821][ T5049] do_exit+0xc13/0x1530 [ 53.971019][ T5049] ? switch_fpu_return+0xe7/0x1b0 [ 53.976069][ T5049] __x64_sys_exit+0x1f/0x20 [ 53.980771][ T5049] x64_sys_call+0x301d/0x3020 [ 53.985500][ T5049] do_syscall_64+0x12c/0x3b0 [ 53.990109][ T5049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.996012][ T5049] RIP: 0033:0x7fe4c9b7cdd9 [ 54.000432][ T5049] Code: Unable to access opcode bytes at 0x7fe4c9b7cdaf. [ 54.007454][ T5049] RSP: 002b:00007fe4c85b5fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 54.016169][ T5049] RAX: ffffffffffffffda RBX: 00007fe4c9df6090 RCX: 00007fe4c9b7cdd9 [ 54.024401][ T5049] RDX: 00007fe4c85b69c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.032502][ T5049] RBP: 00007fe4c9c12d69 R08: 0000000000000000 R09: 0000000000000000 [ 54.040523][ T5049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.048508][ T5049] R13: 00007fe4c9df6128 R14: 00007fe4c9df6090 R15: 00007ffeb5967fa8 [ 54.056592][ T5049] [ 54.059617][ T5049] ---[ end trace 0000000000000000 ]--- [ 54.087122][ T4728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.118436][ T4634] veth0_macvtap: entered promiscuous mode [ 54.142152][ T4634] veth1_macvtap: entered promiscuous mode [ 54.194108][ T4634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.231709][ T4634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.277629][ T3674] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.294525][ T3672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.325522][ T28] audit: type=1400 audit(1778451476.000:624): avc: denied { write } for pid=5074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.365070][ T3672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.397414][ T28] audit: type=1400 audit(1778451476.070:625): avc: denied { write } for pid=5090 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.405346][ T3672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.485146][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 54.544583][ T4728] veth0_vlan: entered promiscuous mode [ 54.577689][ T4728] veth1_vlan: entered promiscuous mode [ 54.618720][ T4728] veth0_macvtap: entered promiscuous mode [ 54.647469][ T4728] veth1_macvtap: entered promiscuous mode [ 54.683723][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.729492][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.749315][ T3674] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.758251][ T3674] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.767965][ T3674] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.397411][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 55.598767][ T3674] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.775215][ T5165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.461'. [ 56.767019][ T5189] loop2: detected capacity change from 0 to 128 [ 56.785044][ T5189] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.804737][ T5189] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.815882][ T5186] 9p: Could not find request transport: 0x0000000000000004 [ 56.838895][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.918829][ T5204] loop7: detected capacity change from 0 to 512 [ 56.973141][ T5184] IPVS: starting estimator thread 0... [ 56.998144][ T5213] xt_hashlimit: size too large, truncated to 1048576 [ 57.069277][ T5211] IPVS: using max 2352 ests per chain, 117600 per kthread [ 58.210708][ T5261] loop0: detected capacity change from 0 to 512 [ 58.232190][ T5261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 58.244632][ T5261] System zones: 1-20 [ 58.256888][ T5261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.324610][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 58.324660][ T28] audit: type=1400 audit(1778451480.000:632): avc: denied { write } for pid=5265 comm="syz.2.497" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.458343][ T28] audit: type=1400 audit(1778451480.130:633): avc: denied { append } for pid=5270 comm="syz.3.499" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.495321][ T5273] loop6: detected capacity change from 0 to 512 [ 58.529476][ T5273] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 58.561590][ T5279] atomic_op ffff88811ad69d28 conn xmit_atomic 0000000000000000 [ 58.681176][ T28] audit: type=1400 audit(1778451480.350:634): avc: denied { read write } for pid=5288 comm="syz.3.507" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.754117][ T5296] loop7: detected capacity change from 0 to 7 [ 58.768093][ T28] audit: type=1400 audit(1778451480.360:635): avc: denied { open } for pid=5288 comm="syz.3.507" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.814618][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 58.824489][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 58.834944][ T28] audit: type=1400 audit(1778451480.430:636): avc: denied { create } for pid=5294 comm="syz.6.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.873682][ T28] audit: type=1400 audit(1778451480.430:637): avc: denied { setopt } for pid=5294 comm="syz.6.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.914508][ T28] audit: type=1400 audit(1778451480.430:638): avc: denied { connect } for pid=5294 comm="syz.6.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.973338][ T28] audit: type=1400 audit(1778451480.430:639): avc: denied { write } for pid=5294 comm="syz.6.511" path="socket:[11303]" dev="sockfs" ino=11303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.974750][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.997680][ T28] audit: type=1400 audit(1778451480.430:640): avc: denied { read } for pid=5294 comm="syz.6.511" laddr=172.20.20.170 lport=27020 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.030212][ T28] audit: type=1400 audit(1778451480.590:641): avc: denied { setattr } for pid=5260 comm="syz.0.496" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.047518][ T5312] loop3: detected capacity change from 0 to 1024 [ 59.066904][ T5312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.105631][ T5312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 59.106387][ T5318] loop6: detected capacity change from 0 to 128 [ 59.114012][ T5312] System zones: 0-1, 3-36 [ 59.125771][ T5312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.163347][ T5312] capability: warning: `syz.3.515' uses deprecated v2 capabilities in a way that may be insecure [ 59.179409][ T5318] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.193361][ T5318] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.239335][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.269735][ T4634] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.281868][ T5330] validate_nla: 47 callbacks suppressed [ 59.281886][ T5330] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 59.311886][ T5330] bond1: entered promiscuous mode [ 59.340283][ T5330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.366063][ T5334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.373637][ T5334] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 59.405053][ T5334] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 59.430092][ T5334] bond1: (slave gre1): Opening slave failed [ 59.546572][ T5339] loop6: detected capacity change from 0 to 8192 [ 59.626614][ T5349] loop7: detected capacity change from 0 to 256 [ 59.656210][ T5349] FAT-fs (loop7): Directory bread(block 64) failed [ 59.676423][ T5349] FAT-fs (loop7): Directory bread(block 65) failed [ 59.684298][ T5354] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 59.692518][ T5349] FAT-fs (loop7): Directory bread(block 66) failed [ 59.699932][ T5349] FAT-fs (loop7): Directory bread(block 67) failed [ 59.706584][ T5349] FAT-fs (loop7): Directory bread(block 68) failed [ 59.713485][ T5349] FAT-fs (loop7): Directory bread(block 69) failed [ 59.720526][ T5354] syz_tun: entered promiscuous mode [ 59.729817][ T5354] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 59.747005][ T5349] FAT-fs (loop7): Directory bread(block 70) failed [ 59.754605][ T5349] FAT-fs (loop7): Directory bread(block 71) failed [ 59.761472][ T5349] FAT-fs (loop7): Directory bread(block 72) failed [ 59.788408][ T5349] FAT-fs (loop7): Directory bread(block 73) failed [ 59.839466][ T5366] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.897535][ T5369] Invalid argument reading file caps for ./file0 [ 59.925577][ T4728] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 59.936691][ T4728] FAT-fs (loop7): Filesystem has been set read-only [ 59.984283][ T5376] loop3: detected capacity change from 0 to 512 [ 60.002878][ T5376] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.543: corrupted in-inode xattr: invalid ea_ino [ 60.025419][ T5376] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.028295][ T5376] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.543: couldn't read orphan inode 15 (err -117) [ 60.037743][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 60.037767][ C1] EXT4-fs (loop3): initial error at time 1778451481: ext4_iget_extra_inode:5128: inode 15 [ 60.037804][ C1] EXT4-fs (loop3): last error at time 1778451481: ext4_iget_extra_inode:5128: inode 15 [ 60.094295][ T5376] loop3: lost filesystem error report for type 5 error -117 [ 60.101556][ T5376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.112344][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.550'. [ 60.183273][ T3682] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.185355][ T5394] EXT4-fs: Ignoring removed orlov option [ 60.237257][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.251843][ T5398] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.555: inode has both inline data and extents flags [ 60.265853][ T3682] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.276457][ T5398] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.277205][ T5398] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.555: couldn't read orphan inode 15 (err -117) [ 60.286537][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 60.286570][ C0] EXT4-fs (loop0): initial error at time 1778451481: ext4_orphan_get:1397: inode 15 [ 60.286603][ C0] EXT4-fs (loop0): last error at time 1778451481: ext4_orphan_get:1397: inode 15 [ 60.323654][ T5398] loop0: lost filesystem error report for type 5 error -117 [ 60.324495][ T5398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.324969][ T5394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.416894][ T4634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.416925][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.450239][ T3682] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.462323][ T5407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.524934][ T3682] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.608983][ T5420] EXT4-fs: quotafile must be on filesystem root [ 60.684821][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.741492][ T3682] bridge_slave_1: left allmulticast mode [ 60.759393][ T3682] bridge_slave_1: left promiscuous mode [ 60.776415][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.796204][ T3682] bridge_slave_0: left allmulticast mode [ 60.810330][ T3682] bridge_slave_0: left promiscuous mode [ 60.832605][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.990642][ T5463] EXT4-fs: quotafile must be on filesystem root [ 61.046042][ T3682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.056256][ T3682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.066748][ T3682] bond0 (unregistering): Released all slaves [ 61.092625][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 61.155420][ T3682] hsr_slave_0: left promiscuous mode [ 61.162179][ T3682] hsr_slave_1: left promiscuous mode [ 61.168126][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.175769][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.183712][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.192298][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.203266][ T3682] veth1_macvtap: left promiscuous mode [ 61.208865][ T3682] veth0_macvtap: left promiscuous mode [ 61.216159][ T3682] veth1_vlan: left promiscuous mode [ 61.221722][ T3682] veth0_vlan: left promiscuous mode [ 61.317272][ T3682] team0 (unregistering): Port device team_slave_1 removed [ 61.329801][ T3682] team0 (unregistering): Port device team_slave_0 removed [ 61.641865][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.659116][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.666456][ T5403] bridge_slave_0: entered allmulticast mode [ 61.673134][ T5403] bridge_slave_0: entered promiscuous mode [ 61.680810][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 61.760769][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.779274][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.786714][ T5403] bridge_slave_1: entered allmulticast mode [ 61.793664][ T5403] bridge_slave_1: entered promiscuous mode [ 61.841041][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.851406][ T5522] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.866717][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.904176][ T5403] team0: Port device team_slave_0 added [ 61.920315][ T5403] team0: Port device team_slave_1 added [ 