last executing test programs: 3.824266404s ago: executing program 4 (id=5262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2.984220937s ago: executing program 4 (id=5285): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x249, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x40000000fffff803) 2.73256229s ago: executing program 4 (id=5289): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x9800, &(0x7f0000000280)={0x0, 0x0, 0x100000}, 0x20) 2.7322114s ago: executing program 4 (id=5291): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.736244248s ago: executing program 3 (id=5320): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000140)='./file0/file0\x00', r0}, 0x18) chdir(&(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.70386224s ago: executing program 3 (id=5322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1.572592922s ago: executing program 3 (id=5326): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.555855923s ago: executing program 0 (id=5327): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2}) close_range(r2, 0xffffffffffffffff, 0x0) 1.504459338s ago: executing program 3 (id=5328): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.498557608s ago: executing program 3 (id=5330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1.408482556s ago: executing program 2 (id=5332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.407734886s ago: executing program 2 (id=5334): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0xffe0}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x87}}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.397441017s ago: executing program 2 (id=5336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ec", 0x1}], 0x1, 0x0, 0x0, 0x41020000}}], 0x2, 0x4004441) 1.324431143s ago: executing program 2 (id=5338): r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) 1.323669523s ago: executing program 2 (id=5341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 1.311763135s ago: executing program 3 (id=5342): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 1.204685684s ago: executing program 4 (id=5345): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.204476954s ago: executing program 1 (id=5347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 1.187784605s ago: executing program 1 (id=5348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) 1.155082558s ago: executing program 1 (id=5349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.040445028s ago: executing program 4 (id=5346): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) 185.887324ms ago: executing program 0 (id=5351): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a40)="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", 0x1eb}], 0x1, 0x0, 0x0, 0x8088}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 185.488314ms ago: executing program 1 (id=5352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 185.277474ms ago: executing program 2 (id=5353): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='cpu&\t0\t\t\t') 151.662927ms ago: executing program 0 (id=5354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 86.819202ms ago: executing program 0 (id=5355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') preadv2(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x9e2, 0x0, 0x0) 86.636542ms ago: executing program 1 (id=5356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x7b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01dfffffff0000000000210000000c000180080001"], 0x20}}, 0x0) 54.460785ms ago: executing program 0 (id=5357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 520.48µs ago: executing program 1 (id=5358): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/105, 0x69, 0x0, 0x0, 0x3d}, &(0x7f0000000280)=0x40) 0s ago: executing program 0 (id=5367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') kernel console output (not intermixed with test programs): he newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.992830][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.002997][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.013606][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.023556][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.034019][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.044049][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.054502][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.064662][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.075107][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.086396][T15567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.096678][T16049] netlink: 'syz.1.4307': attribute type 39 has an invalid length. [ 170.123693][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.134276][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.144146][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.154594][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.164657][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.175368][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.185222][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.195783][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.205672][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.216098][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.225915][T15567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.236449][T15567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.247820][T15567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.259673][T15567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.268410][T15567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.277274][T15567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.286082][T15567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.331256][T10137] bridge_slave_1: left allmulticast mode [ 170.336942][T10137] bridge_slave_1: left promiscuous mode [ 170.342829][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.350921][T10137] bridge_slave_0: left allmulticast mode [ 170.356614][T10137] bridge_slave_0: left promiscuous mode [ 170.362542][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.463153][T16060] SELinux: policydb version 1446001614 does not match my version range 15-33 [ 170.476200][T16060] SELinux: failed to load policy [ 170.480953][T16064] syz.0.4312[16064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.481263][T16064] syz.0.4312[16064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.499401][T10137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.533506][T10137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.544426][T10137] bond0 (unregistering): Released all slaves [ 170.574359][T16068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4314'. [ 170.612459][T10137] hsr_slave_0: left promiscuous mode [ 170.618257][T10137] hsr_slave_1: left promiscuous mode [ 170.626026][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.633610][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.641497][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.649582][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.659802][T10137] veth1_macvtap: left promiscuous mode [ 170.665295][T10137] veth0_macvtap: left promiscuous mode [ 170.670853][T10137] veth1_vlan: left promiscuous mode [ 170.676105][T10137] veth0_vlan: left promiscuous mode [ 170.766959][T10137] team0 (unregistering): Port device team_slave_1 removed [ 170.777497][T10137] team0 (unregistering): Port device team_slave_0 removed [ 171.350801][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 171.350817][ T29] audit: type=1400 audit(2000000087.338:5120): avc: denied { mount } for pid=16089 comm="syz.0.4322" name="/" dev="configfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.381238][ T29] audit: type=1400 audit(2000000087.358:5121): avc: denied { read } for pid=16089 comm="syz.0.4322" name="/" dev="configfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.403749][ T29] audit: type=1400 audit(2000000087.358:5122): avc: denied { open } for pid=16089 comm="syz.0.4322" path="/508/file0" dev="configfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.456561][ T29] audit: type=1400 audit(2000000087.428:5123): avc: denied { unmount } for pid=8697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.481637][T16092] loop4: detected capacity change from 0 to 128 [ 171.491691][ T29] audit: type=1400 audit(2000000087.448:5124): avc: denied { name_bind } for pid=16097 comm="syz.1.4326" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 171.551116][ T29] audit: type=1326 audit(2000000087.538:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33943def9 code=0x7ffc0000 [ 171.575024][ T29] audit: type=1326 audit(2000000087.538:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33943def9 code=0x7ffc0000 [ 171.628985][ T29] audit: type=1326 audit(2000000087.578:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb33943def9 code=0x7ffc0000 [ 171.652559][ T29] audit: type=1326 audit(2000000087.578:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33943def9 code=0x7ffc0000 [ 171.676422][ T29] audit: type=1326 audit(2000000087.578:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33943def9 code=0x7ffc0000 [ 171.738518][T16114] loop4: detected capacity change from 0 to 2048 [ 171.765571][T16122] IPVS: Error connecting to the multicast addr [ 171.781230][T16114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.797116][T16114] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.4333: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 171.823615][T16114] EXT4-fs (loop4): Remounting filesystem read-only [ 171.865889][T14667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.893087][T16132] syz.1.4339[16132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.893231][T16132] syz.1.4339[16132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.945532][T16141] loop1: detected capacity change from 0 to 512 [ 171.966057][T16141] EXT4-fs: inline encryption not supported [ 171.985051][T16141] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 172.007891][T16147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4343'. [ 172.126434][T16161] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4345'. [ 172.483861][ T3283] veth0_to_bond: left allmulticast mode [ 172.489606][ T3283] veth0_to_bond: left promiscuous mode [ 172.495330][ T3283] bridge0: port 3(veth0_to_bond) entered disabled state [ 172.517798][ T3283] bridge_slave_1: left allmulticast mode [ 172.523666][ T3283] bridge_slave_1: left promiscuous mode [ 172.529411][ T3283] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.548746][ T3283] bridge_slave_0: left allmulticast mode [ 172.554579][ T3283] bridge_slave_0: left promiscuous mode [ 172.560519][ T3283] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.732122][T16171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4350'. [ 172.743628][ T3283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.755046][ T3283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.767310][ T3283] bond0 (unregistering): Released all slaves [ 172.806585][ T3283] tipc: Disabling bearer [ 172.812026][ T3283] tipc: Left network mode [ 172.857853][T16191] loop0: detected capacity change from 0 to 128 [ 172.867277][ T3283] hsr_slave_0: left promiscuous mode [ 172.880874][ T3283] hsr_slave_1: left promiscuous mode [ 172.892378][ T3283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.899863][ T3283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.912520][ T3283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.917508][T16189] loop1: detected capacity change from 0 to 8192 [ 172.920002][ T3283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.940824][ T3283] veth1_macvtap: left promiscuous mode [ 172.946592][ T3283] veth0_macvtap: left promiscuous mode [ 172.952212][ T3283] veth1_vlan: left promiscuous mode [ 172.957552][ T3283] veth0_vlan: left promiscuous mode [ 173.101392][ T3283] team0 (unregistering): Port device team_slave_1 removed [ 173.121742][ T3283] team0 (unregistering): Port device team_slave_0 removed [ 173.351040][T16239] vhci_hcd: invalid port number 0 [ 173.364888][T16246] loop3: detected capacity change from 0 to 2048 [ 173.385248][T16251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4384'. [ 173.395391][T16251] IPv6: NLM_F_REPLACE set, but no existing node found! [ 173.450889][T16259] loop4: detected capacity change from 0 to 2048 [ 173.460869][T16246] Alternate GPT is invalid, using primary GPT. [ 173.467265][T16246] loop3: p2 p3 p7 [ 173.498924][T16259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.574772][T14667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.658571][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 173.742480][T16311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.757437][T16315] loop3: detected capacity change from 0 to 164 [ 173.764402][T16311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.773612][T16315] Unable to read rock-ridge attributes [ 173.860267][T16332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4412'. [ 173.869273][T16332] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4412'. [ 173.878472][T16332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4412'. [ 173.955430][T16350] loop3: detected capacity change from 0 to 512 [ 173.971382][T16350] EXT4-fs (loop3): too many log groups per flexible block group [ 173.979140][T16350] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 173.987060][T16350] EXT4-fs (loop3): mount failed [ 174.009289][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4423'. [ 174.165408][T16392] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16392 