last executing test programs: 8.54621518s ago: executing program 0 (id=7544): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 8.491387524s ago: executing program 0 (id=7545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x60}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 8.411226691s ago: executing program 0 (id=7549): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x200) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x8202) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xa9e5c6e5c400a5e8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_setup(0x9, &(0x7f0000000180)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8814) 7.589550428s ago: executing program 4 (id=7569): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) prctl$PR_SET_SECUREBITS(0x1c, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) recvmsg(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000180)=""/18, 0x12}, {&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/123, 0x7b}, {&(0x7f0000001400)=""/87, 0x57}], 0x6, &(0x7f0000001500)=""/186, 0xba}, 0x61) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f00000016c0)='system_u:object_r:crash_device_t:s0\x00', 0x7, 0x3) r4 = socket(0x10, 0x2, 0x80) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) accept(r1, &(0x7f0000001600)=@in6={0xa, 0x0, 0x0, @dev}, 0x0) setresuid(0x0, r5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = accept4$x25(r4, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000001700)=0x12, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001740)={'vxcan0\x00'}) fcntl$setsig(r3, 0xa, 0x200009) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.600569249s ago: executing program 4 (id=7574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 6.527918755s ago: executing program 4 (id=7576): socket(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000000c0)={[{@noquota}, {@norecovery}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@nodiscard}]}, 0xff, 0x47c, &(0x7f0000000c00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6.037074966s ago: executing program 4 (id=7577): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 5.960445322s ago: executing program 4 (id=7578): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x8926, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) 5.589829052s ago: executing program 4 (id=7580): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 2.631405414s ago: executing program 2 (id=7594): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2.269844324s ago: executing program 2 (id=7596): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35}, {0x1c}, {0x6, 0x0, 0x0, 0x7ffffeb9}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x23, 0x2, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 1.957525849s ago: executing program 2 (id=7597): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x4000000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000380)={'TPROXY\x00'}, &(0x7f00000003c0)=0x1e) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xc0, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x3}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x64f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40040}, 0xc080) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2080, 0x0) ioctl$VT_RELDISP(r5, 0x5605) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) 1.558960142s ago: executing program 2 (id=7601): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x2) 1.417895314s ago: executing program 3 (id=7602): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) 1.417820184s ago: executing program 0 (id=7551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f00000005c0)=ANY=[], 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.412605594s ago: executing program 0 (id=7603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000088000000000000000085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) timer_create(0x7, &(0x7f0000001080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000010c0)) timer_gettime(0x0, &(0x7f0000001100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x100) socket$kcm(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x6256, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x9c) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r7, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r8}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r7, &(0x7f0000000800)="e8", &(0x7f00000008c0)=@tcp6=r9}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000010000f0000000000000000000000000a"], 0x28}}, 0x0) 1.380690177s ago: executing program 3 (id=7604): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8914, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xa4}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001900)={{}, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 1.358860179s ago: executing program 1 (id=7605): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r2, 0x0, 0x0, 0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x35, 0xe, 0x0, 0x9cfe2206cad4610) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000002180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000021c0)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='mm_vmscan_write_folio\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500)='cgroup2\x00', 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x193ad1fa, 0xffff3577}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x0, 0x7}}]}}}]}, 0x74}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x34, r8, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.297889934s ago: executing program 0 (id=7606): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 1.294809854s ago: executing program 3 (id=7607): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b00090000110000cd0000000100000018000480342d", @ANYRESOCT], 0x2c}}, 0x0) 1.283534835s ago: executing program 3 (id=7608): clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 989.483499ms ago: executing program 1 (id=7609): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) 792.690665ms ago: executing program 1 (id=7610): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x9, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006608000000000000180000001000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES16, @ANYBLOB="c39200000000000000008900000008000300", @ANYRES32=r0, @ANYBLOB="d653ce48775532dff1c15b30934625bffceb2f2ce1c858b3cf1797c0b695a81ed691779140818116eb8a71d840"], 0x1c}}, 0x0) 525.855127ms ago: executing program 2 (id=7611): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xff9d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r1, r2, &(0x7f0000000100), 0x2) fcntl$addseals(r2, 0x409, 0x8) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) lseek(r2, 0x0, 0x4) 521.475798ms ago: executing program 1 (id=7612): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x4d}) 175.816246ms ago: executing program 1 (id=7613): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) 175.630236ms ago: executing program 3 (id=7614): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000001140)="d24acbff40e18b2738fab28e45d56a71050adc421378f775831c6eb718f121b6abbab14a79599efbc6e5da8d530a19", 0x2f}], 0x1) 89.756013ms ago: executing program 3 (id=7615): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000088000000000000000085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) timer_create(0x7, &(0x7f0000001080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000010c0)) timer_gettime(0x0, &(0x7f0000001100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x100) socket$kcm(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x6256, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x9c) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r7, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r8}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r7, &(0x7f0000000800)="e8", &(0x7f00000008c0)=@tcp6=r9}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000010000f0000000000000000000000000a"], 0x28}}, 0x0) 5.778979ms ago: executing program 2 (id=7616): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) sendmmsg$unix(r1, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x0) 0s ago: executing program 1 (id=7617): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b00090000110000cd0000000100000018000480342d", @ANYRESOCT], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): h 1) [ 346.892787][T21826] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.6686: Failed to acquire dquot type 0 [ 346.892963][T21826] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #3: block 3: comm syz.4.6686: lblock 3 mapped to illegal pblock 3 (length 1) [ 346.996949][T21826] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.6686: Failed to acquire dquot type 0 [ 347.021164][T21826] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.6686: Freeing blocks not in datazone - block = 0, count = 4096 [ 347.052767][T21826] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #3: block 3: comm syz.4.6686: lblock 3 mapped to illegal pblock 3 (length 1) [ 347.093585][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.093626][T21826] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.6686: Failed to acquire dquot type 0 [ 347.093740][T21826] EXT4-fs (loop4): 1 orphan inode deleted [ 347.132526][T21826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.200580][T20267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.348349][T21879] netlink: 'syz.3.6701': attribute type 10 has an invalid length. [ 347.358527][T21881] loop1: detected capacity change from 0 to 128 [ 347.398440][T21881] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.429666][T21881] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.507593][T21853] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 347.523130][T21853] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 347.578552][T21881] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 347.594119][T21881] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 347.641588][T21853] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 347.657042][T21853] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 347.706409][T21853] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 347.722140][T21853] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 347.747104][T21928] bpf: Bad value for 'mode' [ 347.771329][T21932] netlink: 'syz.2.6714': attribute type 10 has an invalid length. [ 347.791624][T21881] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 347.807125][T21881] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 347.822318][T21934] tun0: tun_chr_ioctl cmd 1074025672 [ 347.827845][T21934] tun0: ignored: set checksum enabled [ 347.841557][T21853] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 347.857061][T21853] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 347.875645][T21937] SELinux: Context system_u:object_r:var_l is not valid (left unmapped). [ 347.883151][T21853] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 347.899656][T21853] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 348.047357][T21881] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 348.062865][T21881] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 348.095772][T21990] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 348.111244][T21990] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 348.180721][T21853] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz.1.6694: No space for directory leaf checksum. Please run e2fsck -D. [ 348.196389][T21853] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz.1.6694: checksumming directory block 0 [ 348.245976][T22009] netlink: 'syz.0.6726': attribute type 10 has an invalid length. [ 348.348687][T22017] team0 (unregistering): Port device team_slave_0 removed [ 348.406694][T22017] team0 (unregistering): Port device team_slave_1 removed [ 348.486028][T21125] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.547124][T22048] netlink: 'syz.3.6740': attribute type 10 has an invalid length. [ 348.848514][T22073] loop2: detected capacity change from 0 to 128 [ 348.849123][T22084] team0 (unregistering): Port device team_slave_0 removed [ 348.893110][T22073] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.923855][T22084] team0 (unregistering): Port device team_slave_1 removed [ 348.936455][T22073] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.969054][T22073] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 348.984700][T22073] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.015643][T22073] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.031119][T22073] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.060649][T22073] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.076378][T22073] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.105467][T22073] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.121047][T22073] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.146883][T22073] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.163091][T22073] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.179430][T22073] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.194984][T22073] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.234636][T22090] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.250123][T22090] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.399519][T22150] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.415056][T22150] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.471881][T22073] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.487435][T22073] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.530859][T22073] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #2: comm syz.2.6747: No space for directory leaf checksum. Please run e2fsck -D. [ 349.546489][T22073] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #2: comm syz.2.6747: checksumming directory block 0 [ 349.772133][T20415] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.810308][T22206] loop3: detected capacity change from 0 to 128 [ 349.990955][T22213] loop1: detected capacity change from 0 to 2048 [ 350.098993][T22213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.118240][T22239] netlink: 'syz.0.6774': attribute type 63 has an invalid length. [ 350.193651][T22249] loop2: detected capacity change from 0 to 256 [ 350.304343][T22250] team0 (unregistering): Port device team_slave_0 removed [ 350.341401][T22250] team0 (unregistering): Port device team_slave_1 removed [ 350.368493][T21125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.432168][T22270] xt_bpf: check failed: parse error [ 350.840382][T22344] netlink: 'syz.2.6788': attribute type 7 has an invalid length. [ 350.876183][T22348] netlink: 'syz.4.6789': attribute type 63 has an invalid length. [ 350.887752][T22340] ebtables: ebtables: counters copy to user failed while replacing table [ 350.918986][T22347] loop1: detected capacity change from 0 to 1024 [ 350.946098][T22347] EXT4-fs: Ignoring removed oldalloc option [ 350.977483][T22350] loop2: detected capacity change from 0 to 1024 [ 351.015408][T22350] ext4: Unknown parameter 'fowner' [ 351.039367][T22347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.071143][T22359] loop4: detected capacity change from 0 to 1024 [ 351.133554][T22359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.159800][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 351.159816][ T29] audit: type=1326 audit(1720259832.890:9523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca9fd7c75f code=0x7ffc0000 [ 351.199583][T20267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.222750][T22350] loop2: detected capacity change from 0 to 8192 [ 351.230277][ T29] audit: type=1326 audit(1720259832.955:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fca9fd7dc67 code=0x7ffc0000 [ 351.255717][ T29] audit: type=1326 audit(1720259832.955:9525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca9fd7c610 code=0x7ffc0000 [ 351.280361][ T29] audit: type=1326 audit(1720259832.955:9526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca9fd7d7db code=0x7ffc0000 [ 351.365537][ T29] audit: type=1326 audit(1720259833.001:9527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fca9fd7c90a code=0x7ffc0000 [ 351.389052][ T29] audit: type=1326 audit(1720259833.001:9528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fca9fd7c90a code=0x7ffc0000 [ 351.418295][ T29] audit: type=1326 audit(1720259833.001:9529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca9fd7c517 code=0x7ffc0000 [ 351.441904][ T29] audit: type=1326 audit(1720259833.001:9530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fca9fd7f2da code=0x7ffc0000 [ 351.465502][ T29] audit: type=1326 audit(1720259833.001:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca9fd7c610 code=0x7ffc0000 [ 351.489071][ T29] audit: type=1326 audit(1720259833.001:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22349 comm="syz.2.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fca9fd7c9f7 code=0x7ffc0000 [ 351.547370][T22367] loop4: detected capacity change from 0 to 512 [ 351.574379][T22367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 351.581464][T22367] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 351.614862][T22367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 351.623199][T22367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 351.645096][T22367] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.6796: attempt to clear invalid blocks 1024 len 1 [ 351.665022][T21125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.674114][T22367] EXT4-fs (loop4): Remounting filesystem read-only [ 351.681536][T22367] EXT4-fs (loop4): 1 truncate cleaned up [ 351.687714][T22367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 351.699699][T22367] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 351.706674][T22367] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 351.761788][T22367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6796'. [ 351.784823][T22384] tc_dump_action: action bad kind [ 351.907821][T22392] loop2: detected capacity change from 0 to 1024 [ 351.933238][T22392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.949237][T22394] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 351.985004][T22394] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 351.991716][T22394] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.999668][T22394] vhci_hcd vhci_hcd.0: Device attached [ 352.014213][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.036693][T22402] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 352.043344][T22402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 352.050817][T22402] vhci_hcd vhci_hcd.0: Device attached [ 352.073197][T22394] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6805'. [ 352.082311][T22394] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6805'. [ 352.166986][T22398] vhci_hcd: connection closed [ 352.167326][ T1495] vhci_hcd: stop threads [ 352.176519][ T1495] vhci_hcd: release socket [ 352.181003][ T1495] vhci_hcd: disconnect device [ 352.186043][T22403] vhci_hcd: connection closed [ 352.186237][ T1495] vhci_hcd: stop threads [ 352.195253][ T1495] vhci_hcd: release socket [ 352.199878][ T1495] vhci_hcd: disconnect device [ 352.221640][T12469] vhci_hcd: vhci_device speed not set [ 352.328604][T22434] loop3: detected capacity change from 0 to 128 [ 352.337629][T22434] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ" or missing value [ 352.365737][T22437] batadv0: entered promiscuous mode [ 352.412451][T22437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.961231][T22469] loop1: detected capacity change from 0 to 512 [ 352.983288][T22469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.007351][T22469] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 353.019728][T22472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6834'. [ 353.052392][T22469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 353.072736][T22469] EXT4-fs (loop1): orphan cleanup on readonly fs [ 353.082691][T22469] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.6832: attempt to clear invalid blocks 1024 len 1 [ 353.096432][T22469] EXT4-fs (loop1): Remounting filesystem read-only [ 353.108091][T22469] EXT4-fs (loop1): 1 truncate cleaned up [ 353.114261][T22469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 353.128729][T22469] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 353.136002][T22469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 353.194505][T22460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6832'. [ 353.485614][T22500] syzkaller1: entered promiscuous mode [ 353.491531][T22500] syzkaller1: entered allmulticast mode [ 353.532663][T22501] netlink: 'syz.2.6844': attribute type 1 has an invalid length. [ 353.715765][T22506] loop4: detected capacity change from 0 to 1024 [ 353.722743][T22506] EXT4-fs: Ignoring removed i_version option [ 353.736022][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6847'. [ 353.761017][T22506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.883945][T22515] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 353.932916][T22506] loop4: detected capacity change from 1024 to 0 [ 354.045884][T20267] syz-executor: attempt to access beyond end of device [ 354.045884][T20267] loop4: rw=12288, sector=96, nr_sectors = 2 limit=0 [ 354.213454][T20267] syz-executor: attempt to access beyond end of device [ 354.213454][T20267] loop4: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 354.325950][T20267] syz-executor: attempt to access beyond end of device [ 354.325950][T20267] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 354.345437][T22544] batadv0: entered promiscuous mode [ 354.369189][T20267] syz-executor: attempt to access beyond end of device [ 354.369189][T20267] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 354.399302][T22544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.421419][T20267] syz-executor: attempt to access beyond end of device [ 354.421419][T20267] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 354.439467][T20267] syz-executor: attempt to access beyond end of device [ 354.439467][T20267] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 354.453325][T20267] syz-executor: attempt to access beyond end of device [ 354.453325][T20267] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 354.467128][T20267] syz-executor: attempt to access beyond end of device [ 354.467128][T20267] loop4: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 354.481139][T20267] syz-executor: attempt to access beyond end of device [ 354.481139][T20267] loop4: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 354.494863][T20267] syz-executor: attempt to access beyond end of device [ 354.494863][T20267] loop4: rw=524288, sector=28, nr_sectors = 2 limit=0 [ 354.510448][T20267] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 6: comm syz-executor: unable to read itable block [ 354.524683][T20267] buffer_io_error: 24 callbacks suppressed [ 354.524699][T20267] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 354.539882][T20267] EXT4-fs (loop4): I/O error while writing superblock [ 354.546676][T20267] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure [ 354.555642][T20267] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 354.564336][T20267] EXT4-fs (loop4): I/O error while writing superblock [ 354.571363][T20267] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 354.583156][T20267] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 354.591621][T20267] EXT4-fs (loop4): I/O error while writing superblock [ 354.603913][ T11] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #2: block 6: comm kworker/u8:0: unable to read itable block [ 354.632751][ T11] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 354.650199][ T11] EXT4-fs (loop4): I/O error while writing superblock [ 354.666489][T20267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.701438][T22556] loop2: detected capacity change from 0 to 512 [ 354.718704][T22556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 354.744201][T20267] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 354.752654][T20267] EXT4-fs (loop4): I/O error while writing superblock [ 354.767493][T22556] EXT4-fs (loop2): 1 truncate cleaned up [ 354.776314][T22556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.826465][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.918855][T22570] tipc: Failed to remove unknown binding: 66,1,1/0:3113427881/3113427883 [ 354.936517][T22570] tipc: Failed to remove unknown binding: 66,1,1/0:3113427881/3113427883 [ 354.943612][T22574] netlink: 'syz.0.6876': attribute type 21 has an invalid length. [ 354.945016][T22570] tipc: Failed to remove unknown binding: 66,1,1/0:3113427881/3113427883 [ 354.952892][T22574] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6876'. [ 355.029822][ T245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.076733][T22590] loop2: detected capacity change from 0 to 512 [ 355.104089][T22590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 355.122685][ T245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.137362][T22590] EXT4-fs (loop2): 1 truncate cleaned up [ 355.158842][T22590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.179201][ T245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.213562][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.287819][ T245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.374584][ T245] bridge_slave_1: left allmulticast mode [ 355.380350][ T245] bridge_slave_1: left promiscuous mode [ 355.386667][ T245] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.417066][ T245] bridge_slave_0: left allmulticast mode [ 355.422770][ T245] bridge_slave_0: left promiscuous mode [ 355.428598][ T245] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.455366][T22616] loop1: detected capacity change from 0 to 8192 [ 355.501707][T22616] loop1: p1 p2 [ 355.510938][T22616] loop1: p1 start 16777472 is beyond EOD, truncated [ 355.517723][T22616] loop1: p2 start 67698708 is beyond EOD, truncated [ 355.622434][ T245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.637034][ T245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.648329][ T245] bond0 (unregistering): Released all slaves [ 355.661878][ T245] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 355.672457][ T245] bond1 (unregistering): Released all slaves [ 355.687044][T22618] netlink: 'syz.3.6891': attribute type 21 has an invalid length. [ 355.694917][T22618] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6891'. [ 355.707075][T22627] tipc: Failed to remove unknown binding: 66,1,1/1:2110662062/2110662064 [ 355.739046][T22627] tipc: Failed to remove unknown binding: 66,1,1/1:2110662062/2110662064 [ 355.747562][T22627] tipc: Failed to remove unknown binding: 66,1,1/1:2110662062/2110662064 [ 355.773269][T22631] loop3: detected capacity change from 0 to 512 [ 355.790567][ T245] hsr_slave_0: left promiscuous mode [ 355.822973][ T245] hsr_slave_1: left promiscuous mode [ 355.823604][T22631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.841438][ T245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.844699][T22631] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.848971][ T245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.872221][ T245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.880041][ T245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.889672][ T245] veth1_macvtap: left promiscuous mode [ 355.895287][ T245] veth0_macvtap: left promiscuous mode [ 355.900883][ T245] veth1_vlan: left promiscuous mode [ 355.906351][ T245] veth0_vlan: left promiscuous mode [ 355.929226][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.036362][ T245] team0 (unregistering): Port device team_slave_1 removed [ 356.055201][T22637] loop1: detected capacity change from 0 to 512 [ 356.062129][ T245] team0 (unregistering): Port device team_slave_0 removed [ 356.075178][T22637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.088218][T22637] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 356.111251][T22637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 356.139199][T22637] EXT4-fs (loop1): orphan cleanup on readonly fs [ 356.142099][T22591] chnl_net:caif_netlink_parms(): no params data found [ 356.153925][T22637] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.6895: attempt to clear invalid blocks 1024 len 1 [ 356.194738][T22637] EXT4-fs (loop1): Remounting filesystem read-only [ 356.244217][T22591] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.251500][T22591] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.269297][T22637] EXT4-fs (loop1): 1 truncate cleaned up [ 356.294114][T22637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 356.308852][T22591] bridge_slave_0: entered allmulticast mode [ 356.332385][T22591] bridge_slave_0: entered promiscuous mode [ 356.353184][T22591] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.360391][T22591] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.369430][T22637] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 356.373776][T22591] bridge_slave_1: entered