last executing test programs: 8.188330825s ago: executing program 1 (id=1023): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0xfffffffffffffe32, &(0x7f0000002740)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2b, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4000040) 7.496868722s ago: executing program 1 (id=1034): ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) fallocate(r0, 0x0, 0x0, 0x7000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r1, 0x0, 0xfffe80) 6.680783802s ago: executing program 1 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x2, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) open(0x0, 0x14927e, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) 5.444216673s ago: executing program 1 (id=1116): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') 5.443824053s ago: executing program 1 (id=1118): socket(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x3}, 0x0, 0x6e6bb1, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5.247133343s ago: executing program 1 (id=1119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.196283491s ago: executing program 32 (id=1119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 776.932748ms ago: executing program 0 (id=1290): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x8000000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 736.599966ms ago: executing program 0 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x3, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 672.147813ms ago: executing program 4 (id=1295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x2101}]}}}}}}}}, 0x0) 671.234373ms ago: executing program 3 (id=1298): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) 664.521492ms ago: executing program 0 (id=1299): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="7a0af8ff7525347cbfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000072000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6993bad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785b1292fcb9c1d3079a00db453620ce72d75946c2b638f91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33321d1ec72ed311740d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d07815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc3c9731c9a7bb3a4e67056433edf43fba5566a3e02200bae941d34ac81fd48f9b73126992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000480000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089ba9b19dbe6431c7bf773634f4aac8c91aef83eaa0951d137f8f91a0a9d54f4347431fa96c0b54a503c39d4da796a0dc4a54cb6d9952feb6d282aa2557037b890dc0cf2ed230571ffafccdef2c2c32d3edbcb5ec2cb723149cbed2fbd5fe7452486401e65abb2966c85ec1fdb74b8a492f83e6dd9f2e2f4f75a18a2117b96217adc5dd29bf9192e4419594d1369c1f25e5965f9c601e47f70b0b35c4367102087b9f00c2651c1b5e3134d45a8c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 653.115592ms ago: executing program 4 (id=1301): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r0}, 0x10) select(0x40, &(0x7f00000000c0)={0x9, 0xca5, 0xfffffffffffffffb, 0x8f, 0x8000, 0x200, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x5) 591.852869ms ago: executing program 0 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) 591.650999ms ago: executing program 3 (id=1304): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 579.127068ms ago: executing program 0 (id=1306): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@nouid32}, {@usrquota}, {@dioread_nolock}, {@nobh}, {@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x5eb, &(0x7f0000001740)="$eJzs3c9vVVUeAPDveX0tLWWmhUxmhlkMTSYTSGZoaYEJmbiArSEN/ogbN1ZaEHlAQ2u0aEJJcGNi3Bhj4sqF+F8okS0rXblw48qQEDUsTXzmvt5b+uO9lpa2t+F+Psmj997zLud7+/rtOe/0nPsCqKyh7J9axMGImE4RA2l+saweeeHQwvMe/fre+eyRotl86ecUKT9WPD/lX/vzk3sj4ttvUhzoWl3vzNyNyxONxtT1fH9k9sr0yMzcjaOXrkxcnLo4dXXsf2OnTp44eWr02Kau62abY2dvv/n2wAfjr37x2W9p9MsfxlOcjufzJy69jq0yFEOt70laXdR/aqsrK0lX/nOy9CVO9RIDYkOK1687Iv4WA9EVj1+8gXj/hVKDA7ZVM0U0gYpK8h8qqugHFO/tV74PrpXSKwF2wsMzCwMAq/O/vjA2GL2tsYG9j1IsHdZJEbG5kbnl9kXE/Xvjty/cG78d2zQOB7Q3fysi/t4u/1Mr/wejNwZb+V9blv9Zv+Bc/jU7/uIm6185VCz/Yecs5H/vmvkfHfL/tSX5//om6x96vPlG37L879vsJQEAAAAAAEBl3T0TEf9t9/f/2uL8n2gz/6c/Ik5vQf1DK/ZX//2/9mALqgHaeHgm4rm2839rxezfwa5860+t+QDd6cKlxtSxiPhzRByJ7j3Z/ugadRz98MCnncqG8vl/xSOr/34+FzCP40F9z/JzJidmJ572uoGIh7ci/tF2/m9abP9Tm/Y/+30w/YR1HPj3nXOdytbPf2C7ND+PONy2/X9814q09v05Rlr9gZGiV7DaP9/96KtO9W82/91iAp5e1v7vXTv/B9PS+/XMbLyO43P1Zqeyzfb/e9LLrVvO9OTH3pmYnb0+GtGTznZlR5cdH9t4zPAsKvKhyJcs/4/8a+3xvxRRX9n/74uI+RX/d/pl+Zriwl9/7/+xUzz6/1CeLP8nN9T+b3xj7M7g153qf7L2/0SrrT+SHzH+Bws+KdK0Z/nxNulYb1e00/ECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLOgFhH7ItWGF7drteHhiP6I+EvsrTWuzcz+58K1t65OZmWtz/+vFZ/0O7Cwn4rP/x9csj+2Yv94ROyPiI+7+lr7w+evNSbLvngAAAAAAAAAAAAAAAAAAADYJfo7rP/P/NRVdnTAtquXHQBQmjb5/10ZcQA7T/sP1SX/obrkP1SX/Ifqkv9QXfIfqkv+Q3XJfwAAAAAAeKbsP3T3+xQR8//vaz0yPXlZd6mRAdutVnYAQGnc4geqy9QfqC7v8YG0Tnlvx5PWO3Mt0+ef4mQAAAAAAAAAAAAAqJzDB63/h6qy/h+qy/p/qK5i/f+hkuMAdp73+ECss5K/7fr/dc8CAAAAAAAAAAAAALbSzNyNyxONxtR1G6/sjjB2cqPZbN7MfgpWF6VdEuEaG8XStd0ST2OqmAq/W+JZsVF8w57srHJ+HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKv9EQAA//+/kiDt") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) fallocate(r0, 0x0, 0xb7d4, 0x1001f0) 516.098895ms ago: executing program 3 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) 515.713285ms ago: executing program 4 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000) 511.495325ms ago: executing program 3 (id=1310): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$UHID_CREATE2(r0, 0x0, 0x1b) 440.186941ms ago: executing program 4 (id=1312): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) fcntl$setpipe(r0, 0x407, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) 439.861031ms ago: executing program 3 (id=1314): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 429.528931ms ago: executing program 2 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) 380.155589ms ago: executing program 3 (id=1318): pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x25a5, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) 379.928089ms ago: executing program 2 (id=1319): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 379.610859ms ago: executing program 2 (id=1321): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a32"], 0x2d4}}, 0x4048010) 342.960677ms ago: executing program 5 (id=1322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0x14, 0x30, 0x25}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 316.916436ms ago: executing program 5 (id=1323): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 286.604574ms ago: executing program 4 (id=1324): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) 160.128988ms ago: executing program 5 (id=1325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x2040400) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x7f, 0x1800}], 0x1, 0x0) unshare(0x60400) 159.891778ms ago: executing program 0 (id=1326): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 159.769178ms ago: executing program 2 (id=1327): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x64000600) 85.491845ms ago: executing program 4 (id=1328): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 62.472173ms ago: executing program 2 (id=1329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r1) 16.131791ms ago: executing program 5 (id=1330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000d00850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 15.991221ms ago: executing program 5 (id=1331): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000013c0)=[{0x200000000006, 0x2, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x1, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)=""/161) 104.17µs ago: executing program 5 (id=1332): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setns(r1, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): [ 20.183790][ T29] audit: type=1400 audit(1738069041.138:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 25.922055][ T29] audit: type=1400 audit(1738069046.878:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.922838][ T3287] cgroup: Unknown subsys name 'net' [ 25.944769][ T29] audit: type=1400 audit(1738069046.878:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.972207][ T29] audit: type=1400 audit(1738069046.908:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.086696][ T3287] cgroup: Unknown subsys name 'cpuset' [ 26.092769][ T3287] cgroup: Unknown subsys name 'rlimit' [ 26.221184][ T29] audit: type=1400 audit(1738069047.178:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.244466][ T29] audit: type=1400 audit(1738069047.178:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.265003][ T29] audit: type=1400 audit(1738069047.178:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.285493][ T29] audit: type=1400 audit(1738069047.178:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.291472][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.305863][ T29] audit: type=1400 audit(1738069047.178:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.339226][ T29] audit: type=1400 audit(1738069047.178:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.362478][ T29] audit: type=1400 audit(1738069047.268:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.391470][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.420411][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 27.432589][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 27.447730][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.544722][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.551897][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.559307][ T3297] bridge_slave_0: entered allmulticast mode [ 27.565704][ T3297] bridge_slave_0: entered promiscuous mode [ 27.573959][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.581093][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.588238][ T3297] bridge_slave_1: entered allmulticast mode [ 27.594714][ T3297] bridge_slave_1: entered promiscuous mode [ 27.600858][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.608052][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.615112][ T3296] bridge_slave_0: entered allmulticast mode [ 27.621444][ T3296] bridge_slave_0: entered promiscuous mode [ 27.633513][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 27.647708][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.654769][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.662074][ T3296] bridge_slave_1: entered allmulticast mode [ 27.668474][ T3296] bridge_slave_1: entered promiscuous mode [ 27.674442][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.681514][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.688737][ T3307] bridge_slave_0: entered allmulticast mode [ 27.695268][ T3307] bridge_slave_0: entered promiscuous mode [ 27.710204][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.723866][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.730939][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.738052][ T3307] bridge_slave_1: entered allmulticast mode [ 27.744433][ T3307] bridge_slave_1: entered promiscuous mode [ 27.753842][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.797939][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.814390][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.830102][ T3297] team0: Port device team_slave_0 added [ 27.836591][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.846587][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.859785][ T3297] team0: Port device team_slave_1 added [ 27.869041][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.907047][ T3296] team0: Port device team_slave_0 added [ 27.912819][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.919833][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.945797][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.959303][ T3307] team0: Port device team_slave_0 added [ 27.969443][ T3296] team0: Port device team_slave_1 added [ 27.975310][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.982425][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.989613][ T3299] bridge_slave_0: entered allmulticast mode [ 27.995955][ T3299] bridge_slave_0: entered promiscuous mode [ 