last executing test programs: 1m8.070706781s ago: executing program 0 (id=125): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 1m8.003098041s ago: executing program 0 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 1m7.922407491s ago: executing program 0 (id=130): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x28c, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x278, 0x1, [@m_skbmod={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x158, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x129, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "507e1baf70350ba63c9fdba3ace3ff69773db861d8a2e332d6b16db257bc0277a998c2a2037a7e3928486948fe0d47d2df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x38, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x9, 0x6, "63ddc58aee"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x28c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m7.884640791s ago: executing program 0 (id=132): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x120) 1m7.771061211s ago: executing program 0 (id=134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000840)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003080300000000000000100000000000140004800800064000000000080005400000000006000240000032000500030084"], 0x38}}, 0x0) 1m7.5321531s ago: executing program 0 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000002b40)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 1m7.53199606s ago: executing program 32 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000002b40)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 46.602997201s ago: executing program 1 (id=1010): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 46.470859461s ago: executing program 1 (id=1013): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 46.385978591s ago: executing program 1 (id=1017): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 46.32851571s ago: executing program 1 (id=1009): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x120) 46.077685739s ago: executing program 1 (id=1012): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x2) 45.964319789s ago: executing program 1 (id=1018): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 45.964126969s ago: executing program 33 (id=1018): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.234071077s ago: executing program 6 (id=2811): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000003980)="5c87644e", 0x4}], 0x1) 1.344180324s ago: executing program 6 (id=2835): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 1.314891234s ago: executing program 6 (id=2837): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 1.240185084s ago: executing program 6 (id=2839): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) 1.148458604s ago: executing program 6 (id=2841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 956.381953ms ago: executing program 6 (id=2844): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 956.198253ms ago: executing program 34 (id=2844): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 925.076903ms ago: executing program 2 (id=2847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0340000001"], 0x48) 827.246892ms ago: executing program 2 (id=2851): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x4}, 0x0) 817.545952ms ago: executing program 2 (id=2853): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x40000d0) 752.309872ms ago: executing program 2 (id=2855): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) 751.802012ms ago: executing program 2 (id=2857): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listxattr(0x0, 0x0, 0x0) 718.470042ms ago: executing program 2 (id=2859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20044084}, 0x800) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 573.198932ms ago: executing program 3 (id=2866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) time(0x0) 514.935172ms ago: executing program 3 (id=2867): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000140)={0x0, 0x6}) 514.460782ms ago: executing program 3 (id=2868): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 493.674482ms ago: executing program 5 (id=2869): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 475.380611ms ago: executing program 5 (id=2870): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) 439.423401ms ago: executing program 5 (id=2871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 400.056202ms ago: executing program 5 (id=2873): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 399.574352ms ago: executing program 3 (id=2874): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@norecovery}, {@grpquota}, {@debug}, {@nombcache}]}, 0xee, 0x4b6, &(0x7f0000000980)="$eJzs3DtsHEUfAPD/rt95fPH3feGRkIAhPCIgduw8SEFDBBIFSEhQBFEZx4lCnBjFRiKRBYYilCgSPaJEokeiggYBBUKihR5FQshNAtWi3ds1Z/vOz4vtcL+fdOeZ3T3PzM7O7Xj+dw6gbQ3kT0nEroj4JSL21LILDxio/bg9NzP259zMWBJZ9uofSXHcrbmZserQ6nU7a5ksi+jJkz0Nyr3+RsToxMT4lTI/NH3p7aGpq9eOXLg0en78/PjlkVOnjh872H1y5ESxP1tn+9LyZ96uW/vfmzyw78XXb7w8dubGm99/kdd3V7m/vh3rki2t4UDt7C72UP702IYK21Z+zJ92121IOpsfPLgJFWL1OiIi766uIpdER/TN79sTL3y4hVUD7rAsy7JG9+eou29nwL9UYnxDm6ru9fnfv9Vjc2Ye28Pvz0XEkTIzNzN2e779nfNrB12L/r5tpYGIODP716f5I1qxDgEAsIKv8/nP043mf2ncW3fcf8oYSn9E/Dci/hcR/4+IvRFxT0Rx7H0Rl+5fY/mLIyRL5z/pzXU1bJXy+d+zRWwrn+XVz//K2V9f9HeUud1F+7uScxcmxo+W5+RwdPXk+eFlyvjm+Z8/rtK9i/bVz//yR15+NRcs63Gzc9EC3dnR6dEikWXZ+xtt/wcR+ztrsb3bC+a/SVRhnCQi9kXE/nWWceHJzw8027dy+5exTJxptbLPIp6oxTZnR3bVzkPZSfNdldTHJ/siYj4+OfzMyZETQ70xMX50qLoqlvrhp+uvNCt/Q+1vgbz/d0Tj/i/1J70RU1evXSzitVNrL+P6rx/VjekF0eW8/emXEWu+/ruT14p0d7nt3dHp6SvDEd3JS0VQa8H2kX9eW+Wr4/P2Hz7UqP1p8R5X1fiBiMgv4oMR8WAZxM377uGIeCQiDi3T/u9OP/pWs33N+7/ZqnxrVUNo2f6P+v5fe6Lj4rdfNSt/oIxBRnkeGvf/8SJ1uNwy//63jNVWcD3nDAAAAO42afEZ+CQdnE+n6eBg7TP8e2NHOjE5Nf3Uucl3Lp+tfVa+P7rSaqVrT9166HC5NlzlRxblj5Xrxp909BX5wbHJibNb3XhoczubjP/cbx1bXTvgjmtBHA24Sxn/0L6Mf2hfxj+0L+Mf2lej8b/RLxYAdwf3f2hfxfh/fHarqwFsgdXc/5PZdBNqAmw2839oS02/G59u6Cv/TRNJq39hw0T1vxM2o6yVE9X/otj00vvW/KrT5SXRu/Kpi7TFdc7nl9uiv7ZZonNJX0RnS4voabhrC9+UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWujvAAAA//+qNMrw") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="08000000020000000c000000c144d38fb1"], 0x0) 295.011351ms ago: executing program 5 (id=2878): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 230.335181ms ago: executing program 3 (id=2879): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x24c, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000580)={@id={0x2, 0x0, @a}}) 222.477871ms ago: executing program 4 (id=2880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 199.328911ms ago: executing program 4 (id=2881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) 170.688141ms ago: executing program 4 (id=2882): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 137.2561ms ago: executing program 5 (id=2883): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 136.77333ms ago: executing program 4 (id=2884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 48.343461ms ago: executing program 4 (id=2885): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 28.686881ms ago: executing program 4 (id=2886): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2887): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000500)={0x0, 0x7fff, 0x4}, 0x8) kernel console output (not intermixed with test programs): type=1326 audit(1736965553.262:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 54.520543][ T29] audit: type=1326 audit(1736965553.262:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 54.544093][ T29] audit: type=1326 audit(1736965553.262:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 54.567569][ T29] audit: type=1326 audit(1736965553.272:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 54.591454][ T29] audit: type=1326 audit(1736965553.272:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 54.614834][ T29] audit: type=1326 audit(1736965553.272:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 54.638435][ T29] audit: type=1326 audit(1736965553.272:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 54.661888][ T29] audit: type=1326 audit(1736965553.272:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 54.685866][ T5572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.820'. [ 54.804897][ T29] audit: type=1326 audit(1736965553.612:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5592 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1ea95d29 code=0x7ffc0000 [ 55.013268][ T5623] ipt_REJECT: ECHOREPLY no longer supported. [ 55.118351][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.130382][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.331881][ T5660] tun0: tun_chr_ioctl cmd 1074025677 [ 55.339114][ T5660] tun0: linktype set to 823 [ 55.361929][ T5664] ipt_REJECT: ECHOREPLY no longer supported. [ 55.466804][ T5676] loop3: detected capacity change from 0 to 512 [ 55.500499][ T5676] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.524655][ T5676] EXT4-fs (loop3): 1 truncate cleaned up [ 55.532965][ T5676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.645632][ T5699] ipt_REJECT: ECHOREPLY no longer supported. [ 55.663463][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.811172][ T5717] loop5: detected capacity change from 0 to 128 [ 55.828920][ T5717] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.877690][ T5717] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.888930][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 55.896680][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 55.909675][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.917482][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.925183][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.932856][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.940577][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.948281][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.956038][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.963747][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.971452][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.979174][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.986971][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 55.994814][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.002581][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.003035][ T5729] loop2: detected capacity change from 0 to 512 [ 56.010291][ T1049] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.025593][ T1049] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 56.031530][ T5729] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.064058][ T5717] futex_wake_op: syz.5.892 tries to shift op by 144; fix this program [ 56.084150][ T5729] EXT4-fs (loop2): 1 truncate cleaned up [ 56.091872][ T5729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.143047][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.183054][ T5733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.544009][ T5786] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 56.660365][ T5800] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 56.668266][ T5800] netlink: 220 bytes leftover after parsing attributes in process `syz.2.919'. [ 56.673229][ T5802] loop5: detected capacity change from 0 to 512 [ 56.708835][ T5802] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.728020][ T5802] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.920: bad orphan inode 131083 [ 56.740106][ T5802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.770404][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.879271][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 56.888155][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 57.110349][ T5846] loop5: detected capacity change from 0 to 512 [ 57.142321][ T5848] loop3: detected capacity change from 0 to 512 [ 57.162225][ T5848] EXT4-fs: Mount option(s) incompatible with ext3 [ 57.181016][ T5854] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 57.188826][ T5854] netlink: 220 bytes leftover after parsing attributes in process `syz.4.944'. [ 57.211828][ T5846] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 57.220130][ T5846] System zones: 0-2, 18-18, 34-34 [ 57.222648][ T5858] loop2: detected capacity change from 0 to 512 [ 57.234678][ T5846] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.940: bg 0: block 248: padding at end of block bitmap is not set [ 57.257381][ T5846] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.940: Failed to acquire dquot type 1 [ 57.273123][ T5846] EXT4-fs (loop5): 1 truncate cleaned up [ 57.279445][ T5846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.292418][ T5846] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.351555][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.364458][ T5858] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 57.372668][ T5858] System zones: 0-2, 18-18, 34-34 [ 57.385109][ T5858] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.946: bg 0: block 248: padding at end of block bitmap is not set [ 57.420542][ T5858] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.946: Failed to acquire dquot type 1 [ 57.433240][ T5858] EXT4-fs (loop2): 1 truncate cleaned up [ 57.439396][ T5858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.473712][ T5858] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.558564][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.575708][ T144] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 1 [ 57.624967][ T5890] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.750132][ T5907] netlink: 'syz.4.966': attribute type 3 has an invalid length. [ 57.757900][ T5907] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.966'. [ 57.814212][ T5913] loop5: detected capacity change from 0 to 512 [ 57.875660][ T5913] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.890936][ T5913] EXT4-fs (loop5): mount failed [ 57.995107][ T5940] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.103221][ T5957] program syz.4.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.200830][ T5968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5968 comm=syz.4.997 [ 58.220101][ T5970] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.417672][ T5986] loop4: detected capacity change from 0 to 512 [ 58.444557][ T5986] EXT4-fs: Mount option(s) incompatible with ext3 [ 58.557395][ T6005] loop1: detected capacity change from 0 to 2048 [ 58.570336][ T6002] loop4: detected capacity change from 0 to 512 [ 58.584841][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.636314][ T6002] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 58.668193][ T6002] System zones: 0-2, 18-18, 34-34 [ 58.676088][ T6002] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1007: bg 0: block 248: padding at end of block bitmap is not set [ 58.691921][ T5145] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.708783][ T6002] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1007: Failed to acquire dquot type 1 [ 58.721850][ T6002] EXT4-fs (loop4): 1 truncate cleaned up [ 58.729051][ T6002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.743349][ T6002] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.807803][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.865764][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.948490][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.027067][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.087293][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.200715][ T36] bridge_slave_1: left allmulticast mode [ 59.206461][ T36] bridge_slave_1: left promiscuous mode [ 59.212164][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.258191][ T36] bridge_slave_0: left allmulticast mode [ 59.264122][ T36] bridge_slave_0: left promiscuous mode [ 59.269934][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.466497][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.478779][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.498624][ T36] bond0 (unregistering): Released all slaves [ 59.533278][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 59.533294][ T29] audit: type=1400 audit(1736965558.332:1056): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.561619][ T29] audit: type=1400 audit(1736965558.342:1057): avc: denied { read } for pid=3038 comm="dhcpcd" name="n34" dev="tmpfs" ino=4823 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.583427][ T29] audit: type=1400 audit(1736965558.342:1058): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n34" dev="tmpfs" ino=4823 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.606812][ T29] audit: type=1400 audit(1736965558.342:1059): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n34" dev="tmpfs" ino=4823 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.649363][ T36] hsr_slave_0: left promiscuous mode [ 59.682139][ T29] audit: type=1400 audit(1736965558.482:1060): avc: denied { read } for pid=6083 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.711641][ T29] audit: type=1400 audit(1736965558.512:1061): avc: denied { open } for pid=6083 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.736913][ T29] audit: type=1400 audit(1736965558.512:1062): avc: denied { getattr } for pid=6083 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.767216][ T29] audit: type=1400 audit(1736965558.572:1063): avc: denied { create } for pid=6081 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 59.789432][ T36] hsr_slave_1: left promiscuous mode [ 59.824518][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.832012][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.833644][ T29] audit: type=1400 audit(1736965558.622:1064): avc: denied { write } for pid=6077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.862765][ T29] audit: type=1400 audit(1736965558.622:1065): avc: denied { add_name } for pid=6077 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.889010][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.896605][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.916050][ T36] veth1_macvtap: left promiscuous mode [ 59.921601][ T36] veth0_macvtap: left promiscuous mode [ 59.928050][ T36] veth1_vlan: left promiscuous mode [ 59.933286][ T36] veth0_vlan: left promiscuous mode [ 60.015366][ T36] team0 (unregistering): Port device team_slave_1 removed [ 60.025250][ T36] team0 (unregistering): Port device team_slave_0 removed [ 60.064365][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 60.234771][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.241982][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.249384][ T6025] bridge_slave_0: entered allmulticast mode [ 60.256009][ T6025] bridge_slave_0: entered promiscuous mode [ 60.262865][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.270060][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.277395][ T6025] bridge_slave_1: entered allmulticast mode [ 60.298387][ T6025] bridge_slave_1: entered promiscuous mode [ 60.413062][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.423738][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.471792][ T6161] loop4: detected capacity change from 0 to 512 [ 60.516479][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.525205][ T6163] batadv_slave_0: entered promiscuous mode [ 60.533170][ T6163] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 60.541652][ T6161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.550418][ T6025] team0: Port device team_slave_0 added [ 60.586959][ T6025] team0: Port device team_slave_1 added [ 60.601261][ T6161] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.657917][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.664998][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.691395][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.724575][ T6178] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 60.725863][ T6161] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 60.745412][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.759826][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.786085][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.808044][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.895931][ T6025] hsr_slave_0: entered promiscuous mode [ 60.905290][ T6025] hsr_slave_1: entered promiscuous mode [ 60.912165][ T6025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.920196][ T6025] Cannot create hsr debugfs directory [ 61.107947][ T6025] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 61.128067][ T6025] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 61.142138][ T6025] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 61.155413][ T6025] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 61.210871][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.267231][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.291494][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.298654][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.317984][ T6025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.328512][ T6025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.361836][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.368970][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.477876][ T6025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.774948][ T6025] veth0_vlan: entered promiscuous mode [ 61.783385][ T6025] veth1_vlan: entered promiscuous mode [ 61.832118][ T6025] veth0_macvtap: entered promiscuous mode [ 61.853057][ T6025] veth1_macvtap: entered promiscuous mode [ 61.888139][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.898683][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.908549][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.919571][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.929427][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.939939][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.951132][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.959678][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.970299][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.980203][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.990658][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.000514][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.011034][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.021047][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.031621][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.042529][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.077012][ T6310] team_slave_0: entered promiscuous mode [ 62.082758][ T6310] team_slave_1: entered promiscuous mode [ 62.091219][ T6310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.108718][ T6310] team0: Device macvlan2 is already an upper device of the team interface [ 62.118341][ T6310] team_slave_0: left promiscuous mode [ 62.123815][ T6310] team_slave_1: left promiscuous mode [ 62.140382][ T6025] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.149255][ T6025] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.157995][ T6025] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.166867][ T6025] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.202759][ T6320] loop4: detected capacity change from 0 to 256 [ 62.212962][ T6318] syz_tun: entered promiscuous mode [ 62.220704][ T6318] syz_tun: left promiscuous mode [ 62.512527][ T6358] SELinux: syz.6.1116 (6358) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 62.779461][ T6393] loop2: detected capacity change from 0 to 2048 [ 62.835117][ T6393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.858268][ T6393] EXT4-fs: Ignoring removed bh option [ 62.868409][ T6393] EXT4-fs (loop2): can't disable delalloc during remount [ 63.001134][ T6429] loop6: detected capacity change from 0 to 1024 [ 63.010614][ T6433] usb usb9: usbfs: process 6433 (syz.4.1142) did not claim interface 7 before use [ 63.022679][ T3307] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 63.047840][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.067808][ T6429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.083292][ T6429] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.6.1139: corrupted in-inode xattr: bad magic number in in-inode xattr [ 63.217055][ T6451] loop4: detected capacity change from 0 to 512 [ 63.224271][ T6451] EXT4-fs: Ignoring removed i_version option [ 63.230355][ T6451] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.253315][ T6455] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1151'. [ 63.274547][ T6451] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.309252][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.316570][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.335337][ T6451] EXT4-fs (loop4): 1 truncate cleaned up [ 63.610680][ T6493] xt_CT: No such helper "snmp" [ 63.708872][ T6501] loop4: detected capacity change from 0 to 1024 [ 63.722932][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.733811][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.758750][ T6501] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.790118][ T6507] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1168'. [ 63.802291][ T6501] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 63.828115][ T6501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.857179][ T6501] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 63.867107][ T6501] EXT4-fs (loop4): Remounting filesystem read-only [ 63.873818][ T6501] EXT4-fs (loop4): 1 orphan inode deleted [ 63.881851][ T6501] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 64.003627][ T6524] loop4: detected capacity change from 0 to 4096 [ 64.440984][ T6565] loop2: detected capacity change from 0 to 512 [ 64.447621][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1191'. [ 64.540718][ T6565] EXT4-fs (loop2): too many log groups per flexible block group [ 64.548512][ T6565] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 64.573795][ T6565] EXT4-fs (loop2): mount failed [ 64.593072][ T6584] syz.6.1200[6584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.593206][ T6584] syz.6.1200[6584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.610659][ T6584] syz.6.1200[6584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.668528][ T6585] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1197'. [ 64.797642][ T6603] loop5: detected capacity change from 0 to 512 [ 64.816402][ T6603] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 64.833661][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 64.833678][ T29] audit: type=1400 audit(1736965563.632:1185): avc: denied { ioctl } for pid=6604 comm="syz.2.1208" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.922493][ T6607] loop5: detected capacity change from 0 to 1024 [ 64.935644][ T6609] loop2: detected capacity change from 0 to 1024 [ 64.961246][ T6611] x_tables: duplicate underflow at hook 1 [ 65.033729][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1213'. [ 65.073795][ T29] audit: type=1326 audit(1736965563.852:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 65.097297][ T29] audit: type=1326 audit(1736965563.852:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 65.120886][ T29] audit: type=1326 audit(1736965563.852:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 65.144858][ T29] audit: type=1326 audit(1736965563.852:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 65.168435][ T29] audit: type=1326 audit(1736965563.852:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 65.205372][ T29] audit: type=1400 audit(1736965564.012:1191): avc: denied { create } for pid=6625 comm="syz.4.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.249464][ T29] audit: type=1326 audit(1736965564.052:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 65.278615][ T29] audit: type=1400 audit(1736965564.052:1193): avc: denied { write } for pid=6629 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.298234][ T29] audit: type=1326 audit(1736965564.082:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 65.346472][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 65.355484][ T6638] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 65.564911][ T6661] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1229'. [ 65.573989][ T6661] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1229'. [ 65.583039][ T6661] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1229'. [ 65.713955][ T6680] syz.4.1235 (6680) used greatest stack depth: 8864 bytes left [ 65.835382][ T6702] SELinux: policydb version 0 does not match my version range 15-33 [ 65.845477][ T6702] SELinux: failed to load policy [ 65.971641][ T6723] loop2: detected capacity change from 0 to 1024 [ 65.979532][ T6723] EXT4-fs: Ignoring removed nobh option [ 66.000513][ T6727] loop6: detected capacity change from 0 to 128 [ 66.009382][ T6723] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.032193][ T6723] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.1260: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 66.066455][ T6723] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1260: couldn't read orphan inode 11 (err -117) [ 66.096100][ T6723] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1260: Invalid block bitmap block 0 in block_group 0 [ 66.122901][ T6723] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1260: Failed to acquire dquot type 0 [ 66.136231][ T6723] EXT4-fs error (device loop2): ext4_nfs_get_inode:1545: inode #11: comm syz.2.1260: iget: bad extra_isize 65535 (inode size 256) [ 66.600488][ T6796] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1294'. [ 66.672898][ T6803] loop2: detected capacity change from 0 to 2048 [ 66.698792][ T6803] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 66.887730][ T6831] bond1: entered promiscuous mode [ 66.892879][ T6831] bond1: entered allmulticast mode [ 66.903925][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.926739][ T6831] bond1 (unregistering): Released all slaves [ 67.190258][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 67.198115][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 67.207416][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.215291][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.223213][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.231071][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.239054][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.246920][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.254653][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.262430][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.270411][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.278146][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.286190][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.291675][ T6854] loop2: detected capacity change from 0 to 512 [ 67.294163][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.294195][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.294222][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 67.323285][ T6854] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 67.324762][ T35] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 67.401460][ T6858] smc: net device bond0 applied user defined pnetid S [ 67.409266][ T6858] smc: net device bond0 erased user defined pnetid S [ 67.461510][ T6865] autofs4:pid:6865:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 67.474762][ T6865] autofs4:pid:6865:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 67.501445][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 67.509298][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 67.522303][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.530433][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.538730][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.546770][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.552243][ T6873] bond1: entered promiscuous mode [ 67.555031][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.560095][ T6873] bond1: entered allmulticast mode [ 67.567869][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.573245][ T6873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.580996][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.595596][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.603295][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.611328][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.619093][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.626867][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.634645][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.642348][ T35] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 67.664428][ T6873] bond1 (unregistering): Released all slaves [ 67.710191][ T35] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 67.905233][ T6901] loop5: detected capacity change from 0 to 2048 [ 67.942237][ T6901] Alternate GPT is invalid, using primary GPT. [ 67.948704][ T6901] loop5: p2 p3 p7 [ 68.096952][ T6927] bond1: entered promiscuous mode [ 68.102129][ T6927] bond1: entered allmulticast mode [ 68.134885][ T6927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.147487][ T6933] loop6: detected capacity change from 0 to 512 [ 68.154195][ T6933] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 68.158980][ T6927] bond1 (unregistering): Released all slaves [ 68.231830][ T6937] smc: net device bond0 applied user defined pnetid S [ 68.243965][ T6937] smc: net device bond0 erased user defined pnetid S [ 68.415056][ T6953] __nla_validate_parse: 2 callbacks suppressed [ 68.415073][ T6953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1359'. [ 68.549737][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.574064][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.685562][ T6975] smc: net device bond0 applied user defined pnetid S [ 68.692854][ T6975] smc: net device bond0 erased user defined pnetid S [ 68.754037][ T6979] bond1: entered promiscuous mode [ 68.759165][ T6979] bond1: entered allmulticast mode [ 68.776903][ T6979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.788488][ T6979] bond1 (unregistering): Released all slaves [ 68.797552][ T6978] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1368'. [ 68.917674][ T6986] loop3: detected capacity change from 0 to 512 [ 68.941403][ T6986] EXT4-fs: Ignoring removed i_version option [ 68.947630][ T6986] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.956061][ T6986] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.994732][ T6986] EXT4-fs (loop3): 1 truncate cleaned up [ 69.000998][ T6986] EXT4-fs mount: 15 callbacks suppressed [ 69.001087][ T6986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.046227][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.428400][ T7029] loop6: detected capacity change from 0 to 512 [ 69.441491][ T7029] EXT4-fs: Ignoring removed i_version option [ 69.447651][ T7029] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.474797][ T7029] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 69.509812][ T7029] EXT4-fs (loop6): 1 truncate cleaned up [ 69.516155][ T7029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.599145][ T6025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.600984][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.618970][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.827011][ T7064] SELinux: syz.5.1403 (7064) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 70.069819][ T7076] netlink: 'syz.3.1419': attribute type 21 has an invalid length. [ 70.159234][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 70.159251][ T29] audit: type=1400 audit(1736965568.962:1322): avc: granted { setsecparam } for pid=7082 comm="syz.3.1411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 70.206004][ T7087] syz_tun: entered promiscuous mode [ 70.223040][ T7087] syz_tun: left promiscuous mode [ 70.355365][ T7101] loop5: detected capacity change from 0 to 512 [ 70.405154][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.412531][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.429741][ T7101] EXT4-fs (loop5): too many log groups per flexible block group [ 70.437536][ T7101] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 70.451102][ T7101] EXT4-fs (loop5): mount failed [ 70.546421][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.577500][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.623664][ T7133] syz_tun: entered promiscuous mode [ 70.630667][ T7133] syz_tun: left promiscuous mode [ 70.869651][ T7144] loop2: detected capacity change from 0 to 512 [ 70.886143][ T7144] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 70.895544][ T7144] System zones: 0-2, 18-18, 34-34 [ 70.901616][ T7144] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1437: bg 0: block 248: padding at end of block bitmap is not set [ 70.917989][ T7144] Quota error (device loop2): write_blk: dquota write failed [ 70.925539][ T7144] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.938254][ T7144] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1437: Failed to acquire dquot type 1 [ 70.971520][ T7144] EXT4-fs (loop2): 1 truncate cleaned up [ 70.977746][ T7144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.990473][ T7144] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.019971][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.580534][ T7173] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 71.587102][ T7173] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 71.594997][ T7173] vhci_hcd vhci_hcd.0: Device attached [ 71.602509][ T7176] vhci_hcd: connection closed [ 71.602670][ T3418] vhci_hcd: stop threads [ 71.611729][ T3418] vhci_hcd: release socket [ 71.616241][ T3418] vhci_hcd: disconnect device [ 71.633871][ T7181] IPv6: sit1: Disabled Multicast RS [ 71.640107][ T7181] sit1: entered allmulticast mode [ 71.716392][ T7183] program syz.6.1451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.857763][ T7186] loop4: detected capacity change from 0 to 512 [ 71.873473][ T7186] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.889678][ T7189] netlink: 'syz.2.1455': attribute type 7 has an invalid length. [ 71.905739][ T7186] EXT4-fs (loop4): 1 truncate cleaned up [ 71.913528][ T7186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.937991][ T7195] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.955851][ T29] audit: type=1400 audit(1736965570.762:1323): avc: denied { read append open } for pid=7184 comm="syz.4.1452" path="/269/file2/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.016690][ T29] audit: type=1400 audit(1736965570.792:1324): avc: denied { ioctl } for pid=7184 comm="syz.4.1452" path="/269/file2/cgroup.controllers" dev="loop4" ino=18 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.020817][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.042221][ T29] audit: type=1326 audit(1736965570.802:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717d55d29 code=0x7ffc0000 [ 72.074873][ T29] audit: type=1326 audit(1736965570.802:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717d55d29 code=0x7ffc0000 [ 72.098610][ T29] audit: type=1326 audit(1736965570.802:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f5717d55d29 code=0x7ffc0000 [ 72.137909][ T7206] loop5: detected capacity change from 0 to 1024 [ 72.165940][ T29] audit: type=1326 audit(1736965570.952:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d26c5d29 code=0x7ffc0000 [ 72.189448][ T29] audit: type=1326 audit(1736965570.952:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.4.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d26c5d29 code=0x7ffc0000 [ 72.256948][ T7213] netpci0: tun_chr_ioctl cmd 1074025676 [ 72.262591][ T7213] netpci0: owner set to 0 [ 72.270553][ T7206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.315642][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.401457][ T7232] loop3: detected capacity change from 0 to 256 [ 72.417698][ T7232] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.592712][ T7251] loop4: detected capacity change from 0 to 512 [ 72.650164][ T7251] EXT4-fs (loop4): too many log groups per flexible block group [ 72.658319][ T7251] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 72.666287][ T7251] EXT4-fs (loop4): mount failed [ 72.755957][ T7270] program syz.4.1484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.766404][ T7269] usb usb9: usbfs: process 7269 (syz.5.1494) did not claim interface 7 before use [ 72.925062][ T7283] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 72.946897][ T7290] loop2: detected capacity change from 0 to 512 [ 72.965773][ T7290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.981636][ T7290] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.038122][ T7290] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 73.075009][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.115614][ T7301] loop4: detected capacity change from 0 to 1024 [ 73.137478][ T7301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.140759][ T7304] loop6: detected capacity change from 0 to 512 [ 73.158294][ T7301] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.4.1498: corrupted in-inode xattr: bad magic number in in-inode xattr [ 73.164823][ T7304] EXT4-fs (loop6): too many log groups per flexible block group [ 73.181666][ T7304] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 73.188938][ T7304] EXT4-fs (loop6): mount failed [ 73.235071][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.256301][ T7315] loop6: detected capacity change from 0 to 1024 [ 73.280339][ T7315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.308887][ T7315] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.328998][ T7315] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1502: bg 0: block 393: padding at end of block bitmap is not set [ 73.357809][ T7315] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 73.370400][ T7315] EXT4-fs (loop6): This should not happen!! Data will be lost [ 73.370400][ T7315] [ 73.424483][ T6025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.538527][ T7344] loop6: detected capacity change from 0 to 512 [ 73.565667][ T7344] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1514: bg 0: block 248: padding at end of block bitmap is not set [ 73.588806][ T7344] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1514: Failed to acquire dquot type 1 [ 73.603247][ T7352] tap0: tun_chr_ioctl cmd 35111 [ 73.611074][ T7344] EXT4-fs (loop6): 1 truncate cleaned up [ 73.618200][ T7344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.631258][ T7344] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.722584][ T6025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.819457][ T7381] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 73.989748][ T7410] netlink: 'syz.5.1531': attribute type 1 has an invalid length. [ 74.006917][ T7406] loop6: detected capacity change from 0 to 8192 [ 74.018522][ T7406] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.324780][ T7443] tap0: tun_chr_ioctl cmd 35111 [ 74.723984][ T7493] loop2: detected capacity change from 0 to 512 [ 74.731751][ T7493] EXT4-fs: Ignoring removed oldalloc option [ 74.742378][ T7493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.775819][ T7493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.788766][ T7493] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.853957][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.967505][ T7523] tmpfs: Bad value for 'mpol' [ 75.101421][ T7542] vhci_hcd: invalid port number 254 [ 75.106811][ T7542] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 75.175578][ T7552] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1571'. [ 75.312013][ T7575] loop2: detected capacity change from 0 to 256 [ 75.402689][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 75.402707][ T29] audit: type=1326 audit(1736965574.202:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 75.457852][ T29] audit: type=1326 audit(1736965574.242:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 75.481359][ T29] audit: type=1326 audit(1736965574.242:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 75.505036][ T29] audit: type=1326 audit(1736965574.242:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 75.528660][ T29] audit: type=1326 audit(1736965574.242:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7589 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 75.638476][ T7600] loop2: detected capacity change from 0 to 8192 [ 75.681684][ T29] audit: type=1326 audit(1736965574.482:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 75.705196][ T29] audit: type=1326 audit(1736965574.482:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 75.748363][ T7607] tmpfs: Bad value for 'mpol' [ 75.775368][ T7600] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.831875][ T7610] loop4: detected capacity change from 0 to 512 [ 75.859535][ T7610] EXT4-fs: Ignoring removed oldalloc option [ 75.899560][ T7610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.927460][ T29] audit: type=1326 audit(1736965574.532:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 75.951227][ T29] audit: type=1326 audit(1736965574.532:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 75.974784][ T29] audit: type=1326 audit(1736965574.532:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4707c05d29 code=0x7ffc0000 [ 76.049987][ T7610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.062792][ T7610] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.089497][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.240354][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 76.249366][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1599'. [ 76.319759][ T7638] loop4: detected capacity change from 0 to 512 [ 76.327434][ T7638] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.348101][ T7638] EXT4-fs (loop4): 1 orphan inode deleted [ 76.353989][ T7638] EXT4-fs (loop4): 1 truncate cleaned up [ 76.361168][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.390682][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.420957][ T7649] tmpfs: Bad value for 'mpol' [ 76.457806][ T7654] netlink: 'syz.4.1608': attribute type 298 has an invalid length. [ 76.475061][ T7656] loop5: detected capacity change from 0 to 512 [ 76.489997][ T7656] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 76.498514][ T7656] System zones: 0-2, 18-18, 34-34 [ 76.507957][ T7656] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1609: bg 0: block 248: padding at end of block bitmap is not set [ 76.524628][ T7656] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1609: Failed to acquire dquot type 1 [ 76.540450][ T7656] EXT4-fs (loop5): 1 truncate cleaned up [ 76.550677][ T7656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.569927][ T7656] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.599925][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.746128][ T7680] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 76.912491][ T7698] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 77.092920][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1635'. [ 77.209328][ T7732] syz.2.1641[7732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.209515][ T7732] syz.2.1641[7732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.225149][ T7732] syz.2.1641[7732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.240640][ T7735] loop3: detected capacity change from 0 to 128 [ 77.417183][ T7750] binfmt_misc: register: failed to install interpreter file ./file0 [ 77.485345][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1656'. [ 77.494405][ T7761] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1656'. [ 77.504698][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1656'. [ 77.513762][ T7761] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1656'. [ 77.523257][ T7761] Zero length message leads to an empty skb [ 77.573541][ T7770] loop6: detected capacity change from 0 to 512 [ 77.623720][ T7770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 77.684253][ T7770] EXT4-fs (loop6): 1 truncate cleaned up [ 77.691405][ T7770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.766349][ T6025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.767101][ T7775] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.956135][ T7799] tmpfs: Bad value for 'mpol' [ 78.233999][ T7835] loop2: detected capacity change from 0 to 512 [ 78.247213][ T7835] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.257906][ T7836] program syz.5.1686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.268463][ T7836] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 78.279283][ T7835] EXT4-fs (loop2): 1 truncate cleaned up [ 78.287582][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.324723][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.492753][ T7864] loop5: detected capacity change from 0 to 128 [ 78.603029][ T568] kworker/u8:6: attempt to access beyond end of device [ 78.603029][ T568] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 78.645374][ T7885] loop5: detected capacity change from 0 to 128 [ 78.664252][ T7885] FAT-fs (loop5): bogus number of reserved sectors [ 78.670841][ T7885] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 78.680247][ T7885] FAT-fs (loop5): Can't find a valid FAT filesystem [ 78.765207][ T7900] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1718'. [ 78.909763][ T7919] loop6: detected capacity change from 0 to 128 [ 78.945563][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1734'. [ 78.947603][ T7919] FAT-fs (loop6): bogus number of reserved sectors [ 78.961086][ T7919] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 78.970514][ T7919] FAT-fs (loop6): Can't find a valid FAT filesystem [ 79.140921][ T7942] program syz.3.1741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.161313][ T7942] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 79.301568][ T7968] loop5: detected capacity change from 0 to 1024 [ 79.447272][ T7968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.474011][ T7986] loop6: detected capacity change from 0 to 512 [ 79.485788][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.561659][ T7986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.574495][ T7986] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.659956][ T8004] netlink: 'syz.4.1769': attribute type 5 has an invalid length. [ 79.737197][ T6025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.797587][ T8019] bond1: entered promiscuous mode [ 79.803086][ T8019] bond1: entered allmulticast mode [ 79.807230][ T8020] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 79.822328][ T8019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.911317][ T8032] loop3: detected capacity change from 0 to 256 [ 79.919600][ T8032] FAT-fs (loop3): bogus number of FAT sectors [ 79.925818][ T8032] FAT-fs (loop3): Can't find a valid FAT filesystem [ 79.935896][ T8036] vhci_hcd: invalid port number 51 [ 79.941092][ T8036] vhci_hcd: default hub control req: 80fc v0800 i0033 l219 [ 79.989511][ T8039] loop3: detected capacity change from 0 to 256 [ 80.180630][ T8066] loop2: detected capacity change from 0 to 512 [ 80.207147][ T8069] loop3: detected capacity change from 0 to 1024 [ 80.225223][ T8066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.238111][ T8066] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.250440][ T8069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.265913][ T8080] vhci_hcd: invalid port number 51 [ 80.271084][ T8080] vhci_hcd: default hub control req: 80fc v0800 i0033 l219 [ 80.286682][ T8079] loop4: detected capacity change from 0 to 512 [ 80.315145][ T8079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.333909][ T8079] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.345086][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.355731][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.410263][ T8094] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.416035][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.516052][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 80.516071][ T29] audit: type=1326 audit(1736965579.322:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.545877][ T29] audit: type=1326 audit(1736965579.322:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.569441][ T29] audit: type=1326 audit(1736965579.322:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.593085][ T29] audit: type=1326 audit(1736965579.322:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.616571][ T29] audit: type=1326 audit(1736965579.322:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.674236][ T8120] __nla_validate_parse: 3 callbacks suppressed [ 80.674254][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1820'. [ 80.703165][ T8120] bond1: entered promiscuous mode [ 80.708399][ T8120] bond1: entered allmulticast mode [ 80.713894][ T29] audit: type=1326 audit(1736965579.322:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.737709][ T29] audit: type=1326 audit(1736965579.412:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.743734][ T8120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.761152][ T29] audit: type=1326 audit(1736965579.422:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.791319][ T29] audit: type=1326 audit(1736965579.492:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.814854][ T29] audit: type=1326 audit(1736965579.492:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 80.917976][ T8139] loop5: detected capacity change from 0 to 512 [ 80.925050][ T8137] loop2: detected capacity change from 0 to 256 [ 81.005135][ T8139] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm GPL: casefold flag without casefold feature [ 81.028571][ T8139] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm GPL: couldn't read orphan inode 15 (err -117) [ 81.040614][ T8139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.079963][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.134587][ T8174] loop6: detected capacity change from 0 to 256 [ 81.241776][ T8188] loop3: detected capacity change from 0 to 512 [ 81.266713][ T8188] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm GPL: casefold flag without casefold feature [ 81.280110][ T8188] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm GPL: couldn't read orphan inode 15 (err -117) [ 81.304571][ T8188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.370860][ T8211] loop5: detected capacity change from 0 to 256 [ 81.380279][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.607489][ T8241] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 81.674170][ T8212] loop2: detected capacity change from 0 to 32768 [ 81.725357][ T8212] loop2: p1 p2 p3 < p5 p6 > [ 81.730205][ T8212] loop2: p1 size 242222080 extends beyond EOD, truncated [ 81.738576][ T8212] loop2: p2 start 4294967295 is beyond EOD, truncated [ 81.782865][ T8268] dummy0: entered promiscuous mode [ 81.813818][ T8268] macvtap1: entered promiscuous mode [ 81.819262][ T8268] macvtap1: entered allmulticast mode [ 81.824731][ T8268] dummy0: entered allmulticast mode [ 81.852192][ T8268] dummy0: left allmulticast mode [ 81.857375][ T8268] dummy0: left promiscuous mode [ 82.107315][ T8302] SELinux: syz.4.1905 (8302) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.114136][ T8304] sctp: [Deprecated]: syz.3.1907 (pid 8304) Use of int in maxseg socket option. [ 82.114136][ T8304] Use struct sctp_assoc_value instead [ 82.213536][ T8318] loop2: detected capacity change from 0 to 256 [ 82.251076][ T8323] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 82.309164][ T8329] sctp: [Deprecated]: syz.4.1918 (pid 8329) Use of int in maxseg socket option. [ 82.309164][ T8329] Use struct sctp_assoc_value instead [ 82.437499][ T8343] loop5: detected capacity change from 0 to 2048 [ 82.445614][ T8343] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 82.474074][ T8343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.495923][ T8343] EXT4-fs (loop5): shut down requested (1) [ 82.557487][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.641959][ T8367] SELinux: syz.4.1935 (8367) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.710397][ T8356] loop6: detected capacity change from 0 to 32768 [ 82.762173][ T8373] loop5: detected capacity change from 0 to 8192 [ 82.768982][ T8356] loop6: p1 p2 p3 < p5 p6 > [ 82.773913][ T8356] loop6: p1 size 242222080 extends beyond EOD, truncated [ 82.782235][ T8356] loop6: p2 start 4294967295 is beyond EOD, truncated [ 82.823871][ T8373] loop5: p1 p2 p3 p4 [ 82.827990][ T8373] loop5: p1 start 51379968 is beyond EOD, truncated [ 82.836478][ T8373] loop5: p3 size 100663552 extends beyond EOD, truncated [ 82.860091][ T8373] loop5: p4 size 81920 extends beyond EOD, truncated [ 82.985041][ T8401] loop5: detected capacity change from 0 to 1764 [ 82.995300][ T8401] ISOFS: unable to read i-node block [ 83.000657][ T8401] isofs_fill_super: get root inode failed [ 83.030580][ T8401] loop5: detected capacity change from 0 to 256 [ 83.055704][ T8415] loop6: detected capacity change from 0 to 128 [ 83.069675][ T8415] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 83.082259][ T8415] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 83.090217][ T8415] FAT-fs (loop6): Filesystem has been set read-only [ 83.101212][ T8415] syz.6.1958: attempt to access beyond end of device [ 83.101212][ T8415] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 83.117713][ T8415] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 83.125699][ T8415] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 83.143639][ T8415] syz.6.1958: attempt to access beyond end of device [ 83.143639][ T8415] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.156155][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 83.160320][ T8415] syz.6.1958: attempt to access beyond end of device [ 83.160320][ T8415] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.195209][ T8415] syz.6.1958: attempt to access beyond end of device [ 83.195209][ T8415] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 83.347931][ T8456] loop6: detected capacity change from 0 to 2048 [ 83.373468][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1989'. [ 83.373595][ T8465] syz.3.1981[8465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.382578][ T8465] syz.3.1981[8465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.403778][ T8465] syz.3.1981[8465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.427349][ T8465] x_tables: duplicate underflow at hook 1 [ 83.447249][ T8456] Alternate GPT is invalid, using primary GPT. [ 83.453693][ T8456] loop6: p1 p2 p3 [ 83.514237][ T8470] loop4: detected capacity change from 0 to 8192 [ 83.565109][ T8470] loop4: p1 p2 p3 p4 [ 83.569229][ T8470] loop4: p1 start 51379968 is beyond EOD, truncated [ 83.587364][ T8470] loop4: p3 size 100663552 extends beyond EOD, truncated [ 83.600529][ T8470] loop4: p4 size 81920 extends beyond EOD, truncated [ 83.622333][ T8494] loop2: detected capacity change from 0 to 1764 [ 83.631802][ T8494] ISOFS: unable to read i-node block [ 83.637216][ T8494] isofs_fill_super: get root inode failed [ 83.666384][ T8494] loop2: detected capacity change from 0 to 256 [ 83.713407][ T8504] loop5: detected capacity change from 0 to 2048 [ 83.766668][ T8504] Alternate GPT is invalid, using primary GPT. [ 83.773082][ T8504] loop5: p1 p2 p3 [ 83.870491][ T8528] loop3: detected capacity change from 0 to 512 [ 83.885342][ T8533] loop5: detected capacity change from 0 to 128 [ 83.892500][ T8528] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.899356][ T8533] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 83.909224][ T8528] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 83.920803][ T8533] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 83.928796][ T8533] FAT-fs (loop5): Filesystem has been set read-only [ 83.936472][ T8528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 83.944614][ T8533] syz.5.2013: attempt to access beyond end of device [ 83.944614][ T8533] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 83.959863][ T8528] System zones: 1-12 [ 83.965000][ T8528] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2009: corrupted in-inode xattr: e_value size too large [ 83.969237][ T8533] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 83.986221][ T8528] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2009: couldn't read orphan inode 15 (err -117) [ 83.987084][ T8533] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 84.013083][ T8528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.018812][ T8533] syz.5.2013: attempt to access beyond end of device [ 84.018812][ T8533] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.055522][ T8533] syz.5.2013: attempt to access beyond end of device [ 84.055522][ T8533] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.116533][ T8533] syz.5.2013: attempt to access beyond end of device [ 84.116533][ T8533] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.133489][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2015'. [ 84.163335][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.216238][ T8550] loop2: detected capacity change from 0 to 2048 [ 84.238201][ T8550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.271437][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.292824][ T8561] xt_hashlimit: max too large, truncated to 1048576 [ 84.315042][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2027'. [ 84.331576][ T8569] syz.5.2028[8569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.331730][ T8569] syz.5.2028[8569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.343901][ T8569] syz.5.2028[8569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.387759][ T8578] syz.5.2033[8578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.406843][ T8576] loop2: detected capacity change from 0 to 2048 [ 84.426624][ T8578] syz.5.2033[8578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.426702][ T8578] syz.5.2033[8578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.447653][ T8584] loop4: detected capacity change from 0 to 512 [ 84.466117][ T8584] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.486504][ T8576] Alternate GPT is invalid, using primary GPT. [ 84.492408][ T8584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 84.492912][ T8576] loop2: p1 p2 p3 [ 84.500718][ T8584] System zones: 1-12 [ 84.509585][ T8584] EXT4-fs (loop4): 1 truncate cleaned up [ 84.515651][ T8584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.547246][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.606625][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2043'. [ 84.648153][ T8605] loop5: detected capacity change from 0 to 1024 [ 84.661168][ T8605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.688184][ T8605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.761094][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.800156][ T8628] loop4: detected capacity change from 0 to 128 [ 84.809223][ T8625] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 84.871313][ T11] kworker/u8:0: attempt to access beyond end of device [ 84.871313][ T11] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 84.959430][ T8649] loop5: detected capacity change from 0 to 1024 [ 84.969858][ T8649] EXT4-fs: Ignoring removed nobh option [ 84.975635][ T8649] ext4: Unknown parameter 'noacl' [ 85.022956][ T8655] syz.6.2068[8655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.023025][ T8653] loop5: detected capacity change from 0 to 512 [ 85.044591][ T8653] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.057400][ T8653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 85.077512][ T8653] System zones: 1-12 [ 85.087935][ T8653] EXT4-fs (loop5): 1 truncate cleaned up [ 85.096970][ T8653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.147731][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.185384][ T8662] loop5: detected capacity change from 0 to 512 [ 85.209814][ T8662] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 85.220558][ T8662] EXT4-fs (loop5): invalid journal inode [ 85.238302][ T8662] EXT4-fs (loop5): can't get journal size [ 85.244278][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'. [ 85.247056][ T8662] EXT4-fs (loop5): 1 truncate cleaned up [ 85.260626][ T8670] loop6: detected capacity change from 0 to 1024 [ 85.260871][ T8662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.291861][ T8662] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 85.304396][ T8670] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.336932][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.346462][ T8670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.392232][ T6025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.484994][ T8683] loop2: detected capacity change from 0 to 2048 [ 85.519675][ T8683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.573755][ T8683] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 85.588735][ T8683] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 85.601174][ T8683] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.601174][ T8683] [ 85.610922][ T8683] EXT4-fs (loop2): Total free blocks count 0 [ 85.617066][ T8683] EXT4-fs (loop2): Free/Dirty block details [ 85.623110][ T8683] EXT4-fs (loop2): free_blocks=2415919504 [ 85.628926][ T8683] EXT4-fs (loop2): dirty_blocks=32 [ 85.634166][ T8683] EXT4-fs (loop2): Block reservation details [ 85.640175][ T8683] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 85.703656][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 85.703678][ T29] audit: type=1400 audit(1736965584.502:1726): avc: denied { mounton } for pid=8706 comm="syz.5.2087" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 85.738647][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.748968][ T29] audit: type=1326 audit(1736965584.552:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717d55d29 code=0x7ffc0000 [ 85.792047][ T29] audit: type=1326 audit(1736965584.582:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f5717d55d29 code=0x7ffc0000 [ 85.815629][ T29] audit: type=1326 audit(1736965584.582:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8708 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5717d55d29 code=0x7ffc0000 [ 85.919139][ T8723] loop6: detected capacity change from 0 to 512 [ 85.929445][ T8723] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 85.943241][ T29] audit: type=1326 audit(1736965584.742:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.2.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 85.966757][ T29] audit: type=1326 audit(1736965584.742:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.2.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 85.990448][ T29] audit: type=1326 audit(1736965584.742:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.2.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 86.014003][ T29] audit: type=1326 audit(1736965584.742:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.2.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 86.037754][ T29] audit: type=1326 audit(1736965584.742:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.2.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 86.042520][ T8723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 86.061304][ T29] audit: type=1326 audit(1736965584.742:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.2.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 86.092773][ T8723] System zones: 1-12 [ 86.104156][ T8723] EXT4-fs (loop6): 1 truncate cleaned up [ 86.110344][ T8723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.121147][ T8731] loop3: detected capacity change from 0 to 512 [ 86.165852][ T8731] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 86.192715][ T8731] EXT4-fs (loop3): invalid journal inode [ 86.198931][ T8731] EXT4-fs (loop3): can't get journal size [ 86.207657][ T6025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.217191][ T8731] EXT4-fs (loop3): 1 truncate cleaned up [ 86.225328][ T8738] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 86.232019][ T8738] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.240019][ T8738] vhci_hcd vhci_hcd.0: Device attached [ 86.243371][ T8731] EXT4-fs warning (device loop3): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 86.255763][ T8740] vhci_hcd: connection closed [ 86.258648][ T50] vhci_hcd: stop threads [ 86.267683][ T50] vhci_hcd: release socket [ 86.272131][ T50] vhci_hcd: disconnect device [ 86.402415][ T8755] loop5: detected capacity change from 0 to 512 [ 86.469378][ T8755] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2111: bg 0: block 248: padding at end of block bitmap is not set [ 86.487364][ T8755] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2111: Failed to acquire dquot type 1 [ 86.499934][ T8755] EXT4-fs (loop5): 1 truncate cleaned up [ 86.507218][ T8755] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.622477][ T8777] @: renamed from vlan0 (while UP) [ 86.660738][ T3418] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:7: Failed to release dquot type 1 [ 86.738835][ T8792] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 86.762347][ T8797] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2130'. [ 86.793459][ T8800] loop4: detected capacity change from 0 to 128 [ 86.813027][ T8804] loop3: detected capacity change from 0 to 512 [ 86.819426][ T8800] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.930057][ T8804] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2132: bg 0: block 248: padding at end of block bitmap is not set [ 87.002751][ T8804] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2132: Failed to acquire dquot type 1 [ 87.074038][ T8804] EXT4-fs (loop3): 1 truncate cleaned up [ 87.080110][ T8804] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.136519][ T8836] loop6: detected capacity change from 0 to 512 [ 87.149654][ T8836] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 87.160489][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:0: Failed to release dquot type 1 [ 87.164741][ T8836] EXT4-fs (loop6): invalid journal inode [ 87.180894][ T8836] EXT4-fs (loop6): can't get journal size [ 87.181745][ T8836] EXT4-fs (loop6): 1 truncate cleaned up [ 87.190447][ T8836] EXT4-fs warning (device loop6): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 87.314954][ T8850] syz.3.2153 (8850): attempted to duplicate a private mapping with mremap. This is not supported. [ 87.391190][ T8860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2157'. [ 87.393526][ T8858] loop6: detected capacity change from 0 to 512 [ 87.446657][ T8858] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 87.458541][ T8858] EXT4-fs (loop6): orphan cleanup on readonly fs [ 87.482191][ T8858] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.502577][ T8858] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 87.513478][ T8858] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2167: bg 0: block 40: padding at end of block bitmap is not set [ 87.529236][ T8858] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 87.538280][ T8858] EXT4-fs (loop6): 1 truncate cleaned up [ 87.587719][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'. [ 87.591599][ T8882] loop2: detected capacity change from 0 to 2048 [ 87.671951][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 87.673888][ T8882] Alternate GPT is invalid, using primary GPT. [ 87.687567][ T8882] loop2: p2 p3 p7 [ 87.776271][ T8902] veth0_to_batadv: entered promiscuous mode [ 87.798023][ T8902] veth0_to_batadv: left promiscuous mode [ 87.856220][ T8907] vxcan3: entered promiscuous mode [ 87.861481][ T8907] vxcan3: entered allmulticast mode [ 88.092305][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 88.151685][ T8955] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2211'. [ 88.160790][ T8955] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2211'. [ 88.181650][ T8955] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2211'. [ 88.191618][ T8955] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2211'. [ 88.228569][ T8955] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2211'. [ 88.370934][ T8989] loop3: detected capacity change from 0 to 512 [ 88.395301][ T8989] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 88.403757][ T8989] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.410907][ T8989] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.426795][ T8989] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 88.434334][ T8989] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2217: bg 0: block 40: padding at end of block bitmap is not set [ 88.449266][ T8989] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.475042][ T8989] EXT4-fs (loop3): 1 truncate cleaned up [ 88.633527][ T9021] veth0_to_batadv: entered promiscuous mode [ 88.648247][ T9021] veth0_to_batadv: left promiscuous mode [ 88.677011][ T9023] vxcan3: entered promiscuous mode [ 88.682180][ T9023] vxcan3: entered allmulticast mode [ 88.749536][ T9033] loop5: detected capacity change from 0 to 512 [ 88.756899][ T9033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.782787][ T9035] loop6: detected capacity change from 0 to 2048 [ 88.790959][ T9033] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.810737][ T9033] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 88.871993][ T9035] Alternate GPT is invalid, using primary GPT. [ 88.878423][ T9035] loop6: p2 p3 p7 [ 88.883640][ T9052] 9pnet_fd: Insufficient options for proto=fd [ 89.075447][ T9081] loop5: detected capacity change from 0 to 256 [ 89.138305][ T9091] netlink: 'syz.5.2263': attribute type 21 has an invalid length. [ 89.264996][ T9111] loop6: detected capacity change from 0 to 256 [ 89.326787][ T9118] loop4: detected capacity change from 0 to 512 [ 89.330358][ T9119] netlink: 'syz.6.2276': attribute type 21 has an invalid length. [ 89.355555][ T9118] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 89.365203][ T9118] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.372106][ T9118] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.392292][ T9118] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 89.401386][ T9118] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2275: bg 0: block 40: padding at end of block bitmap is not set [ 89.424538][ T9118] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 89.436323][ T9118] EXT4-fs (loop4): 1 truncate cleaned up [ 89.499952][ T9138] loop4: detected capacity change from 0 to 1024 [ 89.546086][ T9138] EXT4-fs error (device loop4): ext4_generic_delete_entry:2687: inode #2: block 16: comm syz.4.2284: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 89.593336][ T9138] EXT4-fs error (device loop4) in ext4_delete_entry:2758: Corrupt filesystem [ 89.605409][ T9138] EXT4-fs warning (device loop4): ext4_rename_delete:3740: inode #2: comm syz.4.2284: Deleting old file: nlink 1, error=-117 [ 89.679053][ T9166] loop4: detected capacity change from 0 to 164 [ 89.686533][ T9166] Unable to read rock-ridge attributes [ 89.793456][ T9187] loop4: detected capacity change from 0 to 512 [ 89.802114][ T9187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.817440][ T9187] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.849111][ T9187] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 90.018209][ T9222] xt_connbytes: Forcing CT accounting to be enabled [ 90.025054][ T9222] Cannot find add_set index 0 as target [ 90.052793][ T9226] loop2: detected capacity change from 0 to 512 [ 90.060155][ T9226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.087500][ T9229] netlink: 'syz.4.2325': attribute type 21 has an invalid length. [ 90.087536][ T9226] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.118174][ T9226] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 90.529253][ T9261] loop3: detected capacity change from 0 to 512 [ 90.538247][ T9261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.576906][ T9261] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.623446][ T9261] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 90.713183][ T9279] virt_wifi0: tun_chr_ioctl cmd 2148553947 [ 90.765862][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 90.765882][ T29] audit: type=1400 audit(1736965589.562:1877): avc: denied { create } for pid=9283 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 90.792126][ T29] audit: type=1400 audit(1736965589.562:1878): avc: denied { sys_admin } for pid=9283 comm="syz.3.2350" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 90.828786][ T9287] SELinux: syz.4.2351 (9287) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 91.093376][ T9322] sd 0:0:1:0: device reset [ 91.104463][ T29] audit: type=1326 audit(1736965589.912:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 91.126099][ T9330] loop4: detected capacity change from 0 to 1024 [ 91.128570][ T29] audit: type=1326 audit(1736965589.932:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 91.158075][ T29] audit: type=1326 audit(1736965589.932:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 91.158298][ T9330] EXT4-fs: Ignoring removed nobh option [ 91.181651][ T29] audit: type=1326 audit(1736965589.932:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bcaa5d29 code=0x7ffc0000 [ 91.187194][ T9330] EXT4-fs: Ignoring removed bh option [ 91.241203][ T9335] loop6: detected capacity change from 0 to 128 [ 91.272099][ T9339] loop6: detected capacity change from 0 to 512 [ 91.279222][ T9339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.308132][ T9339] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.342297][ T9339] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 91.368436][ T29] audit: type=1326 audit(1736965590.172:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d26c5d29 code=0x7ffc0000 [ 91.392117][ T29] audit: type=1326 audit(1736965590.172:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d26c5d29 code=0x7ffc0000 [ 91.415953][ T29] audit: type=1326 audit(1736965590.172:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f65d26c5d29 code=0x7ffc0000 [ 91.439788][ T29] audit: type=1326 audit(1736965590.172:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d26c5d29 code=0x7ffc0000 [ 91.510546][ T9360] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 91.518965][ T9360] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 92.011203][ T9441] __nla_validate_parse: 13 callbacks suppressed [ 92.011222][ T9441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2416'. [ 92.319293][ T9486] loop3: detected capacity change from 0 to 8192 [ 92.336151][ T9486] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.349214][ T9448] chnl_net:caif_netlink_parms(): no params data found [ 92.451040][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.458287][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.476907][ T9448] bridge_slave_0: entered allmulticast mode [ 92.483938][ T9448] bridge_slave_0: entered promiscuous mode [ 92.492083][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.500536][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.507876][ T9448] bridge_slave_1: entered allmulticast mode [ 92.514625][ T9448] bridge_slave_1: entered promiscuous mode [ 92.521326][ T9520] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 92.529637][ T9520] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 92.549457][ T9448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.564871][ T9448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.598954][ T9448] team0: Port device team_slave_0 added [ 92.607145][ T9448] team0: Port device team_slave_1 added [ 92.631706][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.638868][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.664856][ T9448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.678739][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.686029][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.712607][ T9448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.744700][ T9448] hsr_slave_0: entered promiscuous mode [ 92.752749][ T9448] hsr_slave_1: entered promiscuous mode [ 92.764716][ T9448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.766101][ T9546] loop6: detected capacity change from 0 to 1024 [ 92.772322][ T9448] Cannot create hsr debugfs directory [ 92.796223][ T9546] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.816563][ T9546] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2434: Invalid block bitmap block 0 in block_group 0 [ 92.833816][ T9546] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2434: Failed to acquire dquot type 0 [ 92.846311][ T9546] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.2434: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.860021][ T9546] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2434: Invalid inode bitmap blk 0 in block_group 0 [ 92.872867][ T11] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:0: Failed to release dquot type 0 [ 92.884429][ T9546] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 92.893180][ T9546] EXT4-fs (loop6): 1 orphan inode deleted [ 92.900715][ T9448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.926129][ T11] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:0: Failed to release dquot type 0 [ 92.977215][ T9448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.028361][ T9448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.077732][ T9448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.182614][ T9448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.190051][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2446'. [ 93.215743][ T9448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.248115][ T9448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.267727][ T9448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.320912][ T9614] xt_hashlimit: size too large, truncated to 1048576 [ 93.332056][ T9615] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.388507][ T9448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.439035][ T9448] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.442477][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.442521][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.449252][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.449290][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.492409][ T9448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.492452][ T9448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.663629][ T9448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.927267][ T9448] veth0_vlan: entered promiscuous mode [ 93.960884][ T9448] veth1_vlan: entered promiscuous mode [ 94.001397][ T9448] veth0_macvtap: entered promiscuous mode [ 94.015962][ T9448] veth1_macvtap: entered promiscuous mode [ 94.036055][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.046714][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.056638][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.067156][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.077028][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.087625][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.097661][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.108169][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.119676][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.131732][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.142245][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.152267][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.162776][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.172700][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.183344][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.193233][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.203750][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.213600][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.224209][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.251759][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.264874][ T9448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.273703][ T9448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.282553][ T9448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.291333][ T9448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.432328][ T9705] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2461'. [ 94.454065][ T9708] bpf_get_probe_write_proto: 11 callbacks suppressed [ 94.454166][ T9708] syz.6.2462[9708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.461057][ T9708] syz.6.2462[9708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.511091][ T9708] syz.6.2462[9708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.639194][ T9727] loop5: detected capacity change from 0 to 128 [ 94.784267][ T9740] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2476'. [ 94.808254][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2479'. [ 94.817473][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2479'. [ 95.064634][ T9778] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.161345][ T9789] loop5: detected capacity change from 0 to 8192 [ 95.168921][ T9789] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.399159][ T9819] loop2: detected capacity change from 0 to 8192 [ 95.406835][ T9819] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.487937][ T9832] syz.2.2518[9832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.488036][ T9832] syz.2.2518[9832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.508315][ T9832] syz.2.2518[9832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.871615][ T9879] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2543'. [ 96.017991][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 96.018008][ T29] audit: type=1326 audit(1736965594.822:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8105d29 code=0x7ffc0000 [ 96.047834][ T29] audit: type=1326 audit(1736965594.822:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8105d29 code=0x7ffc0000 [ 96.071324][ T29] audit: type=1326 audit(1736965594.822:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1c8105d29 code=0x7ffc0000 [ 96.096714][ T9895] loop2: detected capacity change from 0 to 512 [ 96.103473][ T29] audit: type=1326 audit(1736965594.902:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c8105d29 code=0x7ffc0000 [ 96.130165][ T9895] EXT4-fs: Ignoring removed bh option [ 96.150761][ T9895] EXT4-fs error (device loop2): __ext4_iget:4984: inode #15: block 1803188595: comm syz.2.2549: invalid block [ 96.157682][ T29] audit: type=1326 audit(1736965594.962:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1c80fcce7 code=0x7ffc0000 [ 96.175860][ T9895] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2549: couldn't read orphan inode 15 (err -117) [ 96.186708][ T29] audit: type=1326 audit(1736965594.962:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1c80a1f29 code=0x7ffc0000 [ 96.222074][ T29] audit: type=1326 audit(1736965594.962:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1c80fcce7 code=0x7ffc0000 [ 96.245833][ T29] audit: type=1326 audit(1736965594.962:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1c80a1f29 code=0x7ffc0000 [ 96.269187][ T29] audit: type=1326 audit(1736965594.962:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1c80fcce7 code=0x7ffc0000 [ 96.292838][ T29] audit: type=1326 audit(1736965594.962:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.4.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1c80a1f29 code=0x7ffc0000 [ 96.516905][ T9947] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.573273][ T9957] hsr0: entered allmulticast mode [ 96.578452][ T9957] hsr_slave_0: entered allmulticast mode [ 96.584361][ T9957] hsr_slave_1: entered allmulticast mode [ 96.612236][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 96.621297][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2581'. [ 96.713219][ T9974] loop4: detected capacity change from 0 to 256 [ 96.751119][ T9974] FAT-fs (loop4): Directory bread(block 64) failed [ 96.758794][ T9974] FAT-fs (loop4): Directory bread(block 65) failed [ 96.768140][ T9974] FAT-fs (loop4): Directory bread(block 66) failed [ 96.774387][ T9979] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2588'. [ 96.776446][ T9974] FAT-fs (loop4): Directory bread(block 67) failed [ 96.798684][ T9974] FAT-fs (loop4): Directory bread(block 68) failed [ 96.806820][ T9974] FAT-fs (loop4): Directory bread(block 69) failed [ 96.813631][ T9974] FAT-fs (loop4): Directory bread(block 70) failed [ 96.820821][ T9974] FAT-fs (loop4): Directory bread(block 71) failed [ 96.824110][ T9985] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 96.824110][ T9985] The task syz.5.2585 (9985) triggered the difference, watch for misbehavior. [ 96.827855][ T9974] FAT-fs (loop4): Directory bread(block 72) failed [ 96.879688][ T9974] FAT-fs (loop4): Directory bread(block 73) failed [ 97.021819][ T9974] syz.4.2586: attempt to access beyond end of device [ 97.021819][ T9974] loop4: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 97.043151][ T9974] syz.4.2586: attempt to access beyond end of device [ 97.043151][ T9974] loop4: rw=2051, sector=1864, nr_sectors = 31936 limit=256 [ 97.366143][T10025] netlink: 'syz.2.2606': attribute type 6 has an invalid length. [ 97.371728][T10023] loop4: detected capacity change from 0 to 2048 [ 97.719845][T10049] loop2: detected capacity change from 0 to 2048 [ 97.770235][T10049] loop2: p1 < > p4 [ 97.774937][T10049] loop2: p4 size 8388608 extends beyond EOD, truncated [ 97.904845][T10067] hsr0: entered allmulticast mode [ 97.909965][T10067] hsr_slave_0: entered allmulticast mode [ 97.915824][T10067] hsr_slave_1: entered allmulticast mode [ 98.043627][T10082] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 98.050212][T10082] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 98.057991][T10082] vhci_hcd vhci_hcd.0: Device attached [ 98.092857][T10083] vhci_hcd: connection closed [ 98.093228][ T11] vhci_hcd: stop threads [ 98.102408][ T11] vhci_hcd: release socket [ 98.106877][ T11] vhci_hcd: disconnect device [ 98.242173][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2643'. [ 98.254460][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2643'. [ 98.270251][T10113] loop3: detected capacity change from 0 to 256 [ 98.329036][T10113] FAT-fs (loop3): Directory bread(block 64) failed [ 98.336578][T10113] FAT-fs (loop3): Directory bread(block 65) failed [ 98.343860][T10113] FAT-fs (loop3): Directory bread(block 66) failed [ 98.353082][T10113] FAT-fs (loop3): Directory bread(block 67) failed [ 98.370813][T10113] FAT-fs (loop3): Directory bread(block 68) failed [ 98.379479][T10113] FAT-fs (loop3): Directory bread(block 69) failed [ 98.386239][T10113] FAT-fs (loop3): Directory bread(block 70) failed [ 98.397388][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'. [ 98.406604][T10113] FAT-fs (loop3): Directory bread(block 71) failed [ 98.413968][T10113] FAT-fs (loop3): Directory bread(block 72) failed [ 98.420781][T10113] FAT-fs (loop3): Directory bread(block 73) failed [ 98.431975][T10128] loop5: detected capacity change from 0 to 512 [ 98.448419][T10128] EXT4-fs: Ignoring removed bh option [ 98.456288][T10128] EXT4-fs error (device loop5): __ext4_iget:4984: inode #15: block 1803188595: comm syz.5.2650: invalid block [ 98.468811][T10128] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2650: couldn't read orphan inode 15 (err -117) [ 98.536585][T10134] syz.3.2644: attempt to access beyond end of device [ 98.536585][T10134] loop3: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 98.559999][T10134] syz.3.2644: attempt to access beyond end of device [ 98.559999][T10134] loop3: rw=2051, sector=1864, nr_sectors = 31936 limit=256 [ 98.683144][T10145] netlink: 'syz.6.2657': attribute type 6 has an invalid length. [ 98.901853][T10175] loop6: detected capacity change from 0 to 2048 [ 98.944125][T10175] loop6: p1 < > p4 [ 98.949523][T10175] loop6: p4 size 8388608 extends beyond EOD, truncated [ 99.503318][T10267] loop3: detected capacity change from 0 to 128 [ 99.591816][T10279] blktrace: Concurrent blktraces are not allowed on loop9 [ 99.811021][T10322] loop4: detected capacity change from 0 to 128 [ 99.929623][T10339] loop4: detected capacity change from 0 to 8192 [ 99.941198][T10339] syz.4.2699: attempt to access beyond end of device [ 99.941198][T10339] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 99.957184][T10339] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 99.965121][T10339] FAT-fs (loop4): Filesystem has been set read-only [ 99.972305][T10339] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 99.981899][T10339] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 100.305191][T10405] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2711'. [ 100.373473][T10412] loop4: detected capacity change from 0 to 512 [ 100.387171][T10412] EXT4-fs: Ignoring removed oldalloc option [ 100.410076][T10412] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2714: Parent and EA inode have the same ino 15 [ 100.428786][T10412] EXT4-fs (loop4): Remounting filesystem read-only [ 100.443000][T10412] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 100.452142][T10412] EXT4-fs (loop4): 1 orphan inode deleted [ 100.459034][T10412] EXT4-fs mount: 38 callbacks suppressed [ 100.459092][T10412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.476989][T10412] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 100.484412][T10412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.615457][T10433] infiniband syz!: set active [ 100.620201][T10433] infiniband syz!: added team_slave_0 [ 100.634431][T10433] RDS/IB: syz!: added [ 100.640839][T10433] smc: adding ib device syz! with port count 1 [ 100.648209][T10433] smc: ib device syz! port 1 has pnetid [ 100.687661][T10441] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 100.694314][T10441] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.702068][T10441] vhci_hcd vhci_hcd.0: Device attached [ 100.737306][T10442] vhci_hcd: connection closed [ 100.737504][ T144] vhci_hcd: stop threads [ 100.746539][ T144] vhci_hcd: release socket [ 100.751047][ T144] vhci_hcd: disconnect device [ 101.113663][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 101.113681][ T29] audit: type=1326 audit(1736965599.912:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.143455][ T29] audit: type=1326 audit(1736965599.912:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.167051][ T29] audit: type=1326 audit(1736965599.912:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.190741][ T29] audit: type=1326 audit(1736965599.912:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.214359][ T29] audit: type=1326 audit(1736965599.912:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.238024][ T29] audit: type=1326 audit(1736965599.912:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.261619][ T29] audit: type=1326 audit(1736965599.912:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.285130][ T29] audit: type=1326 audit(1736965599.912:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.348525][ T29] audit: type=1326 audit(1736965600.022:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.372019][ T29] audit: type=1326 audit(1736965600.022:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.5.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9230e25d29 code=0x7ffc0000 [ 101.599973][T10495] loop2: detected capacity change from 0 to 128 [ 101.673076][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.683665][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.705340][T10505] loop5: detected capacity change from 0 to 512 [ 101.733020][ T3418] kworker/u8:7: attempt to access beyond end of device [ 101.733020][ T3418] loop2: rw=1, sector=145, nr_sectors = 33 limit=128 [ 101.762380][T10505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.775921][T10505] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.847939][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.889671][T10533] SELinux: syz.2.2765 (10533) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.958390][T10544] loop3: detected capacity change from 0 to 512 [ 101.997139][T10544] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 102.019072][T10544] EXT4-fs (loop3): mount failed [ 102.022749][T10555] loop5: detected capacity change from 0 to 512 [ 102.051735][T10555] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.2775: casefold flag without casefold feature [ 102.066518][T10555] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2775: couldn't read orphan inode 15 (err -117) [ 102.081330][T10555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.111524][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.126379][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2781'. [ 102.135558][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2781'. [ 102.173278][T10571] loop3: detected capacity change from 0 to 512 [ 102.180974][T10571] journal_path: Lookup failure for './file0/file0' [ 102.188420][T10571] EXT4-fs: error: could not find journal device path [ 102.196221][T10575] Invalid ELF header magic: != ELF [ 102.442617][T10497] 9pnet_fd: p9_fd_create_tcp (10497): problem connecting socket to 127.0.0.1 [ 102.536884][T10617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2804'. [ 102.546615][T10617] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2804'. [ 102.555816][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2804'. [ 102.660595][T10634] loop5: detected capacity change from 0 to 256 [ 102.858564][T10650] loop2: detected capacity change from 0 to 512 [ 102.877514][T10650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.891422][T10650] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.892699][T10656] sctp: [Deprecated]: syz.5.2821 (pid 10656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.892699][T10656] Use struct sctp_sack_info instead [ 102.946233][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.043540][T10666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 103.050122][T10666] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 103.057883][T10666] vhci_hcd vhci_hcd.0: Device attached [ 103.080278][T10667] vhci_hcd: connection closed [ 103.080506][ T568] vhci_hcd: stop threads [ 103.089518][ T568] vhci_hcd: release socket [ 103.094765][ T568] vhci_hcd: disconnect device [ 103.319005][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 103.807882][T10703] serio: Serial port ptm0 [ 103.872561][ T3418] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.956427][ T3418] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.019320][ T3418] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.082475][ T3418] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.232179][ T3418] bridge_slave_1: left allmulticast mode [ 104.237899][ T3418] bridge_slave_1: left promiscuous mode [ 104.243574][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.252748][ T3418] bridge_slave_0: left allmulticast mode [ 104.258490][ T3418] bridge_slave_0: left promiscuous mode [ 104.264167][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.324715][T10761] usb usb7: usbfs: process 10761 (syz.3.2867) did not claim interface 0 before use [ 104.431398][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.455177][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.469508][ T3418] bond0 (unregistering): Released all slaves [ 104.471458][T10776] loop3: detected capacity change from 0 to 512 [ 104.480561][ T3418] bond1 (unregistering): Released all slaves [ 104.490603][T10776] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 104.500716][T10776] EXT4-fs (loop3): invalid journal inode [ 104.511111][T10776] EXT4-fs (loop3): can't get journal size [ 104.511128][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2873'. [ 104.524087][T10776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 104.538215][T10776] System zones: 1-12, 13-13 [ 104.540604][T10714] chnl_net:caif_netlink_parms(): no params data found [ 104.572331][T10776] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2874: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 104.590715][T10776] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2874: couldn't read orphan inode 15 (err -117) [ 104.603415][T10776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.632589][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.673405][ T3418] hsr_slave_0: left promiscuous mode [ 104.685364][ T3418] hsr_slave_1: left promiscuous mode [ 104.695858][T10795] loop3: detected capacity change from 0 to 128 [ 104.709647][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.717211][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.730484][T10795] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.743129][T10799] loop5: detected capacity change from 0 to 256 [ 104.753155][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.760729][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.769005][T10795] ext4 filesystem being mounted at /572/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.782029][T10804] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.782526][ T3418] veth1_macvtap: left promiscuous mode [ 104.794067][T10804] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 104.800302][ T3418] veth0_macvtap: left promiscuous mode [ 104.813745][ T3418] veth1_vlan: left promiscuous mode [ 104.819141][ T3418] veth0_vlan: left promiscuous mode [ 104.827380][T10799] FAT-fs (loop5): Directory bread(block 64) failed [ 104.834574][T10799] FAT-fs (loop5): Directory bread(block 65) failed [ 104.841374][T10799] FAT-fs (loop5): Directory bread(block 66) failed [ 104.850017][T10799] FAT-fs (loop5): Directory bread(block 67) failed [ 104.856701][T10799] FAT-fs (loop5): Directory bread(block 68) failed [ 104.863736][T10799] FAT-fs (loop5): Directory bread(block 69) failed [ 104.875148][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.882921][T10799] FAT-fs (loop5): Directory bread(block 70) failed [ 104.890971][T10799] FAT-fs (loop5): Directory bread(block 71) failed [ 104.899320][T10799] FAT-fs (loop5): Directory bread(block 72) failed [ 104.906047][ T3418] infiniband syz!: set down [ 104.906063][T10799] FAT-fs (loop5): Directory bread(block 73) failed [ 104.906182][ T3418] ================================================================== [ 104.906223][ T3418] BUG: KCSAN: data-race in data_push_tail / string [ 104.906276][ T3418] [ 104.906286][ T3418] write to 0xffffffff88b9f8ea of 1 bytes by task 10799 on cpu 0: [ 104.906308][ T3418] string+0x16c/0x210 [ 104.906337][ T3418] vsnprintf+0xa09/0xe30 [ 104.906363][ T3418] vscnprintf+0x42/0x90 [ 104.906396][ T3418] printk_sprint+0x30/0x2d0 [ 104.906429][ T3418] vprintk_store+0x589/0x870 [ 104.906462][ T3418] vprintk_emit+0x15e/0x680 [ 104.906495][ T3418] vprintk_default+0x26/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.906523][ T3418] vprintk+0x75/0x80 [ 104.906544][ T3418] _printk+0x7a/0xa0 [ 104.906570][ T3418] _fat_msg+0xa2/0xd0 [ 104.906596][ T3418] fat_get_entry+0x542/0x5f0 [ 104.906625][ T3418] fat_subdirs+0xfa/0x190 [ 104.906659][ T3418] fat_read_root+0x31d/0x360 [ 104.906683][ T3418] fat_fill_super+0x14f5/0x1bf0 [ 104.906708][ T3418] vfat_fill_super+0x24/0x30 [ 104.906732][ T3418] get_tree_bdev_flags+0x29f/0x310 [ 104.906760][ T3418] get_tree_bdev+0x1f/0x30 [ 104.906787][ T3418] vfat_get_tree+0x1c/0x30 [ 104.906815][ T3418] vfs_get_tree+0x56/0x1e0 [ 104.906852][ T3418] do_new_mount+0x227/0x690 [ 104.906887][ T3418] path_mount+0x49b/0xb30 [ 104.906918][ T3418] __se_sys_mount+0x27c/0x2d0 [ 104.906957][ T3418] __x64_sys_mount+0x67/0x80 [ 104.906998][ T3418] x64_sys_call+0x2c84/0x2dc0 [ 104.907026][ T3418] do_syscall_64+0xc9/0x1c0 [ 104.907054][ T3418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.907094][ T3418] [ 104.907101][ T3418] read to 0xffffffff88b9f8e8 of 8 bytes by task 3418 on cpu 1: [ 104.907119][ T3418] data_push_tail+0x102/0x430 [ 104.907150][ T3418] data_alloc+0xbe/0x2c0 [ 104.907178][ T3418] prb_reserve+0x85e/0xb60 [ 104.907203][ T3418] vprintk_store+0x558/0x870 [ 104.907227][ T3418] vprintk_emit+0x15e/0x680 [ 104.907281][ T3418] dev_vprintk_emit+0x1df/0x210 [ 104.907310][ T3418] dev_printk_emit+0x82/0xb0 [ 104.907347][ T3418] __dev_printk+0xf6/0x110 [ 104.907375][ T3418] _dev_info+0x99/0xc0 [ 104.907409][ T3418] rxe_notify+0x1d7/0x1f0 [ 104.907445][ T3418] raw_notifier_call_chain+0x6f/0x1d0 [ 104.907490][ T3418] call_netdevice_notifiers_info+0xae/0x100 [ 104.907529][ T3418] dev_close_many+0x174/0x240 [ 104.907557][ T3418] unregister_netdevice_many_notify+0x263/0x11b0 [ 104.907583][ T3418] default_device_exit_batch+0x5f0/0x650 [ 104.907619][ T3418] cleanup_net+0x4cf/0x860 [ 104.907651][ T3418] process_scheduled_works+0x483/0x9a0 [ 104.907688][ T3418] worker_thread+0x51d/0x6f0 [ 104.907727][ T3418] kthread+0x1d1/0x210 [ 104.907745][ T3418] ret_from_fork+0x4b/0x60 [ 104.907764][ T3418] ret_from_fork_asm+0x1a/0x30 [ 104.907785][ T3418] [ 104.907790][ T3418] value changed: 0x00000000ffffe1d4 -> 0x203a2935706f6f6c [ 104.907803][ T3418] [ 104.907810][ T3418] Reported by Kernel Concurrency Sanitizer on: [ 104.907836][ T3418] CPU: 1 UID: 0 PID: 3418 Comm: kworker/u8:7 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 104.907870][ T3418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.907890][ T3418] Workqueue: netns cleanup_net [ 104.907936][ T3418] ================================================================== [ 104.914217][T10799] syz.5.2883: attempt to access beyond end of device [ 104.914217][T10799] loop5: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 105.136957][T10812] random: crng reseeded on system resumption [ 105.140594][T10799] syz.5.2883: attempt to access beyond end of device [ 105.140594][T10799] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 105.310449][ T3418] hsr0 (unregistering): left allmulticast mode [ 105.327684][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 105.337763][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 105.345408][ T11] smc: removing ib device syz! [ 105.369644][T10714] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 105.828451][ T3418] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.876851][ T3418] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.926188][ T3418] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.975774][ T3418] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.058916][ T3418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.117726][ T3418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.177546][ T3418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.236847][ T3418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.298953][ T3418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.356319][ T3418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.406232][ T3418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.465998][ T3418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.519343][ T3418] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.576479][ T3418] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.636454][ T3418] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.688534][ T3418] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.747310][ T3418] bridge_slave_1: left allmulticast mode [ 106.753094][ T3418] bridge_slave_1: left promiscuous mode [ 106.758932][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.766733][ T3418] bridge_slave_0: left allmulticast mode [ 106.772404][ T3418] bridge_slave_0: left promiscuous mode [ 106.778097][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.786447][ T3418] bridge_slave_1: left allmulticast mode [ 106.792178][ T3418] bridge_slave_1: left promiscuous mode [ 106.797867][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.806232][ T3418] bridge_slave_0: left allmulticast mode [ 106.811876][ T3418] bridge_slave_0: left promiscuous mode [ 106.817635][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.825634][ T3418] bridge_slave_1: left allmulticast mode [ 106.831279][ T3418] bridge_slave_1: left promiscuous mode [ 106.836996][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.844928][ T3418] bridge_slave_0: left allmulticast mode [ 106.850685][ T3418] bridge_slave_0: left promiscuous mode [ 106.856408][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.865004][ T3418] bridge_slave_1: left allmulticast mode [ 106.870715][ T3418] bridge_slave_1: left promiscuous mode [ 106.876460][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.885113][ T3418] bridge_slave_0: left allmulticast mode [ 106.890777][ T3418] bridge_slave_0: left promiscuous mode [ 106.896482][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.365848][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.375809][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.385793][ T3418] bond0 (unregistering): Released all slaves [ 107.394924][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.405149][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.415170][ T3418] bond0 (unregistering): Released all slaves [ 107.424205][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.434374][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.444749][ T3418] bond0 (unregistering): Released all slaves [ 107.452938][ T3418] bond0 (unregistering): Released all slaves [ 107.462189][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.472026][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.481729][ T3418] bond0 (unregistering): Released all slaves [ 107.490336][ T3418] bond1 (unregistering): Released all slaves [ 107.542319][ T3418] IPVS: stopping backup sync thread 8323 ... [ 107.550938][ T3418] hsr_slave_0: left promiscuous mode [ 107.556598][ T3418] hsr_slave_1: left promiscuous mode [ 107.562270][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.570342][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.578153][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.585705][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.596049][ T3418] hsr_slave_0: left promiscuous mode [ 107.601648][ T3418] hsr_slave_1: left promiscuous mode [ 107.607324][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.614798][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.622386][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.630543][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.639923][ T3418] hsr_slave_0: left promiscuous mode [ 107.645605][ T3418] hsr_slave_1: left promiscuous mode [ 107.651369][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.659423][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.666927][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.674486][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.684822][ T3418] hsr_slave_0: left promiscuous mode [ 107.690574][ T3418] hsr_slave_1: left promiscuous mode [ 107.696947][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.704644][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.712094][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.726586][ T3418] veth1_macvtap: left promiscuous mode [ 107.732196][ T3418] veth0_macvtap: left promiscuous mode [ 107.738347][ T3418] veth1_vlan: left promiscuous mode [ 107.743703][ T3418] veth0_vlan: left promiscuous mode [ 107.749378][ T3418] veth1_macvtap: left promiscuous mode [ 107.754936][ T3418] veth0_macvtap: left promiscuous mode [ 107.760521][ T3418] veth1_vlan: left promiscuous mode [ 107.766376][ T3418] veth0_vlan: left promiscuous mode [ 107.772029][ T3418] veth1_macvtap: left promiscuous mode [ 107.777680][ T3418] veth0_macvtap: left promiscuous mode [ 107.783174][ T3418] veth1_vlan: left promiscuous mode [ 107.788517][ T3418] veth0_vlan: left promiscuous mode [ 107.794897][ T3418] veth1_macvtap: left promiscuous mode [ 107.800370][ T3418] veth0_macvtap: left promiscuous mode [ 107.806045][ T3418] veth1_vlan: left promiscuous mode [ 107.811274][ T3418] veth0_vlan: left promiscuous mode [ 107.962455][ T3418] hsr0 (unregistering): left allmulticast mode [ 107.977231][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 107.987514][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 108.039181][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 108.048589][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 108.102319][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 108.113371][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 108.177069][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 108.186525][ T3418] team0 (unregistering): Port device team_slave_0 removed