comm=syz.4.4434 [ 174.572794][T16432] smc: net device lo applied user defined pnetid SYZ1 [ 174.583901][T16432] smc: net device lo erased user defined pnetid SYZ1 [ 174.653252][T16442] loop4: detected capacity change from 0 to 512 [ 174.675207][T16442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.693035][T16444] loop1: detected capacity change from 0 to 764 [ 174.712530][T16444] rock: directory entry would overflow storage [ 174.718782][T16444] rock: sig=0x4f50, size=4, remaining=3 [ 174.724510][T16444] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 174.735198][T16442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 174.746230][T16442] System zones: 1-12 [ 174.754247][T16442] EXT4-fs (loop4): 1 truncate cleaned up [ 174.761729][T16442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.828058][T14667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.856882][T16460] loop1: detected capacity change from 0 to 512 [ 174.873136][T16460] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.4461: corrupted in-inode xattr: invalid ea_ino [ 174.887075][T16460] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4461: couldn't read orphan inode 15 (err -117) [ 174.899962][T16460] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.959785][T11717] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 174.982579][T16473] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.083016][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.091627][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.603850][T16512] loop3: detected capacity change from 0 to 512 [ 175.606358][T16511] netlink: 'syz.1.4483': attribute type 10 has an invalid length. [ 175.610845][T16512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.629330][T16512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 175.637318][T16512] System zones: 1-12 [ 175.642096][T16512] EXT4-fs (loop3): 1 truncate cleaned up [ 175.647192][T16511] team0: Port device netdevsim1 added [ 175.648251][T16512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.694444][T15567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.705987][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4475'. [ 175.735239][T16511] netlink: 'syz.1.4483': attribute type 10 has an invalid length. [ 175.762127][T16511] team0: Port device netdevsim1 removed [ 175.780529][T16511] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 175.810475][T16563] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.858110][T16586] rdma_op ffff888114893980 conn xmit_rdma 0000000000000000 [ 176.033392][T16603] loop1: detected capacity change from 0 to 1024 [ 176.041196][T16605] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.048834][T16603] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 176.066797][T16603] loop1: detected capacity change from 0 to 512 [ 176.083254][T16611] loop3: detected capacity change from 0 to 128 [ 176.093296][T16611] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 176.100891][T16611] FAT-fs (loop3): Filesystem has been set read-only [ 176.104032][T16603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.126893][T16603] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.152320][T11717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.177007][T16627] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.304091][T16643] netlink: 'syz.0.4503': attribute type 10 has an invalid length. [ 176.312497][T16643] batman_adv: batadv0: Adding interface: veth1_macvtap [ 176.319545][T16643] batman_adv: batadv0: The MTU of interface veth1_macvtap is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.345722][T16643] batman_adv: batadv0: Interface activated: veth1_macvtap [ 176.397138][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 176.397156][ T29] audit: type=1400 audit(2000000092.378:5351): avc: denied { cpu } for pid=16645 comm="syz.0.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 176.580772][ T29] audit: type=1400 audit(2000000092.568:5352): avc: denied { bind } for pid=16660 comm="syz.0.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 176.603353][ T29] audit: type=1400 audit(2000000092.568:5353): avc: denied { name_bind } for pid=16660 comm="syz.0.4508" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 176.624456][ T29] audit: type=1400 audit(2000000092.568:5354): avc: denied { node_bind } for pid=16660 comm="syz.0.4508" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 176.645518][ T29] audit: type=1400 audit(2000000092.568:5355): avc: denied { listen } for pid=16660 comm="syz.0.4508" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 176.666375][ T29] audit: type=1400 audit(2000000092.588:5356): avc: denied { connect } for pid=16660 comm="syz.0.4508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 176.686121][ T29] audit: type=1400 audit(2000000092.588:5357): avc: denied { name_connect } for pid=16660 comm="syz.0.4508" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 176.940420][ T29] audit: type=1400 audit(2000000092.928:5358): avc: denied { bind } for pid=16666 comm="syz.4.4511" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.971377][ T29] audit: type=1400 audit(2000000092.928:5359): avc: denied { node_bind } for pid=16666 comm="syz.4.4511" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 177.087443][T16677] loop3: detected capacity change from 0 to 2048 [ 177.096519][T16679] xt_bpf: check failed: parse error [ 177.112021][T16677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.124957][T16677] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.145773][ T29] audit: type=1400 audit(2000000093.128:5360): avc: denied { create } for pid=16683 comm="syz.4.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 177.204054][T15567] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /51/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 177.229679][T15567] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 177.248676][T15567] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 177.446686][T16702] loop0: detected capacity change from 0 to 128 [ 177.454963][T16702] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 177.455410][T16700] vhci_hcd: default hub control req: 800e v1303 i0000 l0 [ 177.482436][T15567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.496296][T10146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.509064][T16702] syz.0.4526: attempt to access beyond end of device [ 177.509064][T16702] loop0: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 177.525680][T16702] syz.0.4526: attempt to access beyond end of device [ 177.525680][T16702] loop0: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 177.563317][T10146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.633916][T10146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.645452][T16716] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.702750][T10146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.805859][T10146] bridge_slave_1: left allmulticast mode [ 177.811601][T10146] bridge_slave_1: left promiscuous mode [ 177.817315][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.827573][T10146] bridge_slave_0: left allmulticast mode [ 177.833330][T10146] bridge_slave_0: left promiscuous mode [ 177.839146][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.843612][T16769] loop4: detected capacity change from 0 to 512 [ 177.874478][T16769] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 177.886098][T16769] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 177.896223][T16769] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.4533: Corrupt directory, running e2fsck is recommended [ 177.951224][T16769] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 177.972311][T16769] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4533: corrupted in-inode xattr: invalid ea_ino [ 177.972556][T10146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.996014][T16769] EXT4-fs (loop4): Remounting filesystem read-only [ 178.004711][T10146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.006203][T16769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.027475][T10146] bond0 (unregistering): Released all slaves [ 178.045845][T16769] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 178.073046][T16769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.086374][T16715] chnl_net:caif_netlink_parms(): no params data found [ 178.147548][T10146] hsr_slave_0: left promiscuous mode [ 178.159014][T10146] hsr_slave_1: left promiscuous mode [ 178.168247][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.175730][T10146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.192344][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.199812][T10146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.218499][T10146] veth1_macvtap: left promiscuous mode [ 178.224081][T10146] veth0_macvtap: left promiscuous mode [ 178.229746][T10146] veth1_vlan: left promiscuous mode [ 178.234991][T10146] veth0_vlan: left promiscuous mode [ 178.335916][T10146] team0 (unregistering): Port device team_slave_1 removed [ 178.347705][T10146] team0 (unregistering): Port device team_slave_0 removed [ 178.422965][T16715] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.430268][T16715] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.437881][T16715] bridge_slave_0: entered allmulticast mode [ 178.446973][T16715] bridge_slave_0: entered promiscuous mode [ 178.455329][T16715] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.462453][T16715] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.481391][T16715] bridge_slave_1: entered allmulticast mode [ 178.487958][T16715] bridge_slave_1: entered promiscuous mode [ 178.517616][T16715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.528894][T16715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.562043][T16715] team0: Port device team_slave_0 added [ 178.586929][T16715] team0: Port device team_slave_1 added [ 178.644713][T16715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.651753][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.677721][T16715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.737784][T16715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.744858][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.770913][T16715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.822124][T16715] hsr_slave_0: entered promiscuous mode [ 178.833822][T16715] hsr_slave_1: entered promiscuous mode [ 179.017800][T16877] chnl_net:caif_netlink_parms(): no params data found [ 179.080383][T16877] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.087640][T16877] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.096671][T16877] bridge_slave_0: entered allmulticast mode [ 179.103646][T16877] bridge_slave_0: entered promiscuous mode [ 179.117485][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.124599][T16877] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.133517][T16877] bridge_slave_1: entered allmulticast mode [ 179.140088][T16877] bridge_slave_1: entered promiscuous mode [ 179.179258][T16877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.191277][T16877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.209178][T17314] netlink: 566 bytes leftover after parsing attributes in process `syz.0.4555'. [ 179.231112][T16877] team0: Port device team_slave_0 added [ 179.262663][T16877] team0: Port device team_slave_1 added [ 179.282815][T16877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.289937][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.316047][T16877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.327374][T16715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.337206][T16715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.351576][T16877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.358544][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.384504][T16877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.395442][T16715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.405083][T16715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.455401][T16877] hsr_slave_0: entered promiscuous mode [ 179.467717][T16877] hsr_slave_1: entered promiscuous mode [ 179.480886][T16877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.488458][T16877] Cannot create hsr debugfs directory [ 179.538182][T16715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.596905][T16715] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.615897][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.623052][T10146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.644662][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.651853][T10146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.680925][T16877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.753026][T16715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.763468][T16715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.797337][T17494] loop0: detected capacity change from 0 to 512 [ 179.815509][T17494] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 179.827139][T17494] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 179.837238][T17494] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4577: Corrupt directory, running e2fsck is recommended [ 179.855192][T17494] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 179.855928][T16877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.863554][T17494] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.4577: corrupted in-inode xattr: invalid ea_ino [ 179.901083][T17494] EXT4-fs (loop0): Remounting filesystem read-only [ 179.908013][T17494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.928102][T17494] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 179.945614][T17494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.979229][T16877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.016614][T16715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.043215][T17512] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4572'. [ 180.057056][T16877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.153726][T16877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.168645][T16877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.183733][T16877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.192464][T16877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.210202][T16715] veth0_vlan: entered promiscuous mode [ 180.246426][T16715] veth1_vlan: entered promiscuous mode [ 180.267410][T17551] loop4: detected capacity change from 0 to 128 [ 180.282258][T16715] veth0_macvtap: entered promiscuous mode [ 180.297167][T16877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.304526][T17551] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 180.310311][T16877] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.312434][T17551] FAT-fs (loop4): Filesystem has been set read-only [ 180.331404][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.338523][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.346721][T17551] syz.4.4583: attempt to access beyond end of device [ 180.346721][T17551] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 180.348478][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.361416][T17551] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 180.367403][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.375217][T17551] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 180.386528][T16715] veth1_macvtap: entered promiscuous mode [ 180.392323][T17551] syz.4.4583: attempt to access beyond end of device [ 180.392323][T17551] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 180.408828][T16877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.419766][T16877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.430184][T17551] syz.4.4583: attempt to access beyond end of device [ 180.430184][T17551] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 180.462345][T16715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.472949][T16715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.482960][T16715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.493515][T16715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.503396][T16715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.513823][T16715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.524906][T16715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.535121][T16715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.545802][T16715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.555699][T16715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.566222][T16715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.576252][T16715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.586734][T16715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.596642][T16715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.607058][T16715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.617910][T16715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.628462][T16715] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.637330][T16715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.646076][T16715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.654846][T16715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.684791][T16877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.717159][T17562] loop1: detected capacity change from 0 to 512 [ 180.734742][T17562] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.746378][T17562] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 180.756564][T17562] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4592: Corrupt directory, running e2fsck is recommended [ 180.783941][T17562] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 180.801058][T17562] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.4592: corrupted in-inode xattr: invalid ea_ino [ 180.826160][T17562] EXT4-fs (loop1): Remounting filesystem read-only [ 180.827678][T16877] veth0_vlan: entered promiscuous mode [ 180.833324][T17562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.842151][T16877] veth1_vlan: entered promiscuous mode [ 180.866288][T16877] veth0_macvtap: entered promiscuous mode [ 180.871943][T17562] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 180.874240][T16877] veth1_macvtap: entered promiscuous mode [ 180.884814][T17562] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.903000][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.913524][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.923419][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.933869][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.943910][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.954581][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.964507][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.975043][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.989031][T16877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.002069][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.012597][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.022541][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.033030][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.042947][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.053500][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.063353][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.074090][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.083967][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.094510][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.112170][T16877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.123341][T16877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.132222][T16877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.141034][T16877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.149941][T16877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.238344][T17594] loop4: detected capacity change from 0 to 512 [ 181.280479][T17594] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4601: bg 0: block 248: padding at end of block bitmap is not set [ 181.304531][T17594] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.4601: Failed to acquire dquot type 1 [ 181.323627][T17594] EXT4-fs (loop4): 1 truncate cleaned up [ 181.329750][T17594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.347688][T17594] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.379546][T14667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.399844][T17613] netlink: 'syz.0.4597': attribute type 1 has an invalid length. [ 181.517767][T17626] loop2: detected capacity change from 0 to 512 [ 181.532588][T17626] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.533285][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 181.533299][ T29] audit: type=1400 audit(2000000097.518:5472): avc: denied { create } for pid=17627 comm="syz.0.4612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.544233][T17626] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 181.553482][ T29] audit: type=1400 audit(2000000097.538:5473): avc: denied { connect } for pid=17627 comm="syz.0.4612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.570075][T17626] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4599: Corrupt directory, running e2fsck is recommended [ 181.614050][T17626] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 181.622823][T17626] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.4599: corrupted in-inode xattr: invalid ea_ino [ 181.630981][T17632] loop4: detected capacity change from 0 to 512 [ 181.636726][T17626] EXT4-fs (loop2): Remounting filesystem read-only [ 181.649710][T17626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.661913][T17632] EXT4-fs (loop4): too many log groups per flexible block group [ 181.663092][T17626] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 181.669950][T17632] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 181.676800][T17626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.683630][T17632] EXT4-fs (loop4): mount failed [ 181.758394][T17647] loop4: detected capacity change from 0 to 512 [ 181.774314][T17647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.790485][T17647] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.840269][T14667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.856378][ T29] audit: type=1326 audit(2000000097.838:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c08bdef9 code=0x7ffc0000 [ 181.880013][ T29] audit: type=1326 audit(2000000097.838:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c08bdef9 code=0x7ffc0000 [ 181.903638][ T29] audit: type=1326 audit(2000000097.838:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7c08bdef9 code=0x7ffc0000 [ 181.927339][ T29] audit: type=1326 audit(2000000097.838:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c08bdef9 code=0x7ffc0000 [ 181.950837][ T29] audit: type=1326 audit(2000000097.838:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7c08bdef9 code=0x7ffc0000 [ 181.974422][ T29] audit: type=1326 audit(2000000097.838:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c08bdef9 code=0x7ffc0000 [ 181.997999][ T29] audit: type=1326 audit(2000000097.838:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c08bdef9 code=0x7ffc0000 [ 182.021697][ T29] audit: type=1326 audit(2000000097.838:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.4.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7c08bdef9 code=0x7ffc0000 [ 182.227917][T17678] loop1: detected capacity change from 0 to 2048 [ 182.370392][T17693] netlink: 'syz.4.4623': attribute type 5 has an invalid length. [ 182.900450][T17708] chnl_net:caif_netlink_parms(): no params data found [ 182.940477][T17708] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.947594][T17708] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.954979][T17708] bridge_slave_0: entered allmulticast mode [ 182.961416][T17708] bridge_slave_0: entered promiscuous mode [ 182.968504][T17708] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.975600][T17708] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.982986][T17708] bridge_slave_1: entered allmulticast mode [ 182.989533][T17708] bridge_slave_1: entered promiscuous mode [ 183.010650][T17885] loop2: detected capacity change from 0 to 512 [ 183.019871][T17708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.022078][T17885] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4631: bg 0: block 248: padding at end of block bitmap is not set [ 183.030757][T17708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.045834][T17885] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.4631: Failed to acquire dquot type 1 [ 183.065038][T17885] EXT4-fs (loop2): 1 truncate cleaned up [ 183.071454][T17885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.084193][T17885] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.095931][T17708] team0: Port device team_slave_0 added [ 183.105435][T17708] team0: Port device team_slave_1 added [ 183.124191][T16877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.134760][T17708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.141787][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.167720][T17708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.179316][T17708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.186289][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.212416][T17708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.250894][T17708] hsr_slave_0: entered promiscuous mode [ 183.259188][T17708] hsr_slave_1: entered promiscuous mode [ 183.265199][T17708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.274862][T17708] Cannot create hsr debugfs directory [ 183.290525][T17987] loop4: detected capacity change from 0 to 256 [ 183.302369][T17993] loop2: detected capacity change from 0 to 512 [ 183.320351][T17993] EXT4-fs (loop2): too many log groups per flexible block group [ 183.328062][T17993] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 183.336042][T17993] EXT4-fs (loop2): mount failed [ 183.406249][T17708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.462216][T17708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.522140][T17708] bond0: (slave netdevsim1): Releasing backup interface [ 183.531270][T17708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.572625][T17708] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.646650][T18081] loop3: detected capacity change from 0 to 2048 [ 183.657836][T17708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.667188][T18081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.667940][T17708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.689916][T17708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.700515][T17708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.716441][T16715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.763810][T17708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.779100][T17708] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.790098][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.797265][T10146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.812313][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.819507][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.876162][T18116] loop3: detected capacity change from 0 to 512 [ 183.897934][T17708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.900955][T18116] EXT4-fs (loop3): too many log groups per flexible block group [ 183.912459][T18116] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 183.919328][T18116] EXT4-fs (loop3): mount failed [ 183.942172][T18125] loop2: detected capacity change from 0 to 256 [ 183.988207][T18134] program syz.3.4654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.021392][T17708] veth0_vlan: entered promiscuous mode [ 184.031004][T17708] veth1_vlan: entered promiscuous mode [ 184.051245][T17708] veth0_macvtap: entered promiscuous mode [ 184.062027][T17708] veth1_macvtap: entered promiscuous mode [ 184.075627][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.086245][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.096315][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.107052][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.117082][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.127538][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.137510][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.142196][T18144] loop3: detected capacity change from 0 to 2048 [ 184.147957][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.147974][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.174781][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.187907][T17708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.199818][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.205388][T18144] loop3: p1 p2 < > p3 p4 < p5 > [ 184.210438][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.215346][T18144] loop3: partition table partially beyond EOD, [ 184.225232][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.225253][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.231492][T18144] truncated [ 184.255325][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.265835][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.275683][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.286144][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.295990][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.306592][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.316429][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.327186][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.329052][T18144] loop3: p1 start 2305 is beyond EOD, truncated [ 184.339769][T17708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.343396][T18144] loop3: p2 start 4294902784 is beyond EOD, truncated [ 184.357352][T18144] loop3: p3 start 4278191616 is beyond EOD, truncated [ 184.357325][T17708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.357398][T17708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.357425][T17708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.390561][T17708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.411769][T18144] loop3: p5 start 2305 is beyond EOD, truncated [ 184.494443][T18162] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 184.533569][T18167] loop0: detected capacity change from 0 to 512 [ 184.549791][T18167] EXT4-fs (loop0): too many log groups per flexible block group [ 184.557491][T18167] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 184.565710][T18167] EXT4-fs (loop0): mount failed [ 184.594819][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4667'. [ 184.752224][T18196] loop2: detected capacity change from 0 to 2048 [ 184.802117][T18196] loop2: p1 p2 < > p3 p4 < p5 > [ 184.807192][T18196] loop2: partition table partially beyond EOD, truncated [ 184.817581][T18196] loop2: p1 start 2305 is beyond EOD, truncated [ 184.823890][T18196] loop2: p2 start 4294902784 is beyond EOD, truncated [ 184.830874][T18196] loop2: p3 start 4278191616 is beyond EOD, truncated [ 184.844268][T18196] loop2: p5 start 2305 is beyond EOD, truncated [ 184.855600][T18205] loop1: detected capacity change from 0 to 512 [ 184.873155][T18205] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 184.893685][T18205] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 185.052081][T18231] SELinux: policydb version 0 does not match my version range 15-33 [ 185.061341][T18231] SELinux: failed to load policy [ 185.084535][T18236] loop2: detected capacity change from 0 to 512 [ 185.094935][T18236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.106881][T18236] EXT4-fs (loop2): 1 truncate cleaned up [ 185.113364][T18236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.132728][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4685'. [ 185.141822][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4685'. [ 185.163267][T16877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.391066][T18279] syz.2.4703[18279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.391253][T18279] syz.2.4703[18279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.405914][T18279] netem: incorrect ge model size [ 185.422414][T18279] netem: change failed [ 185.489433][T18287] vlan2: entered allmulticast mode [ 186.155990][T18368] loop1: detected capacity change from 0 to 164 [ 186.200628][T18368] rock: directory entry would overflow storage [ 186.206887][T18368] rock: sig=0x4f50, size=4, remaining=3 [ 186.212493][T18368] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 186.242373][T18377] loop3: detected capacity change from 0 to 512 [ 186.272296][T18377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.288561][T18377] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.316197][T16715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.385338][T18392] loop3: detected capacity change from 0 to 512 [ 186.407213][T18392] EXT4-fs: Ignoring removed oldalloc option [ 186.415431][T18392] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.426629][T18392] EXT4-fs (loop3): 1 truncate cleaned up [ 186.434959][T18392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.466287][T16715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.621184][T18413] Process accounting resumed [ 186.680931][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 186.680949][ T29] audit: type=1400 audit(2000000102.668:5561): avc: denied { mount } for pid=18417 comm="syz.4.4751" name="/" dev="autofs" ino=47242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 186.768822][T18422] loop4: detected capacity change from 0 to 512 [ 186.805354][T18422] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4752: corrupted in-inode xattr: invalid ea_ino [ 186.821689][T18422] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4752: couldn't read orphan inode 15 (err -117) [ 186.834297][T18422] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.867972][ T29] audit: type=1400 audit(2000000102.848:5562): avc: denied { mac_admin } for pid=18421 comm="syz.4.4752" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.889387][ T29] audit: type=1400 audit(2000000102.848:5563): avc: denied { create } for pid=18421 comm="syz.4.4752" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 186.890967][T18422] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 13: comm syz.4.4752: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 186.994269][T18437] syz.3.4770[18437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.004423][T18437] syz.3.4770[18437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.021828][T18437] netem: incorrect ge model size [ 187.038365][T18437] netem: change failed [ 187.070706][T14667] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 187.092473][T10137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.166519][T10137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.224523][T18461] loop4: detected capacity change from 0 to 512 [ 187.243769][T10137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.256586][T18461] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.276306][T18461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.307899][T18461] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4765: corrupted in-inode xattr: e_value out of bounds [ 187.337601][T18461] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4765: couldn't read orphan inode 15 (err -117) [ 187.353518][T10137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.362790][T18461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.398840][ T29] audit: type=1400 audit(2000000103.378:5564): avc: denied { setattr } for pid=18459 comm="syz.4.4765" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 187.475629][T14667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.477084][ T29] audit: type=1326 audit(2000000103.418:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267242def9 code=0x7ffc0000 [ 187.508210][ T29] audit: type=1326 audit(2000000103.418:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f267242def9 code=0x7ffc0000 [ 187.531870][ T29] audit: type=1326 audit(2000000103.418:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267242def9 code=0x7ffc0000 [ 187.555503][ T29] audit: type=1326 audit(2000000103.418:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f267242def9 code=0x7ffc0000 [ 187.579051][ T29] audit: type=1326 audit(2000000103.428:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267242def9 code=0x7ffc0000 [ 187.602656][ T29] audit: type=1326 audit(2000000103.428:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.3.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267242def9 code=0x7ffc0000 [ 187.653316][T10137] bridge_slave_1: left allmulticast mode [ 187.659084][T10137] bridge_slave_1: left promiscuous mode [ 187.664880][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.674677][T10137] bridge_slave_0: left allmulticast mode [ 187.680448][T10137] bridge_slave_0: left promiscuous mode [ 187.686212][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.793233][T18525] loop0: detected capacity change from 0 to 512 [ 187.820424][T18525] EXT4-fs: Ignoring removed orlov option [ 187.828618][T18525] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.863829][T10137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.879248][T18525] EXT4-fs (loop0): 1 truncate cleaned up [ 187.885280][T18525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.901959][T10137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.922506][T10137] bond0 (unregistering): Released all slaves [ 187.957574][ T8697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.016411][T10137] hsr_slave_0: left promiscuous mode [ 188.024322][T10137] hsr_slave_1: left promiscuous mode [ 188.030620][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.038041][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.045845][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.053334][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.066071][T10137] veth1_macvtap: left promiscuous mode [ 188.071966][T10137] veth0_macvtap: left promiscuous mode [ 188.077608][T10137] veth1_vlan: left promiscuous mode [ 188.083022][T10137] veth0_vlan: left promiscuous mode [ 188.181657][T10137] team0 (unregistering): Port device team_slave_1 removed [ 188.192560][T10137] team0 (unregistering): Port device team_slave_0 removed [ 188.221372][T18619] loop3: detected capacity change from 0 to 512 [ 188.244406][T18619] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.255764][T18619] EXT4-fs (loop3): 1 truncate cleaned up [ 188.262024][T18619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.279976][T18458] chnl_net:caif_netlink_parms(): no params data found [ 188.318573][T16715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.336328][T18458] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.343492][T18458] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.351108][T18458] bridge_slave_0: entered allmulticast mode [ 188.357672][T18458] bridge_slave_0: entered promiscuous mode [ 188.366692][T18458] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.373873][T18458] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.383877][T18458] bridge_slave_1: entered allmulticast mode [ 188.390768][T18458] bridge_slave_1: entered promiscuous mode [ 188.411411][T18688] vlan2: entered allmulticast mode [ 188.465523][T18458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.478154][T18458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.580816][T18458] team0: Port device team_slave_0 added [ 188.587763][T18458] team0: Port device team_slave_1 added [ 188.610140][T18458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.617121][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.643074][T18458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.654677][T18458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.661697][T18458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.687718][T18458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.730386][T18458] hsr_slave_0: entered promiscuous mode [ 188.736612][T18458] hsr_slave_1: entered promiscuous mode [ 188.742787][T18458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.750427][T18458] Cannot create hsr debugfs directory [ 188.874117][T18881] loop4: detected capacity change from 0 to 512 [ 188.885815][T18881] EXT4-fs: Ignoring removed oldalloc option [ 188.895303][T18879] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 188.895303][T18879] program syz.3.4801 not setting count and/or reply_len properly [ 188.895727][T18881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.931168][T18881] EXT4-fs (loop4): 1 truncate cleaned up [ 188.940604][T18881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.007794][T18897] loop1: detected capacity change from 0 to 512 [ 