28.002459][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.009475][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.035520][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.052727][ T3307] team0: Port device team_slave_1 added [ 28.067387][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.074476][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.081961][ T3299] bridge_slave_1: entered allmulticast mode [ 28.088509][ T3299] bridge_slave_1: entered promiscuous mode [ 28.104826][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.122107][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.129162][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.155067][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.171616][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.191243][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.198240][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.224235][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.246873][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.253837][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.279781][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.295213][ T3297] hsr_slave_0: entered promiscuous mode [ 28.301111][ T3297] hsr_slave_1: entered promiscuous mode [ 28.307610][ T3299] team0: Port device team_slave_0 added [ 28.318119][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.325064][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.351065][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.374082][ T3299] team0: Port device team_slave_1 added [ 28.380081][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.387191][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.394287][ T3305] bridge_slave_0: entered allmulticast mode [ 28.400703][ T3305] bridge_slave_0: entered promiscuous mode [ 28.407525][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.414565][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.421986][ T3305] bridge_slave_1: entered allmulticast mode [ 28.428520][ T3305] bridge_slave_1: entered promiscuous mode [ 28.440630][ T3296] hsr_slave_0: entered promiscuous mode [ 28.446676][ T3296] hsr_slave_1: entered promiscuous mode [ 28.452437][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.460016][ T3296] Cannot create hsr debugfs directory [ 28.492922][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.502316][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.509322][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.535374][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.561359][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.570745][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.577719][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.603703][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.617042][ T3307] hsr_slave_0: entered promiscuous mode [ 28.622993][ T3307] hsr_slave_1: entered promiscuous mode [ 28.628761][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.636358][ T3307] Cannot create hsr debugfs directory [ 28.671824][ T3305] team0: Port device team_slave_0 added [ 28.691656][ T3299] hsr_slave_0: entered promiscuous mode [ 28.697794][ T3299] hsr_slave_1: entered promiscuous mode [ 28.703527][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.711095][ T3299] Cannot create hsr debugfs directory [ 28.717300][ T3305] team0: Port device team_slave_1 added [ 28.755947][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.762962][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.788996][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.808325][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.815284][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.841207][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.935149][ T3305] hsr_slave_0: entered promiscuous mode [ 28.941088][ T3305] hsr_slave_1: entered promiscuous mode [ 28.946866][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.954422][ T3305] Cannot create hsr debugfs directory [ 28.965141][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.981865][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.992549][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.003371][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.021601][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.039119][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.047739][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.067855][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.093059][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.101760][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.112170][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.126535][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.170327][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.179040][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.196568][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.205617][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.215191][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.225132][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.233993][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.249557][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.288487][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.295857][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.302913][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.320582][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.329742][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.343082][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.354752][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.361824][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.371615][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.395524][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.402691][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.418487][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.425557][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.433894][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.441038][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.457723][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.469458][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.488420][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.500673][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.512606][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.519685][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.528492][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.535553][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.553608][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.560731][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.575889][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.582965][ T1354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.599589][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.622930][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.649117][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.659623][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.678066][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.706777][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.713841][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.722470][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.729527][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.770585][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.793089][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.837934][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.879717][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.910910][ T3307] veth0_vlan: entered promiscuous mode [ 29.933857][ T3307] veth1_vlan: entered promiscuous mode [ 29.971794][ T3307] veth0_macvtap: entered promiscuous mode [ 29.984395][ T3299] veth0_vlan: entered promiscuous mode [ 29.995496][ T3307] veth1_macvtap: entered promiscuous mode [ 30.003424][ T3297] veth0_vlan: entered promiscuous mode [ 30.013401][ T3299] veth1_vlan: entered promiscuous mode [ 30.022340][ T3296] veth0_vlan: entered promiscuous mode [ 30.033140][ T3297] veth1_vlan: entered promiscuous mode [ 30.041617][ T3296] veth1_vlan: entered promiscuous mode [ 30.063490][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.073895][ T3299] veth0_macvtap: entered promiscuous mode [ 30.085035][ T3305] veth0_vlan: entered promiscuous mode [ 30.091322][ T3296] veth0_macvtap: entered promiscuous mode [ 30.099677][ T3296] veth1_macvtap: entered promiscuous mode [ 30.111717][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.120349][ T3299] veth1_macvtap: entered promiscuous mode [ 30.128193][ T3297] veth0_macvtap: entered promiscuous mode [ 30.135472][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.144393][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.153176][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.161962][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.173411][ T3305] veth1_vlan: entered promiscuous mode [ 30.179962][ T3297] veth1_macvtap: entered promiscuous mode [ 30.190481][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.201160][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.211484][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.227585][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.238096][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.249219][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.258471][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.269074][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.278909][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.289323][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.300123][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.312447][ T3305] veth0_macvtap: entered promiscuous mode [ 30.320388][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.329286][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.338039][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.346893][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.360713][ T3305] veth1_macvtap: entered promiscuous mode [ 30.368478][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.378945][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.388763][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.399207][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.409696][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.426167][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.436641][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.446469][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.456887][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.466788][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.477240][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.488955][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.489008][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.511762][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.520594][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.529289][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.537992][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.548598][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.559072][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.568922][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.579509][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.589399][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.599896][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.609768][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.620181][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.630712][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.644742][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.655399][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.665262][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.675694][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.685560][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.696016][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.709355][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.722844][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.733341][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.743561][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.754035][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.763871][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.774399][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.784213][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.794769][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.805111][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.815454][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.824308][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.833075][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.841939][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.854466][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.863321][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.872161][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.880920][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.984880][ T3449] serio: Serial port ptm0 [ 31.003905][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 31.003918][ T29] audit: type=1400 audit(1738069051.958:136): avc: denied { setopt } for pid=3450 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.100088][ T29] audit: type=1400 audit(1738069051.988:137): avc: denied { bind } for pid=3450 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.119155][ T29] audit: type=1400 audit(1738069051.988:138): avc: denied { name_bind } for pid=3450 comm="syz.0.8" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 31.125468][ T3464] loop3: detected capacity change from 0 to 1024 [ 31.140665][ T29] audit: type=1400 audit(1738069051.988:139): avc: denied { node_bind } for pid=3450 comm="syz.0.8" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 31.167572][ T29] audit: type=1326 audit(1738069051.998:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 31.190795][ T29] audit: type=1326 audit(1738069051.998:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 31.213948][ T29] audit: type=1326 audit(1738069052.058:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 31.237063][ T29] audit: type=1326 audit(1738069052.058:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 31.260517][ T29] audit: type=1326 audit(1738069052.058:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 31.299078][ T29] audit: type=1326 audit(1738069052.158:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 31.304751][ T3464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.419899][ T3454] syz.0.8 (3454) used greatest stack depth: 10880 bytes left [ 31.430166][ T3464] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 31.459247][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.634791][ T3496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 31.647393][ T3498] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.682406][ T3498] ip6tnl1: entered promiscuous mode [ 31.687724][ T3498] ip6tnl1: entered allmulticast mode [ 31.740966][ T3502] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 31.780390][ T3502] syz.2.25 (3502) used greatest stack depth: 10280 bytes left [ 31.838427][ T3512] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 31.868081][ T3514] netem: change failed [ 31.957061][ T3520] loop1: detected capacity change from 0 to 2048 [ 31.998993][ T3520] EXT4-fs: Ignoring removed bh option [ 32.008165][ T3523] loop2: detected capacity change from 0 to 2048 [ 32.020327][ T3523] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.046702][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.166544][ T3530] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.196168][ T3530] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 32.208684][ T3530] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.208684][ T3530] [ 32.218413][ T3530] EXT4-fs (loop1): Total free blocks count 0 [ 32.224400][ T3530] EXT4-fs (loop1): Free/Dirty block details [ 32.230375][ T3530] EXT4-fs (loop1): free_blocks=2415919104 [ 32.236133][ T3530] EXT4-fs (loop1): dirty_blocks=208 [ 32.241443][ T3530] EXT4-fs (loop1): Block reservation details [ 32.247472][ T3530] EXT4-fs (loop1): i_reserved_data_blocks=13 [ 32.258902][ T3523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.333985][ T3523] Process accounting resumed [ 32.356389][ T40] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 234: padding at end of block bitmap is not set [ 32.380340][ T40] EXT4-fs (loop2): Remounting filesystem read-only [ 32.390293][ T3537] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 32.467836][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.468075][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 32.623134][ T3554] loop3: detected capacity change from 0 to 512 [ 32.640662][ T3556] SET target dimension over the limit! [ 32.654593][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.692867][ T3554] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.740317][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.875651][ T3600] bond1: entered promiscuous mode [ 32.881076][ T3600] bond1: entered allmulticast mode [ 32.888756][ T3600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.900344][ T3600] bond1 (unregistering): Released all slaves [ 32.906271][ T3601] loop3: detected capacity change from 0 to 4096 [ 32.952647][ T3611] loop4: detected capacity change from 0 to 2048 [ 32.969779][ T3611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.986133][ T3611] EXT4-fs (loop4): shut down requested (0) [ 32.989666][ T3616] smc: net device bond0 applied user defined pnetid SYZ2 [ 33.003476][ T3616] smc: net device bond0 erased user defined pnetid SYZ2 [ 33.058429][ T3620] loop3: detected capacity change from 0 to 8192 [ 33.064927][ T3620] ======================================================= [ 33.064927][ T3620] WARNING: The mand mount option has been deprecated and [ 33.064927][ T3620] and is ignored by this kernel. Remove the mand [ 33.064927][ T3620] option from the mount to silence this warning. [ 33.064927][ T3620] ======================================================= [ 33.101916][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.105539][ T3620] syz.3.72: attempt to access beyond end of device [ 33.105539][ T3620] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 33.125009][ T3620] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 33.132859][ T3620] FAT-fs (loop3): Filesystem has been set read-only [ 33.140370][ T3620] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 33.148702][ T3619] Falling back ldisc for ttyS3. [ 33.153837][ T3620] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 33.198817][ T3624] sd 0:0:1:0: device reset [ 33.236631][ T3633] syz_tun: entered promiscuous mode [ 33.242971][ T3633] batadv_slave_0: entered promiscuous mode [ 33.250609][ T3633] hsr1: entered allmulticast mode [ 33.255837][ T3633] syz_tun: entered allmulticast mode [ 33.261216][ T3633] batadv_slave_0: entered allmulticast mode [ 33.291512][ T3640] loop4: detected capacity change from 0 to 256 [ 33.581177][ T3662] loop3: detected capacity change from 0 to 256 [ 33.725852][ T3674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3674 comm=syz.1.98 [ 33.864928][ T3697] wireguard0: entered promiscuous mode [ 33.870651][ T3697] wireguard0: entered allmulticast mode [ 33.877453][ T3698] loop1: detected capacity change from 0 to 512 [ 33.887436][ T3698] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 33.895549][ T3698] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 33.906249][ T3698] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.110: bad orphan inode 13 [ 33.917692][ T3698] EXT4-fs (loop1): Remounting filesystem read-only [ 33.924313][ T3698] ext4_test_bit(bit=12, block=4) = 1 [ 33.929739][ T3698] is_bad_inode(inode)=0 [ 33.933900][ T3698] NEXT_ORPHAN(inode)=17694720 [ 33.938641][ T3698] max_ino=32 [ 33.941843][ T3698] i_nlink=0 [ 33.945663][ T3698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.958523][ T3698] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 33.965570][ T3698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.071905][ T3713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 34.148446][ T3722] loop1: detected capacity change from 0 to 1024 [ 34.169194][ T3722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.195658][ T3727] wireguard0: entered promiscuous mode [ 34.201355][ T3727] wireguard0: entered allmulticast mode [ 34.245484][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.267072][ T3731] loop1: detected capacity change from 0 to 512 [ 34.277965][ T3731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.296683][ T3731] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.330770][ T3735] smc: net device bond0 applied user defined pnetid SYZ0 [ 34.339266][ T3735] smc: net device bond0 erased user defined pnetid SYZ0 [ 34.393011][ T3738] netlink: '+}[@': attribute type 3 has an invalid length. [ 34.400431][ T3738] netlink: '+}[@': attribute type 3 has an invalid length. [ 34.410913][ T3738] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 34.483018][ T3742] wireguard0: entered promiscuous mode [ 34.488627][ T3742] wireguard0: entered allmulticast mode [ 34.675968][ T3747] Falling back ldisc for ttyS3. [ 34.764679][ T3757] netlink: 96 bytes leftover after parsing attributes in process `syz.4.133'. [ 34.808895][ T3711] syz.3.115 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 34.823102][ T3711] CPU: 0 UID: 0 PID: 3711 Comm: syz.3.115 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 34.823124][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.823136][ T3711] Call Trace: [ 34.823141][ T3711] [ 34.823147][ T3711] dump_stack_lvl+0xf2/0x150 [ 34.823181][ T3711] dump_stack+0x15/0x1a [ 34.823199][ T3711] dump_header+0x83/0x2d0 [ 34.823303][ T3711] oom_kill_process+0x341/0x4c0 [ 34.823326][ T3711] out_of_memory+0x9af/0xbe0 [ 34.823348][ T3711] ? css_next_descendant_pre+0x11c/0x140 [ 34.823381][ T3711] mem_cgroup_out_of_memory+0x13e/0x190 [ 34.823488][ T3711] try_charge_memcg+0x508/0x7f0 [ 34.823557][ T3711] obj_cgroup_charge_pages+0xbd/0x1a0 [ 34.823621][ T3711] __memcg_kmem_charge_page+0x9d/0x170 [ 34.823725][ T3711] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 34.823752][ T3711] alloc_pages_mpol+0xb4/0x260 [ 34.823784][ T3711] alloc_pages_noprof+0xe8/0x130 [ 34.823801][ T3711] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 34.823909][ T3711] __kvmalloc_node_noprof+0x121/0x170 [ 34.823929][ T3711] ? ip_set_alloc+0x1f/0x30 [ 34.823958][ T3711] ip_set_alloc+0x1f/0x30 [ 34.823984][ T3711] hash_netiface_create+0x273/0x730 [ 34.824049][ T3711] ? __nla_parse+0x40/0x60 [ 34.824069][ T3711] ? __pfx_hash_netiface_create+0x10/0x10 [ 34.824097][ T3711] ip_set_create+0x359/0x8a0 [ 34.824126][ T3711] ? strnstr+0xd0/0x100 [ 34.824175][ T3711] ? __nla_parse+0x40/0x60 [ 34.824194][ T3711] nfnetlink_rcv_msg+0x4a9/0x570 [ 34.824250][ T3711] netlink_rcv_skb+0x12c/0x230 [ 34.824268][ T3711] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 34.824295][ T3711] nfnetlink_rcv+0x16c/0x15d0 [ 34.824315][ T3711] ? kmem_cache_free+0xdc/0x2d0 [ 34.824395][ T3711] ? nlmon_xmit+0x51/0x60 [ 34.824463][ T3711] ? __kfree_skb+0x102/0x150 [ 34.824492][ T3711] ? consume_skb+0x49/0x160 [ 34.824515][ T3711] ? nlmon_xmit+0x51/0x60 [ 34.824577][ T3711] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 34.824606][ T3711] ? __dev_queue_xmit+0xb6e/0x2090 [ 34.824632][ T3711] ? ref_tracker_free+0x3a5/0x410 [ 34.824662][ T3711] ? __dev_queue_xmit+0x186/0x2090 [ 34.824696][ T3711] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 34.824716][ T3711] netlink_unicast+0x599/0x670 [ 34.824747][ T3711] netlink_sendmsg+0x5cc/0x6e0 [ 34.824815][ T3711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.824831][ T3711] __sock_sendmsg+0x140/0x180 [ 34.824850][ T3711] ____sys_sendmsg+0x312/0x410 [ 34.824950][ T3711] __sys_sendmsg+0x19d/0x230 [ 34.824976][ T3711] __x64_sys_sendmsg+0x46/0x50 [ 34.824990][ T3711] x64_sys_call+0x2734/0x2dc0 [ 34.825068][ T3711] do_syscall_64+0xc9/0x1c0 [ 34.825096][ T3711] ? clear_bhb_loop+0x55/0xb0 [ 34.825122][ T3711] ? clear_bhb_loop+0x55/0xb0 [ 34.825179][ T3711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.825208][ T3711] RIP: 0033:0x7f8f3e59cda9 [ 34.825224][ T3711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.825240][ T3711] RSP: 