last executing test programs: 18.411763991s ago: executing program 1 (id=163): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2.905199034s ago: executing program 3 (id=593): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 2.782885156s ago: executing program 4 (id=595): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 2.716436677s ago: executing program 3 (id=597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) 1.863104854s ago: executing program 3 (id=602): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 1.727325197s ago: executing program 0 (id=606): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 1.696177767s ago: executing program 5 (id=607): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1) readv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1) inotify_rm_watch(r2, r1) 1.696039438s ago: executing program 4 (id=608): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) 1.669458188s ago: executing program 4 (id=609): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioperm(0x2, 0x7, 0x13) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15", 0x2}], 0x1, 0x0) 1.526061801s ago: executing program 5 (id=610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) 1.525508101s ago: executing program 0 (id=620): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1) readv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1) inotify_rm_watch(r2, r1) 1.390209573s ago: executing program 0 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semget(0x0, 0x2, 0x2b) 1.308244225s ago: executing program 0 (id=612): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x20) poll(&(0x7f0000000040)=[{r0, 0x804f}], 0x1, 0x11ff) shutdown(r0, 0x0) 1.168023298s ago: executing program 0 (id=613): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r0, &(0x7f0000000200)=""/209, 0x128) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 905.428313ms ago: executing program 2 (id=615): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="86b375", 0x3}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1}, 0x2404c140) 221.884326ms ago: executing program 0 (id=616): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 221.770526ms ago: executing program 2 (id=617): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x20001, 0x81, 0x0, 'queue1\x00', 0x400}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 218.437586ms ago: executing program 3 (id=618): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) 217.365786ms ago: executing program 4 (id=619): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x62941, 0x2, 0x10}, 0x18) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x180000000) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) 215.251136ms ago: executing program 5 (id=629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "2e1120d40b14d1c5", "ba9a260eebb734c7f5d14a67c6fa9c04b16262ef974ccf49671b39b40c1f72d0", "873b9758", "5b2d494fc6a008d1"}, 0x38) write$binfmt_aout(r0, 0x0, 0xfdef) 196.643467ms ago: executing program 2 (id=621): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) 188.070697ms ago: executing program 3 (id=622): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1) readv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1) inotify_rm_watch(r2, r1) 170.688507ms ago: executing program 5 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semget(0x0, 0x2, 0x2b) 170.354347ms ago: executing program 2 (id=624): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x20) poll(&(0x7f0000000040)=[{r0, 0x804f}], 0x1, 0x11ff) shutdown(r0, 0x0) 86.983359ms ago: executing program 4 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000380)={@val={0xa, 0x8808}, @void, @eth={@local, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "8b6c9a", 0x0, 0x29, 0xff, @private2, @dev={0xfe, 0x80, '\x00', 0x1e}}}}}}, 0x3e) 86.007438ms ago: executing program 5 (id=636): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 42.75008ms ago: executing program 5 (id=626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8f8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000005}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 41.97791ms ago: executing program 2 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0, 0x0, 0x3904}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x88, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 515.041µs ago: executing program 4 (id=627): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r0, &(0x7f0000000200)=""/209, 0x128) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 0s ago: executing program 2 (id=628): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 27.527426][ T29] audit: type=1400 audit(1758439682.189:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.528219][ T3293] cgroup: Unknown subsys name 'net' [ 27.550352][ T29] audit: type=1400 audit(1758439682.189:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.577870][ T29] audit: type=1400 audit(1758439682.219:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.752179][ T3293] cgroup: Unknown subsys name 'cpuset' [ 27.758483][ T3293] cgroup: Unknown subsys name 'rlimit' [ 27.888829][ T29] audit: type=1400 audit(1758439682.549:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.912265][ T29] audit: type=1400 audit(1758439682.549:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.927154][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.932829][ T29] audit: type=1400 audit(1758439682.549:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.961697][ T29] audit: type=1400 audit(1758439682.549:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.982367][ T29] audit: type=1400 audit(1758439682.559:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.992535][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.007161][ T29] audit: type=1400 audit(1758439682.559:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.039291][ T29] audit: type=1400 audit(1758439682.609:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.788131][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.820795][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.845174][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.894860][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.915202][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.922337][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.930153][ T3308] bridge_slave_0: entered allmulticast mode [ 29.936603][ T3308] bridge_slave_0: entered promiscuous mode [ 29.948093][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.962629][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.969881][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.977126][ T3308] bridge_slave_1: entered allmulticast mode [ 29.983516][ T3308] bridge_slave_1: entered promiscuous mode [ 30.000731][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.007824][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.015083][ T3303] bridge_slave_0: entered allmulticast mode [ 30.021362][ T3303] bridge_slave_0: entered promiscuous mode [ 30.041981][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.049087][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.056308][ T3303] bridge_slave_1: entered allmulticast mode [ 30.062698][ T3303] bridge_slave_1: entered promiscuous mode [ 30.092174][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.101434][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.108567][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.115783][ T3315] bridge_slave_0: entered allmulticast mode [ 30.122192][ T3315] bridge_slave_0: entered promiscuous mode [ 30.138430][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.148690][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.157943][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.165309][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.172589][ T3315] bridge_slave_1: entered allmulticast mode [ 30.178988][ T3315] bridge_slave_1: entered promiscuous mode [ 30.193203][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.233701][ T3308] team0: Port device team_slave_0 added [ 30.239429][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.246604][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.254135][ T3305] bridge_slave_0: entered allmulticast mode [ 30.260521][ T3305] bridge_slave_0: entered promiscuous mode [ 30.272556][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.279690][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.286959][ T3302] bridge_slave_0: entered allmulticast mode [ 30.293497][ T3302] bridge_slave_0: entered promiscuous mode [ 30.300164][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.307287][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.314453][ T3302] bridge_slave_1: entered allmulticast mode [ 30.320917][ T3302] bridge_slave_1: entered promiscuous mode [ 30.332640][ T3308] team0: Port device team_slave_1 added [ 30.338436][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.345573][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.352799][ T3305] bridge_slave_1: entered allmulticast mode [ 30.359208][ T3305] bridge_slave_1: entered promiscuous mode [ 30.366556][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.385218][ T3303] team0: Port device team_slave_0 added [ 30.406397][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.415748][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.422729][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.448685][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.464744][ T3303] team0: Port device team_slave_1 added [ 30.471628][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.481718][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.496235][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.503346][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.529308][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.545986][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.560371][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.581812][ T3315] team0: Port device team_slave_0 added [ 30.591813][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.598800][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.625075][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.641889][ T3302] team0: Port device team_slave_0 added [ 30.648442][ T3315] team0: Port device team_slave_1 added [ 30.664169][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.671145][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.697128][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.709045][ T3302] team0: Port device team_slave_1 added [ 30.724568][ T3305] team0: Port device team_slave_0 added [ 30.730616][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.737726][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.763809][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.776843][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.783819][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.809939][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.830461][ T3305] team0: Port device team_slave_1 added [ 30.856106][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.863119][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.889076][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.904706][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.911727][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.937710][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.951253][ T3308] hsr_slave_0: entered promiscuous mode [ 30.957274][ T3308] hsr_slave_1: entered promiscuous mode [ 30.964377][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.971376][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.997329][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.012871][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.019821][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.046042][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.090578][ T3303] hsr_slave_0: entered promiscuous mode [ 31.096606][ T3303] hsr_slave_1: entered promiscuous mode [ 31.102449][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.108163][ T3303] Cannot create hsr debugfs directory [ 31.125690][ T3315] hsr_slave_0: entered promiscuous mode [ 31.131831][ T3315] hsr_slave_1: entered promiscuous mode [ 31.137574][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 31.143582][ T3315] Cannot create hsr debugfs directory [ 31.154718][ T3305] hsr_slave_0: entered promiscuous mode [ 31.160661][ T3305] hsr_slave_1: entered promiscuous mode [ 31.166732][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 31.172513][ T3305] Cannot create hsr debugfs directory [ 31.211336][ T3302] hsr_slave_0: entered promiscuous mode [ 31.218340][ T3302] hsr_slave_1: entered promiscuous mode [ 31.224531][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 31.230276][ T3302] Cannot create hsr debugfs directory [ 31.391291][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.400174][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.408635][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.419070][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.447453][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.458821][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.467427][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.476053][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.492615][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.502082][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.521981][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.534941][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.568145][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.580102][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.592267][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.606995][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.625746][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.647182][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.659833][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.668725][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.678755][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.687973][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.700814][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.713518][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.734244][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.741511][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.750072][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.757151][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.765630][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.772698][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.794528][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.801880][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.845757][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.881318][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.890591][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.911034][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.918154][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.926893][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.933975][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.966864][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.978284][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.988837][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.009227][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.021648][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.046475][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.053723][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.064750][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.071909][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.102371][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.121390][ T1912] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.128511][ T1912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.138570][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.145649][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.154744][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.170661][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.248422][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.276136][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.310624][ T3315] veth0_vlan: entered promiscuous mode [ 32.337439][ T3315] veth1_vlan: entered promiscuous mode [ 32.357671][ T3305] veth0_vlan: entered promiscuous mode [ 32.366433][ T3308] veth0_vlan: entered promiscuous mode [ 32.376563][ T3315] veth0_macvtap: entered promiscuous mode [ 32.388229][ T3305] veth1_vlan: entered promiscuous mode [ 32.400333][ T3315] veth1_macvtap: entered promiscuous mode [ 32.407999][ T3308] veth1_vlan: entered promiscuous mode [ 32.425321][ T3305] veth0_macvtap: entered promiscuous mode [ 32.438565][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.450546][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.459952][ T3308] veth0_macvtap: entered promiscuous mode [ 32.467747][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.477458][ T3305] veth1_macvtap: entered promiscuous mode [ 32.487470][ T3308] veth1_macvtap: entered promiscuous mode [ 32.501819][ T1688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.512963][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.523122][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.530459][ T1912] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.539754][ T1912] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.549201][ T1912] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.579233][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.590814][ T3303] veth0_vlan: entered promiscuous mode [ 32.600279][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.610611][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.623529][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.636209][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.636227][ T29] audit: type=1400 audit(1758439687.299:81): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.KY0TKA/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.650638][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.685051][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.695050][ T3303] veth1_vlan: entered promiscuous mode [ 32.713202][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.726688][ T3302] veth0_vlan: entered promiscuous mode [ 32.739307][ T3303] veth0_macvtap: entered promiscuous mode [ 32.746560][ T29] audit: type=1400 audit(1758439687.309:82): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.768795][ T29] audit: type=1400 audit(1758439687.309:83): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.KY0TKA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.794323][ T29] audit: type=1400 audit(1758439687.309:84): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.816349][ T29] audit: type=1400 audit(1758439687.309:85): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.KY0TKA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.840383][ T3303] veth1_macvtap: entered promiscuous mode [ 32.843046][ T29] audit: type=1400 audit(1758439687.309:86): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.KY0TKA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.851130][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.876282][ T29] audit: type=1400 audit(1758439687.309:87): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.890265][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.904670][ T29] audit: type=1400 audit(1758439687.339:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.912668][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.934491][ T29] audit: type=1400 audit(1758439687.339:89): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=3881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.947067][ T3302] veth1_vlan: entered promiscuous mode [ 32.969921][ T29] audit: type=1400 audit(1758439687.409:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.006035][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.013319][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.042752][ T3477] syz.1.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.046657][ T3302] veth0_macvtap: entered promiscuous mode [ 33.060482][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096282][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.106669][ T3302] veth1_macvtap: entered promiscuous mode [ 33.119284][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.140565][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.146045][ T3485] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 33.165331][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.172786][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.204359][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.277037][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.321201][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.342604][ T3500] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.14'. [ 33.343124][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.400389][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642366][ T3534] ======================================================= [ 33.642366][ T3534] WARNING: The mand mount option has been deprecated and [ 33.642366][ T3534] and is ignored by this kernel. Remove the mand [ 33.642366][ T3534] option from the mount to silence this warning. [ 33.642366][ T3534] ======================================================= [ 33.831692][ T3546] loop4: detected capacity change from 0 to 512 [ 33.869020][ T3557] loop0: detected capacity change from 0 to 1024 [ 33.884428][ T3546] EXT4-fs error (device loop4): ext4_init_orphan_info:585: comm syz.4.36: inode #0: comm syz.4.36: iget: illegal inode # [ 33.921978][ T3557] EXT4-fs: Ignoring removed orlov option [ 33.928135][ T3546] EXT4-fs (loop4): get orphan inode failed [ 33.938351][ T3546] EXT4-fs (loop4): mount failed [ 33.977627][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.074423][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.130361][ T3586] loop4: detected capacity change from 0 to 2048 [ 34.135126][ T3582] loop1: detected capacity change from 0 to 4096 [ 34.163505][ T3582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.177467][ T3592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3592 comm=syz.2.53 [ 34.178329][ T3296] Alternate GPT is invalid, using primary GPT. [ 34.196138][ T3296] loop4: p1 p2 p3 [ 34.223952][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.237988][ T3586] Alternate GPT is invalid, using primary GPT. [ 34.244508][ T3586] loop4: p1 p2 p3 [ 34.310672][ T3600] loop1: detected capacity change from 0 to 512 [ 34.368748][ T3600] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.390073][ T3603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 34.397093][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 34.436322][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 34.439894][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 34.751279][ T3654] random: crng reseeded on system resumption [ 34.776678][ T3658] loop0: detected capacity change from 0 to 1024 [ 34.832129][ T3664] netlink: 168 bytes leftover after parsing attributes in process `syz.2.85'. [ 34.841102][ T3664] tipc: Started in network mode [ 34.846107][ T3664] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 34.855068][ T3664] tipc: Enabling of bearer rejected, failed to enable media [ 34.969414][ T3677] sd 0:0:1:0: device reset [ 35.045407][ T3641] loop4: detected capacity change from 0 to 32768 [ 35.065764][ T3689] loop2: detected capacity change from 0 to 512 [ 35.084789][ T3296] loop4: p1 p3 < p5 p6 > [ 35.089178][ T3296] loop4: partition table partially beyond EOD, truncated [ 35.105218][ T3689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.118241][ T3689] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.140118][ T3641] loop4: p1 p3 < p5 p6 > [ 35.144572][ T3641] loop4: partition table partially beyond EOD, truncated [ 35.160092][ T3696] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 35.170636][ T3696] FAT-fs (loop7): unable to read boot sector [ 35.174258][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.190369][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 35.255995][ T3704] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'. [ 35.265381][ T3704] unsupported nlmsg_type 40 [ 35.319453][ T3708] loop3: detected capacity change from 0 to 256 [ 35.344945][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 35.395623][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 35.398679][ T3565] udevd[3565]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 35.405250][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.420328][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 35.424747][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 35.459203][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 35.470212][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.482813][ T3565] udevd[3565]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 35.596709][ T3731] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.634159][ T3734] capability: warning: `syz.0.118' uses deprecated v2 capabilities in a way that may be insecure [ 35.634305][ T3731] netlink: 'syz.3.116': attribute type 12 has an invalid length. [ 35.652562][ T3731] netlink: 'syz.3.116': attribute type 29 has an invalid length. [ 35.660375][ T3731] netlink: 148 bytes leftover after parsing attributes in process `syz.3.116'. [ 35.660550][ T3738] loop4: detected capacity change from 0 to 512 [ 35.669488][ T3731] netlink: 51 bytes leftover after parsing attributes in process `syz.3.116'. [ 35.689984][ T3731] Zero length message leads to an empty skb [ 35.716438][ T3742] hub 9-0:1.0: USB hub found [ 35.721372][ T3742] hub 9-0:1.0: 8 ports detected [ 35.743858][ T3738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.767298][ T3738] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.849142][ T3755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 35.873030][ T3759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3759 comm=+}[@ [ 35.885056][ T3759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3759 comm=+}[@ [ 35.914772][ T3764] loop9: detected capacity change from 0 to 7 [ 35.929523][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.957731][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.965127][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 35.974590][ T3296] loop9: unable to read partition table [ 35.981103][ T3764] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.000831][ T3770] loop0: detected capacity change from 0 to 512 [ 36.008112][ T3764] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.016115][ T3764] loop9: unable to read partition table [ 36.021900][ T3764] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 36.021900][ T3764] ) failed (rc=-5) [ 36.041102][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.049249][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.057543][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.066023][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.074062][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.105545][ T3770] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.118741][ T3770] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.158818][ T3770] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.133: invalid indirect mapped block 4294967295 (level 0) [ 36.159942][ T3782] loop2: detected capacity change from 0 to 2048 [ 36.201715][ T3770] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.133: invalid indirect mapped block 4294967295 (level 1) [ 36.218715][ T3770] EXT4-fs (loop0): 1 orphan inode deleted [ 36.224712][ T3770] EXT4-fs (loop0): 1 truncate cleaned up [ 36.250638][ T3782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.259751][ T3770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.327017][ T3302] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 36.347229][ T3302] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 36.358211][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.413138][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.565488][ T3830] loop3: detected capacity change from 0 to 1024 [ 36.580950][ T3830] EXT4-fs: Ignoring removed nobh option [ 36.594396][ T3830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.628146][ T3836] loop4: detected capacity change from 0 to 2048 [ 36.654808][ T3830] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #12: comm syz.3.157: Deleting old file: nlink 2, error=-2 [ 36.700948][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.715013][ T3846] process 'syz.1.163' launched '/dev/fd/3' with NULL argv: empty string added [ 36.746823][ T3296] Alternate GPT is invalid, using primary GPT. [ 36.753378][ T3296] loop4: p2 p3 p7 [ 36.794336][ T3836] Alternate GPT is invalid, using primary GPT. [ 36.800792][ T3836] loop4: p2 p3 p7 [ 36.829208][ T3857] random: crng reseeded on system resumption [ 36.853766][ T3857] Restarting kernel threads ... [ 36.858787][ T3857] Done restarting kernel threads. [ 36.906036][ T3864] loop3: detected capacity change from 0 to 128 [ 37.003787][ T3870] loop0: detected capacity change from 0 to 764 [ 37.025680][ T3870] Symlink component flag not implemented [ 37.042360][ T3870] Symlink component flag not implemented (129) [ 37.053812][ T3870] rock: directory entry would overflow storage [ 37.060065][ T3870] rock: sig=0x4f50, size=4, remaining=3 [ 37.065731][ T3870] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 37.067849][ T3876] loop3: detected capacity change from 0 to 512 [ 37.122712][ T3876] EXT4-fs error (device loop3): ext4_quota_enable:7124: comm syz.3.177: Bad quota inum: 1, type: 2 [ 37.139582][ T3876] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 37.154994][ T3876] EXT4-fs (loop3): mount failed [ 37.292531][ T3305] syz-executor (3305) used greatest stack depth: 10952 bytes left [ 37.315581][ T1912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.337024][ T3902] loop2: detected capacity change from 0 to 1024 [ 37.363922][ C1] hrtimer: interrupt took 35030 ns [ 37.399797][ T3902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.414421][ T1912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.475171][ T1912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.497402][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.544884][ T1912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.646100][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 37.646115][ T29] audit: type=1400 audit(1758439692.309:452): avc: denied { create } for pid=3937 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.726197][ T1912] bridge_slave_1: left allmulticast mode [ 37.731974][ T1912] bridge_slave_1: left promiscuous mode [ 37.737648][ T1912] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.752448][ T29] audit: type=1400 audit(1758439692.339:453): avc: denied { write } for pid=3937 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.772020][ T29] audit: type=1400 audit(1758439692.359:454): avc: denied { search } for pid=3033 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.793343][ T29] audit: type=1400 audit(1758439692.359:455): avc: denied { search } for pid=3033 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.814952][ T29] audit: type=1400 audit(1758439692.359:456): avc: denied { search } for pid=3033 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.837004][ T29] audit: type=1400 audit(1758439692.359:457): avc: denied { read } for pid=3033 comm="dhcpcd" name="n25" dev="tmpfs" ino=1560 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.846704][ T3947] loop4: detected capacity change from 0 to 1024 [ 37.859180][ T29] audit: type=1400 audit(1758439692.359:458): avc: denied { open } for pid=3033 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1560 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.888266][ T29] audit: type=1400 audit(1758439692.359:459): avc: denied { getattr } for pid=3033 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1560 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.938549][ T1912] bridge_slave_0: left allmulticast mode [ 37.944310][ T1912] bridge_slave_0: left promiscuous mode [ 37.950094][ T1912] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.958676][ T3945] loop0: detected capacity change from 0 to 8192 [ 37.959978][ T3947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.966607][ T29] audit: type=1400 audit(1758439692.479:460): avc: denied { read open } for pid=3949 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.003147][ T29] audit: type=1400 audit(1758439692.479:461): avc: denied { getattr } for pid=3949 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.114143][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.156486][ T1912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.193944][ T1912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.212986][ T1912] bond0 (unregistering): Released all slaves [ 38.294910][ T1912] hsr_slave_0: left promiscuous mode [ 38.308832][ T1912] hsr_slave_1: left promiscuous mode [ 38.319408][ T1912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.326961][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.354661][ T1912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.362115][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.367927][ T3987] loop4: detected capacity change from 0 to 164 [ 38.380677][ T3992] __nla_validate_parse: 5 callbacks suppressed [ 38.380694][ T3992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'. [ 38.399407][ T3987] rock: directory entry would overflow storage [ 38.405829][ T3987] rock: sig=0x66, size=4, remaining=3 [ 38.411370][ T1912] veth1_macvtap: left promiscuous mode [ 38.417411][ T1912] veth0_macvtap: left promiscuous mode [ 38.420189][ T3987] rock: directory entry would overflow storage [ 38.427532][ T1912] veth1_vlan: left promiscuous mode [ 38.429247][ T3987] rock: sig=0x66, size=4, remaining=3 [ 38.441393][ T3987] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 38.448154][ T1912] veth0_vlan: left promiscuous mode [ 38.558427][ T1912] team0 (unregistering): Port device team_slave_1 removed [ 38.567807][ T1912] team0 (unregistering): Port device team_slave_0 removed [ 38.679362][ T3915] chnl_net:caif_netlink_parms(): no params data found [ 38.804962][ T3958] syz.2.206 (3958) used greatest stack depth: 10800 bytes left [ 38.871050][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.878432][ T3915] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.896521][ T3915] bridge_slave_0: entered allmulticast mode [ 38.903452][ T3915] bridge_slave_0: entered promiscuous mode [ 38.910853][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.918039][ T3915] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.925783][ T3915] bridge_slave_1: entered allmulticast mode [ 38.932610][ T3915] bridge_slave_1: entered promiscuous mode [ 39.013800][ T4058] loop4: detected capacity change from 0 to 2048 [ 39.023347][ T3915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.040371][ T4058] EXT4-fs: inline encryption not supported [ 39.056613][ T3915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.107634][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.126387][ T4078] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 39.132163][ T3915] team0: Port device team_slave_0 added [ 39.152608][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.157675][ T3915] team0: Port device team_slave_1 added [ 39.180251][ T4078] team0: Port device dummy0 added [ 39.206025][ T4089] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 39.261456][ T3915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.268769][ T3915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.295393][ T3915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.320980][ T4089] team0: Port device dummy0 removed [ 39.329064][ T4089] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.340631][ T3915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.347827][ T3915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.348034][ T4078] syz.0.241 (4078) used greatest stack depth: 10704 bytes left [ 39.374365][ T3915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.527856][ T3915] hsr_slave_0: entered promiscuous mode [ 39.541461][ T3915] hsr_slave_1: entered promiscuous mode [ 39.548557][ T3915] debugfs: 'hsr0' already exists in 'hsr' [ 39.554402][ T3915] Cannot create hsr debugfs directory [ 39.583105][ T4116] syz_tun: refused to change device tx_queue_len [ 39.674840][ T4130] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 39.756500][ T3915] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.784660][ T3915] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.813812][ T3915] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.836360][ T3915] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.944015][ T3915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.958199][ T4170] capability: warning: `syz.4.272' uses 32-bit capabilities (legacy support in use) [ 39.981247][ T3915] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.015024][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.022181][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.056489][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.063604][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.177290][ T4196] netlink: 'syz.3.282': attribute type 3 has an invalid length. [ 40.239869][ T3915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.281891][ T4207] unsupported nla_type 52263 [ 40.330903][ T4216] loop0: detected capacity change from 0 to 512 [ 40.375764][ T4216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.403235][ T4216] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.539964][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.638647][ T3915] veth0_vlan: entered promiscuous mode [ 40.664832][ T3915] veth1_vlan: entered promiscuous mode [ 40.704033][ T4241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.294'. [ 40.716413][ T3915] veth0_macvtap: entered promiscuous mode [ 40.724368][ T3915] veth1_macvtap: entered promiscuous mode [ 40.745568][ T4241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.294'. [ 40.759616][ T3915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.795347][ T3915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.805231][ T145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.849244][ T145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867778][ T4251] loop2: detected capacity change from 0 to 512 [ 40.881868][ T1912] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.925469][ T4251] 9pnet: p9_errstr2errno: server reported unknown error ^ [ 40.934387][ T1912] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.085854][ T4269] loop4: detected capacity change from 0 to 512 [ 41.095980][ T4272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4272 comm=syz.5.307 [ 41.121397][ T4273] netlink: 'syz.0.304': attribute type 3 has an invalid length. [ 41.149027][ T4269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.190769][ T4269] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.209197][ T4269] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.306: corrupted inode contents [ 41.273846][ T4269] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.306: mark_inode_dirty error [ 41.301027][ T4280] loop0: detected capacity change from 0 to 2048 [ 41.314491][ T4269] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.306: corrupted inode contents [ 41.367968][ T4283] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.306: corrupted inode contents [ 41.400472][ T4280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.413834][ T4283] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.306: mark_inode_dirty error [ 41.456251][ T4283] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.306: corrupted inode contents [ 41.515448][ T4283] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.306: mark_inode_dirty error [ 41.583375][ T4283] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.306: corrupted inode contents [ 41.651594][ T4292] ieee802154 phy0 wpan0: encryption failed: -22 [ 41.696825][ T4283] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.306: mark_inode_dirty error [ 41.772485][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.823112][ T4296] ALSA: seq fatal error: cannot create timer (-22) [ 41.858936][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.210785][ T3384] kernel write not supported for file bpf-prog (pid: 3384 comm: kworker/1:3) [ 42.574747][ T4385] loop3: detected capacity change from 0 to 512 [ 42.614412][ T4385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.673024][ T4385] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.740209][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 42.740227][ T29] audit: type=1400 audit(1758439697.399:639): avc: denied { read write } for pid=4395 comm="syz.2.350" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.770991][ T29] audit: type=1400 audit(1758439697.399:640): avc: denied { open } for pid=4395 comm="syz.2.350" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.810263][ T29] audit: type=1400 audit(1758439697.469:641): avc: denied { setattr } for pid=4384 comm="syz.3.346" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.812077][ T4385] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 42.880872][ T29] audit: type=1400 audit(1758439697.539:642): avc: denied { mount } for pid=4397 comm="syz.5.351" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 42.923286][ T4405] mmap: syz.0.352 (4405) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.981097][ T4385] EXT4-fs (loop3): Remounting filesystem read-only [ 43.120241][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.131567][ T51] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 43.160799][ T51] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 43.206692][ T4423] loop2: detected capacity change from 0 to 1024 [ 43.224154][ T4423] EXT4-fs: Ignoring removed orlov option [ 43.256264][ T4423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.304735][ T4423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.361'. [ 43.376209][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.407017][ T4437] sock: sock_timestamping_bind_phc: sock not bind to device [ 43.499263][ T4447] syz_tun: entered promiscuous mode [ 43.540081][ T29] audit: type=1326 audit(1758439698.199:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 43.564847][ T4447] batadv_slave_0: entered promiscuous mode [ 43.589912][ T4452] team_slave_0: entered promiscuous mode [ 43.591394][ T4457] loop2: detected capacity change from 0 to 512 [ 43.595632][ T4452] team_slave_1: entered promiscuous mode [ 43.603585][ T4452] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 43.641066][ T29] audit: type=1326 audit(1758439698.199:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 43.642335][ T4455] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 43.664495][ T29] audit: type=1326 audit(1758439698.199:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 43.694504][ T29] audit: type=1326 audit(1758439698.199:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 43.718292][ T4457] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.729392][ T4457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.795344][ T4457] EXT4-fs (loop2): 1 truncate cleaned up [ 43.819199][ T4457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.846387][ T4467] loop5: detected capacity change from 0 to 1024 [ 43.854746][ T4471] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.379'. [ 43.873416][ T4467] EXT4-fs: Ignoring removed bh option [ 43.911686][ T4467] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.983691][ T4467] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.380: inode #2304: comm syz.5.380: iget: illegal inode # [ 44.027901][ T4484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.385'. [ 44.041435][ T4467] EXT4-fs (loop5): Remounting filesystem read-only [ 44.048024][ T4467] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 44.083010][ T4467] EXT4-fs (loop5): mount failed [ 44.088426][ T4484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.385'. [ 44.215752][ T4491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.388'. [ 44.496262][ T4507] netlink: 'syz.0.395': attribute type 12 has an invalid length. [ 44.792345][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.819238][ T4525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.403'. [ 45.081935][ T4542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.155494][ T4546] netlink: 51563 bytes leftover after parsing attributes in process `syz.2.411'. [ 45.283977][ T4554] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 45.297134][ T4554] bond1: entered promiscuous mode [ 45.302642][ T4554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.335787][ T4554] bond1: (slave bridge1): making interface the new active one [ 45.343544][ T4554] bridge1: entered promiscuous mode [ 45.350469][ T4554] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 45.440724][ T4566] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.420'. [ 45.664009][ T4603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.672745][ T4603] bridge0: port 3(bond1) entered blocking state [ 45.679121][ T4603] bridge0: port 3(bond1) entered disabled state [ 45.685589][ T4603] bond1: entered allmulticast mode [ 45.692283][ T4603] bond1: entered promiscuous mode [ 45.704898][ T4603] bridge0: port 3(bond1) entered blocking state [ 45.711268][ T4603] bridge0: port 3(bond1) entered forwarding state [ 45.772774][ T12] bridge0: port 3(bond1) entered disabled state [ 45.839418][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 45.848746][ T4634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.437'. [ 45.941019][ T4644] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 45.948852][ T4644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.441'. [ 45.958213][ T4644] dummy0: entered promiscuous mode [ 45.963978][ T4644] bridge0: port 4(dummy0) entered blocking state [ 45.970376][ T4644] bridge0: port 4(dummy0) entered disabled state [ 45.985141][ T4644] dummy0: entered allmulticast mode [ 45.991152][ T4644] bridge0: port 4(dummy0) entered blocking state [ 45.997669][ T4644] bridge0: port 4(dummy0) entered forwarding state [ 46.122270][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.131235][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.143225][ T51] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.162476][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.505265][ T4670] veth3: entered promiscuous mode [ 46.560930][ T4672] rdma_op ffff88811921f580 conn xmit_rdma 0000000000000000 [ 47.014209][ T4713] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 47.246469][ T4713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.282323][ T4720] bond1: (slave geneve2): making interface the new active one [ 47.290988][ T4720] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 47.401535][ T4720] syz.3.472 (4720) used greatest stack depth: 10056 bytes left [ 47.616616][ T4747] loop0: detected capacity change from 0 to 512 [ 47.625611][ T4747] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.685031][ T4747] EXT4-fs (loop0): 1 truncate cleaned up [ 47.711386][ T4756] netlink: 'syz.3.490': attribute type 3 has an invalid length. [ 47.724803][ T4747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.744527][ T4758] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 47.756692][ T4758] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 47.798131][ T3289] printk: udevd: 4 output lines suppressed due to ratelimiting [ 47.814959][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 47.814976][ T29] audit: type=1400 audit(1758439702.479:752): avc: denied { append } for pid=4746 comm="syz.0.486" path="/110/bus/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.909101][ T29] audit: type=1400 audit(1758439702.569:753): avc: denied { map } for pid=4746 comm="syz.0.486" path="/110/bus/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.964265][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.032929][ T4779] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 48.047736][ T4779] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 48.143032][ T4784] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 48.165933][ T29] audit: type=1326 audit(1758439702.829:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff31c28ec29 code=0x7fc00000 [ 48.189779][ T29] audit: type=1326 audit(1758439702.829:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31c28ec29 code=0x7fc00000 [ 48.213285][ T29] audit: type=1326 audit(1758439702.829:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31c28ec29 code=0x7fc00000 [ 48.236657][ T29] audit: type=1326 audit(1758439702.829:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31c28ec29 code=0x7fc00000 [ 48.260203][ T29] audit: type=1326 audit(1758439702.829:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31c28ec29 code=0x7fc00000 [ 48.283571][ T29] audit: type=1326 audit(1758439702.829:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31c28ec29 code=0x7fc00000 [ 48.306849][ T29] audit: type=1326 audit(1758439702.829:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31c28ec29 code=0x7fc00000 [ 48.330168][ T29] audit: type=1326 audit(1758439702.829:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31c28ec29 code=0x7fc00000 [ 48.643042][ T4806] netlink: 'syz.4.518': attribute type 12 has an invalid length. [ 48.921635][ T4836] __nla_validate_parse: 13 callbacks suppressed [ 48.921655][ T4836] netlink: 48 bytes leftover after parsing attributes in process `syz.0.520'. [ 48.938689][ T4836] netlink: 48 bytes leftover after parsing attributes in process `syz.0.520'. [ 48.982794][ T4843] loop5: detected capacity change from 0 to 512 [ 48.991238][ T4843] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.998010][ T4843] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 49.019875][ T4843] EXT4-fs (loop5): 1 truncate cleaned up [ 49.027437][ T4843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.053128][ T4845] loop3: detected capacity change from 0 to 1024 [ 49.059897][ T4845] EXT4-fs: Ignoring removed bh option [ 49.065839][ T4845] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.077286][ T4845] EXT4-fs error (device loop3): ext4_quota_enable:7128: comm syz.3.523: inode #2304: comm syz.3.523: iget: illegal inode # [ 49.090547][ T4845] EXT4-fs (loop3): Remounting filesystem read-only [ 49.097261][ T4845] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 49.113677][ T4845] EXT4-fs (loop3): mount failed [ 49.187333][ T4860] team_slave_0: entered promiscuous mode [ 49.193072][ T4860] team_slave_1: entered promiscuous mode [ 49.199882][ T4860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 49.231333][ T4860] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 49.379854][ T4872] loop3: detected capacity change from 0 to 512 [ 49.394821][ T4872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.408862][ T4872] EXT4-fs (loop3): 1 truncate cleaned up [ 49.415374][ T4872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.595671][ T4881] loop2: detected capacity change from 0 to 1024 [ 49.604511][ T4881] EXT4-fs: Ignoring removed bh option [ 49.610822][ T4881] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.632669][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.654012][ T4881] EXT4-fs error (device loop2): ext4_quota_enable:7128: comm syz.2.541: inode #2304: comm syz.2.541: iget: illegal inode # [ 49.673492][ T4881] EXT4-fs (loop2): Remounting filesystem read-only [ 49.680097][ T4881] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 49.722081][ T4881] EXT4-fs (loop2): mount failed [ 49.931635][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 50.057459][ T4900] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 50.087421][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 50.098215][ T4900] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 50.124968][ T3915] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.170416][ T4922] netlink: 'syz.5.551': attribute type 12 has an invalid length. [ 50.254873][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 50.274018][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 50.558720][ T4958] loop3: detected capacity change from 0 to 512 [ 50.566818][ T4958] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.573691][ T4958] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.586787][ T4958] EXT4-fs (loop3): 1 truncate cleaned up [ 50.592819][ T4958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.593670][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 50.614575][ T4963] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 50.622322][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 50.633203][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 50.642190][ T4963] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 50.649839][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 50.705471][ T145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.717445][ T145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.729715][ T145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.740740][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.173237][ T5003] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 51.252954][ T5003] dummy0: entered promiscuous mode [ 51.309132][ T5003] bond0: (slave dummy0): Releasing backup interface [ 51.335150][ T5003] bridge0: port 3(dummy0) entered blocking state [ 51.341712][ T5003] bridge0: port 3(dummy0) entered disabled state [ 51.401365][ T5003] dummy0: entered allmulticast mode [ 51.457906][ T5018] netlink: 'syz.2.587': attribute type 10 has an invalid length. [ 51.469253][ T5018] dummy0: entered promiscuous mode [ 51.480986][ T5018] bridge0: port 3(dummy0) entered blocking state [ 51.487663][ T5018] bridge0: port 3(dummy0) entered disabled state [ 51.531106][ T5018] dummy0: entered allmulticast mode [ 51.544961][ T5018] bridge0: port 3(dummy0) entered blocking state [ 51.551396][ T5018] bridge0: port 3(dummy0) entered forwarding state [ 51.565972][ T51] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.576232][ T51] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.595478][ T51] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.610256][ T51] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.643865][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.224605][ T5068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.233126][ T5068] bridge0: port 3(bond2) entered blocking state [ 52.239456][ T5068] bridge0: port 3(bond2) entered disabled state [ 52.247048][ T5068] bond2: entered allmulticast mode [ 52.253740][ T5068] bond2: entered promiscuous mode [ 52.258998][ T5068] bridge0: port 3(bond2) entered blocking state [ 52.265293][ T5068] bridge0: port 3(bond2) entered forwarding state [ 52.273944][ T1688] bridge0: port 3(bond2) entered disabled state [ 52.334833][ T5074] loop4: detected capacity change from 0 to 512 [ 52.341582][ T5074] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.348473][ T5074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.360100][ T5074] EXT4-fs (loop4): 1 truncate cleaned up [ 52.366434][ T5074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.359197][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.418284][ T5100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.437316][ T5100] bridge0: port 4(bond1) entered blocking state [ 53.443751][ T5100] bridge0: port 4(bond1) entered disabled state [ 53.455534][ T5100] bond1: entered allmulticast mode [ 53.476573][ T5100] bond1: entered promiscuous mode [ 53.506748][ T5100] bridge0: port 4(bond1) entered blocking state [ 53.513092][ T5100] bridge0: port 4(bond1) entered forwarding state [ 53.521031][ T145] bridge0: port 4(bond1) entered disabled state [ 53.732048][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 53.732064][ T29] audit: type=1326 audit(1758439708.399:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 53.768093][ T29] audit: type=1326 audit(1758439708.399:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 53.791920][ T29] audit: type=1326 audit(1758439708.429:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 53.815419][ T29] audit: type=1326 audit(1758439708.429:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 53.838735][ T29] audit: type=1326 audit(1758439708.429:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 53.862076][ T29] audit: type=1326 audit(1758439708.429:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 53.885534][ T29] audit: type=1326 audit(1758439708.429:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 53.908786][ T29] audit: type=1326 audit(1758439708.429:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358be9ec29 code=0x7ffc0000 [ 54.895171][ T5138] loop0: detected capacity change from 0 to 512 [ 54.947017][ T29] audit: type=1326 audit(1758439709.609:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e72eec29 code=0x7ffc0000 [ 54.947574][ T5138] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.978041][ T29] audit: type=1326 audit(1758439709.609:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e72eec29 code=0x7ffc0000 [ 55.001669][ T5138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.027212][ T5138] EXT4-fs (loop0): 1 truncate cleaned up [ 55.033776][ T5138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.635511][ T5170] ================================================================== [ 55.643643][ T5170] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 55.651724][ T5170] [ 55.654060][ T5170] write to 0xffff888103e299a8 of 8 bytes by task 5138 on cpu 1: [ 55.661707][ T5170] filemap_splice_read+0x4f4/0x740 [ 55.666849][ T5170] ext4_file_splice_read+0x8f/0xb0 [ 55.672169][ T5170] splice_direct_to_actor+0x26c/0x680 [ 55.677574][ T5170] do_splice_direct+0xda/0x150 [ 55.682372][ T5170] do_sendfile+0x380/0x650 [ 55.687075][ T5170] __x64_sys_sendfile64+0x105/0x150 [ 55.692306][ T5170] x64_sys_call+0x2bb0/0x2ff0 [ 55.697006][ T5170] do_syscall_64+0xd2/0x200 [ 55.701546][ T5170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.707467][ T5170] [ 55.709810][ T5170] write to 0xffff888103e299a8 of 8 bytes by task 5170 on cpu 0: [ 55.717449][ T5170] filemap_splice_read+0x4f4/0x740 [ 55.722592][ T5170] ext4_file_splice_read+0x8f/0xb0 [ 55.727727][ T5170] splice_direct_to_actor+0x26c/0x680 [ 55.733164][ T5170] do_splice_direct+0xda/0x150 [ 55.737946][ T5170] do_sendfile+0x380/0x650 [ 55.742401][ T5170] __x64_sys_sendfile64+0x105/0x150 [ 55.747630][ T5170] x64_sys_call+0x2bb0/0x2ff0 [ 55.752336][ T5170] do_syscall_64+0xd2/0x200 [ 55.756980][ T5170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.762893][ T5170] [ 55.765233][ T5170] value changed: 0x000000000000b5f9 -> 0x000000000000b630 [ 55.772438][ T5170] [ 55.774772][ T5170] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.780987][ T5170] CPU: 0 UID: 0 PID: 5170 Comm: syz.0.616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.790735][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 55.800810][ T5170] ================================================================== [ 56.026000][ T5174] syz_tun (unregistering): left promiscuous mode [ 56.105288][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.209911][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.255680][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.280942][ T5138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.294059][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.374486][ T12] bond2: left allmulticast mode [ 56.379364][ T12] bond2: left promiscuous mode [ 56.384405][ T12] bridge0: port 3(bond2) entered disabled state [ 56.391277][ T12] bridge_slave_1: left allmulticast mode [ 56.396984][ T12] bridge_slave_1: left promiscuous mode [ 56.402663][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.410367][ T12] bridge_slave_0: left allmulticast mode [ 56.416225][ T12] bridge_slave_0: left promiscuous mode [ 56.422228][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.465937][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 56.504096][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.513872][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.523585][ T12] bond0 (unregistering): Released all slaves [ 56.531865][ T12] bond1 (unregistering): Released all slaves [ 56.539750][ T12] bond2 (unregistering): Released all slaves [ 56.595807][ T12] hsr_slave_0: left promiscuous mode [ 56.601397][ T12] hsr_slave_1: left promiscuous mode [ 56.607278][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.614678][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.622107][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.629494][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.639607][ T12] team_slave_0: left promiscuous mode [ 56.645008][ T12] team_slave_1: left promiscuous mode [ 56.650470][ T12] veth1_macvtap: left promiscuous mode [ 56.656027][ T12] veth0_macvtap: left promiscuous mode [ 56.661626][ T12] veth1_vlan: left promiscuous mode [ 56.666863][ T12] veth0_vlan: left promiscuous mode [ 56.724758][ T12] team0 (unregistering): Port device team_slave_1 removed [ 56.735645][ T12] team0 (unregistering): Port device team_slave_0 removed [ 57.055997][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.094322][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.153933][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.203844][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.275589][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.285899][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.334344][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.344657][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.373931][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.384245][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.444051][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.454524][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.516502][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.526853][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.584349][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.594703][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.623822][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.634150][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.684229][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.694569][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.734857][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.745247][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.793975][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.804389][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.853521][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.863901][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.923892][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.934214][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.983474][ T12] bridge_slave_1: left allmulticast mode [ 57.989127][ T12] bridge_slave_1: left promiscuous mode [ 57.994983][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.002929][ T12] bridge_slave_0: left allmulticast mode [ 58.008598][ T12] bridge_slave_0: left promiscuous mode [ 58.014275][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.022776][ T12] dummy0: left allmulticast mode [ 58.027841][ T12] bridge0: port 3(dummy0) entered disabled state [ 58.034564][ T12] bridge_slave_1: left allmulticast mode [ 58.040279][ T12] bridge_slave_1: left promiscuous mode [ 58.045963][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.053727][ T12] bridge_slave_0: left allmulticast mode [ 58.059539][ T12] bridge_slave_0: left promiscuous mode [ 58.065207][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.073812][ T12] bond1: left allmulticast mode [ 58.078663][ T12] bond1: left promiscuous mode [ 58.083552][ T12] bridge0: port 4(bond1) entered disabled state [ 58.090443][ T12] dummy0: left allmulticast mode [ 58.095638][ T12] bridge0: port 3(dummy0) entered disabled state [ 58.102608][ T12] bridge_slave_1: left allmulticast mode [ 58.108390][ T12] bridge_slave_1: left promiscuous mode [ 58.114084][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.122075][ T12] bridge_slave_0: left allmulticast mode [ 58.127705][ T12] bridge_slave_0: left promiscuous mode [ 58.133542][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.141613][ T12] dummy0: left allmulticast mode [ 58.146655][ T12] bridge0: port 4(dummy0) entered disabled state [ 58.153546][ T12] bond1: left allmulticast mode [ 58.158427][ T12] bond1: left promiscuous mode [ 58.163421][ T12] bridge0: port 3(bond1) entered disabled state [ 58.170280][ T12] bridge_slave_1: left allmulticast mode [ 58.175929][ T12] bridge_slave_1: left promiscuous mode [ 58.181616][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.189280][ T12] bridge_slave_0: left allmulticast mode [ 58.194960][ T12] bridge_slave_0: left promiscuous mode [ 58.200584][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.333777][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.343791][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.353663][ T12] bond0 (unregistering): Released all slaves [ 58.413383][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 58.421543][ T12] bridge1 (unregistering): left promiscuous mode [ 58.453561][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.463274][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.472600][ T12] bond0 (unregistering): Released all slaves [ 58.480578][ T12] bond1 (unregistering): Released all slaves [ 58.488682][ T12] bond2 (unregistering): Released all slaves [ 58.573949][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.583411][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.592906][ T12] bond0 (unregistering): Released all slaves [ 58.600890][ T12] bond1 (unregistering): Released all slaves [ 58.663436][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.673693][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.683365][ T12] bond0 (unregistering): Released all slaves [ 58.691828][ T12] bond1 (unregistering): Released all slaves [ 58.699939][ T12] bond2 (unregistering): Released all slaves [ 58.776577][ T12] tipc: Left network mode [ 58.783231][ T12] batadv_slave_0: left promiscuous mode [ 58.790768][ T12] hsr_slave_0: left promiscuous mode [ 58.796915][ T12] hsr_slave_1: left promiscuous mode [ 58.802785][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.810150][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.817783][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.825327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.834598][ T12] hsr_slave_0: left promiscuous mode [ 58.840354][ T12] hsr_slave_1: left promiscuous mode [ 58.846035][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.853422][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.860956][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.868416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.877652][ T12] hsr_slave_0: left promiscuous mode [ 58.883286][ T12] hsr_slave_1: left promiscuous mode [ 58.888900][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.896298][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.903789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.911223][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.920002][ T12] hsr_slave_0: left promiscuous mode [ 58.925620][ T12] hsr_slave_1: left promiscuous mode [ 58.931128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.938588][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.946021][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.953577][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.969413][ T12] veth1_macvtap: left promiscuous mode [ 58.974995][ T12] veth0_macvtap: left promiscuous mode [ 58.980538][ T12] veth1_vlan: left promiscuous mode [ 58.985924][ T12] veth0_vlan: left promiscuous mode [ 58.991901][ T12] team_slave_0: left promiscuous mode [ 58.997282][ T12] team_slave_1: left promiscuous mode [ 59.002891][ T12] veth1_macvtap: left promiscuous mode [ 59.008414][ T12] veth0_macvtap: left promiscuous mode [ 59.014001][ T12] veth1_vlan: left promiscuous mode [ 59.019216][ T12] veth0_vlan: left promiscuous mode [ 59.025006][ T12] veth1_macvtap: left promiscuous mode [ 59.030507][ T12] veth0_macvtap: left promiscuous mode [ 59.036069][ T12] veth1_vlan: left promiscuous mode [ 59.041313][ T12] veth0_vlan: left promiscuous mode [ 59.047054][ T12] veth1_macvtap: left promiscuous mode [ 59.052648][ T12] veth0_macvtap: left promiscuous mode [ 59.058129][ T12] veth1_vlan: left promiscuous mode [ 59.063363][ T12] veth0_vlan: left promiscuous mode [ 59.207700][ T12] team0 (unregistering): Port device team_slave_1 removed [ 59.217107][ T12] team0 (unregistering): Port device team_slave_0 removed [ 59.267466][ T12] team0 (unregistering): Port device team_slave_1 removed [ 59.277080][ T12] team0 (unregistering): Port device team_slave_0 removed [ 59.322257][ T12] team0 (unregistering): Port device team_slave_1 removed [ 59.331275][ T12] team0 (unregistering): Port device team_slave_0 removed [ 59.377221][ T12] team0 (unregistering): Port device team_slave_1 removed [ 59.386830][ T12] team0 (unregistering): Port device team_slave_0 removed