allmulticast mode [ 356.382299][T22637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 356.383868][T22591] bridge_slave_1: entered promiscuous mode [ 356.440541][T22665] tipc: Failed to remove unknown binding: 66,1,1/0:3567684756/3567684758 [ 356.454134][T22637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6895'. [ 356.454178][T22591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.463839][T22665] tipc: Failed to remove unknown binding: 66,1,1/0:3567684756/3567684758 [ 356.482059][T22665] tipc: Failed to remove unknown binding: 66,1,1/0:3567684756/3567684758 [ 356.495726][T22591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.564528][T22591] team0: Port device team_slave_0 added [ 356.571517][T22591] team0: Port device team_slave_1 added [ 356.614952][T22591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.622129][T22591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.648136][T22591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.660288][T22591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.667374][T22591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.693969][T22591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.718135][T22673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22673 comm=syz.0.6906 [ 356.749121][T22675] loop2: detected capacity change from 0 to 256 [ 356.773892][T22591] hsr_slave_0: entered promiscuous mode [ 356.781265][T22591] hsr_slave_1: entered promiscuous mode [ 356.787903][T22591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.796937][T22591] Cannot create hsr debugfs directory [ 356.893552][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 356.893567][ T29] audit: type=1400 audit(1720259838.193:9594): avc: denied { remount } for pid=22689 comm="syz.0.6913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 356.893596][T22690] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 356.893596][T22690] [ 357.089304][T22702] loop3: detected capacity change from 0 to 512 [ 357.097627][T22702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.229991][T22705] No such timeout policy "syz0" [ 357.257196][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.534359][T22591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.566381][T22591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.584803][T22591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.597422][ T29] audit: type=1326 audit(1720259838.849:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22708 comm="syz.1.6920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e71d40bd9 code=0x0 [ 357.630879][T22591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.684706][ T29] audit: type=1326 audit(1720259838.922:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22708 comm="syz.1.6920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e71d40bd9 code=0x0 [ 357.781453][T22591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.814564][T22591] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.878162][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.885631][T12449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.899137][T22715] loop3: detected capacity change from 0 to 512 [ 357.917891][T22715] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 357.939800][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.946913][T12449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.965767][T22715] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.6921: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 358.030678][T22591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.041331][T22591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.057240][T22715] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.6921: couldn't read orphan inode 15 (err -117) [ 358.075838][T22720] loop2: detected capacity change from 0 to 512 [ 358.091194][T22720] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.099401][T22715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.116131][T22723] netlink: 'syz.0.6924': attribute type 21 has an invalid length. [ 358.124111][T22723] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6924'. [ 358.141343][T22715] ext2 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.142227][T22720] EXT4-fs (loop2): 1 truncate cleaned up [ 358.168286][T22720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.190110][T22591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.226157][T22720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22720 comm=syz.2.6923 [ 358.252367][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.281674][T22720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=22720 comm=syz.2.6923 [ 358.350966][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.431398][T22748] loop2: detected capacity change from 0 to 512 [ 358.461793][T22753] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22753 comm=syz.0.6931 [ 358.514950][T22748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.531958][T22591] veth0_vlan: entered promiscuous mode [ 358.559230][T22591] veth1_vlan: entered promiscuous mode [ 358.582503][T22748] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.599585][T22763] sock: sock_timestamping_bind_phc: sock not bind to device [ 358.624166][T22591] veth0_macvtap: entered promiscuous mode [ 358.640779][T22763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6933'. [ 358.663707][T22768] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 358.695798][T22768] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 358.702358][T22768] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 358.710103][T22768] vhci_hcd vhci_hcd.0: Device attached [ 358.771367][T22768] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 358.778049][T22768] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 358.785657][T22768] vhci_hcd vhci_hcd.0: Device attached [ 358.799365][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.808405][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881088f6000: rx timeout, send abort [ 358.837985][T22774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6935'. [ 358.847740][T22774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6935'. [ 358.921516][T22778] loop3: detected capacity change from 0 to 512 [ 358.938258][T22778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 358.948238][T12454] vhci_hcd: vhci_device speed not set [ 358.959891][T22769] vhci_hcd: connection closed [ 358.960068][T22771] vhci_hcd: connection closed [ 358.964902][ T1495] vhci_hcd: stop threads [ 358.973928][ T1495] vhci_hcd: release socket [ 358.978395][ T1495] vhci_hcd: disconnect device [ 358.998435][ T1495] vhci_hcd: stop threads [ 359.002741][ T1495] vhci_hcd: release socket [ 359.007348][ T1495] vhci_hcd: disconnect device [ 359.030023][T12454] usb 1-2: new full-speed USB device number 2 using vhci_hcd [ 359.037750][T22591] veth1_macvtap: entered promiscuous mode [ 359.038944][T22778] EXT4-fs (loop3): 1 truncate cleaned up [ 359.049502][T12454] usb 1-2: enqueue for inactive port 1 [ 359.060783][T22778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.086926][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.097486][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.107512][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.117977][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.128049][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.138500][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.148384][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.158850][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.168766][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.179308][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.189313][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.199901][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.212194][T12454] usb 1-2: enqueue for inactive port 1 [ 359.221172][T12454] usb 1-2: enqueue for inactive port 1 [ 359.291596][T22783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22783 comm=syz.3.6938 [ 359.307230][T22783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=22783 comm=syz.3.6938 [ 359.319887][T12454] vhci_hcd: vhci_device speed not set [ 359.349819][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881088f6000: abort rx timeout. Force session deactivation [ 359.361726][T22785] random: crng reseeded on system resumption [ 359.368887][T22591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.387860][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.398517][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.408341][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.418884][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.428766][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.439355][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.449212][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.459669][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.469553][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.480341][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.490274][T22591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.500772][T22591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.520055][T22591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.532996][T22591] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.542185][T22591] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.551043][T22591] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.559855][T22591] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.656416][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.794369][T22796] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 359.871239][T22804] sock: sock_timestamping_bind_phc: sock not bind to device [ 359.890505][T22804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6946'. [ 359.910340][T22812] loop3: detected capacity change from 0 to 512 [ 359.936066][T22812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 359.964615][T22812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.008742][T22812] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.021337][T22818] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 360.033961][T22820] loop2: detected capacity change from 0 to 512 [ 360.052699][T22820] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 360.066468][T22818] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 360.073012][T22818] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 360.080735][T22818] vhci_hcd vhci_hcd.0: Device attached [ 360.092426][T22812] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.6948: failed to insert inode 16: doubly allocated? [ 360.121444][T22820] EXT4-fs (loop2): 1 truncate cleaned up [ 360.131663][T22824] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 360.135026][T22820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.138309][T22824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 360.138394][T22824] vhci_hcd vhci_hcd.0: Device attached [ 360.156170][ T29] audit: type=1400 audit(1720259841.213:9597): avc: denied { map } for pid=22811 comm="syz.3.6948" path="socket:[89496]" dev="sockfs" ino=89496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.188648][ T29] audit: type=1400 audit(1720259841.213:9598): avc: denied { read } for pid=22811 comm="syz.3.6948" path="socket:[89496]" dev="sockfs" ino=89496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.236895][T22818] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6950'. [ 360.246012][T22818] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6950'. [ 360.290845][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.292343][T22820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22820 comm=syz.2.6951 [ 360.316118][T22825] vhci_hcd: connection closed [ 360.316375][T21980] vhci_hcd: stop threads [ 360.325433][T21980] vhci_hcd: release socket [ 360.330063][T21980] vhci_hcd: disconnect device [ 360.338043][T22821] vhci_hcd: connection closed [ 360.349450][T21980] vhci_hcd: stop threads [ 360.358512][T21980] vhci_hcd: release socket [ 360.363133][T21980] vhci_hcd: disconnect device [ 360.379488][T22820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=22820 comm=syz.2.6951 [ 360.415892][ T24] vhci_hcd: vhci_device speed not set [ 360.423150][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.602156][T22847] loop1: detected capacity change from 0 to 8192 [ 360.649051][T22851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6962'. [ 360.671008][ T29] audit: type=1326 audit(1720259841.684:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.2.6963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca9fd7dbd9 code=0x0 [ 360.708691][T22847] loop1: p2 p3 p4 [ 360.712575][T22847] loop1: p2 start 452985600 is beyond EOD, truncated [ 360.719360][T22847] loop1: p3 start 4177527808 is beyond EOD, truncated [ 360.726162][T22847] loop1: p4 size 3599499392 extends beyond EOD, truncated [ 360.765642][ T29] audit: type=1400 audit(1720259841.776:9600): avc: denied { append } for pid=22846 comm="syz.1.6960" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.792273][ T29] audit: type=1400 audit(1720259841.795:9601): avc: denied { map } for pid=22846 comm="syz.1.6960" path="/85/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.816631][ T29] audit: type=1400 audit(1720259841.795:9602): avc: denied { execute } for pid=22846 comm="syz.1.6960" path="/85/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.250903][T22874] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6971'. [ 361.259981][T22874] netlink: 'syz.1.6971': attribute type 1 has an invalid length. [ 361.267861][T22874] netlink: 'syz.1.6971': attribute type 2 has an invalid length. [ 361.275685][T22874] netlink: 'syz.1.6971': attribute type 1 has an invalid length. [ 361.283629][T22874] netlink: 'syz.1.6971': attribute type 2 has an invalid length. [ 361.291521][T22874] netlink: 'syz.1.6971': attribute type 1 has an invalid length. [ 361.299290][T22874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6971'. [ 361.343059][T22877] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.356280][T22877] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.509632][T22881] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 361.516321][T22881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 361.524049][T22881] vhci_hcd vhci_hcd.0: Device attached [ 361.736932][T12449] vhci_hcd: vhci_device speed not set [ 361.826176][T12449] usb 3-3: new full-speed USB device number 4 using vhci_hcd [ 361.863985][T22905] netlink: 'syz.0.6983': attribute type 1 has an invalid length. [ 361.871856][T22905] netlink: 'syz.0.6983': attribute type 2 has an invalid length. [ 361.879712][T22905] netlink: 'syz.0.6983': attribute type 1 has an invalid length. [ 361.887534][T22905] netlink: 'syz.0.6983': attribute type 2 has an invalid length. [ 362.052760][T22910] bridge_slave_1: left allmulticast mode [ 362.058475][T22910] bridge_slave_1: left promiscuous mode [ 362.064303][T22910] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.087586][T22910] bridge_slave_0: left allmulticast mode [ 362.093279][T22910] bridge_slave_0: left promiscuous mode [ 362.099095][T22910] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.169965][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 362.320853][T22883] vhci_hcd: connection reset by peer [ 362.336416][T21980] vhci_hcd: stop threads [ 362.340746][T21980] vhci_hcd: release socket [ 362.345240][T21980] vhci_hcd: disconnect device [ 362.397987][T22931] loop2: detected capacity change from 0 to 512 [ 362.424517][T22931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 362.450637][T22931] EXT4-fs (loop2): 1 orphan inode deleted [ 362.456455][T22931] EXT4-fs (loop2): 1 truncate cleaned up [ 362.473674][T22931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.509288][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.902990][T22966] syzkaller0: entered promiscuous mode [ 362.908540][T22966] syzkaller0: entered allmulticast mode [ 363.099036][T22972] loop3: detected capacity change from 0 to 512 [ 363.107481][T22972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 363.124946][T22972] EXT4-fs (loop3): 1 orphan inode deleted [ 363.130773][T22972] EXT4-fs (loop3): 1 truncate cleaned up [ 363.239644][T22981] 9pnet_fd: Insufficient options for proto=fd [ 364.386549][T23045] loop3: detected capacity change from 0 to 2048 [ 364.450672][T23045] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.7041: bad orphan inode 8192 [ 364.489820][T23045] __nla_validate_parse: 6 callbacks suppressed [ 364.489839][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7041'. [ 364.532054][T23045] bridge_slave_1: left allmulticast mode [ 364.537846][T23045] bridge_slave_1: left promiscuous mode [ 364.543642][T23045] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.592455][ T29] audit: type=1400 audit(1720259845.304:9603): avc: denied { execute } for pid=23044 comm="syz.3.7041" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.615096][ T29] audit: type=1400 audit(1720259845.304:9604): avc: denied { execute_no_trans } for pid=23044 comm="syz.3.7041" path="/131/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.672070][ T29] audit: type=1400 audit(1720259845.350:9605): avc: denied { read } for pid=23044 comm="syz.3.7041" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 364.694868][ T29] audit: type=1400 audit(1720259845.350:9606): avc: denied { open } for pid=23044 comm="syz.3.7041" path="/131/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 364.719151][T23045] bridge_slave_0: left allmulticast mode [ 364.724850][T23045] bridge_slave_0: left promiscuous mode [ 364.730628][T23045] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.774418][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7044'. [ 364.800432][T23061] loop2: detected capacity change from 0 to 512 [ 364.847811][T23061] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.889981][T23061] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.7047: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 364.920867][T23061] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.7047: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 364.951774][T23061] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.7047: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 364.974261][T23061] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.7047: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 364.997761][T23061] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.7047: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 365.022962][T23061] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz.2.7047: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 365.045117][T23061] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 18: comm syz.2.7047: lblock 23 mapped to illegal pblock 18 (length 1) [ 365.279243][T23090] program syz.2.7058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.321281][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7059'. [ 365.348506][T23096] loop2: detected capacity change from 0 to 512 [ 365.369021][T23098] loop3: detected capacity change from 0 to 1024 [ 365.379817][T23096] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.390734][T23098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 365.483936][T23107] loop3: detected capacity change from 0 to 256 [ 365.491191][T23107] FAT-fs (loop3): Directory bread(block 1285) failed [ 365.501847][T23107] FAT-fs (loop3): Directory bread(block 1285) failed [ 365.510457][T23107] FAT-fs (loop3): Directory bread(block 1285) failed [ 365.520015][T23107] FAT-fs (loop3): Directory bread(block 1285) failed [ 366.281102][T23125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7068'. [ 366.339253][T23133] program syz.0.7071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.374305][T23135] 9pnet_fd: Insufficient options for proto=fd [ 366.546296][T23144] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.572187][T23144] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 366.578905][T23144] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 366.586762][T23144] vhci_hcd vhci_hcd.0: Device attached [ 366.614695][T23144] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 366.621367][T23144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 366.629002][T23144] vhci_hcd vhci_hcd.0: Device attached [ 366.653791][T23144] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7076'. [ 366.662878][T23144] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7076'. [ 366.720533][T23145] vhci_hcd: connection closed [ 366.720863][T23147] vhci_hcd: connection closed [ 366.726503][T21965] vhci_hcd: stop threads [ 366.735577][T21965] vhci_hcd: release socket [ 366.740068][T21965] vhci_hcd: disconnect device [ 366.751012][T21965] vhci_hcd: stop threads [ 366.755309][T21965] vhci_hcd: release socket [ 366.759741][T21965] vhci_hcd: disconnect device [ 367.335132][T12449] usb 3-3: enqueue for inactive port 2 [ 367.340642][T12449] usb 3-3: enqueue for inactive port 2 [ 367.443299][T12449] vhci_hcd: vhci_device speed not set [ 367.474249][T23167] syz_tun: entered promiscuous mode [ 367.483016][T23167] syz_tun: left promiscuous mode [ 367.570114][T23175] validate_nla: 7 callbacks suppressed [ 367.570134][T23175] netlink: 'syz.2.7088': attribute type 6 has an invalid length. [ 367.624328][T23181] loop2: detected capacity change from 0 to 256 [ 367.635677][T23181] FAT-fs (loop2): Directory bread(block 1285) failed [ 367.650777][T23181] FAT-fs (loop2): Directory bread(block 1285) failed [ 367.659523][T23181] FAT-fs (loop2): Directory bread(block 1285) failed [ 367.673937][T23181] FAT-fs (loop2): Directory bread(block 1285) failed [ 367.900621][T23198] syz_tun: entered promiscuous mode [ 367.920564][T23198] syz_tun: left promiscuous mode [ 368.156245][T23210] tipc: Can't bind to reserved service type 0 [ 368.184059][T23210] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 368.275109][T23218] loop4: detected capacity change from 0 to 512 [ 368.282697][T23218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 368.299751][T23218] EXT4-fs (loop4): 1 truncate cleaned up [ 368.391489][T23228] loop4: detected capacity change from 0 to 1764 [ 368.406690][T23228] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 368.506862][ T29] audit: type=1326 audit(1720259848.924:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23231 comm="syz.4.7110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401621cbd9 code=0x0 [ 369.172948][T23262] loop3: detected capacity change from 0 to 512 [ 369.191887][T23262] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 369.216929][T23266] loop2: detected capacity change from 0 to 1024 [ 369.231788][T23262] EXT4-fs (loop3): 1 truncate cleaned up [ 369.237701][T23266] SELinux: Context #! ./file0 is not valid (left unmapped). [ 369.251117][ T29] audit: type=1400 audit(1720259849.608:9608): avc: denied { create } for pid=23265 comm="syz.2.7125" name="blkio.bfq.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F66696C6530 [ 369.277867][ T29] audit: type=1400 audit(1720259849.608:9609): avc: denied { associate } for pid=23265 comm="syz.2.7125" name="blkio.bfq.io_serviced_recursive" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F66696C6530 [ 369.304444][ T29] audit: type=1400 audit(1720259849.608:9610): avc: denied { read append open } for pid=23265 comm="syz.2.7125" path="/253/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F66696C6530 [ 369.339898][ T29] audit: type=1400 audit(1720259849.693:9611): avc: denied { unlink } for pid=20415 comm="syz-executor" name="blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F66696C6530 [ 369.453704][T23280] netlink: zone id is out of range [ 369.481540][T23286] loop4: detected capacity change from 0 to 1024 [ 369.494194][T23286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 369.534250][T23293] loop3: detected capacity change from 0 to 512 [ 369.560410][T23293] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.7136: corrupted in-inode xattr: invalid ea_ino [ 369.574247][ T29] audit: type=1326 audit(1720259849.906:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23295 comm="syz.2.7138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca9fd7dbd9 code=0x0 [ 369.609267][T23293] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.7136: couldn't read orphan inode 15 (err -117) [ 369.786252][T23320] loop3: detected capacity change from 0 to 512 [ 369.794881][T23320] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.7149: corrupted in-inode xattr: invalid ea_ino [ 369.810107][T23320] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.7149: couldn't read orphan inode 15 (err -117) [ 369.820900][T23323] loop1: detected capacity change from 0 to 1024 [ 369.834868][T23323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 370.037790][ T29] audit: type=1326 audit(1720259850.330:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23338 comm="syz.1.7155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e71d40bd9 code=0x0 [ 370.164475][T23349] netlink: 'syz.1.7155': attribute type 10 has an invalid length. [ 370.823940][T23360] loop4: detected capacity change from 0 to 2048 [ 370.884980][ T29] audit: type=1400 audit(1720259851.115:9614): avc: denied { create } for pid=23365 comm="syz.3.7163" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 370.915601][T23359] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 370.942356][T23359] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 370.954635][T23359] EXT4-fs (loop4): This should not happen!! Data will be lost [ 370.954635][T23359] [ 370.964825][T23359] EXT4-fs (loop4): Total free blocks count 0 [ 370.971028][T23359] EXT4-fs (loop4): Free/Dirty block details [ 370.977148][T23359] EXT4-fs (loop4): free_blocks=2415919104 [ 370.982922][T23359] EXT4-fs (loop4): dirty_blocks=16 [ 370.988191][T23359] EXT4-fs (loop4): Block reservation details [ 370.994189][T23359] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 371.108195][T23383] loop2: detected capacity change from 0 to 512 [ 371.124674][T23383] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.7173: corrupted in-inode xattr: invalid ea_ino [ 371.143958][T23383] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.7173: couldn't read orphan inode 15 (err -117) [ 371.192316][T23395] loop4: detected capacity change from 0 to 512 [ 371.225662][T23395] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.297828][T23408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7181'. [ 371.325921][T23408] ip6gretap1: entered allmulticast mode [ 371.476317][T23431] loop1: detected capacity change from 0 to 512 [ 371.498643][T23431] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.527912][T23431] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.7190: corrupted inode contents [ 371.558595][T23431] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.7190: mark_inode_dirty error [ 371.580440][T23431] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.7190: corrupted inode contents [ 371.601501][T23431] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.7190: mark_inode_dirty error [ 372.198861][T23456] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 372.244514][T23460] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 372.272880][T23460] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 372.281958][T23460] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 372.441685][T23456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7201'. [ 372.475368][T23468] netlink: 'syz.0.7207': attribute type 5 has an invalid length. [ 372.559807][T23482] SELinux: failed to load policy [ 372.595450][T23492] sock: sock_timestamping_bind_phc: sock not bind to device [ 372.623424][T23496] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 372.632672][T23496] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 372.644404][T23499] loop3: detected capacity change from 0 to 164 [ 372.659436][T23499] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 372.660065][T23492] loop4: detected capacity change from 0 to 512 [ 372.686208][T23492] EXT4-fs mount: 32 callbacks suppressed [ 372.686227][T23492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.704633][T23492] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.718032][T23492] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 372.727044][T23492] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 372.736921][T23492] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.7219: Failed to acquire dquot type 0 [ 372.758602][T23490] netlink: 'syz.3.7218': attribute type 1 has an invalid length. [ 372.782382][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.019342][T23521] loop4: detected capacity change from 0 to 512 [ 373.063609][T23524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.074451][T23530] sock: sock_timestamping_bind_phc: sock not bind to device [ 373.082757][T23521] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.7231: corrupted in-inode xattr: invalid ea_ino [ 373.099711][T23530] loop2: detected capacity change from 0 to 512 [ 373.131041][T23530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.143828][T23530] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.156898][T23530] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 373.165922][T23530] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 373.175912][T23530] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.7235: Failed to acquire dquot type 0 [ 373.203266][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.203495][T23524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.232028][T23521] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.7231: couldn't read orphan inode 15 (err -117) [ 373.256104][T23521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.274358][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7233'. [ 373.296361][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.335353][T23524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.398536][T23544] macvlan0: entered promiscuous mode [ 373.416222][T23544] ipvlan0: entered promiscuous mode [ 373.425338][T23544] ipvlan0: left promiscuous mode [ 373.430562][T23544] macvlan0: left promiscuous mode [ 373.466464][T23524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.493010][T23556] sg_write: data in/out 157/94 bytes for SCSI command 0x5c-- guessing data in; [ 373.493010][T23556] program syz.2.7247 not setting count and/or reply_len properly [ 373.535470][T23560] sock: sock_timestamping_bind_phc: sock not bind to device [ 373.547916][T23560] loop2: detected capacity change from 0 to 512 [ 373.563200][T23564] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 373.570222][T23567] loop3: detected capacity change from 0 to 512 [ 373.582684][T23560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.595394][T23560] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.601426][T23524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.614839][T23560] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 373.623864][T23560] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 373.633662][T23560] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.7249: Failed to acquire dquot type 0 [ 373.650979][T23524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.668323][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.677785][T23567] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.7251: corrupted in-inode xattr: invalid ea_ino [ 373.691688][T23567] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.7251: couldn't read orphan inode 15 (err -117) [ 373.706089][T23567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.734351][T23524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.759189][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.777053][T23524] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.795027][T23574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7256'. [ 373.818436][T23564] vhci_hcd: default hub control req: 4000 v0000 i0000 l56 [ 373.873999][T23580] macvlan0: entered promiscuous mode [ 373.882753][T23586] sg_write: data in/out 157/94 bytes for SCSI command 0x5c-- guessing data in; [ 373.882753][T23586] program syz.1.7260 not setting count and/or reply_len properly [ 373.912396][T23580] ipvlan0: entered promiscuous mode [ 373.912851][T23580] ipvlan0: left promiscuous mode [ 373.915980][T23580] macvlan0: left promiscuous mode [ 374.014909][T23601] loop3: detected capacity change from 0 to 512 [ 374.032283][T23601] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.7266: corrupted in-inode xattr: invalid ea_ino [ 374.072001][T23601] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.7266: couldn't read orphan inode 15 (err -117) [ 374.113886][T23601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.191390][T23614] netlink: 'syz.1.7271': attribute type 5 has an invalid length. [ 374.206745][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.268995][T23620] netlink: 'syz.2.7274': attribute type 10 has an invalid length. [ 374.301694][T23623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.310251][T23620] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 374.364397][T23623] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 374.371050][T23623] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 374.378734][T23623] vhci_hcd vhci_hcd.0: Device attached [ 374.380647][T23626] loop1: detected capacity change from 0 to 512 [ 374.408417][T23631] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 374.415073][T23631] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 374.422548][T23631] vhci_hcd vhci_hcd.0: Device attached [ 374.439966][T23623] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7272'. [ 374.449000][T23623] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7272'. [ 374.468380][T23626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.496023][T23626] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.526132][T23632] vhci_hcd: connection closed [ 374.526158][T23628] vhci_hcd: connection closed [ 374.531344][ T1495] vhci_hcd: stop threads [ 374.540360][ T1495] vhci_hcd: release socket [ 374.544881][ T1495] vhci_hcd: disconnect device [ 374.550242][ T1495] vhci_hcd: stop threads [ 374.554534][ T1495] vhci_hcd: release socket [ 374.559107][ T1495] vhci_hcd: disconnect device [ 374.564739][T21125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.607724][ T29] audit: type=1400 audit(1720259854.551:9615): avc: denied { map } for pid=23638 comm="syz.2.7279" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 374.633476][T12451] vhci_hcd: vhci_device speed not set [ 374.639934][ T29] audit: type=1326 audit(1720259854.588:9616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23638 comm="syz.2.7279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca9fd7dbd9 code=0x0 [ 374.902192][T23649] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 374.926391][T23649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7282'. [ 375.048741][T23651] netlink: 'syz.1.7283': attribute type 5 has an invalid length. [ 375.166268][T23659] loop1: detected capacity change from 0 to 512 [ 375.226013][T23659] EXT4-fs (loop1): 1 truncate cleaned up [ 375.262646][T23669] loop3: detected capacity change from 0 to 512 [ 375.308103][T23669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 375.316114][T23659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.373749][T23673] macvlan0: entered promiscuous mode [ 375.380656][T23673] ipvlan0: entered promiscuous mode [ 375.383436][T23669] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 375.386737][T23673] ipvlan0: left promiscuous mode [ 375.406470][T23673] macvlan0: left promiscuous mode [ 375.442871][T23669] EXT4-fs (loop3): Remounting filesystem read-only [ 375.449693][T23669] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 375.460981][T23669] EXT4-fs (loop3): 1 orphan inode deleted [ 375.473683][T23669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.498875][T21125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.507983][T23669] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 375.517890][T23669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.539496][T23685] netlink: 'syz.2.7296': attribute type 5 has an invalid length. [ 375.715076][T23701] loop4: detected capacity change from 0 to 512 [ 375.745403][T23701] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.759497][T23708] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 375.783124][T23701] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 375.803544][ T29] audit: type=1326 audit(1720259855.668:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23709 comm="syz.3.7307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78025d2bd9 code=0x0 [ 375.804441][T23701] EXT4-fs (loop4): 1 truncate cleaned up [ 375.838825][T23701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.888942][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.946332][T23716] netlink: 'syz.1.7310': attribute type 5 has an invalid length. [ 376.042207][T23722] loop1: detected capacity change from 0 to 512 [ 376.050668][T23722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 376.065407][T23722] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 376.080862][T23722] EXT4-fs (loop1): Remounting filesystem read-only [ 376.089654][T23722] EXT4-fs warning (device loop1): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 376.099967][T23722] EXT4-fs (loop1): 1 orphan inode deleted [ 376.106266][T23722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.118925][T23722] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 376.160488][T23722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.290853][T23735] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 376.397184][T23745] loop4: detected capacity change from 0 to 512 [ 376.422034][T23745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.447552][T23745] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.459490][T23739] syzkaller0: entered promiscuous mode [ 376.465043][T23739] syzkaller0: entered allmulticast mode [ 376.489777][T23745] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7323: corrupted inode contents [ 376.521233][T23745] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.7323: mark_inode_dirty error [ 376.552986][T23745] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7323: corrupted inode contents [ 376.593510][T23745] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.7323: mark_inode_dirty error [ 376.637699][T23745] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7323: corrupted inode contents [ 376.659249][T23745] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.7323: mark_inode_dirty error [ 376.697783][T23745] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7323: corrupted inode contents [ 376.736903][T23759] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7323: corrupted inode contents [ 376.750221][T23759] EXT4-fs error (device loop4): add_dirent_to_buf:2212: inode #2: comm syz.4.7323: mark_inode_dirty error [ 376.784812][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.796813][T23763] loop2: detected capacity change from 0 to 512 [ 376.814551][T23769] loop3: detected capacity change from 0 to 128 [ 376.820803][T23763] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 376.839160][T23769] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 376.849573][T23769] FAT-fs (loop3): Filesystem has been set read-only [ 376.871069][T23763] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 376.879988][T23769] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 376.907430][T23763] EXT4-fs (loop2): Remounting filesystem read-only [ 376.914017][T23763] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 376.928947][T23763] EXT4-fs (loop2): 1 orphan inode deleted [ 376.935368][T23763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.969540][T23763] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 376.994770][T23763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.090095][T23790] loop3: detected capacity change from 0 to 1024 [ 377.120232][T23790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.136338][T23790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 377.157066][T23792] loop2: detected capacity change from 0 to 512 [ 377.168164][T23790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.226014][T23792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.246696][T23797] usb usb1: usbfs: process 23797 (syz.4.7344) did not claim interface 0 before use [ 377.267886][T23792] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.329783][T23792] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.7343: corrupted inode contents [ 377.370899][T23792] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.7343: mark_inode_dirty error [ 377.400953][T23792] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.7343: corrupted inode contents [ 377.424436][T23792] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.7343: mark_inode_dirty error [ 377.428888][ T29] audit: type=1400 audit(1720259857.164:9618): avc: denied { bind } for pid=23801 comm="syz.4.7346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 377.453575][T23792] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.7343: corrupted inode contents [ 377.476573][T23792] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.7343: mark_inode_dirty error [ 377.505873][T23792] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.7343: corrupted inode contents [ 377.530030][T23806] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.7343: corrupted inode contents [ 377.562759][T23806] EXT4-fs error (device loop2): add_dirent_to_buf:2212: inode #2: comm syz.2.7343: mark_inode_dirty error [ 377.576294][T23808] loop4: detected capacity change from 0 to 128 [ 377.597399][T23808] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 377.607676][T23808] FAT-fs (loop4): Filesystem has been set read-only [ 377.634999][T20415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.654451][T23808] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 377.725744][T23810] batadv0: left promiscuous mode [ 377.766048][T23810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7349'. [ 377.797120][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7349'. [ 378.001859][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.034224][ T29] audit: type=1400 audit(1720259857.728:9619): avc: denied { accept } for pid=23825 comm="syz.2.7357" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 378.061570][T23830] loop4: detected capacity change from 0 to 256 [ 378.102047][T23840] loop3: detected capacity change from 0 to 2048 [ 378.124494][T23840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.145122][T23840] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 378.164649][T23847] usb usb1: usbfs: process 23847 (syz.1.7363) did not claim interface 0 before use [ 378.181178][T23849] loop4: detected capacity change from 0 to 256 [ 378.190407][T23840] EXT4-fs (loop3): Remounting filesystem read-only [ 378.237997][T23851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7366'. [ 378.265024][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7366'. [ 378.291717][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.705236][T23892] loop4: detected capacity change from 0 to 128 [ 378.716972][T23892] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.739736][T23892] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.801095][T22591] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.869479][T23896] usb usb1: usbfs: process 23896 (syz.1.7386) did not claim interface 0 before use [ 379.023433][T23912] openvswitch: netlink: Message has 1 unknown bytes. [ 379.138686][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7398'. [ 379.158806][T23919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7397'. [ 379.201339][T23919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7397'. [ 379.355187][T23933] loop4: detected capacity change from 0 to 2048 [ 379.417884][T23933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.437593][T23933] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 379.452777][T23933] EXT4-fs (loop4): Remounting filesystem read-only [ 379.566455][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.714016][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7410'. [ 379.801126][T23954] loop4: detected capacity change from 0 to 1024 [ 379.811555][T23954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.853613][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.935511][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7413'. [ 379.956966][ T1495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.017006][ T1495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.037436][ T29] audit: type=1400 audit(1720259859.575:9620): avc: denied { setattr } for pid=23963 comm="syz.4.7417" name="file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 380.099608][T23971] openvswitch: netlink: Message has 1 unknown bytes. [ 380.103807][ T1495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.192780][ T1495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.219249][T23983] syzkaller1: entered promiscuous mode [ 380.224813][T23983] syzkaller1: entered allmulticast mode [ 380.316935][ T1495] bridge_slave_1: left allmulticast mode [ 380.322799][ T1495] bridge_slave_1: left promiscuous mode [ 380.328548][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.340782][ T1495] bridge_slave_0: left allmulticast mode [ 380.346479][ T1495] bridge_slave_0: left promiscuous mode [ 380.352227][ T1495] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.477631][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7426'. [ 380.656496][ T1495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.669650][ T1495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.681501][ T1495] bond0 (unregistering): Released all slaves [ 380.743363][ T1495] tipc: Left network mode [ 380.799086][T23994] IPVS: Scheduler module ip_vs_sip not found [ 380.830447][ T1495] hsr_slave_0: left promiscuous mode [ 380.848724][ T1495] hsr_slave_1: left promiscuous mode [ 380.859470][ T1495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.867107][ T1495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.877410][ T1495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.884955][ T1495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.900295][ T1495] veth1_macvtap: left promiscuous mode [ 380.906238][ T1495] veth0_macvtap: left promiscuous mode [ 380.911833][ T1495] veth1_vlan: left promiscuous mode [ 380.917269][ T1495] veth0_vlan: left promiscuous mode [ 380.929688][T24005] loop3: detected capacity change from 0 to 256 [ 381.168310][T23967] chnl_net:caif_netlink_parms(): no params data found [ 381.248490][T23967] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.255795][T23967] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.265794][T23967] bridge_slave_0: entered allmulticast mode [ 381.278453][T23967] bridge_slave_0: entered promiscuous mode [ 381.288761][T23967] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.295913][T23967] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.303437][T23967] bridge_slave_1: entered allmulticast mode [ 381.310119][T23967] bridge_slave_1: entered promiscuous mode [ 381.366169][T23967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.400885][T23967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.482266][T23967] team0: Port device team_slave_0 added [ 381.500360][T23967] team0: Port device team_slave_1 added [ 381.541563][T24007] chnl_net:caif_netlink_parms(): no params data found [ 381.569217][T23967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.576447][T23967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.602507][T23967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.666039][T23967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.673134][T23967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.699276][T23967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.731243][T24032] team0: entered promiscuous mode [ 381.736336][T24032] team_slave_0: entered promiscuous mode [ 381.742172][T24032] team_slave_1: entered promiscuous mode [ 381.802554][T24007] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.809674][T24007] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.822743][T24007] bridge_slave_0: entered allmulticast mode [ 381.842991][T24007] bridge_slave_0: entered promiscuous mode [ 381.909619][T24007] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.917053][T24007] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.926202][T24007] bridge_slave_1: entered allmulticast mode [ 381.947443][T24007] bridge_slave_1: entered promiscuous mode [ 381.979478][T24049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.005230][T23967] hsr_slave_0: entered promiscuous mode [ 382.011740][T23967] hsr_slave_1: entered promiscuous mode [ 382.018046][T23967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.029239][T23967] Cannot create hsr debugfs directory [ 382.052792][T24007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.083030][T24049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.106783][T24007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.129120][T24007] team0: Port device team_slave_0 added [ 382.136170][T24007] team0: Port device team_slave_1 added [ 382.148057][T24049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.212634][T24007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.219677][T24007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.250290][T24007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.288465][T24049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.300466][T24007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.307527][T24007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.333504][T24007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.386660][T24049] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.405072][T24049] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.416617][T24007] hsr_slave_0: entered promiscuous mode [ 382.423794][T24007] hsr_slave_1: entered promiscuous mode [ 382.429864][T24007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.437491][T24007] Cannot create hsr debugfs directory [ 382.456675][T24049] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.478732][T24049] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.550725][T24031] team0: left promiscuous mode [ 382.555541][T24031] team_slave_0: left promiscuous mode [ 382.561159][T24031] team_slave_1: left promiscuous mode [ 382.666882][T24075] IPVS: Scheduler module ip_vs_sip not found [ 382.685782][T24007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.712325][T23967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.724486][T23967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.737876][T24080] loop3: detected capacity change from 0 to 1024 [ 382.748461][T23967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.777963][T24007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.799921][T24080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.815139][T23967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.869369][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.887969][ T29] audit: type=1326 audit(1720259862.207:9621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401621cbd9 code=0x7ffc0000 [ 382.915633][T24007] bond0: (slave netdevsim1): Releasing backup interface [ 382.926026][T24007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.938811][ T29] audit: type=1326 audit(1720259862.225:9622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401621cbd9 code=0x7ffc0000 [ 382.962452][ T29] audit: type=1326 audit(1720259862.225:9623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401621cbd9 code=0x7ffc0000 [ 382.986126][ T29] audit: type=1326 audit(1720259862.225:9624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.4.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401621cbd9 code=0x7ffc0000 [ 383.018105][T23967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.035837][T23967] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.053332][T24007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.102964][T12457] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.110074][T12457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.120528][T12457] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.127752][T12457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.204347][T24007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 383.222016][T24101] loop3: detected capacity change from 0 to 1024 [ 383.237841][T24101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 383.238662][T24007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 383.259729][T24101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.273826][T24007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 383.282284][T24096] ebtables: ebtables: counters copy to user failed while replacing table [ 383.303477][T24101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.322436][T23967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.337062][T24007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 383.432851][ T29] audit: type=1326 audit(1720259862.705:9625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.0.7464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1681470bd9 code=0x0 [ 383.488168][T24007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.506959][T24007] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.520200][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.527362][T12481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.552515][T23967] veth0_vlan: entered promiscuous mode [ 383.573435][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.580649][T12481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.614479][T23967] veth1_vlan: entered promiscuous mode [ 383.648703][T23967] veth0_macvtap: entered promiscuous mode [ 383.670509][T23967] veth1_macvtap: entered promiscuous mode [ 383.689179][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.699910][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.709921][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.720540][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.730781][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.741316][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.751265][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.761884][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.771743][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.782257][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.792219][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.802829][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.815628][T23967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.827868][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.838702][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.848691][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.859190][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.869007][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.879469][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.889435][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.899895][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.909762][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.920219][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.930154][T23967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.940962][T23967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.953124][T23967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.962317][T23967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.971258][T23967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.980271][T23967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.989029][T23967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.035930][T24007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.128365][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.219024][T24007] veth0_vlan: entered promiscuous mode [ 384.233602][T24007] veth1_vlan: entered promiscuous mode [ 384.268271][T24007] veth0_macvtap: entered promiscuous mode [ 384.279684][T24007] veth1_macvtap: entered promiscuous mode [ 384.297543][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.308153][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.318149][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.329008][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.339046][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.350368][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.360282][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.371215][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.381257][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.391731][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.402264][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.412783][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.422734][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.433540][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.450269][T24007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.461796][T24161] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 384.482687][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.493363][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.503725][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.514344][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.524215][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.534783][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.544811][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.555553][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.565515][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.576012][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.585925][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.596641][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.606546][T24007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.617069][T24007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.632786][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7480'. [ 384.632908][T24007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.651885][T24007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.660849][T24007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.669582][T24007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.678647][T24007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.824968][T24174] loop4: detected capacity change from 0 to 2048 [ 384.866515][T24174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.899852][T24183] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7485'. [ 384.917196][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.060837][T24197] loop4: detected capacity change from 0 to 512 [ 385.225785][T24197] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.7492: corrupted in-inode xattr: invalid ea_ino [ 385.275717][T24197] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.7492: couldn't read orphan inode 12 (err -117) [ 385.330501][T24197] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.386711][T24197] EXT4-fs error (device loop4): make_indexed_dir:2261: inode #2: comm syz.4.7492: invalid rec_len for '..' [ 385.485663][T22591] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 385.510346][T24220] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7501'. [ 385.601087][T24222] loop2: detected capacity change from 0 to 512 [ 385.668371][T24222] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 385.676401][T24222] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 385.758388][T24222] System zones: 0-1, 15-15, 18-18, 34-34 [ 385.792211][T24222] EXT4-fs (loop2): orphan cleanup on readonly fs [ 385.829947][T24222] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 385.874646][T24222] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 385.889352][T24222] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 385.921980][T24242] loop4: detected capacity change from 0 to 1024 [ 385.972635][T24242] EXT4-fs: Ignoring removed oldalloc option [ 386.011163][T24222] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.7503: bad orphan inode 16 [ 386.032715][T24242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.072538][T24222] ext4_test_bit(bit=15, block=18) = 1 [ 386.077974][T24222] is_bad_inode(inode)=0 [ 386.082201][T24222] NEXT_ORPHAN(inode)=0 [ 386.086320][T24222] max_ino=32 [ 386.089534][T24222] i_nlink=2 [ 386.114349][T24222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.132467][T24222] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #12: comm syz.2.7503: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 769, max 0(0), depth 0(0) [ 386.189787][T24242] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 386.252933][T24007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.253180][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.360490][T24258] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7515'. [ 386.750261][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7526'. [ 386.816018][T24288] netlink: zone id is out of range [ 386.821199][T24288] netlink: zone id is out of range [ 386.826425][T24288] netlink: zone id is out of range [ 386.831623][T24288] netlink: zone id is out of range [ 386.883006][T24288] netlink: zone id is out of range [ 386.888214][T24288] netlink: zone id is out of range [ 386.893512][T24288] netlink: set zone limit has 8 unknown bytes [ 386.960531][T24296] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7531'. [ 387.207617][T24306] loop4: detected capacity change from 0 to 2048 [ 387.280384][T24306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.499134][T24306] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 388.201213][ C1] sched: RT throttling activated [ 388.211723][T24306] EXT4-fs (loop4): Remounting filesystem read-only [ 389.127781][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.335923][T22306] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.359082][T24334] loop1: detected capacity change from 0 to 512 [ 389.450584][T24343] loop4: detected capacity change from 0 to 1024 [ 389.464254][T22306] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.476634][T24334] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.7547: corrupted in-inode xattr: invalid ea_ino [ 389.514113][T24343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.573145][T22306] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.669013][T22591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.684201][T22306] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.708923][T24334] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.7547: couldn't read orphan inode 12 (err -117) [ 389.748067][T24359] netlink: 'syz.3.7558': attribute type 10 has an invalid length. [ 389.768177][T24363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7556'. [ 389.778465][T24359] netlink: 'syz.3.7558': attribute type 10 has an invalid length. [ 389.791781][T24334] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.892083][T24334] EXT4-fs error (device loop1): make_indexed_dir:2261: inode #2: comm syz.1.7547: invalid rec_len for '..' [ 389.931704][T24380] loop3: detected capacity change from 0 to 1024 [ 389.949398][T22306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.952549][T23967] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 389.969504][T24380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.986818][T22306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.997835][T22306] bond0 (unregistering): Released all slaves [ 390.050737][T21062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.166783][T24341] chnl_net:caif_netlink_parms(): no params data found [ 390.216105][T22306] hsr_slave_0: left promiscuous mode [ 390.227108][T24391] SELinux: Context system_ is not valid (left unmapped). [ 390.234567][ T29] audit: type=1400 audit(1720259868.985:9626): avc: denied { relabelfrom } for pid=24390 comm="syz.4.7569" name="UNIX" dev="sockfs" ino=96293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 390.258329][ T29] audit: type=1400 audit(1720259868.985:9627): avc: denied { relabelto } for pid=24390 comm="syz.4.7569" name="UNIX" dev="sockfs" ino=96293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_" [ 390.312917][T22306] hsr_slave_1: left promiscuous mode [ 390.342970][T22306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.350553][T22306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.402175][T22306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.409722][T22306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.474262][T22306] veth1_macvtap: left promiscuous mode [ 390.479943][T22306] veth0_macvtap: left promiscuous mode [ 390.485669][T22306] veth1_vlan: left promiscuous mode [ 390.490954][T22306] veth0_vlan: left promiscuous mode [ 390.902144][T24398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7570'. [ 391.027535][T24341] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.034674][T24341] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.092606][T24341] bridge_slave_0: entered allmulticast mode [ 391.099143][T24341] bridge_slave_0: entered promiscuous mode [ 391.151151][T24341] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.158297][T24341] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.202224][T24341] bridge_slave_1: entered allmulticast mode [ 391.233866][T24341] bridge_slave_1: entered promiscuous mode [ 391.342182][T24418] loop4: detected capacity change from 0 to 512 [ 391.358113][T24341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.408125][T24418] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.7576: corrupted in-inode xattr: invalid ea_ino [ 391.430131][T24341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.474516][T24418] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.7576: couldn't read orphan inode 12 (err -117) [ 391.531647][T24341] team0: Port device team_slave_0 added [ 391.539006][T24418] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.552165][T24341] team0: Port device team_slave_1 added [ 391.570805][T24415] EXT4-fs error (device loop4): make_indexed_dir:2261: inode #2: comm syz.4.7576: invalid rec_len for '..' [ 391.583925][T24341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.591018][T24341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.617041][T24341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.632268][T24341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.639303][T24341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.665475][T24341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.727822][T22591] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 391.959002][T24341] hsr_slave_0: entered promiscuous mode [ 391.989865][T24341] hsr_slave_1: entered promiscuous mode [ 392.008050][T24341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.026708][T24341] Cannot create hsr debugfs directory [ 392.108240][ T1495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.259203][ T1495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.410436][ T1495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.506851][ T1495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.633295][ T1495] bridge_slave_1: left allmulticast mode [ 392.639140][ T1495] bridge_slave_1: left promiscuous mode [ 392.644828][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.751343][ T1495] bridge_slave_0: left allmulticast mode [ 392.757051][ T1495] bridge_slave_0: left promiscuous mode [ 392.762894][ T1495] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.098644][ T1495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.119585][ T1495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.130368][ T1495] bond0 (unregistering): Released all slaves [ 393.142812][T24436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7581'. [ 393.202775][T24445] loop2: detected capacity change from 0 to 1024 [ 393.233220][T24445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.280751][T24007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.299040][ T1495] hsr_slave_0: left promiscuous mode [ 393.306002][ T1495] hsr_slave_1: left promiscuous mode [ 393.311886][ T1495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.319453][ T1495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.330705][ T1495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.338197][ T1495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.353897][T24459] loop2: detected capacity change from 0 to 512 [ 393.360572][ T1495] veth1_macvtap: left promiscuous mode [ 393.361347][T24459] EXT4-fs: Ignoring removed i_version option [ 393.366072][ T1495] veth0_macvtap: left promiscuous mode [ 393.372222][T24459] EXT4-fs: Ignoring removed oldalloc option [ 393.377690][ T1495] veth1_vlan: left promiscuous mode [ 393.388803][ T1495] veth0_vlan: left promiscuous mode [ 393.389544][T24456] loop1: detected capacity change from 0 to 512 [ 393.414609][T24459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.434520][T24456] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.7587: corrupted in-inode xattr: invalid ea_ino [ 393.461618][T24459] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.483280][T24456] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.7587: couldn't read orphan inode 12 (err -117) [ 393.511397][T24459] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7586'. [ 393.581093][T24456] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.635846][T24456] EXT4-fs error (device loop1): make_indexed_dir:2261: inode #2: comm syz.1.7587: invalid rec_len for '..' [ 393.694023][ T1495] team0 (unregistering): Port device team_slave_1 removed [ 393.705050][ T1495] team0 (unregistering): Port device team_slave_0 removed [ 393.769739][T24426] chnl_net:caif_netlink_parms(): no params data found [ 393.835226][T24426] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.842408][T24426] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.850933][T24426] bridge_slave_0: entered allmulticast mode [ 393.857857][T24426] bridge_slave_0: entered promiscuous mode [ 393.865012][T24341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.874227][T24426] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.881463][T24426] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.889172][T24426] bridge_slave_1: entered allmulticast mode [ 393.895729][T24426] bridge_slave_1: entered promiscuous mode [ 393.910278][T24341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.920285][T24341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.938535][T24426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.948358][T24341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.961303][T24426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.995033][T24426] team0: Port device team_slave_0 added [ 394.003627][T24426] team0: Port device team_slave_1 added [ 394.023455][T24426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.030614][T24426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.056767][T24426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.069355][T24426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.076375][T24426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.102356][T24426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.164263][T24475] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7591'. [ 394.177087][T24426] hsr_slave_0: entered promiscuous mode [ 394.185171][T24426] hsr_slave_1: entered promiscuous mode [ 394.194748][T24426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.207951][T24426] Cannot create hsr debugfs directory [ 394.510404][T24341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.630216][T24341] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.676550][T12451] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.683765][T12451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.757732][T12451] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.764889][T12451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.857064][T24341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.045773][T24341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.193479][T24426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.234482][T24490] loop2: detected capacity change from 0 to 2048 [ 395.256081][T24426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.299304][T24426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.325851][T24426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.415289][T24490] EXT4-fs (loop2): shut down requested (2) [ 395.444554][T24341] veth0_vlan: entered promiscuous mode [ 395.498108][T24341] veth1_vlan: entered promiscuous mode [ 395.585460][T24341] veth0_macvtap: entered promiscuous mode [ 