002b:00007f8f3cc07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.825297][ T3711] RAX: ffffffffffffffda RBX: 00007f8f3e7b5fa0 RCX: 00007f8f3e59cda9 [ 34.825320][ T3711] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 34.825333][ T3711] RBP: 00007f8f3e61e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 34.825342][ T3711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.825352][ T3711] R13: 0000000000000000 R14: 00007f8f3e7b5fa0 R15: 00007ffe35eb6f58 [ 34.825367][ T3711] [ 34.825374][ T3711] memory: usage 307200kB, limit 307200kB, failcnt 127 [ 35.177169][ T3711] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 35.185057][ T3711] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 35.192379][ T3711] Memory cgroup stats for /syz3: [ 35.193405][ T3711] cache 0 [ 35.201398][ T3711] rss 0 [ 35.204156][ T3711] shmem 0 [ 35.207131][ T3711] mapped_file 0 [ 35.210633][ T3711] dirty 0 [ 35.213740][ T3711] writeback 0 [ 35.217325][ T3711] workingset_refault_anon 54 [ 35.219819][ T3769] netlink: 'syz.4.140': attribute type 10 has an invalid length. [ 35.221898][ T3711] workingset_refault_file 0 [ 35.234301][ T3711] swap 188416 [ 35.237596][ T3711] swapcached 12288 [ 35.241301][ T3711] pgpgin 3480 [ 35.244672][ T3711] pgpgout 3477 [ 35.248052][ T3711] pgfault 5498 [ 35.251472][ T3711] pgmajfault 25 [ 35.254948][ T3711] inactive_anon 12288 [ 35.259046][ T3711] active_anon 0 [ 35.262564][ T3711] inactive_file 0 [ 35.266277][ T3711] active_file 0 [ 35.269721][ T3711] unevictable 0 [ 35.273154][ T3711] hierarchical_memory_limit 314572800 [ 35.278649][ T3711] hierarchical_memsw_limit 9223372036854771712 [ 35.284794][ T3711] total_cache 0 [ 35.288266][ T3711] total_rss 0 [ 35.291545][ T3711] total_shmem 0 [ 35.294982][ T3711] total_mapped_file 0 [ 35.299117][ T3711] total_dirty 0 [ 35.302578][ T3711] total_writeback 0 [ 35.306445][ T3711] total_workingset_refault_anon 54 [ 35.311541][ T3711] total_workingset_refault_file 0 [ 35.316584][ T3711] total_swap 188416 [ 35.320374][ T3711] total_swapcached 12288 [ 35.324592][ T3711] total_pgpgin 3480 [ 35.328471][ T3711] total_pgpgout 3477 [ 35.332392][ T3711] total_pgfault 5498 [ 35.336317][ T3711] total_pgmajfault 25 [ 35.340789][ T3711] total_inactive_anon 12288 [ 35.345318][ T3711] total_active_anon 0 [ 35.349353][ T3711] total_inactive_file 0 [ 35.353496][ T3711] total_active_file 0 [ 35.357495][ T3711] total_unevictable 0 [ 35.361463][ T3711] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.115,pid=3710,uid=0 [ 35.376267][ T3711] Memory cgroup out of memory: Killed process 3710 (syz.3.115) total-vm:95760kB, anon-rss:916kB, file-rss:22040kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 35.393815][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.394977][ T3710] syz.3.115 (3710) used greatest stack depth: 9912 bytes left [ 35.410410][ T3729] syz.3.115 (3729) used greatest stack depth: 9744 bytes left [ 35.413179][ T3769] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 35.509608][ T3773] wireguard0: entered promiscuous mode [ 35.515099][ T3773] wireguard0: entered allmulticast mode [ 35.543840][ T3778] loop4: detected capacity change from 0 to 128 [ 35.553414][ T3778] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.566178][ T3778] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.615133][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.720707][ T3787] netlink: 68 bytes leftover after parsing attributes in process `syz.4.146'. [ 35.745509][ T3791] loop2: detected capacity change from 0 to 1024 [ 35.808571][ T3791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.835837][ T3791] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.985123][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 35.996493][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.008472][ T3806] loop1: detected capacity change from 0 to 512 [ 36.022399][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 36.022412][ T29] audit: type=1400 audit(1738069056.978:478): avc: denied { setopt } for pid=3807 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.051476][ T3806] EXT4-fs (loop1): too many log groups per flexible block group [ 36.059191][ T3806] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 36.066290][ T3806] EXT4-fs (loop1): mount failed [ 36.071314][ T29] audit: type=1400 audit(1738069057.028:479): avc: denied { map } for pid=3807 comm="syz.4.156" path="socket:[6169]" dev="sockfs" ino=6169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.094420][ T29] audit: type=1400 audit(1738069057.028:480): avc: denied { read } for pid=3807 comm="syz.4.156" path="socket:[6169]" dev="sockfs" ino=6169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.096414][ T3711] syz.3.115 (3711) used greatest stack depth: 7088 bytes left [ 36.183643][ T29] audit: type=1400 audit(1738069057.138:481): avc: denied { mount } for pid=3815 comm="syz.4.159" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.218352][ T3818] wireguard0: entered promiscuous mode [ 36.224092][ T3818] wireguard0: entered allmulticast mode [ 36.257652][ T29] audit: type=1400 audit(1738069057.198:482): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.279994][ T29] audit: type=1400 audit(1738069057.238:483): avc: denied { watch watch_reads } for pid=3824 comm="syz.4.162" path="/41" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.334028][ T29] audit: type=1400 audit(1738069057.288:484): avc: denied { write } for pid=3828 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.354366][ T29] audit: type=1400 audit(1738069057.288:485): avc: denied { nlmsg_write } for pid=3828 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.375025][ T29] audit: type=1400 audit(1738069057.288:486): avc: denied { module_request } for pid=3828 comm="syz.0.164" kmod="crypto-authenc(digest_null,ecb(cipher_null))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.418591][ T29] audit: type=1400 audit(1738069057.368:487): avc: denied { read } for pid=3834 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.476157][ T3840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 36.487820][ T3846] 9pnet_fd: Insufficient options for proto=fd [ 36.518041][ T3845] loop3: detected capacity change from 0 to 512 [ 36.525123][ T3845] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 36.546845][ T3854] geneve2: entered promiscuous mode [ 36.548431][ T3845] vhci_hcd: default hub control req: 6008 v0000 i0006 l0 [ 36.552084][ T3854] geneve2: entered allmulticast mode [ 36.602523][ T3862] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 36.612625][ T3859] process 'syz.0.177' launched '/dev/fd/5' with NULL argv: empty string added [ 36.667451][ T3868] loop1: detected capacity change from 0 to 1024 [ 36.700835][ T3868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.723579][ T3868] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.752078][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.813364][ T3900] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 36.847877][ T3904] loop3: detected capacity change from 0 to 128 [ 36.857323][ T3904] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.869721][ T3904] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.894306][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.922780][ T3913] loop3: detected capacity change from 0 to 1024 [ 36.938783][ T3913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.951892][ T3913] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.980593][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.109047][ T3940] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 37.117251][ T3940] veth1_macvtap: left promiscuous mode [ 37.136632][ T3940] batman_adv: batadv0: Adding interface: macsec0 [ 37.143043][ T3940] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.168392][ T3940] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 37.181610][ T3944] bond0: entered promiscuous mode [ 37.186768][ T3944] bond_slave_0: entered promiscuous mode [ 37.192611][ T3944] bond_slave_1: entered promiscuous mode [ 37.198431][ T3944] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 37.249522][ T3957] 9pnet: p9_errstr2errno: server reported unknown error @ [ 37.378744][ T3984] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 37.424434][ T3984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 37.450562][ T3984] bond1: (slave bond2): making interface the new active one [ 37.458618][ T3984] bond1: (slave bond2): Enslaving as an active interface with an up link [ 37.507218][ T3998] netlink: 'syz.2.238': attribute type 15 has an invalid length. [ 37.518196][ T4002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4002 comm=+}[@ [ 37.530247][ T4002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4002 comm=+}[@ [ 37.569954][ T4007] loop3: detected capacity change from 0 to 164 [ 37.649501][ T4007] syz.3.244: attempt to access beyond end of device [ 37.649501][ T4007] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 37.681339][ T4007] syz.3.244: attempt to access beyond end of device [ 37.681339][ T4007] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.830707][ T4039] loop3: detected capacity change from 0 to 512 [ 37.858162][ T4039] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.897425][ T4039] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.259: iget: bad i_size value: -6917529027641081756 [ 37.934095][ T4039] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.259: couldn't read orphan inode 17 (err -117) [ 37.947836][ T4039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.979845][ T4047] loop4: detected capacity change from 0 to 512 [ 37.997110][ T4047] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.010275][ T4047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.032131][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.067932][ T4047] EXT4-fs (loop4): 1 truncate cleaned up [ 38.079621][ T4047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.114665][ T4060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 38.188162][ T4047] EXT4-fs (loop4): shut down requested (1) [ 38.258754][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.320464][ T4086] loop3: detected capacity change from 0 to 128 [ 38.329107][ T4085] syz.2.278 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.351907][ T4086] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.376258][ T4086] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.472960][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.574704][ T4129] netlink: 268 bytes leftover after parsing attributes in process `syz.2.292'. [ 38.596893][ T4133] sd 0:0:1:0: device reset [ 38.712530][ T4160] SELinux: Context is not valid (left unmapped). [ 38.760506][ T4171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.037099][ T4201] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 39.048308][ T4201] SELinux: failed to load policy [ 39.151489][ T4217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 39.160430][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 39.181819][ T4217] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 39.240733][ T4225] rdma_op ffff888102191580 conn xmit_rdma 0000000000000000 [ 39.399098][ T4253] loop4: detected capacity change from 0 to 1024 [ 39.408325][ T4254] netlink: 88 bytes leftover after parsing attributes in process `syz.1.343'. [ 39.417339][ T4254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.343'. [ 39.420313][ T4253] EXT4-fs: Ignoring removed orlov option [ 39.432094][ T4253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.458847][ T4253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.487521][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.511924][ T4259] loop3: detected capacity change from 0 to 128 [ 39.584338][ T4259] syz.3.349: attempt to access beyond end of device [ 39.584338][ T4259] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 39.692710][ T4279] loop3: detected capacity change from 0 to 512 [ 39.710225][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.723742][ T4279] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.751665][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.779702][ T4286] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 39.799042][ T4288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 39.806356][ T4288] IPv6: NLM_F_CREATE should be set when creating new route [ 39.813570][ T4288] IPv6: NLM_F_CREATE should be set when creating new route [ 39.820863][ T4288] IPv6: NLM_F_CREATE should be set when creating new route [ 40.116024][ T4314] Zero length message leads to an empty skb [ 40.307601][ T4354] loop3: detected capacity change from 0 to 512 [ 40.317009][ T4354] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.342163][ T3305] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 40.522420][ T4393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.408'. [ 40.591503][ T4409] loop2: detected capacity change from 0 to 128 [ 40.609341][ T4409] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.661123][ T4409] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.695458][ T4416] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 40.719795][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.805631][ T4435] loop4: detected capacity change from 0 to 8192 [ 41.065250][ T4457] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 41.088584][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 41.088620][ T29] audit: type=1400 audit(2000000004.389:849): avc: denied { unmount } for pid=4459 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.435816][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.444'. [ 41.494478][ T29] audit: type=1326 audit(2000000004.789:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.518409][ T29] audit: type=1326 audit(2000000004.789:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.541704][ T29] audit: type=1326 audit(2000000004.789:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.565046][ T29] audit: type=1326 audit(2000000004.789:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.588350][ T29] audit: type=1326 audit(2000000004.789:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.611679][ T29] audit: type=1326 audit(2000000004.789:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.634890][ T29] audit: type=1326 audit(2000000004.799:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.658200][ T29] audit: type=1326 audit(2000000004.799:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.667376][ T4479] netlink: 'syz.0.450': attribute type 2 has an invalid length. [ 41.689304][ T4479] netlink: 'syz.0.450': attribute type 2 has an invalid length. [ 41.693792][ T29] audit: type=1326 audit(2000000004.819:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4475 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 41.724082][ T4480] macvlan0: entered promiscuous mode [ 41.730354][ T4480] ipvlan0: entered promiscuous mode [ 41.749424][ T4480] ipvlan0: left promiscuous mode [ 41.758744][ T4480] macvlan0: left promiscuous mode [ 41.801243][ T4493] netlink: 88 bytes leftover after parsing attributes in process `syz.0.453'. [ 41.810287][ T4493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.453'. [ 41.870302][ T35] kernel write not supported for file /226/attr/sockcreate (pid: 35 comm: kworker/1:1) [ 41.967839][ T4516] syz.1.467 uses obsolete (PF_INET,SOCK_PACKET) [ 42.017471][ T4522] ebtables: ebtables: counters copy to user failed while replacing table [ 42.265455][ T4540] x_tables: unsorted underflow at hook 4 [ 42.309404][ T4544] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 42.419434][ T4568] Cannot find set identified by id 0 to match [ 42.472914][ T4572] loop2: detected capacity change from 0 to 2048 [ 42.535354][ T4572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.569638][ T4581] loop4: detected capacity change from 0 to 512 [ 42.587448][ T4581] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.624654][ T3297] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 42.655385][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.031029][ T4632] loop4: detected capacity change from 0 to 2048 [ 43.039191][ T4632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.058758][ T4632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.072355][ T4632] EXT4-fs error (device loop4): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.4.517: path /112/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 43.104863][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.184042][ T4646] loop4: detected capacity change from 0 to 512 [ 43.224115][ T4646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.244828][ T4646] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.273006][ T4659] __nla_validate_parse: 1 callbacks suppressed [ 43.273020][ T4659] netlink: 3 bytes leftover after parsing attributes in process `syz.2.527'. [ 43.289970][ T4659] 0X: renamed from caif0 [ 43.299325][ T4659] 0X: entered allmulticast mode [ 43.304579][ T4659] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 43.363294][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.518712][ T4677] loop3: detected capacity change from 0 to 512 [ 43.525353][ T4677] EXT4-fs: Ignoring removed orlov option [ 43.568190][ T4677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.596452][ T4677] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.608620][ T4677] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.623367][ T4677] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.536: bg 0: block 248: padding at end of block bitmap is not set [ 43.649267][ T4677] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.536: Failed to acquire dquot type 1 [ 43.692867][ T4687] xt_hashlimit: max too large, truncated to 1048576 [ 43.709467][ T4677] EXT4-fs (loop3): 1 truncate cleaned up [ 43.725626][ T4677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.779682][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.872047][ T4709] netlink: 'syz.4.551': attribute type 6 has an invalid length. [ 43.909359][ T4716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 43.958843][ T4722] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 44.016936][ T4728] ebtables: ebtables: counters copy to user failed while replacing table [ 44.170790][ T4744] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 44.509655][ T4777] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 44.544878][ T4785] netdevsim netdevsim4 netdevsim2: Unsupported IPsec algorithm [ 44.555877][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 44.563387][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.570857][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.578293][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.585800][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.593384][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.601029][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.608777][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.616258][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.623722][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.631284][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.638701][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.646108][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.653505][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.661026][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.668539][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.676262][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.683790][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.691229][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.698660][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.706151][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.713615][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.721056][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.728477][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.735997][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.743389][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.750945][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.758395][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.765961][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.773439][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.780845][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.788425][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.795840][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.803223][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.810627][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.818033][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.825404][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.832889][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.840397][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.847851][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.855228][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.863183][ T3376] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.955137][ T4811] loop2: detected capacity change from 0 to 8192 [ 44.989248][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 44.998322][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 45.007802][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 45.026678][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 45.035713][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 45.050317][ T4828] IPv6: Can't replace route, no match found [ 45.055349][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 45.081952][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 45.090887][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 45.199045][ T4855] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 45.255972][ T4861] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 45.297430][ T4875] xt_hashlimit: max too large, truncated to 1048576 [ 45.624840][ T4919] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.687362][ T4923] tipc: Started in network mode [ 45.692297][ T4923] tipc: Node identity 7, cluster identity 5 [ 45.698337][ T4923] tipc: Node number set to 7 [ 46.203108][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 46.203120][ T29] audit: type=1326 audit(2000000009.499:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.243966][ T29] audit: type=1326 audit(2000000009.499:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.267466][ T29] audit: type=1326 audit(2000000009.529:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.290792][ T29] audit: type=1326 audit(2000000009.529:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.314148][ T29] audit: type=1326 audit(2000000009.529:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.337592][ T29] audit: type=1326 audit(2000000009.529:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.360951][ T29] audit: type=1326 audit(2000000009.529:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.384447][ T29] audit: type=1326 audit(2000000009.529:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.407757][ T29] audit: type=1326 audit(2000000009.529:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 46.431160][ T29] audit: type=1326 audit(2000000009.529:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94c8cda9 code=0x7ffc0000 [ 47.177296][ T4977] 0X: renamed from caif0 [ 47.183479][ T4977] 0X: entered allmulticast mode [ 47.188855][ T4977] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 47.201356][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 