189.065091][T18897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.087969][T18458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.097684][T18458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.111091][T18897] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.111575][T18458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.145616][T18458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.250637][T18931] loop1: detected capacity change from 0 to 128 [ 189.261947][T18458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.295611][T18458] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.306687][T10137] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.313826][T10137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.330942][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.338022][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.352432][T18941] SELinux: policydb version 1446001614 does not match my version range 15-33 [ 189.357813][T18938] loop0: detected capacity change from 0 to 512 [ 189.361775][T18941] SELinux: failed to load policy [ 189.377512][T18938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.390810][T18458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.420261][T18938] EXT4-fs (loop0): 1 truncate cleaned up [ 189.466923][T18955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4807'. [ 189.484907][T18458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.613498][T18458] veth0_vlan: entered promiscuous mode [ 189.622745][T18458] veth1_vlan: entered promiscuous mode [ 189.646291][T18977] loop0: detected capacity change from 0 to 512 [ 189.649876][T18458] veth0_macvtap: entered promiscuous mode [ 189.665895][T18981] loop1: detected capacity change from 0 to 512 [ 189.672694][T18981] EXT4-fs: Ignoring removed oldalloc option [ 189.672987][T18458] veth1_macvtap: entered promiscuous mode [ 189.680855][T18981] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.696951][T18977] ext4 filesystem being mounted at /613/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.697664][T18981] EXT4-fs (loop1): 1 truncate cleaned up [ 189.722257][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.732917][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.742839][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.753479][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.763463][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.774005][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.783844][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.794296][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.804108][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.814564][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.836910][T18458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.857760][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.868394][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.878258][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.888739][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.898605][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.907717][T18998] Process accounting resumed [ 189.909065][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.909084][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.934306][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.944170][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.954628][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.964517][T18458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.974976][T18458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.007244][T18458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.017580][T18458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.026512][T18458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.035300][T18458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.044147][T18458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.079985][T19010] vlan2: entered allmulticast mode [ 190.097547][T19018] loop3: detected capacity change from 0 to 2048 [ 190.140640][T19018] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.4827: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 190.146260][T19024] loop0: detected capacity change from 0 to 256 [ 190.164906][T19018] EXT4-fs (loop3): Remounting filesystem read-only [ 190.210215][T19031] loop3: detected capacity change from 0 to 512 [ 190.222501][T19031] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.4830: corrupted in-inode xattr: invalid ea_ino [ 190.236324][T19031] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4830: couldn't read orphan inode 15 (err -117) [ 190.254418][T19031] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #2: block 13: comm syz.3.4830: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 190.292016][T19040] loop2: detected capacity change from 0 to 512 [ 190.298620][T19040] EXT4-fs: Ignoring removed oldalloc option [ 190.315701][T19040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.327998][T19040] EXT4-fs (loop2): 1 truncate cleaned up [ 190.336806][T19044] IPVS: Error connecting to the multicast addr [ 190.384861][T19051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.410845][T19051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.531495][T19079] loop3: detected capacity change from 0 to 512 [ 190.572044][T19079] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.602007][T19091] syz.4.4850[19091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.602114][T19091] syz.4.4850[19091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.657382][T19101] loop3: detected capacity change from 0 to 512 [ 190.660429][T19095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4852'. [ 190.678381][T19103] loop4: detected capacity change from 0 to 512 [ 190.692865][T19101] EXT4-fs: Ignoring removed oldalloc option [ 190.699934][T19103] EXT4-fs: inline encryption not supported [ 190.705917][T19101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.718225][T19103] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 190.740835][T19101] EXT4-fs (loop3): 1 truncate cleaned up [ 190.833930][T19122] loop3: detected capacity change from 0 to 512 [ 190.840534][T19122] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.847439][T19122] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.861883][T19122] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.4857: corrupted in-inode xattr: e_value out of bounds [ 190.876575][T19122] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4857: couldn't read orphan inode 15 (err -117) [ 190.957391][T19136] loop2: detected capacity change from 0 to 8192 [ 190.968773][T19140] netlink: 'syz.3.4863': attribute type 39 has an invalid length. [ 191.044650][T19153] loop4: detected capacity change from 0 to 512 [ 191.059489][T19153] EXT4-fs: Ignoring removed oldalloc option [ 191.068274][T19153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.084030][T19157] vlan0: entered allmulticast mode [ 191.098592][T19153] EXT4-fs (loop4): 1 truncate cleaned up [ 191.285375][T19186] loop0: detected capacity change from 0 to 2048 [ 191.353605][T19186] Alternate GPT is invalid, using primary GPT. [ 191.360200][T19186] loop0: p2 p3 p7 [ 191.384502][T19195] loop2: detected capacity change from 0 to 2048 [ 191.392347][T19199] syz.1.4885[19199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.392413][T19199] syz.1.4885[19199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.408871][T19198] vhci_hcd: default hub control req: 800e v1303 i0000 l0 [ 191.473321][T19215] vlan0: entered allmulticast mode [ 191.521210][T19226] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 191.547019][T19219] loop4: detected capacity change from 0 to 8192 [ 191.557921][T19219] vfat: Unknown parameter 'ÿ' [ 191.670095][T19249] loop0: detected capacity change from 0 to 128 [ 191.697130][T19254] SELinux: policydb version 1446001614 does not match my version range 15-33 [ 191.725110][T19254] SELinux: failed to load policy [ 191.730642][T19264] vlan2: entered allmulticast mode [ 191.736316][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 191.736329][ T29] audit: type=1107 audit(2000000107.718:5635): pid=19269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¯Þ' [ 191.785155][ T29] audit: type=1400 audit(2000000107.768:5636): avc: denied { setopt } for pid=19274 comm="syz.2.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.820299][T19284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4910'. [ 191.849286][ T29] audit: type=1400 audit(2000000107.818:5637): avc: denied { mount } for pid=19278 comm="syz.3.4911" name="/" dev="ramfs" ino=49217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 191.892406][ T29] audit: type=1400 audit(2000000107.858:5638): avc: denied { unmount } for pid=16715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 191.917814][T19286] loop1: detected capacity change from 0 to 2048 [ 191.936609][T19286] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.4913: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 191.965956][T19286] EXT4-fs (loop1): Remounting filesystem read-only [ 192.011659][ T29] audit: type=1400 audit(2000000107.998:5639): avc: denied { sqpoll } for pid=19310 comm="syz.4.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.090181][T19325] vlan2: entered allmulticast mode [ 192.092553][ T29] audit: type=1326 audit(2000000108.078:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.2.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 192.118952][ T29] audit: type=1326 audit(2000000108.078:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.2.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 192.142379][ T29] audit: type=1326 audit(2000000108.078:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.2.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 192.175952][ T29] audit: type=1326 audit(2000000108.148:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.2.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb3a3fc9df code=0x7ffc0000 [ 192.199572][ T29] audit: type=1326 audit(2000000108.148:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19327 comm="syz.2.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 192.300043][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4943'. [ 192.363389][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4932'. [ 192.400927][T19355] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4934'. [ 192.461799][T19360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4939'. [ 192.470915][T19360] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4939'. [ 192.483811][T19360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4939'. [ 192.575311][T19373] vlan2: entered allmulticast mode [ 192.710922][T19397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4954'. [ 192.721884][T19397] IPv6: NLM_F_REPLACE set, but no existing node found! [ 192.753389][T19400] loop2: detected capacity change from 0 to 2048 [ 192.783485][T19400] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.4956: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 192.800380][T19400] EXT4-fs (loop2): Remounting filesystem read-only [ 192.837423][T19420] syz.2.4972[19420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.837502][T19420] syz.2.4972[19420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.894641][T19427] vlan2: entered allmulticast mode [ 192.944322][T19443] loop1: detected capacity change from 0 to 128 [ 193.208281][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4977'. [ 193.252520][T19467] loop0: detected capacity change from 0 to 2048 [ 193.260179][T19464] loop3: detected capacity change from 0 to 8192 [ 193.274571][T19467] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.4975: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 193.303361][T19467] EXT4-fs (loop0): Remounting filesystem read-only [ 193.380589][T19489] vlan2: entered allmulticast mode [ 193.437130][T19504] loop0: detected capacity change from 0 to 764 [ 193.455155][T19504] rock: directory entry would overflow storage [ 193.461529][T19504] rock: sig=0x4f50, size=4, remaining=3 [ 193.467098][T19504] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 193.591950][T19527] loop1: detected capacity change from 0 to 2048 [ 193.616740][T19522] loop4: detected capacity change from 0 to 8192 [ 193.665237][T19527] Alternate GPT is invalid, using primary GPT. [ 193.671655][T19527] loop1: p2 p3 p7 [ 193.736654][T19546] loop0: detected capacity change from 0 to 2048 [ 193.834442][T19574] IPv6: NLM_F_REPLACE set, but no existing node found! [ 193.863536][T19576] netlink: 'syz.4.5011': attribute type 10 has an invalid length. [ 193.891286][T19576] team0: Port device netdevsim1 added [ 193.910780][T19576] netlink: 'syz.4.5011': attribute type 10 has an invalid length. [ 193.930675][T19576] team0: Port device netdevsim1 removed [ 193.938433][T19576] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 194.002167][T19594] rdma_op ffff88811f145980 conn xmit_rdma 0000000000000000 [ 194.068223][T19615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.087163][T19615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.100823][T19616] loop4: detected capacity change from 0 to 2048 [ 194.115260][T19610] loop0: detected capacity change from 0 to 8192 [ 194.137975][T19616] Alternate GPT is invalid, using primary GPT. [ 194.144420][T19616] loop4: p2 p3 p7 [ 194.422442][T19661] IPVS: Error connecting to the multicast addr [ 194.432739][T19664] IPv6: NLM_F_REPLACE set, but no existing node found! [ 194.712212][T19700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.722780][T19706] IPv6: NLM_F_REPLACE set, but no existing node found! [ 194.731847][T19701] IPVS: Error connecting to the multicast addr [ 194.738739][T19705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.748025][T19700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.767945][T19705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.784485][T19713] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.838011][T19721] loop4: detected capacity change from 0 to 512 [ 194.849808][T19721] EXT4-fs (loop4): too many log groups per flexible block group [ 194.857498][T19721] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 194.864331][T19721] EXT4-fs (loop4): mount failed [ 195.429352][T19750] loop4: detected capacity change from 0 to 128 [ 195.447070][T19750] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 195.478294][T19750] syz.4.5068: attempt to access beyond end of device [ 195.478294][T19750] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 195.501617][T19750] syz.4.5068: attempt to access beyond end of device [ 195.501617][T19750] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 195.720375][T19798] rdma_op ffff888113aa9d80 conn xmit_rdma 0000000000000000 [ 195.780373][T19810] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.875516][T19825] loop4: detected capacity change from 0 to 2048 [ 195.892936][T19825] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.955967][T14667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /224/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 195.982301][T14667] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 196.002434][T14667] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 196.047188][T19829] netlink: 'syz.2.5098': attribute type 10 has an invalid length. [ 196.055673][T19829] batman_adv: batadv0: Adding interface: veth1_macvtap [ 196.062605][T19829] batman_adv: batadv0: The MTU of interface veth1_macvtap is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.089063][T19829] batman_adv: batadv0: Interface activated: veth1_macvtap [ 196.230022][T19849] vhci_hcd: default hub control req: 800e v1303 i0000 l0 [ 196.285903][ T3283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.332356][ T3283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.381564][ T3283] bond0: (slave netdevsim1): Releasing backup interface [ 196.390581][ T3283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.442129][ T3283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.492909][ T3283] bridge_slave_1: left allmulticast mode [ 196.498719][ T3283] bridge_slave_1: left promiscuous mode [ 196.504464][ T3283] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.512210][ T3283] bridge_slave_0: left allmulticast mode [ 196.517877][ T3283] bridge_slave_0: left promiscuous mode [ 196.523653][ T3283] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.634749][T19873] loop3: detected capacity change from 0 to 128 [ 196.643766][ T3283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.662325][T19873] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 196.684709][ T3283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.705642][ T3283] bond0 (unregistering): Released all slaves [ 196.716402][T19880] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.721841][T19873] syz.3.5108: attempt to access beyond end of device [ 196.721841][T19873] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 196.737377][T19873] syz.3.5108: attempt to access beyond end of device [ 196.737377][T19873] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 196.821709][ T3283] hsr_slave_0: left promiscuous mode [ 196.827412][ T3283] hsr_slave_1: left promiscuous mode [ 196.836651][ T3283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.844124][ T3283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.855396][ T3283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.862868][ T3283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.871134][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 196.871149][ T29] audit: type=1326 audit(2000000112.858:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d94def9 code=0x7ffc0000 [ 196.913971][ T3283] veth1_macvtap: left promiscuous mode [ 196.919557][ T3283] veth0_macvtap: left promiscuous mode [ 196.920738][ T29] audit: type=1326 audit(2000000112.858:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0c7d94def9 code=0x7ffc0000 [ 196.925037][ T3283] veth1_vlan: left promiscuous mode [ 196.925084][ T3283] veth0_vlan: left promiscuous mode [ 196.948375][ T29] audit: type=1326 audit(2000000112.858:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d94def9 code=0x7ffc0000 [ 196.982295][ T29] audit: type=1326 audit(2000000112.858:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d94def9 code=0x7ffc0000 [ 197.005809][ T29] audit: type=1326 audit(2000000112.858:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0c7d94def9 code=0x7ffc0000 [ 197.029328][ T29] audit: type=1326 audit(2000000112.858:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d94def9 code=0x7ffc0000 [ 197.052808][ T29] audit: type=1326 audit(2000000112.858:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19895 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7d94def9 code=0x7ffc0000 [ 197.095255][ T29] audit: type=1400 audit(2000000113.078:5750): avc: denied { connect } for pid=19907 comm="syz.3.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 197.115465][ T29] audit: type=1400 audit(2000000113.078:5751): avc: denied { bind } for pid=19907 comm="syz.3.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 197.152039][T19910] loop1: detected capacity change from 0 to 2048 [ 197.172270][T19910] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.220050][ T3283] team0 (unregistering): Port device team_slave_1 removed [ 197.230599][ T3283] team0 (unregistering): Port device team_slave_0 removed [ 197.236025][T17708] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /93/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 197.265000][T17708] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 197.285434][T17708] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 197.335900][T19932] loop0: detected capacity change from 0 to 764 [ 197.350744][T19932] rock: directory entry would overflow storage [ 197.357115][T19932] rock: sig=0x4654, size=5, remaining=4 [ 197.367975][T19932] rock: directory entry would overflow storage [ 197.374238][T19932] rock: sig=0x4f50, size=4, remaining=3 [ 197.379897][T19932] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 197.405884][T19877] chnl_net:caif_netlink_parms(): no params data found [ 197.443186][T19877] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.450432][T19877] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.457666][T19877] bridge_slave_0: entered allmulticast mode [ 197.464264][T19877] bridge_slave_0: entered promiscuous mode [ 197.471536][T19877] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.478611][T19877] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.485811][T19877] bridge_slave_1: entered allmulticast mode [ 197.492288][T19877] bridge_slave_1: entered promiscuous mode [ 197.511011][T19877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.521629][T19877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.543448][T19877] team0: Port device team_slave_0 added [ 197.550047][T19877] team0: Port device team_slave_1 added [ 197.577827][T19877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.584891][T19877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.611255][T19877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.624608][T19877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.631615][T19877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.657609][T19877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.700366][T19877] hsr_slave_0: entered promiscuous mode [ 197.706567][T19877] hsr_slave_1: entered promiscuous mode [ 197.714318][T19877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.721939][T19877] Cannot create hsr debugfs directory [ 197.826275][T20254] __nla_validate_parse: 8 callbacks suppressed [ 197.826292][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5139'. [ 197.852958][T10137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.943220][T10137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.974119][T20180] chnl_net:caif_netlink_parms(): no params data found [ 198.031130][ T29] audit: type=1400 audit(2000000114.018:5752): avc: denied { bind } for pid=20421 comm="syz.0.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.052801][T20180] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.060016][T20180] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.067450][T20180] bridge_slave_0: entered allmulticast mode [ 198.076723][T20180] bridge_slave_0: entered promiscuous mode [ 198.081055][T20433] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.093069][T20424] netlink: 'syz.0.5145': attribute type 4 has an invalid length. [ 198.121354][T10137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.136289][T20180] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.143538][T20180] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.151188][T20180] bridge_slave_1: entered allmulticast mode [ 198.158013][T20180] bridge_slave_1: entered promiscuous mode [ 198.164718][T20434] netlink: 'syz.0.5145': attribute type 4 has an invalid length. [ 198.196571][T10137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.209596][T20180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.220552][T20180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.243106][T20180] team0: Port device team_slave_0 added [ 198.250647][T20180] team0: Port device team_slave_1 added [ 198.269619][T20180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.276631][T20180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.302605][T20180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.314078][T20180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.321131][T20180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.347097][T20180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.392062][T20180] hsr_slave_0: entered promiscuous mode [ 198.398245][T20180] hsr_slave_1: entered promiscuous mode [ 198.404348][T20180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.412056][T20180] Cannot create hsr debugfs directory [ 198.426761][T19877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.437419][T19877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.449239][T19877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.460370][T19877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.482085][T10137] bridge_slave_1: left allmulticast mode [ 198.487745][T10137] bridge_slave_1: left promiscuous mode [ 198.493613][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.501793][T10137] bridge_slave_0: left allmulticast mode [ 198.507516][T10137] bridge_slave_0: left promiscuous mode [ 198.513203][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.601588][T10137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.612064][T10137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.622165][T10137] bond0 (unregistering): Released all slaves [ 198.692852][T10137] hsr_slave_0: left promiscuous mode [ 198.698648][T10137] hsr_slave_1: left promiscuous mode [ 198.704902][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.712381][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.720818][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.728204][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.737905][T10137] veth1_macvtap: left promiscuous mode [ 198.743441][T10137] veth0_macvtap: left promiscuous mode [ 198.748995][T10137] veth1_vlan: left promiscuous mode [ 198.754204][T10137] veth0_vlan: left promiscuous mode [ 198.834690][T10137] team0 (unregistering): Port device team_slave_1 removed [ 198.845349][T10137] team0 (unregistering): Port device team_slave_0 removed [ 198.885355][T19877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.899503][T19877] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.909160][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.916253][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.929185][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.936281][T10146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.957623][T19877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.968116][T19877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.002620][T20634] loop2: detected capacity change from 0 to 764 [ 199.011405][T20634] rock: directory entry would overflow storage [ 199.017592][T20634] rock: sig=0x4f50, size=4, remaining=3 [ 199.023266][T20634] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 199.035784][T19877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.146097][T20180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.155210][T20180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.164234][T20180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.173374][T20180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.191230][T19877] veth0_vlan: entered promiscuous mode [ 199.205021][T19877] veth1_vlan: entered promiscuous mode [ 199.231268][T19877] veth0_macvtap: entered promiscuous mode [ 199.238779][T19877] veth1_macvtap: entered promiscuous mode [ 199.268283][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.279048][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.288893][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.299478][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.309436][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.319993][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.329827][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.340258][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.351152][T19877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.368808][T20180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.376533][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.387043][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.397116][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.407666][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.417490][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.427920][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.437763][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.448236][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.458100][T19877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.468613][T19877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.480739][T19877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.490977][T19877] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.499792][T19877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.508532][T19877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.517315][T19877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.536128][T20180] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.553768][T10137] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.560897][T10137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.569934][T10137] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.577043][T10137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.624300][T20686] netlink: 566 bytes leftover after parsing attributes in process `syz.4.5118'. [ 199.667625][T20180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.696590][T20698] syz.4.5147[20698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.696674][T20698] syz.4.5147[20698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.725259][T20705] bond0: option arp_interval: invalid value (18446744072376677605) [ 199.744862][T20705] bond0: option arp_interval: allowed values 0 - 2147483647 [ 199.785245][T20712] loop4: detected capacity change from 0 to 764 [ 199.793913][T20712] rock: directory entry would overflow storage [ 199.797984][T20180] veth0_vlan: entered promiscuous mode [ 199.800155][T20712] rock: sig=0x4654, size=5, remaining=4 [ 199.822271][T20712] rock: directory entry would overflow storage [ 199.822398][T20180] veth1_vlan: entered promiscuous mode [ 199.828436][T20712] rock: sig=0x4f50, size=4, remaining=3 [ 199.828451][T20712] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 199.848430][T20180] veth0_macvtap: entered promiscuous mode [ 199.851366][T20710] loop3: detected capacity change from 0 to 4096 [ 199.859751][T20180] veth1_macvtap: entered promiscuous mode [ 199.875781][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.886384][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.890812][T20710] EXT4-fs mount: 36 callbacks suppressed [ 199.890876][T20710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.896368][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.924983][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.935076][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.945689][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.955727][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.966523][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.976418][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.986990][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.998019][T16715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.031288][T20180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.046325][T20731] netlink: 566 bytes leftover after parsing attributes in process `syz.3.5158'. [ 200.057208][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.067766][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.077640][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.088186][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.098104][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.108634][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.118485][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.129085][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.138975][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.149521][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.159367][T20180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.169909][T20180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.187386][T20180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.204329][T20180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.213207][T20180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.222155][T20180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.230995][T20180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.282582][T20743] loop4: detected capacity change from 0 to 512 [ 200.303931][T20743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.350969][T19877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.353046][T20750] loop3: detected capacity change from 0 to 512 [ 200.374041][T20758] loop0: detected capacity change from 0 to 512 [ 200.384073][T20750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.401716][T20758] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2812: inode #11: comm syz.0.5165: corrupted xattr block 95: invalid header [ 200.417487][T20758] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5165: bg 0: block 7: invalid block bitmap [ 200.431931][T20750] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.444535][T20765] loop1: detected capacity change from 0 to 764 [ 200.445081][T20758] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 200.468323][T20765] rock: directory entry would overflow storage [ 200.470736][T20758] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2978: inode #11: comm syz.0.5165: corrupted xattr block 95: invalid header [ 200.474572][T20765] rock: sig=0x4654, size=5, remaining=4 [ 200.494300][T16715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.512578][T20758] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 200.530152][T20758] EXT4-fs (loop0): 1 orphan inode deleted [ 200.534255][T20772] loop4: detected capacity change from 0 to 512 [ 200.536261][T20758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.553738][T20772] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.574608][T20765] rock: directory entry would overflow storage [ 200.580901][T20765] rock: sig=0x4f50, size=4, remaining=3 [ 200.586525][T20765] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 200.599183][T20772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 200.611972][T20772] EXT4-fs (loop4): orphan cleanup on readonly fs [ 200.624160][T20772] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5171: bg 0: block 361: padding at end of block bitmap is not set [ 200.650594][T20772] EXT4-fs (loop4): Remounting filesystem read-only [ 200.660063][ T8697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.662682][T20772] EXT4-fs (loop4): 1 truncate cleaned up [ 200.685153][T20772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 200.715854][T20772] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 200.722964][T20792] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5180'. [ 200.726317][T20772] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 200.792858][T20803] loop0: detected capacity change from 0 to 512 [ 200.817589][T20803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.833206][T20808] loop4: detected capacity change from 0 to 2048 [ 200.838995][T20803] ext4 filesystem being mounted at /686/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.859045][T20803] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.5184: Directory hole found for htree leaf block 0 [ 200.868997][T20813] loop3: detected capacity change from 0 to 764 [ 200.879446][T20813] rock: directory entry would overflow storage [ 200.885744][T20813] rock: sig=0x4654, size=5, remaining=4 [ 200.892886][T20808] Alternate GPT is invalid, using primary GPT. [ 200.899198][T20808] loop4: p1 p2 p3 [ 200.904103][T20803] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 200.917569][T20813] rock: directory entry would overflow storage [ 200.923772][T20813] rock: sig=0x4f50, size=4, remaining=3 [ 200.929347][T20813] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 200.939824][T20803] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 200.960833][T20803] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 200.976533][T20803] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.5184: Directory hole found for htree leaf block 0 [ 201.005000][T20840] loop4: detected capacity change from 0 to 256 [ 201.019634][ T8697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.071667][T20854] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5199'. [ 201.081788][T20850] netlink: 'syz.0.5196': attribute type 21 has an invalid length. [ 201.153686][T20871] netlink: 'syz.3.5213': attribute type 10 has an invalid length. [ 201.154163][T20870] loop4: detected capacity change from 0 to 512 [ 201.175306][T20871] team0: Device hsr_slave_0 failed to register rx_handler [ 201.185156][T20870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.201710][T20870] EXT4-fs (loop4): 1 truncate cleaned up [ 201.216104][T20870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.229518][T20870] syz.4.5214[20870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.229586][T20870] syz.4.5214[20870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.242224][T20870] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 201.276759][T19877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.369477][T20882] loop2: detected capacity change from 0 to 764 [ 201.377689][T20882] rock: directory entry would overflow storage [ 201.383888][T20882] rock: sig=0x4654, size=5, remaining=4 [ 201.392616][T20882] rock: directory entry would overflow storage [ 201.398796][T20882] rock: sig=0x4f50, size=4, remaining=3 [ 201.404430][T20882] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.428478][T20889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5207'. [ 201.665690][T20909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5221'. [ 201.681501][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5220'. [ 201.690532][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5220'. [ 201.736088][T20920] loop2: detected capacity change from 0 to 764 [ 201.743280][T20920] rock: directory entry would overflow storage [ 201.749563][T20920] rock: sig=0x4654, size=5, remaining=4 [ 201.758057][T20920] rock: directory entry would overflow storage [ 201.764347][T20920] rock: sig=0x4f50, size=4, remaining=3 [ 201.769930][T20920] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.931988][T20935] vhci_hcd: default hub control req: 4014 v0000 i0000 l0 [ 202.188863][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 202.188880][ T29] audit: type=1326 audit(2000000118.168:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.218686][ T29] audit: type=1326 audit(2000000118.168:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.242213][ T29] audit: type=1326 audit(2000000118.168:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.265573][ T29] audit: type=1326 audit(2000000118.168:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.342119][T20979] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 202.342119][T20979] program syz.2.5247 not setting count and/or reply_len properly [ 202.365900][ T29] audit: type=1326 audit(2000000118.178:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.389485][ T29] audit: type=1326 audit(2000000118.178:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.413221][ T29] audit: type=1326 audit(2000000118.178:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.437097][ T29] audit: type=1326 audit(2000000118.178:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.438624][T20988] loop0: detected capacity change from 0 to 128 [ 202.460875][ T29] audit: type=1326 audit(2000000118.178:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.471565][T20988] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.490537][ T29] audit: type=1326 audit(2000000118.288:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20967 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3a3fdef9 code=0x7ffc0000 [ 202.528534][T20988] ext4 filesystem being mounted at /695/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.565080][T20984] team0: Port device macvlan1 added [ 202.567519][T20995] netlink: 'syz.1.5252': attribute type 29 has an invalid length. [ 202.601946][ T8697] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.630725][T20989] team0: Port device macvlan1 removed [ 202.646579][T21006] syz.3.5257[21006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.646640][T21006] syz.3.5257[21006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.680566][T21010] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 202.855451][T21039] bridge0: port 3(veth0_to_bond) entered blocking state [ 202.862625][T21039] bridge0: port 3(veth0_to_bond) entered disabled state [ 202.871532][T21039] veth0_to_bond: entered allmulticast mode [ 202.880172][T21039] veth0_to_bond: entered promiscuous mode [ 202.891637][T21039] bridge0: port 3(veth0_to_bond) entered blocking state [ 202.898719][T21039] bridge0: port 3(veth0_to_bond) entered forwarding state [ 202.913314][T21044] veth0_to_bond: left allmulticast mode [ 202.919077][T21044] veth0_to_bond: left promiscuous mode [ 202.924757][T21044] bridge0: port 3(veth0_to_bond) entered disabled state [ 202.973594][T21048] syz.2.5270[21048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.973682][T21048] syz.2.5270[21048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.994332][T21050] syz.3.5273[21050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.006674][T21050] syz.3.5273[21050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.048616][T21055] netlink: 'syz.2.5275': attribute type 1 has an invalid length. [ 203.068057][T21055] netlink: 'syz.2.5275': attribute type 2 has an invalid length. [ 203.563289][T21078] loop4: detected capacity change from 0 to 256 [ 203.589305][T21078] FAT-fs (loop4): Directory bread(block 64) failed [ 203.599092][T21078] FAT-fs (loop4): Directory bread(block 65) failed [ 203.605632][T21078] FAT-fs (loop4): Directory bread(block 66) failed [ 203.619816][T21078] FAT-fs (loop4): Directory bread(block 67) failed [ 203.629920][T21078] FAT-fs (loop4): Directory bread(block 68) failed [ 203.636443][T21078] FAT-fs (loop4): Directory bread(block 69) failed [ 203.653249][T21078] FAT-fs (loop4): Directory bread(block 70) failed [ 203.666146][T21078] FAT-fs (loop4): Directory bread(block 71) failed [ 203.681299][T21078] FAT-fs (loop4): Directory bread(block 72) failed [ 203.697953][T21078] FAT-fs (loop4): Directory bread(block 73) failed [ 203.720700][T21078] syz.4.5285: attempt to access beyond end of device [ 203.720700][T21078] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 204.306889][T21124] loop2: detected capacity change from 0 to 512 [ 204.344173][T21124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.365555][T21124] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.395783][T18458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.609116][T21149] team_slave_0: entered promiscuous mode [ 204.614947][T21149] team_slave_1: entered promiscuous mode [ 204.631094][T21149] macvtap1: entered promiscuous mode [ 204.636473][T21149] team0: entered promiscuous mode [ 204.650758][T21149] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 204.665140][T21149] team0: Device macvtap1 is already an upper device of the team interface [ 204.685617][T21149] team0: left promiscuous mode [ 204.690685][T21149] team_slave_0: left promiscuous mode [ 204.696181][T21149] team_slave_1: left promiscuous mode [ 204.844873][T21174] bpf_get_probe_write_proto: 2 callbacks suppressed [ 204.844942][T21174] syz.3.5322[21174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.851910][T21174] syz.3.5322[21174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.924052][T21177] pimreg: entered allmulticast mode [ 204.945034][T21177] pimreg: left allmulticast mode [ 205.019650][T21189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.033829][T21189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.296313][T21226] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 205.306182][T21226] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 205.325777][T10137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.364515][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 205.374876][T10137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.412399][T10137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.463642][T10137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.541407][T10137] bridge_slave_1: left allmulticast mode [ 205.547115][T10137] bridge_slave_1: left promiscuous mode [ 205.552921][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.560968][T10137] bridge_slave_0: left allmulticast mode [ 205.566704][T10137] bridge_slave_0: left promiscuous mode [ 205.572345][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.681349][T10137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.693370][T10137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.703642][T10137] bond0 (unregistering): Released all slaves [ 205.792007][T10137] hsr_slave_0: left promiscuous mode [ 205.797911][T10137] hsr_slave_1: left promiscuous mode [ 205.804039][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.811542][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.819074][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.826551][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.836126][T10137] veth1_macvtap: left promiscuous mode [ 205.841820][T10137] veth0_macvtap: left promiscuous mode [ 205.847420][T10137] veth1_vlan: left promiscuous mode [ 205.852792][T10137] veth0_vlan: left promiscuous mode [ 205.933657][T10137] team0 (unregistering): Port device team_slave_1 removed [ 205.944168][T10137] team0 (unregistering): Port device team_slave_0 removed [ 206.502787][T10137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.563393][T10137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.614649][T10137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.653743][T10137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.673229][T21293] chnl_net:caif_netlink_parms(): no params data found [ 206.716534][ T36] ================================================================== [ 206.724627][ T36] BUG: KCSAN: data-race in alloc_pid / copy_process [ 206.731214][ T36] [ 206.733532][ T36] read-write to 0xffffffff8665d8f8 of 4 bytes by task 3283 on cpu 0: [ 206.741604][ T36] alloc_pid+0x542/0x6f0 [ 206.746013][ T36] copy_process+0xff8/0x1f90 [ 206.750598][ T36] kernel_clone+0x167/0x5e0 [ 206.755109][ T36] user_mode_thread+0x7d/0xb0 [ 206.759785][ T36] call_usermodehelper_exec_work+0x41/0x150 [ 206.765684][ T36] process_scheduled_works+0x483/0x9a0 [ 206.771149][ T36] worker_thread+0x526/0x6e0 [ 206.775761][ T36] kthread+0x1d1/0x210 [ 206.779832][ T36] ret_from_fork+0x4b/0x60 [ 206.784252][ T36] ret_from_fork_asm+0x1a/0x30 [ 206.789021][ T36] [ 206.791338][ T36] read to 0xffffffff8665d8f8 of 4 bytes by task 36 on cpu 1: [ 206.798704][ T36] copy_process+0x15e3/0x1f90 [ 206.803387][ T36] kernel_clone+0x167/0x5e0 [ 206.807980][ T36] user_mode_thread+0x7d/0xb0 [ 206.812661][ T36] call_usermodehelper_exec_work+0x41/0x150 [ 206.818570][ T36] process_scheduled_works+0x483/0x9a0 [ 206.824037][ T36] worker_thread+0x526/0x6e0 [ 206.828638][ T36] kthread+0x1d1/0x210 [ 206.832706][ T36] ret_from_fork+0x4b/0x60 [ 206.837126][ T36] ret_from_fork_asm+0x1a/0x30 [ 206.841902][ T36] [ 206.844218][ T36] value changed: 0x800000e7 -> 0x800000e8 [ 206.849926][ T36] [ 206.852242][ T36] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 206.858386][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.11.0-rc7-syzkaller-00039-g77f587896757 #0 [ 206.869065][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.879126][ T36] Workqueue: events_unbound call_usermodehelper_exec_work [ 206.886261][ T36] ================================================================== [ 206.908115][T21297] chnl_net:caif_netlink_parms(): no params data found [ 206.932893][T21293] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.940292][T21293] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.978460][T21293] bridge_slave_0: entered allmulticast mode [ 206.993012][T21293] bridge_slave_0: entered promiscuous mode [ 207.008062][T21297] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 207.077949][T10137] bridge_slave_1: left allmulticast mode [ 207.092694][T10137] bridge_slave_1: left promiscuous mode [ 207.098452][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.113900][T10137] bridge_slave_0: left allmulticast mode [ 207.119741][T10137] bridge_slave_0: left promiscuous mode [ 207.125535][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.243878][T10137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.255054][T10137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.265277][T10137] bond0 (unregistering): Released all slaves [ 207.431625][T10137] hsr_slave_0: left promiscuous mode [ 207.437211][T10137] hsr_slave_1: left promiscuous mode [ 207.443100][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.450590][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.458379][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.465895][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.473590][T10137] batman_adv: batadv0: Interface deactivated: veth1_macvtap [ 207.480939][T10137] batman_adv: batadv0: Removing interface: veth1_macvtap [ 207.490903][T10137] veth0_macvtap: left promiscuous mode [ 207.496402][T10137] veth1_vlan: left promiscuous mode [ 207.501650][T10137] veth0_vlan: left promiscuous mode [ 207.583062][T10137] team0 (unregistering): Port device team_slave_1 removed [ 207.593709][T10137] team0 (unregistering): Port device team_slave_0 removed [ 207.974842][T10137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.022141][T10137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.072062][T10137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.131952][T10137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.185389][T10137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.231972][T10137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.292700][T10137] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 208.301386][T10137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.362594][T10137] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 208.374248][T10137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.453625][T10137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.491935][T10137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.532227][T10137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.582078][T10137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.653425][T10137] bridge_slave_1: left allmulticast mode [ 208.659214][T10137] bridge_slave_1: left promiscuous mode [ 208.664825][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.672858][T10137] bridge_slave_0: left allmulticast mode [ 208.678496][T10137] bridge_slave_0: left promiscuous mode [ 208.684196][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.692676][T10137] bridge_slave_1: left allmulticast mode [ 208.698329][T10137] bridge_slave_1: left promiscuous mode [ 208.704092][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.712045][T10137] bridge_slave_0: left allmulticast mode [ 208.717704][T10137] bridge_slave_0: left promiscuous mode [ 208.723522][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.731785][T10137] bridge_slave_1: left allmulticast mode [ 208.737509][T10137] bridge_slave_1: left promiscuous mode [ 208.743470][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.751343][T10137] bridge_slave_0: left allmulticast mode [ 208.756980][T10137] bridge_slave_0: left promiscuous mode [ 208.762704][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.771792][T10137] bridge_slave_0: left allmulticast mode [ 208.777476][T10137] bridge_slave_0: left promiscuous mode [ 208.783153][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.301482][T10137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.311943][T10137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.322011][T10137] bond0 (unregistering): Released all slaves [ 209.331385][T10137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.341769][T10137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.351958][T10137] bond0 (unregistering): Released all slaves [ 209.361275][T10137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.371557][T10137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.381709][T10137] bond0 (unregistering): Released all slaves [ 209.389973][T10137] bond0 (unregistering): Released all slaves [ 209.398227][T10137] bond0 (unregistering): Released all slaves [ 209.443520][T10137] tipc: Disabling bearer [ 209.448842][T10137] tipc: Left network mode [ 209.544112][T10137] hsr_slave_0: left promiscuous mode [ 209.549862][T10137] hsr_slave_1: left promiscuous mode [ 209.555482][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.562927][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.570363][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.577813][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.587037][T10137] hsr_slave_0: left promiscuous mode [ 209.592847][T10137] hsr_slave_1: left promiscuous mode [ 209.598492][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.606097][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.613954][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.621400][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.630497][T10137] hsr_slave_0: left promiscuous mode [ 209.636139][T10137] hsr_slave_1: left promiscuous mode [ 209.642082][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.649760][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.657236][T10137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.664718][T10137] batman_adv: batadv0: Interface deactivated: veth1_macvtap [ 209.672081][T10137] batman_adv: batadv0: Removing interface: veth1_macvtap [ 209.683887][T10137] veth1_macvtap: left promiscuous mode [ 209.689401][T10137] veth0_macvtap: left promiscuous mode [ 209.694997][T10137] veth1_vlan: left promiscuous mode [ 209.700258][T10137] veth0_vlan: left promiscuous mode [ 209.705939][T10137] veth1_macvtap: left promiscuous mode [ 209.711472][T10137] veth0_macvtap: left promiscuous mode [ 209.717101][T10137] veth1_vlan: left promiscuous mode [ 209.722403][T10137] veth0_vlan: left promiscuous mode [ 209.728316][T10137] veth0_macvtap: left promiscuous mode [ 209.733907][T10137] veth1_vlan: left promiscuous mode [ 209.883795][T10137] team0 (unregistering): Port device team_slave_1 removed [ 209.894363][T10137] team0 (unregistering): Port device team_slave_0 removed [ 209.959965][T10137] team0 (unregistering): Port device team_slave_1 removed [ 209.970170][T10137] team0 (unregistering): Port device team_slave_0 removed [ 210.035985][T10137] team0 (unregistering): Port device team_slave_1 removed [ 210.046126][T10137] team0 (unregistering): Port device team_slave_0 removed