61.947535][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.955094][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.009145][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.046935][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.065630][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.095854][ T5529] set_capacity_and_notify: 7 callbacks suppressed [ 62.095875][ T5529] loop2: detected capacity change from 0 to 8192 [ 62.115635][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.160349][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 62.186360][ T5403] hsr_slave_0: entered promiscuous mode [ 62.192612][ T5403] hsr_slave_1: entered promiscuous mode [ 62.198646][ T5403] debugfs: 'hsr0' already exists in 'hsr' [ 62.204766][ T5403] Cannot create hsr debugfs directory [ 62.363371][ T5403] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 62.373588][ T5403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.382141][ T5403] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 62.392719][ T5403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.415563][ T5403] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 62.427319][ T5403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.442050][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 62.449770][ T5403] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 62.464437][ T5403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.562059][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.584585][ T5403] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.601219][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.608739][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.622887][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.630027][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.781092][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.985574][ T5403] veth0_vlan: entered promiscuous mode [ 62.996240][ T5403] veth1_vlan: entered promiscuous mode [ 63.016626][ T5403] veth0_macvtap: entered promiscuous mode [ 63.025174][ T5403] veth1_macvtap: entered promiscuous mode [ 63.037808][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.051581][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.064557][ T3674] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.074202][ T3668] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.087852][ T3668] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.112802][ T3668] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.383119][ T3682] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.399615][ T5620] loop2: detected capacity change from 0 to 1024 [ 63.411556][ T5620] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.425642][ T5620] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 63.435795][ T5620] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.446551][ T5620] JBD2: no valid journal superblock found [ 63.482288][ T5620] EXT4-fs (loop2): Could not load journal inode [ 63.496399][ T5630] loop8: detected capacity change from 0 to 1024 [ 63.526117][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 63.526134][ T28] audit: type=1400 audit(1778451485.200:663): avc: denied { map } for pid=5631 comm="syz.6.605" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=12033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.560311][ T5630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.609126][ T28] audit: type=1400 audit(1778451485.240:664): avc: denied { read write } for pid=5631 comm="syz.6.605" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=12033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.647255][ T28] audit: type=1400 audit(1778451485.280:665): avc: denied { write } for pid=5629 comm="syz.8.604" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.669503][ T28] audit: type=1400 audit(1778451485.310:666): avc: denied { write } for pid=5629 comm="syz.8.604" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.681272][ T5637] geneve2: entered promiscuous mode [ 63.692037][ T28] audit: type=1400 audit(1778451485.310:667): avc: denied { write } for pid=5629 comm="syz.8.604" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.721629][ T3682] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 47231 - 0 [ 63.736851][ T5403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.741821][ T3682] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 47231 - 0 [ 63.776573][ T3682] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 47231 - 0 [ 63.815687][ T3682] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 47231 - 0 [ 63.871669][ T5649] netlink: 'syz.8.611': attribute type 21 has an invalid length. [ 63.890519][ T5651] loop2: detected capacity change from 0 to 512 [ 63.904216][ T5649] netlink: 168 bytes leftover after parsing attributes in process `syz.8.611'. [ 63.911530][ T5651] EXT4-fs: Ignoring removed nobh option [ 63.941798][ T28] audit: type=1400 audit(1778451485.610:668): avc: denied { create } for pid=5654 comm="syz.6.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.972652][ T28] audit: type=1400 audit(1778451485.610:669): avc: denied { connect } for pid=5654 comm="syz.6.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.000195][ T28] audit: type=1400 audit(1778451485.610:670): avc: denied { write } for pid=5654 comm="syz.6.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.041123][ T5651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.060289][ T5651] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.073752][ T5663] loop8: detected capacity change from 0 to 256 [ 64.106658][ T5667] loop6: detected capacity change from 0 to 1024 [ 64.117370][ T5665] loop3: detected capacity change from 0 to 1024 [ 64.125425][ T5665] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.143431][ T5667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.156777][ T5665] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 64.157365][ T5663] FAT-fs (loop8): Directory bread(block 64) failed [ 64.170836][ T5665] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 64.183326][ T28] audit: type=1400 audit(1778451485.860:671): avc: denied { write } for pid=5650 comm="syz.2.612" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.205036][ T28] audit: type=1400 audit(1778451485.870:672): avc: denied { write } for pid=5650 comm="syz.2.612" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.205970][ T5665] JBD2: no valid journal superblock found [ 64.233288][ T5665] EXT4-fs (loop3): Could not load journal inode [ 64.240008][ T5663] FAT-fs (loop8): Directory bread(block 65) failed [ 64.270998][ T5663] FAT-fs (loop8): Directory bread(block 66) failed [ 64.277931][ T5663] FAT-fs (loop8): Directory bread(block 67) failed [ 64.285620][ T5663] FAT-fs (loop8): Directory bread(block 68) failed [ 64.285721][ T4634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.292880][ T5663] FAT-fs (loop8): Directory bread(block 69) failed [ 64.305491][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.308662][ T5663] FAT-fs (loop8): Directory bread(block 70) failed [ 64.324045][ T5663] FAT-fs (loop8): Directory bread(block 71) failed [ 64.330927][ T5663] FAT-fs (loop8): Directory bread(block 72) failed [ 64.337867][ T5663] FAT-fs (loop8): Directory bread(block 73) failed [ 64.366195][ T5673] loop6: detected capacity change from 0 to 1024 [ 64.374746][ T5673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.426859][ T5673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 64.440691][ T5673] System zones: 0-1, 3-36 [ 64.456588][ T5673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.513296][ T5403] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 64.531090][ T5403] FAT-fs (loop8): Filesystem has been set read-only [ 64.552491][ T4634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.713207][ T5690] loop3: detected capacity change from 0 to 8192 [ 65.459086][ T3804] Bluetooth: hci0: command 0x1003 tx timeout [ 65.459087][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.498496][ T5698] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.506092][ T5698] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.066734][ T5756] loop2: detected capacity change from 0 to 1024 [ 66.080779][ T5756] EXT4-fs: Ignoring removed bh option [ 66.108234][ T5756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.125471][ T5756] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.2.646: path /118/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 66.148982][ T5756] EXT4-fs (loop2): Remounting filesystem read-only [ 66.493070][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.856031][ T3678] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.979634][ T3678] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.645130][ T3678] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.717203][ T3678] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.911622][ T3678] bridge_slave_1: left allmulticast mode [ 67.921556][ T3678] bridge_slave_1: left promiscuous mode [ 67.930848][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.954598][ T3678] bridge_slave_0: left allmulticast mode [ 67.964227][ T3678] bridge_slave_0: left promiscuous mode [ 67.970423][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.989755][ T5897] set_capacity_and_notify: 1 callbacks suppressed [ 67.989775][ T5897] loop6: detected capacity change from 0 to 512 [ 68.031812][ T5897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 68.046590][ T5897] System zones: 1-20 [ 68.053743][ T5897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.133473][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.157625][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.815564][ T3678] bond0 (unregistering): Released all slaves [ 68.828820][ T5904] netlink: 'syz.0.675': attribute type 3 has an invalid length. [ 68.838256][ T4634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.873702][ T3678] hsr_slave_0: left promiscuous mode [ 68.886894][ T3678] hsr_slave_1: left promiscuous mode [ 68.929571][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.943840][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 68.943858][ T28] audit: type=1400 audit(1778451490.620:703): avc: denied { unlink } for pid=3302 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.989391][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.009532][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.046040][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.068938][ T3678] veth1_macvtap: left promiscuous mode [ 69.071125][ T28] audit: type=1400 audit(1778451490.750:704): avc: denied { write } for pid=5913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.084905][ T3678] veth0_macvtap: left promiscuous mode [ 69.125530][ T3678] veth1_vlan: left promiscuous mode [ 69.143116][ T28] audit: type=1400 audit(1778451490.820:705): avc: denied { write } for pid=5933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.149127][ T3678] veth0_vlan: left promiscuous mode [ 69.348982][ T3678] team0 (unregistering): Port device team_slave_1 removed [ 69.371974][ T3678] team0 (unregistering): Port device team_slave_0 removed [ 69.639827][ T28] audit: type=1400 audit(1778451491.310:706): avc: denied { execute } for pid=5949 comm="syz.3.688" name="file1" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.677778][ T5959] loop6: detected capacity change from 0 to 512 [ 69.732513][ T5959] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 69.773170][ T5959] EXT4-fs (loop6): 1 truncate cleaned up [ 69.813024][ T5959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.826141][ T3668] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.863707][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.884718][ T28] audit: type=1400 audit(1778451491.560:707): avc: denied { write } for pid=5958 comm="syz.6.691" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.919799][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.942201][ T5846] bridge_slave_0: entered allmulticast mode [ 69.961334][ T5846] bridge_slave_0: entered promiscuous mode [ 69.970459][ T28] audit: type=1400 audit(1778451491.590:708): avc: denied { write } for pid=5960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.999291][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.014035][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.028555][ T4634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.029616][ T5846] bridge_slave_1: entered allmulticast mode [ 70.044202][ T28] audit: type=1400 audit(1778451491.650:709): avc: denied { write } for pid=5979 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.067779][ T5846] bridge_slave_1: entered promiscuous mode [ 70.106769][ T5982] loop6: detected capacity change from 0 to 512 [ 70.118151][ T5982] EXT4-fs: test_dummy_encryption option not supported [ 70.161398][ T28] audit: type=1400 audit(1778451491.840:710): avc: denied { create } for pid=5984 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.181910][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 70.221803][ T28] audit: type=1400 audit(1778451491.870:711): avc: denied { bind } for pid=5984 