47.212003][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.219510][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.227165][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.234739][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.242240][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.249792][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.257424][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.264988][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.272484][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.279998][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.287629][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.295386][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.302923][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.310357][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.317771][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.325155][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.332603][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.340118][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.347536][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.354911][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.362430][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.369839][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.377251][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.385072][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.392565][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.399991][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.407552][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.415024][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.422421][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.429827][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.437300][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.444674][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.452077][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.459491][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.466915][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.474288][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.481732][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.489137][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.496533][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.503949][ T1109] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.511845][ T1109] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 47.587831][ T5003] capability: warning: `syz.4.684' uses deprecated v2 capabilities in a way that may be insecure [ 47.631943][ T5010] loop3: detected capacity change from 0 to 512 [ 47.675249][ T5010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.696895][ T5010] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.749332][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.819563][ T5043] loop4: detected capacity change from 0 to 512 [ 47.834848][ T5043] EXT4-fs: Ignoring removed orlov option [ 47.843266][ T5048] loop2: detected capacity change from 0 to 512 [ 47.855520][ T5043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.862851][ T5054] loop3: detected capacity change from 0 to 512 [ 47.865704][ T5048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.893237][ T5043] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.905130][ T5054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.926242][ T5043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.926356][ T5054] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.933333][ T5043] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.701: bg 0: block 248: padding at end of block bitmap is not set [ 47.958893][ T5048] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.974596][ T5048] EXT4-fs (loop2): 1 truncate cleaned up [ 47.992369][ T5043] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.701: Failed to acquire dquot type 1 [ 48.004112][ T5048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.016447][ T5043] EXT4-fs (loop4): 1 truncate cleaned up [ 48.026124][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.048954][ T5043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.061607][ T5071] ebtables: ebtables: counters copy to user failed while replacing table [ 48.074868][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.129309][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.248030][ T5099] Process accounting resumed [ 48.611941][ T5141] netlink: 'syz.4.743': attribute type 4 has an invalid length. [ 48.633699][ T5143] veth1_to_bridge: entered allmulticast mode [ 48.640315][ T5143] veth1_to_bridge: left allmulticast mode [ 48.658852][ T5145] loop4: detected capacity change from 0 to 512 [ 48.665897][ T5145] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 48.689125][ T5147] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.696411][ T5147] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.703607][ T5147] bridge0: entered allmulticast mode [ 48.712710][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.719857][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.727207][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.734347][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.741856][ T5147] bridge0: entered promiscuous mode [ 49.114962][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.122214][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.123541][ C1] hrtimer: interrupt took 26699 ns [ 49.130061][ T5178] bridge0: entered allmulticast mode [ 49.143588][ T5176] SELinux: security_context_str_to_sid () failed with errno=-22 [ 49.182393][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.189492][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.196821][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.203942][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.212132][ T3378] IPVS: starting estimator thread 0... [ 49.218129][ T5178] bridge0: entered promiscuous mode [ 49.326143][ T5186] IPVS: using max 2496 ests per chain, 124800 per kthread [ 49.380198][ T5211] loop3: detected capacity change from 0 to 512 [ 49.388815][ T5211] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 49.427897][ T5214] __nla_validate_parse: 7 callbacks suppressed [ 49.427914][ T5214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.777'. [ 49.553603][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 49.562578][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 49.680996][ T5245] netlink: 'syz.4.792': attribute type 1 has an invalid length. [ 49.688843][ T5245] netlink: 'syz.4.792': attribute type 2 has an invalid length. [ 49.698217][ T5245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 49.752594][ T5252] loop4: detected capacity change from 0 to 512 [ 49.782519][ T5252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.798007][ T5252] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.855640][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.916585][ T5272] loop4: detected capacity change from 0 to 128 [ 49.923450][ T5272] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.958957][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.994743][ T5280] mmap: syz.4.807 (5280) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.002077][ T5276] loop2: detected capacity change from 0 to 8192 [ 50.046410][ T5276] loop2: p1 < > p2 < p5 > p3 p4 [ 50.053193][ T5284] loop3: detected capacity change from 0 to 2048 [ 50.060647][ T5276] loop2: p3 start 83890176 is beyond EOD, truncated [ 50.067347][ T5276] loop2: p4 size 16776960 extends beyond EOD, truncated [ 50.085314][ T5284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.085342][ T5276] loop2: p5 size 16776960 extends beyond EOD, truncated [ 50.118239][ T5284] EXT4-fs (loop3): shut down requested (1) [ 50.144260][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.256146][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 50.308824][ T5305] IPv6: Can't replace route, no match found [ 50.352476][ T5311] netlink: 96 bytes leftover after parsing attributes in process `syz.2.822'. [ 50.434001][ T5324] netlink: 'syz.4.828': attribute type 2 has an invalid length. [ 50.441841][ T5324] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 50.449509][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 50.549918][ T5341] batman_adv: batadv0: Adding interface: dummy0 [ 50.556292][ T5341] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.583015][ T5341] batman_adv: batadv0: Interface activated: dummy0 [ 50.593142][ T5341] batadv0: mtu less than device minimum [ 50.599168][ T5341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.609987][ T5341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.620974][ T5341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.631749][ T5341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.642461][ T5341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.653286][ T5341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.664285][ T5341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.679634][ T5343] IPv6: Can't replace route, no match found [ 50.896075][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 51.167313][ T5392] loop3: detected capacity change from 0 to 128 [ 51.213222][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 51.213235][ T29] audit: type=1400 audit(2000000014.509:1355): avc: denied { write } for pid=5395 comm="syz.3.861" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.270245][ T5396] hub 2-0:1.0: USB hub found [ 51.279512][ T5396] hub 2-0:1.0: 8 ports detected [ 51.322941][ T29] audit: type=1400 audit(2000000014.619:1356): avc: denied { read } for pid=5400 comm="syz.3.863" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.345628][ T29] audit: type=1400 audit(2000000014.619:1357): avc: denied { open } for pid=5400 comm="syz.3.863" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.468144][ T29] audit: type=1400 audit(2000000014.679:1358): avc: denied { create } for pid=5400 comm="syz.3.863" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.489481][ T29] audit: type=1400 audit(2000000014.679:1359): avc: denied { map } for pid=5400 comm="syz.3.863" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.513784][ T29] audit: type=1400 audit(2000000014.679:1360): avc: denied { read write } for pid=5400 comm="syz.3.863" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.538433][ T29] audit: type=1400 audit(2000000014.739:1361): avc: denied { read write } for pid=5403 comm="syz.3.864" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.561872][ T29] audit: type=1400 audit(2000000014.739:1362): avc: denied { open } for pid=5403 comm="syz.3.864" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.622933][ T29] audit: type=1400 audit(2000000014.919:1363): avc: denied { ioctl } for pid=5411 comm="syz.1.868" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.684778][ T29] audit: type=1400 audit(2000000014.979:1364): avc: denied { open } for pid=5415 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.845331][ T5425] netlink: 'syz.3.874': attribute type 3 has an invalid length. [ 51.932129][ T5436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 52.018700][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 52.027767][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 52.090560][ T5464] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 52.183611][ T5475] loop2: detected capacity change from 0 to 2048 [ 52.199403][ T5475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.242302][ T5475] EXT4-fs (loop2): shut down requested (1) [ 52.269250][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.324141][ T5506] netlink: 'syz.2.908': attribute type 13 has an invalid length. [ 52.331987][ T5506] netlink: 152 bytes leftover after parsing attributes in process `syz.2.908'. [ 52.349992][ T5506] syz_tun: refused to change device tx_queue_len [ 52.356406][ T5506] net_ratelimit: 13 callbacks suppressed [ 52.356417][ T5506] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 52.432017][ T5517] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 52.441899][ T5516] IPVS: stopping master sync thread 5517 ... [ 52.470907][ T5521] netlink: 92 bytes leftover after parsing attributes in process `syz.3.917'. [ 52.530740][ T5532] loop2: detected capacity change from 0 to 256 [ 52.631486][ T5515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.648688][ T5515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.695968][ T5554] bridge_slave_1: left allmulticast mode [ 52.701705][ T5554] bridge_slave_1: left promiscuous mode [ 52.707485][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.724970][ T5554] bridge_slave_0: left allmulticast mode [ 52.730696][ T5554] bridge_slave_0: left promiscuous mode [ 52.736561][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.942258][ T5575] tipc: Started in network mode [ 52.947359][ T5575] tipc: Node identity 7, cluster identity 5 [ 52.953323][ T5575] tipc: Node number set to 7 [ 52.961214][ T5578] loop3: detected capacity change from 0 to 512 [ 52.969813][ T5578] EXT4-fs: Ignoring removed oldalloc option [ 52.977508][ T5578] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.012766][ T5578] EXT4-fs (loop3): 1 truncate cleaned up [ 53.026133][ T5578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.062824][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.246016][ T5628] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 53.280950][ T5634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.293022][ T5636] capability: warning: `syz.4.967' uses 32-bit capabilities (legacy support in use) [ 53.329848][ T5634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.389861][ T5644] hub 2-0:1.0: USB hub found [ 53.394563][ T5644] hub 2-0:1.0: 8 ports detected [ 53.411363][ T5634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.473194][ T5634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.539474][ T5634] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.550967][ T5634] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.561310][ T5646] vxcan0: entered allmulticast mode [ 53.571635][ T5634] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.583137][ T5634] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.753603][ T5677] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.762443][ T5677] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.771172][ T5677] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.779890][ T5677] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.788755][ T5677] vxlan0: entered promiscuous mode [ 53.950132][ T5696] loop4: detected capacity change from 0 to 512 [ 53.956773][ T5696] EXT4-fs: inline encryption not supported [ 53.967986][ T5696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.980734][ T5696] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.000176][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.087009][ T5706] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 54.103061][ T5708] tipc: Started in network mode [ 54.108121][ T5708] tipc: Node identity 7, cluster identity 5 [ 54.114135][ T5708] tipc: Node number set to 7 [ 54.141122][ T5712] loop4: detected capacity change from 0 to 128 [ 54.152435][ T5712] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.182149][ T5712] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.229460][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.267890][ T5725] SELinux: policydb version 256 does not match my version range 15-34 [ 54.277448][ T5725] SELinux: failed to load policy [ 54.375145][ T5737] loop4: detected capacity change from 0 to 1024 [ 54.386883][ T5737] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.398293][ T5737] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.406446][ T5737] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.413468][ T5737] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 54.423420][ T5737] EXT4-fs (loop4): Remounting filesystem read-only [ 54.430173][ T5737] EXT4-fs (loop4): 1 orphan inode deleted [ 54.436904][ T5737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.449077][ T5737] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 54.456006][ T5737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.548566][ T5750] batman_adv: batadv0: Interface deactivated: dummy0 [ 54.555310][ T5750] batman_adv: batadv0: Removing interface: dummy0 [ 54.573506][ T5750] bond0: (slave bond_slave_0): Releasing backup interface [ 54.586245][ T5750] bond0: (slave bond_slave_1): Releasing backup interface [ 54.598994][ T5750] team0: Port device team_slave_0 removed [ 54.613978][ T5750] team0: Port device team_slave_1 removed [ 54.621034][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.628714][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.637772][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.645182][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.233940][ T5781] loop2: detected capacity change from 0 to 128 [ 55.258994][ T5781] syz.2.1029: attempt to access beyond end of device [ 55.258994][ T5781] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 55.296339][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.403144][ T3378] kernel write not supported for file bpf-prog (pid: 3378 comm: kworker/0:4) [ 55.414709][ T5793] __nla_validate_parse: 8 callbacks suppressed [ 55.414723][ T5793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1037'. [ 55.579392][ T5814] loop2: detected capacity change from 0 to 8192 [ 55.603623][ T5823] loop4: detected capacity change from 0 to 512 [ 55.622017][ T5823] EXT4-fs: dax option not supported [ 55.623677][ T5814] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 55.635799][ T5814] FAT-fs (loop2): Filesystem has been set read-only [ 55.692815][ T5827] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1050'. [ 55.799069][ T5833] loop3: detected capacity change from 0 to 2048 [ 55.805786][ T5833] EXT4-fs: Ignoring removed bh option [ 55.847966][ T5833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.936974][ T28] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 55.964384][ T5832] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.019470][ T5832] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 16 with error 28 [ 56.031986][ T5832] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.031986][ T5832] [ 56.041698][ T5832] EXT4-fs (loop3): Total free blocks count 0 [ 56.047712][ T5832] EXT4-fs (loop3): Free/Dirty block details [ 56.053650][ T5832] EXT4-fs (loop3): free_blocks=2415919104 [ 56.059412][ T5832] EXT4-fs (loop3): dirty_blocks=16 [ 56.064515][ T5832] EXT4-fs (loop3): Block reservation details [ 56.070504][ T5832] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 56.175026][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.202010][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 56.210942][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 56.219839][ T5874] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1067'. [ 56.241536][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 56.241548][ T29] audit: type=1326 audit(2000000019.539:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 56.335940][ T29] audit: type=1326 audit(2000000019.569:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 56.379925][ T29] audit: type=1400 audit(2000000019.659:1564): avc: denied { watch watch_reads } for pid=5881 comm="syz.2.1069" path="/216" dev="tmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.445158][ T29] audit: type=1326 audit(2000000019.719:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f3e538fa9 code=0x7ffc0000 [ 56.468526][ T29] audit: type=1326 audit(2000000019.719:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 56.491992][ T29] audit: type=1326 audit(2000000019.719:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5875 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 56.533129][ T29] audit: type=1326 audit(2000000019.819:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 56.556698][ T29] audit: type=1326 audit(2000000019.819:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 56.580359][ T29] audit: type=1326 audit(2000000019.829:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 56.603780][ T29] audit: type=1326 audit(2000000019.829:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5890 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 56.681042][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 56.690097][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 56.741111][ T5912] Cannot find del_set index 0 as target [ 56.847238][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.855849][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.885208][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 56.929756][ T5942] loop4: detected capacity change from 0 to 512 [ 56.976510][ T5942] journal_path: Non-blockdev passed as './bus' [ 56.982715][ T5942] EXT4-fs: error: could not find journal device path [ 57.124511][ T5961] serio: Serial port ptm0 [ 57.330272][ T5976] loop4: detected capacity change from 0 to 1024 [ 57.387565][ T5976] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.398620][ T5976] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.427275][ T5984] loop7: detected capacity change from 0 to 16384 [ 57.444077][ T5976] JBD2: no valid journal superblock found [ 57.449907][ T5976] EXT4-fs (loop4): Could not load journal inode [ 57.583820][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.593669][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.602663][ T5985] loop7: detected capacity change from 16384 to 16383 [ 57.648194][ T5988] loop4: detected capacity change from 0 to 128 [ 57.677299][ T5988] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.718186][ T5988] ext4 filesystem being mounted at /286/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.835357][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.862801][ T5992] chnl_net:caif_netlink_parms(): no params data found [ 57.911718][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.918853][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.927715][ T5992] bridge_slave_0: entered allmulticast mode [ 57.934114][ T5992] bridge_slave_0: entered promiscuous mode [ 57.942525][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.949671][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.958517][ T5992] bridge_slave_1: entered allmulticast mode [ 57.964975][ T5992] bridge_slave_1: entered promiscuous mode [ 57.983072][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.993540][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.013687][ T5992] team0: Port device team_slave_0 added [ 58.021569][ T5992] team0: Port device team_slave_1 added [ 58.039083][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.046158][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.072175][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.083352][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.090325][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.116333][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.143335][ T5992] hsr_slave_0: entered promiscuous mode [ 58.150009][ T5992] hsr_slave_1: entered promiscuous mode [ 58.156833][ T5992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.164423][ T5992] Cannot create hsr debugfs directory [ 58.230222][ T5992] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.240300][ T5992] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.249028][ T5992] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.260783][ T5992] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.288788][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.295904][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.303259][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.310500][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.329497][ T6027] devtmpfs: Unknown parameter 'posixacl' [ 58.367277][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.380747][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.395490][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.426162][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.433631][ T6034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1133'. [ 58.464360][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.471457][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.493015][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.500125][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.577559][ T3376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 58.606385][ T6049] loop4: detected capacity change from 0 to 512 [ 58.610376][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.641880][ T6053] loop2: detected capacity change from 0 to 128 [ 58.655212][ T6053] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.656145][ T6049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.681362][ T6053] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.686156][ T6049] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.713651][ T28] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.837571][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.848125][ T5992] veth0_vlan: entered promiscuous mode [ 58.856328][ T5992] veth1_vlan: entered promiscuous mode [ 58.893612][ T5992] veth0_macvtap: entered promiscuous mode [ 58.914889][ T5992] veth1_macvtap: entered promiscuous mode [ 