395.613757][T24426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.640054][T24341] veth1_macvtap: entered promiscuous mode [ 395.694212][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.704837][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.714716][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.725165][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.735005][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.745539][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.755383][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.765874][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.775788][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.786298][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.796192][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.806668][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.820415][T24341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.842470][T24426] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.874510][T24502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24502 comm=syz.2.7597 [ 395.891513][T12445] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.898628][T12445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.991808][T12445] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.998954][T12445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.022048][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.032565][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.042444][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.052980][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.062943][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.073411][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.083275][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.093782][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.103673][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.114220][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.124115][T24341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.134616][T24341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.146801][T24341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.159331][T24341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.168159][T24341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.176905][T24341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.185725][T24341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.236210][T24426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.373443][ T29] audit: type=1400 audit(1720259874.655:9628): avc: denied { create } for pid=24520 comm="syz.0.7603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.456339][T24426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.608896][T24533] tipc: Failed to obtain node identity [ 396.614523][T24533] tipc: Enabling of bearer rejected, failed to enable media [ 397.234992][T24426] veth0_vlan: entered promiscuous mode [ 397.284150][T24426] veth1_vlan: entered promiscuous mode [ 397.317269][T24559] program syz.1.7612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.333812][T24426] veth0_macvtap: entered promiscuous mode [ 397.365758][T24426] veth1_macvtap: entered promiscuous mode [ 397.414066][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.424591][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.434505][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.444994][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.454992][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.465447][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.475314][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.485781][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.495806][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.506249][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.516257][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.526806][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.536780][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.547253][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.868495][T24530] ================================================================== [ 397.876615][T24530] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 397.883736][T24530] [ 397.886056][T24530] write to 0xffff888135aba600 of 8 bytes by task 24531 on cpu 1: [ 397.893789][T24530] exit_mm+0x9c/0x190 [ 397.897774][T24530] do_exit+0x556/0x1710 [ 397.901934][T24530] do_group_exit+0x102/0x150 [ 397.906540][T24530] get_signal+0xf2f/0x1080 [ 397.910965][T24530] arch_do_signal_or_restart+0x95/0x4b0 [ 397.916517][T24530] syscall_exit_to_user_mode+0x59/0x130 [ 397.922077][T24530] do_syscall_64+0xd6/0x1c0 [ 397.926614][T24530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.932524][T24530] [ 397.934864][T24530] read to 0xffff888135aba600 of 8 bytes by task 24530 on cpu 0: [ 397.942672][T24530] mm_update_next_owner+0x1c9/0x450 [ 397.947899][T24530] exit_mm+0xdc/0x190 [ 397.951908][T24530] do_exit+0x556/0x1710 [ 397.956077][T24530] do_group_exit+0x142/0x150 [ 397.960679][T24530] __x64_sys_exit_group+0x1f/0x20 [ 397.965717][T24530] x64_sys_call+0x27f9/0x2d70 [ 397.970405][T24530] do_syscall_64+0xc9/0x1c0 [ 397.974928][T24530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.980828][T24530] [ 397.983149][T24530] value changed: 0xffff8881037d79c0 -> 0x0000000000000000 [ 397.990254][T24530] [ 397.992578][T24530] Reported by Kernel Concurrency Sanitizer on: [ 397.998737][T24530] CPU: 0 PID: 24530 Comm: syz.0.7606 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 398.008904][T24530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 398.019067][T24530] ================================================================== [ 398.034417][T24426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.041830][ T29] audit: type=1400 audit(1720259876.198:9629): avc: denied { write } for pid=3073 comm="syz-executor" path="pipe:[1587]" dev="pipefs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 398.042760][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.075696][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.085644][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.096311][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.106162][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.116840][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.126688][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.137362][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.147227][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.157725][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.167601][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.178053][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.187899][T24426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.198348][T24426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.210365][T24426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.236539][T24426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.245398][T24426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.254360][T24426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.263372][T24426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.529068][T21980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.655630][T21980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.743883][T21980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.827988][T21980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.927926][T21980] bridge_slave_1: left allmulticast mode [ 398.933784][T21980] bridge_slave_1: left promiscuous mode [ 398.939633][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.951008][T21980] bridge_slave_0: left allmulticast mode [ 398.957048][T21980] bridge_slave_0: left promiscuous mode [ 398.962813][T21980] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.151699][T21980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.165565][T21980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.176328][T21980] bond0 (unregistering): Released all slaves [ 399.489380][T21980] hsr_slave_0: left promiscuous mode [ 399.498206][T21980] hsr_slave_1: left promiscuous mode [ 399.504245][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.511861][T21980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.521878][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.529410][T21980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.539652][T21980] veth1_macvtap: left promiscuous mode [ 399.545260][T21980] veth0_macvtap: left promiscuous mode [ 399.550943][T21980] veth1_vlan: left promiscuous mode [ 399.556303][T21980] veth0_vlan: left promiscuous mode [ 399.692528][T21980] team0 (unregistering): Port device team_slave_1 removed [ 399.705722][T21980] team0 (unregistering): Port device team_slave_0 removed [ 400.561610][T21980] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.677970][T21980] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.742388][T21980] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.807252][T21980] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.891417][T21980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.960401][T21980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.027487][T21980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.112149][T21980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.213061][T21980] bridge_slave_1: left allmulticast mode [ 401.218907][T21980] bridge_slave_1: left promiscuous mode [ 401.224584][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.235348][T21980] bridge_slave_0: left allmulticast mode [ 401.241058][T21980] bridge_slave_0: left promiscuous mode [ 401.246828][T21980] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.458472][T21980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.472792][T21980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.483135][T21980] bond0 (unregistering): Released all slaves [ 401.493493][T21980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.504561][T21980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.516875][T21980] bond0 (unregistering): Released all slaves [ 401.861719][T21980] hsr_slave_0: left promiscuous mode [ 401.867439][T21980] hsr_slave_1: left promiscuous mode [ 401.874960][T21980] hsr_slave_0: left promiscuous mode [ 401.882633][T21980] hsr_slave_1: left promiscuous mode [ 401.889128][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.896553][T21980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.906325][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.913840][T21980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.928224][T21980] veth1_macvtap: left promiscuous mode [ 401.933985][T21980] veth0_macvtap: left promiscuous mode [ 401.939560][T21980] veth1_vlan: left promiscuous mode [ 401.944917][T21980] veth0_vlan: left promiscuous mode [ 401.953116][T21980] veth1_macvtap: left promiscuous mode [ 401.958642][T21980] veth0_macvtap: left promiscuous mode [ 401.964244][T21980] veth1_vlan: left promiscuous mode [ 401.969550][T21980] veth0_vlan: left promiscuous mode [ 402.151567][T21980] team0 (unregistering): Port device team_slave_1 removed [ 402.164402][T21980] team0 (unregistering): Port device team_slave_0 removed [ 402.251288][T21980] team0 (unregistering): Port device team_slave_1 removed [ 402.264616][T21980] team0 (unregistering): Port device team_slave_0 removed [ 403.258790][T21980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.418972][T21980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.537635][T21980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.659411][T21980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.759419][T21980] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.026430][T21980] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.092126][T21980] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.209205][T21980] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.363852][T21980] bridge_slave_1: left allmulticast mode [ 404.369626][T21980] bridge_slave_1: left promiscuous mode [ 404.375456][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.385720][T21980] bridge_slave_0: left allmulticast mode [ 404.391548][T21980] bridge_slave_0: left promiscuous mode [ 404.397254][T21980] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.407443][T21980] bridge_slave_1: left allmulticast mode [ 404.413237][T21980] bridge_slave_1: left promiscuous mode [ 404.418903][T21980] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.433476][T21980] bridge_slave_0: left allmulticast mode [ 404.439271][T21980] bridge_slave_0: left promiscuous mode [ 404.444978][T21980] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.706872][T21980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.719529][T21980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.730014][T21980] bond0 (unregistering): Released all slaves [ 404.742105][T21980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.752766][T21980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.764821][T21980] bond0 (unregistering): Released all slaves [ 404.932548][T21980] hsr_slave_0: left promiscuous mode [ 404.938367][T21980] hsr_slave_1: left promiscuous mode [ 404.946008][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.953453][T21980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.961001][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.968507][T21980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.979744][T21980] hsr_slave_0: left promiscuous mode [ 404.985378][T21980] hsr_slave_1: left promiscuous mode [ 404.991178][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.998694][T21980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.008041][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.015436][T21980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.027810][T21980] veth1_macvtap: left promiscuous mode [ 405.033338][T21980] veth0_macvtap: left promiscuous mode [ 405.039004][T21980] veth1_vlan: left promiscuous mode [ 405.044267][T21980] veth0_vlan: left promiscuous mode [ 405.052240][T21980] veth1_macvtap: left promiscuous mode [ 405.057750][T21980] veth0_macvtap: left promiscuous mode [ 405.063367][T21980] veth1_vlan: left promiscuous mode [ 405.068696][T21980] veth0_vlan: left promiscuous mode [ 405.236039][T21980] team0 (unregistering): Port device team_slave_1 removed [ 405.248758][T21980] team0 (unregistering): Port device team_slave_0 removed [ 405.328301][T21980] team0 (unregistering): Port device team_slave_1 removed [ 405.338916][T21980] team0 (unregistering): Port device team_slave_0 removed