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.246115][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.266648][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.277006][ T28] audit: type=1400 audit(1778451491.870:712): avc: denied { write } for pid=5984 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.339855][ T5846] team0: Port device team_slave_0 added [ 70.350930][ T5846] team0: Port device team_slave_1 added [ 70.377581][ T5996] loop6: detected capacity change from 0 to 4096 [ 70.387014][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.390759][ T5996] EXT4-fs: inline encryption not supported [ 70.411280][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.441811][ T5996] EXT4-fs: test_dummy_encryption option not supported [ 70.470944][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.509629][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.525789][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.593349][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.664941][ T5846] hsr_slave_0: entered promiscuous mode [ 70.677023][ T5846] hsr_slave_1: entered promiscuous mode [ 70.695937][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 70.702001][ T5846] Cannot create hsr debugfs directory [ 70.711990][ T6011] loop0: detected capacity change from 0 to 8192 [ 70.732984][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 70.803848][ T6022] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 70.877657][ T6035] loop6: detected capacity change from 0 to 1024 [ 70.885341][ T6035] EXT4-fs: inline encryption not supported [ 70.921468][ T6035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.935592][ T5846] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 70.944361][ T6035] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.964179][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.972401][ T5846] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 70.986730][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.994663][ T6035] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.709: Freeing blocks not in datazone - block = 0, count = 16 [ 70.996715][ T5846] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 71.021968][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.034531][ T5846] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 71.047465][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.070658][ T3682] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 112: padding at end of block bitmap is not set [ 71.101855][ T3682] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 71.140825][ T3682] EXT4-fs (loop6): This should not happen!! Data will be lost [ 71.140825][ T3682] [ 71.153884][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 71.165119][ T4634] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 71.181106][ T4634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.181438][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.199524][ T6065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.714'. [ 71.225738][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.231724][ T6069] netlink: 'syz.0.716': attribute type 2 has an invalid length. [ 71.244912][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.252032][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.259072][ T6069] netlink: 196452 bytes leftover after parsing attributes in process `syz.0.716'. [ 71.273527][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.280712][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.472585][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.543856][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 71.665995][ T5846] veth0_vlan: entered promiscuous mode [ 71.675296][ T5846] veth1_vlan: entered promiscuous mode [ 71.694969][ T5846] veth0_macvtap: entered promiscuous mode [ 71.703518][ T5846] veth1_macvtap: entered promiscuous mode [ 71.716030][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.732476][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.744072][ T3682] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.764653][ T3682] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.778771][ T3682] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.792537][ T3682] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.859161][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.859227][ T3804] Bluetooth: hci0: command 0x1003 tx timeout [ 72.110546][ T6133] loop6: detected capacity change from 0 to 8192 [ 72.385661][ T6137] loop0: detected capacity change from 0 to 4096 [ 72.406129][ T6137] EXT4-fs: inline encryption not supported [ 72.422331][ T6137] EXT4-fs: test_dummy_encryption option not supported [ 72.687881][ T6153] loop6: detected capacity change from 0 to 512 [ 72.699956][ T6153] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 72.715949][ T6153] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 72.725866][ T6129] syz.9.721 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 72.764833][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz.9.721 Tainted: G W syzkaller #0 PREEMPT(full) [ 72.764870][ T6129] Tainted: [W]=WARN [ 72.764886][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.764899][ T6129] Call Trace: [ 72.764906][ T6129] [ 72.764915][ T6129] __dump_stack+0x1d/0x30 [ 72.765069][ T6129] dump_stack_lvl+0x95/0xd0 [ 72.765089][ T6129] dump_stack+0x15/0x1b [ 72.765109][ T6129] dump_header+0x80/0x240 [ 72.765149][ T6129] oom_kill_process+0x295/0x350 [ 72.765179][ T6129] out_of_memory+0x97d/0xb80 [ 72.765224][ T6129] try_charge_memcg+0x62f/0xa10 [ 72.765257][ T6129] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 72.765281][ T6129] __alloc_frozen_pages_noprof+0x18a/0x350 [ 72.765307][ T6129] alloc_pages_mpol+0xb3/0x260 [ 72.765345][ T6129] alloc_pages_noprof+0x8f/0x140 [ 72.765380][ T6129] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 72.765409][ T6129] __kvmalloc_node_noprof+0x3d4/0x640 [ 72.765429][ T6129] ? futex_hash_allocate+0x190/0x9a0 [ 72.765532][ T6129] ? futex_hash_allocate+0x190/0x9a0 [ 72.765564][ T6129] futex_hash_allocate+0x190/0x9a0 [ 72.765593][ T6129] ? cap_task_prctl+0x13f/0x6b0 [ 72.765659][ T6129] futex_hash_prctl+0xd8/0xf0 [ 72.765691][ T6129] __se_sys_prctl+0x4f4/0x1400 [ 72.765719][ T6129] __x64_sys_prctl+0x67/0x80 [ 72.765815][ T6129] x64_sys_call+0x2533/0x3020 [ 72.765870][ T6129] do_syscall_64+0x12c/0x3b0 [ 72.765893][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.765912][ T6129] RIP: 0033:0x7fbd0dc1cdd9 [ 72.765925][ T6129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.765938][ T6129] RSP: 002b:00007fbd0c677028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 72.765954][ T6129] RAX: ffffffffffffffda RBX: 00007fbd0de95fa0 RCX: 00007fbd0dc1cdd9 [ 72.766012][ T6129] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 72.766021][ T6129] RBP: 00007fbd0dcb2d69 R08: 0000000000000000 R09: 0000000000000000 [ 72.766077][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.766085][ T6129] R13: 00007fbd0de96038 R14: 00007fbd0de95fa0 R15: 00007ffe284b0208 [ 72.766098][ T6129] [ 72.766151][ T6129] memory: usage 307200kB, limit 307200kB, failcnt 241 [ 72.799165][ T5970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.803981][ T6129] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0 [ 73.012968][ T6129] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 73.012992][ T6129] Memory cgroup stats for /syz9: [ 73.013265][ T6129] cache 0 [ 73.013274][ T6129] rss 0 [ 73.013281][ T6129] shmem 0 [ 73.013289][ T6129] mapped_file 0 [ 73.013371][ T6129] dirty 0 [ 73.013378][ T6129] writeback 0 [ 73.013385][ T6129] workingset_refault_anon 17 [ 73.013402][ T6129] workingset_refault_file 0 [ 73.013411][ T6129] swap 159744 [ 73.013418][ T6129] swapcached 258048 [ 73.013427][ T6129] pgpgin 131 [ 73.013482][ T6129] pgpgout 124 [ 73.013492][ T6129] pgfault 670 [ 73.013500][ T6129] pgmajfault 9 [ 73.013537][ T6129] inactive_anon 24576 [ 73.013545][ T6129] active_anon 4096 [ 73.013554][ T6129] inactive_file 0 [ 73.013567][ T6129] active_file 0 [ 73.013575][ T6129] unevictable 0 [ 73.013583][ T6129] hierarchical_memory_limit 314572800 [ 73.013593][ T6129] hierarchical_memsw_limit 9223372036854771712 [ 73.013604][ T6129] total_cache 0 [ 73.013611][ T6129] total_rss 0 [ 73.013620][ T6129] total_shmem 0 [ 73.013629][ T6129] total_mapped_file 0 [ 73.013687][ T6129] total_dirty 0 [ 73.013730][ T6129] total_writeback 0 [ 73.013739][ T6129] total_workingset_refault_anon 17 [ 73.013749][ T6129] total_workingset_refault_file 0 [ 73.013759][ T6129] total_swap 159744 [ 73.013768][ T6129] total_swapcached 258048 [ 73.013777][ T6129] total_pgpgin 131 [ 73.013786][ T6129] total_pgpgout 124 [ 73.013793][ T6129] total_pgfault 670 [ 73.013800][ T6129] total_pgmajfault 9 [ 73.013807][ T6129] total_inactive_anon 24576 [ 73.013815][ T6129] total_active_anon 4096 [ 73.013822][ T6129] total_inactive_file 0 [ 73.013862][ T6129] total_active_file 0 [ 73.013871][ T6129] total_unevictable 0 [ 73.013880][ T6129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.721,pid=6128,uid=0 [ 73.014008][ T6129] Memory cgroup out of memory: Killed process 6128 (syz.9.721) total-vm:96144kB, anon-rss:1232kB, file-rss:22296kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 73.398048][ T6169] loop0: detected capacity change from 0 to 8192 [ 73.637436][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.779504][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.828409][ T6180] netlink: 'syz.2.739': attribute type 11 has an invalid length. [ 73.838337][ T6180] netlink: 80 bytes leftover after parsing attributes in process `syz.2.739'. [ 73.920781][ T6182] loop2: detected capacity change from 0 to 1024 [ 73.942597][ T6182] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.983860][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 73.983877][ T28] audit: type=1400 audit(1778451495.660:738): avc: denied { setattr } for pid=6183 comm="syz.3.741" path="/dev/net/tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 74.029621][ T6182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.108993][ T6182] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.146647][ T28] audit: type=1400 audit(1778451495.820:739): avc: denied { write } for pid=6181 comm="syz.2.740" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.166808][ T6182] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.740: lblock 3 mapped to illegal pblock 3 (length 3) [ 74.196896][ T6182] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 74.209777][ T6182] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.209777][ T6182] [ 74.252111][ T3682] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:20: lblock 8 mapped to illegal pblock 8 (length 8) [ 74.323639][ T3682] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 74.324109][ T28] audit: type=1400 audit(1778451495.990:740): avc: denied { write } for pid=6192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.357139][ T3682] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.357139][ T3682] [ 74.389857][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 74.417219][ T6209] sctp: [Deprecated]: syz.3.747 (pid 6209) Use of int in maxseg socket option. [ 74.417219][ T6209] Use struct sctp_assoc_value instead [ 74.435612][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.445320][ T28] audit: type=1400 audit(1778451496.060:741): avc: denied { bind } for pid=6202 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.514402][ T6211] 9p: Could not find request transport: 0x0000000000000004 [ 74.515432][ T28] audit: type=1400 audit(1778451496.060:742): avc: denied { name_bind } for pid=6202 comm="syz.0.744" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 74.515464][ T28] audit: type=1400 audit(1778451496.060:743): avc: denied { node_bind } for pid=6202 comm="syz.0.744" saddr=172.20.20.170 src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 74.515525][ T28] audit: type=1400 audit(1778451496.110:744): avc: denied { write } for pid=6207 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.584776][ T6222] netlink: 'syz.3.751': attribute type 11 has an invalid length. [ 74.680207][ T6222] netlink: 80 bytes leftover after parsing attributes in process `syz.3.751'. [ 74.730426][ T28] audit: type=1400 audit(1778451496.400:745): avc: denied { write } for pid=6220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.788697][ T6241] loop9: detected capacity change from 0 to 8192 [ 74.818896][ T28] audit: type=1400 audit(1778451496.490:746): avc: denied { write } for pid=6246 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.977607][ T28] audit: type=1400 audit(1778451496.650:747): avc: denied { connect } for pid=6260 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.114607][ T3672] ================================================================== [ 75.122782][ T3672] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 75.131062][ T3672] [ 75.133405][ T3672] write to 0xffff88813477c2c4 of 2 bytes by task 6268 on cpu 0: [ 75.141043][ T3672] fat16_ent_put+0x28/0x60 [ 75.145577][ T3672] fat_ent_write+0x6c/0xe0 [ 75.150117][ T3672] fat_chain_add+0x172/0x490 [ 75.154738][ T3672] fat_get_block+0x475/0x5f0 [ 75.159657][ T3672] __block_write_begin_int+0x400/0xf90 [ 75.165168][ T3672] cont_write_begin+0x5fe/0x970 [ 75.170152][ T3672] fat_write_begin+0x52/0xe0 [ 75.174784][ T3672] generic_perform_write+0x183/0x490 [ 75.180100][ T3672] __generic_file_write_iter+0x9e/0x120 [ 75.185670][ T3672] generic_file_write_iter+0x8d/0x310 [ 75.191068][ T3672] vfs_write+0x5a6/0x9f0 [ 75.195455][ T3672] ksys_write+0xdc/0x1a0 [ 75.199935][ T3672] __x64_sys_write+0x40/0x50 [ 75.204650][ T3672] x64_sys_call+0x27e1/0x3020 [ 75.209467][ T3672] do_syscall_64+0x12c/0x3b0 [ 75.214192][ T3672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.220209][ T3672] [ 75.222559][ T3672] read to 0xffff88813477c200 of 512 bytes by task 3672 on cpu 1: [ 75.230297][ T3672] copy_folio_from_iter_atomic+0x743/0x10b0 [ 75.236756][ T3672] generic_perform_write+0x2c1/0x490 [ 75.242070][ T3672] shmem_file_write_iter+0xc5/0xf0 [ 75.247228][ T3672] lo_rw_aio+0x67d/0x730 [ 75.251522][ T3672] loop_process_work+0x56c/0xac0 [ 75.256486][ T3672] loop_workfn+0x31/0x40 [ 75.260918][ T3672] process_scheduled_works+0x4f0/0x9c0 [ 75.266391][ T3672] worker_thread+0x58a/0x780 [ 75.270996][ T3672] kthread+0x22a/0x280 [ 75.275075][ T3672] ret_from_fork+0x146/0x330 [ 75.279681][ T3672] ret_from_fork_asm+0x1a/0x30 [ 75.284460][ T3672] [ 75.286806][ T3672] Reported by Kernel Concurrency Sanitizer on: [ 75.292979][ T3672] CPU: 1 UID: 0 PID: 3672 Comm: kworker/u8:15 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.304111][ T3672] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 75.308018][ T3672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.318179][ T3672] Workqueue: loop9 loop_workfn [ 75.323030][ T3672] ================================================================== [ 75.561098][ T6251] bond0: (slave syz_tun): Releasing backup interface [ 75.652908][ T3684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.742040][ T3684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.831759][ T3684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.882964][ T3684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.982993][ T3684] bridge_slave_1: left allmulticast mode [ 75.988698][ T3684] bridge_slave_1: left promiscuous mode [ 75.994544][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.002494][ T3684] bridge_slave_0: left allmulticast mode [ 76.008145][ T3684] bridge_slave_0: left promiscuous mode [ 76.013946][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.081508][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.091677][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.102633][ T3684] bond0 (unregistering): Released all slaves [ 76.110921][ T3684] bond1 (unregistering): Released all slaves [ 76.161839][ T3684] tipc: Disabling bearer [ 76.167324][ T3684] tipc: Left network mode [ 76.174553][ T3684] hsr_slave_0: left promiscuous mode [ 76.180781][ T3684] hsr_slave_1: left promiscuous mode [ 76.187046][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.194650][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.202463][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.212053][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.225921][ T3684] veth1_macvtap: left promiscuous mode [ 76.231598][ T3684] veth0_macvtap: left promiscuous mode [ 76.237150][ T3684] veth1_vlan: left promiscuous mode [ 76.242610][ T3684] veth0_vlan: left promiscuous mode [ 76.304889][ T3684] team0 (unregistering): Port device team_slave_1 removed [ 76.314629][ T3684] team0 (unregistering): Port device team_slave_0 removed [ 76.350057][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 76.462660][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 76.561979][ T3684] IPVS: stop unused estimator thread 0... [ 76.573267][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 76.623999][ T3684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.653700][ T3684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.694384][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 76.704466][ T3684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.762914][ T3684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.841135][ T3684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.882837][ T3684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.932762][ T3684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.962541][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 76.983281][ T3684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.077366][ T3684] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.088749][ T3684] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47231 - 0 [ 77.102093][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26 [ 77.152291][ T3684] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.163029][ T3684] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47231 - 0 [ 77.202521][ T3684] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.213457][ T3684] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47231 - 0 [ 77.236391][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27 [ 77.251558][ T3684] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.261915][ T3684] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47231 - 0 [ 77.376984][ T3684] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.388755][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28 [ 77.402730][ T3684] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.453344][ T3684] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.502109][ T3684] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.521605][ T3020] 8021q: adding VLAN 0 to HW filter on device eth29 [ 77.578740][ T3684] bridge_slave_1: left allmulticast mode [ 77.584612][ T3684] bridge_slave_1: left promiscuous mode [ 77.590571][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.598351][ T3684] bridge_slave_0: left allmulticast mode [ 77.604462][ T3684] bridge_slave_0: left promiscuous mode [ 77.610311][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.619599][ T3684] bridge_slave_1: left allmulticast mode [ 77.625305][ T3684] bridge_slave_1: left promiscuous mode [ 77.631187][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.639730][ T3684] bridge_slave_0: left allmulticast mode [ 77.645469][ T3684] bridge_slave_0: left promiscuous mode [ 77.651793][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.661096][ T3684] bridge_slave_1: left allmulticast mode [ 77.666927][ T3684] bridge_slave_1: left promiscuous mode [ 77.672755][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.681094][ T3684] bridge_slave_0: left allmulticast mode [ 77.686897][ T3684] bridge_slave_0: left promiscuous mode [ 77.692933][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.702187][ T3684] bridge_slave_1: left allmulticast mode [ 77.707973][ T3684] bridge_slave_1: left promiscuous mode [ 77.714019][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.722364][ T3684] bridge_slave_0: left allmulticast mode [ 77.728034][ T3684] bridge_slave_0: left promiscuous mode [ 77.733889][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.901435][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.911512][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.921044][ T3684] bond0 (unregistering): Released all slaves [ 78.001845][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.011769][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.021694][ T3684] bond0 (unregistering): Released all slaves [ 78.062859][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.072658][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.082218][ T3684] bond0 (unregistering): Released all slaves [ 78.122395][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.132740][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.142307][ T3684] bond0 (unregistering): Released all slaves [ 78.150564][ T3020] 8021q: adding VLAN 0 to HW filter on device eth30 [ 78.198956][ T3684] hsr_slave_0: left promiscuous mode [ 78.205297][ T3684] hsr_slave_1: left promiscuous mode [ 78.213187][ T3684] hsr_slave_0: left promiscuous mode [ 78.218937][ T3684] hsr_slave_1: left promiscuous mode [ 78.225527][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.234345][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.242193][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.250115][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.260774][ T3684] hsr_slave_0: left promiscuous mode [ 78.266656][ T3684] hsr_slave_1: left promiscuous mode [ 78.272585][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.280445][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.288044][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.295710][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.305351][ T3684] hsr_slave_0: left promiscuous mode [ 78.311436][ T3684] hsr_slave_1: left promiscuous mode [ 78.317601][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.325305][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.332885][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.340368][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.357371][ T3684] veth1_macvtap: left promiscuous mode [ 78.363357][ T3684] veth0_macvtap: left promiscuous mode [ 78.368971][ T3684] veth1_vlan: left promiscuous mode [ 78.374527][ T3684] veth0_vlan: left promiscuous mode [ 78.381310][ T3684] veth1_macvtap: left promiscuous mode [ 78.386913][ T3684] veth0_macvtap: left promiscuous mode [ 78.392614][ T3684] veth1_vlan: left promiscuous mode [ 78.398037][ T3684] veth0_vlan: left promiscuous mode [ 78.404252][ T3684] veth1_macvtap: left promiscuous mode [ 78.409860][ T3684] veth0_macvtap: left promiscuous mode [ 78.415406][ T3684] veth1_vlan: left promiscuous mode [ 78.420663][ T3684] veth0_vlan: left promiscuous mode [ 78.426403][ T3684] veth1_macvtap: left promiscuous mode [ 78.432053][ T3684] veth0_macvtap: left promiscuous mode [ 78.437564][ T3684] veth1_vlan: left promiscuous mode [ 78.442862][ T3684] veth0_vlan: left promiscuous mode [ 78.605480][ T3684] team0 (unregistering): Port device team_slave_1 removed [ 78.615473][ T3684] team0 (unregistering): Port device team_slave_0 removed [ 78.675348][ T3684] team0 (unregistering): Port device team_slave_1 removed [ 78.686368][ T3684] team0 (unregistering): Port device team_slave_0 removed [ 78.743345][ T3684] team0 (unregistering): Port device team_slave_1 removed [ 78.753247][ T3684] team0 (unregistering): Port device team_slave_0 removed [ 78.810286][ T3684] team0 (unregistering): Port device team_slave_1 removed [ 78.819734][ T3684] team0 (unregistering): Port device team_slave_0 removed [ 78.853565][ T3020] 8021q: adding VLAN 0 to HW filter on device eth31 [ 78.974577][ T3020] 8021q: adding VLAN 0 to HW filter on device eth32 [ 79.057459][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 79.057475][ T28] audit: type=1400 audit(1778451500.730:776): avc: denied { write } for pid=6474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.088357][ T28] audit: type=1400 audit(1778451500.750:777): avc: denied { write } for pid=6485 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.094224][ T3020] 8021q: adding VLAN 0 to HW filter on device eth33 [ 79.186912][ T28] audit: type=1400 audit(1778451500.860:778): avc: denied { write } for pid=6488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.211879][ T28] audit: type=1400 audit(1778451500.880:779): avc: denied { write } for pid=6499 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.224936][ T3020] 8021q: adding VLAN 0 to HW filter on device eth34 [ 79.330924][ T28] audit: type=1400 audit(1778451501.010:780): avc: denied { write } for pid=6504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.354157][ T28] audit: type=1400 audit(1778451501.010:781): avc: denied { write } for pid=6515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.368898][ T3020] 8021q: adding VLAN 0 to HW filter on device eth35 [ 79.453088][ T28] audit: type=1400 audit(1778451501.130:782): avc: denied { write } for pid=6518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.479279][ T28] audit: type=1400 audit(1778451501.150:783): avc: denied { write } for pid=6529 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.487666][ T3020] 8021q: adding VLAN 0 to HW filter on device eth36 [ 79.594942][ T28] audit: type=1400 audit(1778451501.270:784): avc: denied { write } for pid=6533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.618261][ T28] audit: type=1400 audit(1778451501.270:785): avc: denied { write } for pid=6544 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.631233][ T3020] 8021q: adding VLAN 0 to HW filter on device eth37 [ 79.749523][ T3020] 8021q: adding VLAN 0 to HW filter on device eth38 [ 79.860297][ T3020] 8021q: adding VLAN 0 to HW filter on device eth39 [ 79.967969][ T3020] 8021q: adding VLAN 0 to HW filter on device eth40 [ 84.117924][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 84.117950][ T28] audit: type=1400 audit(1778451505.790:798): avc: denied { write } for pid=6664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.147965][ T28] audit: type=1400 audit(1778451505.810:799): avc: denied { write } for pid=6675 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1