58.930593][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.941310][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.951372][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.961911][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.971834][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.982327][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.992202][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.002644][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.013800][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.026996][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.037540][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.047535][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.058306][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.068348][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.078832][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.088672][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.099352][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.112696][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.122845][ T5992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.131608][ T5992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.140508][ T5992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.149389][ T5992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.522649][ T6148] Cannot find add_set index 0 as target [ 59.564865][ T6158] bond1: entered promiscuous mode [ 59.570062][ T6158] bond1: entered allmulticast mode [ 59.595841][ T6158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.608018][ T6158] bond1 (unregistering): Released all slaves [ 59.653188][ T6168] syzkaller1: entered promiscuous mode [ 59.658855][ T6168] syzkaller1: entered allmulticast mode [ 59.685394][ T6173] block device autoloading is deprecated and will be removed. [ 59.701243][ T6173] syz.3.1188: attempt to access beyond end of device [ 59.701243][ T6173] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 59.793640][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1195'. [ 59.818328][ T6190] loop2: detected capacity change from 0 to 512 [ 59.872752][ T6190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.907001][ T6190] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.976238][ T6203] vhci_hcd: invalid port number 97 [ 59.981405][ T6203] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 60.047072][ T6219] loop2: detected capacity change from 0 to 512 [ 60.052151][ T6227] serio: Serial port ptm0 [ 60.054745][ T6219] journal_path: Non-blockdev passed as './bus' [ 60.064026][ T6219] EXT4-fs: error: could not find journal device path [ 60.158378][ T6236] loop5: detected capacity change from 0 to 8192 [ 60.195260][ T6236] syz.5.1216: attempt to access beyond end of device [ 60.195260][ T6236] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 60.225630][ T6236] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 60.233644][ T6236] FAT-fs (loop5): Filesystem has been set read-only [ 60.253639][ T6236] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 60.266278][ T6236] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 60.354183][ T6259] loop5: detected capacity change from 0 to 256 [ 60.497315][ T3378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.508683][ T28] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.596652][ T6287] bridge_slave_0: left allmulticast mode [ 60.602415][ T6287] bridge_slave_0: left promiscuous mode [ 60.608123][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.638709][ T6287] bridge_slave_1: left allmulticast mode [ 60.644378][ T6287] bridge_slave_1: left promiscuous mode [ 60.650039][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.678992][ T6287] bond0: (slave bond_slave_0): Releasing backup interface [ 60.691521][ T6287] bond_slave_0: left promiscuous mode [ 60.714456][ T6287] bond0: (slave bond_slave_1): Releasing backup interface [ 60.732663][ T6290] loop2: detected capacity change from 0 to 2048 [ 60.740106][ T6287] bond_slave_1: left promiscuous mode [ 60.769253][ T6287] team0: Port device team_slave_0 removed [ 60.808695][ T6287] team0: Port device team_slave_1 removed [ 60.824126][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.831738][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.878586][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.886120][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.931563][ T6287] bond0: (slave netdevsim1): Releasing backup interface [ 60.949316][ T6287] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 61.005510][ T6298] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 61.136130][ T3321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.211070][ T6311] loop2: detected capacity change from 0 to 2048 [ 61.246159][ T6311] EXT4-fs: Ignoring removed bh option [ 61.316323][ T6327] xt_hashlimit: max too large, truncated to 1048576 [ 61.381060][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 61.381075][ T29] audit: type=1400 audit(2000000024.679:1701): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.383838][ T6310] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 61.388813][ T29] audit: type=1400 audit(2000000024.679:1702): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.410617][ T6310] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.418940][ T29] audit: type=1400 audit(2000000024.679:1703): avc: denied { ioctl } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=524 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.442489][ T6310] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 16 with error 28 [ 61.488016][ T6310] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.488016][ T6310] [ 61.497719][ T6310] EXT4-fs (loop2): Total free blocks count 0 [ 61.503770][ T6310] EXT4-fs (loop2): Free/Dirty block details [ 61.509768][ T6310] EXT4-fs (loop2): free_blocks=2415919104 [ 61.515495][ T6310] EXT4-fs (loop2): dirty_blocks=16 [ 61.520760][ T6310] EXT4-fs (loop2): Block reservation details [ 61.526785][ T6310] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 61.579812][ T29] audit: type=1326 audit(2000000024.879:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 61.603742][ T29] audit: type=1326 audit(2000000024.879:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 61.676194][ T29] audit: type=1326 audit(2000000024.879:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 61.699765][ T29] audit: type=1326 audit(2000000024.879:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 61.723247][ T29] audit: type=1326 audit(2000000024.879:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 61.746652][ T29] audit: type=1326 audit(2000000024.879:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 61.770200][ T29] audit: type=1326 audit(2000000024.879:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3e59cda9 code=0x7ffc0000 [ 62.098078][ T6404] netlink: 'syz.0.1290': attribute type 3 has an invalid length. [ 62.249710][ T6427] program syz.4.1301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.312217][ T6435] loop0: detected capacity change from 0 to 1024 [ 62.347509][ T6435] EXT4-fs: Ignoring removed nobh option [ 62.361673][ T6435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.446037][ T6435] loop0: detected capacity change from 1024 to 64 [ 62.473286][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 0 [ 62.488403][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 1 [ 62.500311][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 0 [ 62.511955][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 1 [ 62.530205][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 0 [ 62.555175][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 1 [ 62.566487][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 0 [ 62.581977][ T6470] __nla_validate_parse: 1 callbacks suppressed [ 62.581991][ T6470] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1321'. [ 62.592598][ T6478] loop4: detected capacity change from 0 to 2048 [ 62.608694][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 1 [ 62.621723][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 0 [ 62.637183][ T6466] EXT4-fs error (device loop0): ext4_write_dquot:6907: comm syz.0.1306: Failed to commit dquot type 1 [ 62.662073][ T6478] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.681174][ T6478] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 62.693845][ T6478] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.693845][ T6478] [ 62.703592][ T6478] EXT4-fs (loop4): Total free blocks count 0 [ 62.709605][ T6478] EXT4-fs (loop4): Free/Dirty block details [ 62.715533][ T6478] EXT4-fs (loop4): free_blocks=2415919104 [ 62.721287][ T6478] EXT4-fs (loop4): dirty_blocks=32 [ 62.726471][ T6478] EXT4-fs (loop4): Block reservation details [ 62.732511][ T6478] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 62.781664][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 62.794113][ T28] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.794113][ T28] [ 62.884196][ T6493] ================================================================== [ 62.892306][ T6493] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 62.900217][ T6493] [ 62.902539][ T6493] write to 0xffff8881035e1b50 of 8 bytes by task 6494 on cpu 0: [ 62.910262][ T6493] cpu_map_kthread_run+0x4a1/0x11e0 [ 62.915468][ T6493] kthread+0x4ae/0x520 [ 62.919546][ T6493] ret_from_fork+0x4b/0x60 [ 62.923968][ T6493] ret_from_fork_asm+0x1a/0x30 [ 62.928744][ T6493] [ 62.931065][ T6493] read to 0xffff8881035e1b50 of 8 bytes by task 6493 on cpu 1: [ 62.938698][ T6493] bq_flush_to_queue+0x125/0x360 [ 62.943642][ T6493] cpu_map_enqueue+0x19e/0x1b0 [ 62.948411][ T6493] xdp_do_redirect_frame+0x2a4/0x6b0 [ 62.953733][ T6493] bpf_test_run_xdp_live+0x8c6/0x1040 [ 62.959110][ T6493] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 62.964398][ T6493] bpf_prog_test_run+0x20f/0x3a0 [ 62.969347][ T6493] __sys_bpf+0x400/0x7a0 [ 62.973593][ T6493] __x64_sys_bpf+0x43/0x50 [ 62.978010][ T6493] x64_sys_call+0x2914/0x2dc0 [ 62.982693][ T6493] do_syscall_64+0xc9/0x1c0 [ 62.987203][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.993115][ T6493] [ 62.995430][ T6493] value changed: 0xffff888117188070 -> 0x0000000000000000 [ 63.002536][ T6493] [ 63.004869][ T6493] Reported by Kernel Concurrency Sanitizer on: [ 63.011026][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.4.1328 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 63.021444][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.031512][ T6493] ================================================================== [ 63.167831][ T50] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.227168][ T50] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.287015][ T50] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.347095][ T50] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.412083][ T50] bridge_slave_1: left allmulticast mode [ 63.417852][ T50] bridge_slave_1: left promiscuous mode [ 63.423548][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.441733][ T50] bridge_slave_0: left allmulticast mode [ 63.447440][ T50] bridge_slave_0: left promiscuous mode [ 63.453125][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.598711][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.614061][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.633867][ T50] bond0 (unregistering): Released all slaves [ 63.697177][ T50] tipc: Left network mode [ 63.703971][ T50] hsr_slave_0: left promiscuous mode [ 63.712058][ T50] hsr_slave_1: left promiscuous mode [ 63.723131][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.730599][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.754389][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.761928][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.784309][ T50] batman_adv: batadv0: Removing interface: macsec0 [ 63.801942][ T50] veth0_macvtap: left promiscuous mode [ 63.814239][ T50] veth1_vlan: left promiscuous mode [ 63.825059][ T50] veth0_vlan: left promiscuous mode [ 63.949304][ T50] team0 (unregistering): Port device team_slave_1 removed [ 63.969129][ T50] team0 (unregistering): Port device team_slave_0 removed [ 66.257789][ T28] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 66.895974][ T28] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 71.376846][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 72.016609][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration