last executing test programs: 4m37.481068538s ago: executing program 1 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r1, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x40}, 0x24004800) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) fallocate(r2, 0x0, 0x0, 0x2000402) utime(&(0x7f0000000240)='./file0\x00', 0x0) lseek(r2, 0x0, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x1) getdents(r2, &(0x7f0000000540)=""/258, 0x102) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)=@x25, 0x80, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m37.208571914s ago: executing program 1 (id=274): socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000000000003) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x400000000, 0x0, 0xe, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m36.155277625s ago: executing program 1 (id=299): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10f, 0x0, 0x0, &(0x7f0000001080)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="020600090200000000000000000060e9", 0x10}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) kexec_load(0xfffffffffffffffc, 0x0, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) fgetxattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', 0x0, 0xdeff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtaction={0x48, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xfffffffffffffd5c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 4m35.633039745s ago: executing program 1 (id=305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$eJzs3E1rY9UfB/BfOn36d/59UMfRGRAPiqCbMO3CjW6KdEAmoHSmixlByNhbDb0kpTcUIuLoyvcigrgWxJ1uuvEdCO66cTmieKRNMrXTIHQojcjns8lJzvnenHNvcuFc7rkHb+7lnKv6VrMbE7VaTOxEpIcpUkzE0Gfx2hs//PjC7bv3bq02GmvrKd1cvbP8ekpp4cXv3vvkq5e+716eiYVvZ2J/6f2DX1d+2b+6f+3gzzsftarUqlK7003NdL/T6Tbvl0XabFXb9ZTeLYtmVaRWuyp2+/WXIqIs0lbZ2dnppWZ7c35uZ7eoqtRs99J20UvdTuru9lLzw2arner1epqfC85u8lFp48uHOeeInKdiOnLO+X8xF5fj/zEfC7E4uRRPxdPxTFyJZ+NqPBfPxzc/f907TAAAAAAAAAAAAAAAAAAAAADn5x/X/8fp9f/XjlrF1Lj7DQAAAAAAAAAAAAAAAAAAAP8lt+/eu7XaaKytpzQbUX6xt7G30X/t169uRSvKKOJGLMYfcbT6P+fa4KkBOd98u7F2Ix1Zis/LB4P8g72NS8f54dMClob5fCK/3M+nk/mZmJuOiOH3r8RiXBmdXxmZn41XX/5b/+uxGD99EJ0oYzMOs8f5T5dTeuudxmP560ft+iZH7LlXLuLwAAAAwLmoD+bOaWr0/L3+qMHj9f386OsDedT1gRPz68Ps9VHTai5U1ft4u1muD96VZbHb/0ThyQu1we/6vLc8Pd5x/ZZz/jfs3rEUhv+U01UzEfHEW65FxFlTv+ecz2FcsyfOAKfbHNZNj+msxEU5Pujj7gkAAAAAAAAAAABncRF3UI57jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFztwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CoAAP//VSLIQQ==") creat(&(0x7f00000004c0)='./bus\x00', 0x75) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000300000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'pimreg\x00', 0x1000}) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getuid() preadv2(r3, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000000000000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 4m34.733243667s ago: executing program 1 (id=316): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xc}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 4m33.987874961s ago: executing program 1 (id=328): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000880)=@ethtool_rxnfc={0x4b, 0x7, 0xd13f, {0x1, @tcp_ip6_spec={@private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x4e24, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0xf9, 0x4005, [0x1, 0x9]}, @udp_ip4_spec={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4e24, 0x9e}, {0x0, @broadcast, 0x2, 0xb, [0x4, 0xfffffbfb]}, 0x8, 0x9}}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x2b, 0x5, 0x4) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x802000, &(0x7f00000002c0)={[{@barrier_val={'barrier', 0x3d, 0x80004}}, {}, {@usrquota}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2000000000000000}}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@noauto_da_alloc}, {@grpquota}]}, 0x6, 0x581, &(0x7f0000000940)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_open_pts(r0, 0x400) 4m33.917564865s ago: executing program 32 (id=328): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000880)=@ethtool_rxnfc={0x4b, 0x7, 0xd13f, {0x1, @tcp_ip6_spec={@private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x4e24, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0xf9, 0x4005, [0x1, 0x9]}, @udp_ip4_spec={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4e24, 0x9e}, {0x0, @broadcast, 0x2, 0xb, [0x4, 0xfffffbfb]}, 0x8, 0x9}}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x2b, 0x5, 0x4) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x802000, &(0x7f00000002c0)={[{@barrier_val={'barrier', 0x3d, 0x80004}}, {}, {@usrquota}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2000000000000000}}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@noauto_da_alloc}, {@grpquota}]}, 0x6, 0x581, &(0x7f0000000940)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_open_pts(r0, 0x400) 18.816460886s ago: executing program 3 (id=5870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004380)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x3ff, 0x1, 0x6, 0xca}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8020, 0xfe, 0x9, 0xffffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0xf6af, 0x1ff, 0x2, 0x10}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xc2, 0xed8, 0x7d1, 0xffffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x6, 0x88, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x586, 0xfffff74f, 0x8001, 0x102b5e26}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80000001, 0x5, 0x1, 0x79}}]}, @TCA_NETEM_RATE={0x4, 0xd, {0x2000000}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x400}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18.7379539s ago: executing program 3 (id=5872): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a0000000200000006100000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000000000000000000000000000000000000000000006874b12498fcbb8fc2e095902b8b857a"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x2}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18.496239744s ago: executing program 3 (id=5888): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x4000}) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) 18.396061521s ago: executing program 3 (id=5893): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000001200)={[{@mode={'mode', 0x3d, 0x3}}, {@nocompress}, {@overriderock}, {@unhide}, {@check_strict}, {@map_off}, {@check_strict}, {@utf8}]}, 0x1, 0xa5a, &(0x7f0000001280)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x8a, 0x20000}, 0x20) 18.259837598s ago: executing program 3 (id=5898): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 17.946551267s ago: executing program 3 (id=5912): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17.855661912s ago: executing program 33 (id=5912): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 1.917412368s ago: executing program 5 (id=6328): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 1.834663413s ago: executing program 5 (id=6329): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 1.756842908s ago: executing program 5 (id=6332): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="300000000000000084"], 0x30, 0x4040850}, 0x40000) 1.700600361s ago: executing program 5 (id=6334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b8361bbeb5c"], 0xffdd) 1.553186349s ago: executing program 5 (id=6336): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_pidfd_open(r0, 0x0) fcntl$setlease(r2, 0x400, 0x1) syz_pidfd_open(r0, 0x0) 1.294124945s ago: executing program 0 (id=6338): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 1.183787011s ago: executing program 0 (id=6339): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 1.068309468s ago: executing program 0 (id=6340): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r1, 0x4000) 881.037039ms ago: executing program 6 (id=6344): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 816.347483ms ago: executing program 6 (id=6345): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x1ff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 782.748045ms ago: executing program 6 (id=6346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b8361bbeb5c"], 0xffdd) 686.71441ms ago: executing program 2 (id=6349): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 640.704312ms ago: executing program 5 (id=6350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0xc}}, 0x30) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x63ea}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffebb, 0xfa00, {0x1, &(0x7f0000000300), 0x106, 0x9}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 622.869643ms ago: executing program 2 (id=6351): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffef010}, {0x6}]}, 0x10) syz_emit_ethernet(0x53, &(0x7f0000000340)=ANY=[], 0x0) 582.967146ms ago: executing program 2 (id=6353): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 308.531582ms ago: executing program 2 (id=6360): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 308.160132ms ago: executing program 2 (id=6361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)=@newtfilter={0x74, 0x2c, 0xd27, 0x70ad25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x800}, {0x5, 0x385, 0x6, 0x4, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x8}, {0x6, 0x7, 0x5, 0x1, 0x9, 0x39d88aaeaed585c5, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5cee}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 241.539216ms ago: executing program 2 (id=6363): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x39fab) 180.19853ms ago: executing program 0 (id=6364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x5b3a4504854f593f, 0xf}}]}}]}, 0x3c}}, 0x0) 179.94125ms ago: executing program 4 (id=6365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a00000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 179.72486ms ago: executing program 0 (id=6366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x8) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/17, 0x11}, {0x0}], 0x2, 0x400003, 0x80000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 157.572841ms ago: executing program 4 (id=6367): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e23, @empty}, {0x1, @remote}, 0x6, {0x2, 0x4e21, @multicast1}, 'virt_wifi0\x00'}) 132.401162ms ago: executing program 4 (id=6368): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x7f, 0x2, 0xc, 0xba00, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x5, 0x0, 0x15, "d9f8c700"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000300)={0x3, 0x7, 0x1, 0xa, 0x15, "8346034fedfe00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x101400) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 88.908885ms ago: executing program 4 (id=6369): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0b41, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) 88.543444ms ago: executing program 6 (id=6370): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 61.921226ms ago: executing program 4 (id=6371): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 61.240326ms ago: executing program 6 (id=6372): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 31.859618ms ago: executing program 4 (id=6373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)=@newtfilter={0x74, 0x2c, 0xd27, 0x70ad25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x800}, {0x5, 0x385, 0x6, 0x4, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x8}, {0x6, 0x7, 0x5, 0x1, 0x9, 0x39d88aaeaed585c5, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5cee}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 575.18µs ago: executing program 6 (id=6374): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="200096dd0a000200aaaaaaaaaa1c"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 0 (id=6375): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xf1, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xcf, 0x0, @opaque="4a9a9a205884cba18ae2f8e9a8792b1a12190dc5a7b9ab9121940939fe5ac4778368acf824669a08ebd5feed23d6d398000041ffa8483310b2a4f532164e3e9b958a2b1a415063899e7155be85d1ec1ec9339a313d52428b729486af585e1e5af5e0002e3044824cb8c9d2f6715bdc979579bd3c5fba92d17677dbac159b8a4131c3ddcc64336cd4717956b10553d7194b2d3e43cfa379c1afd612ada6fbdcad610e4b58f6319d5f6b24504b263ed7b098fe7b7d5c6ee875e8088426fa7f93ee918cc966b8e5e1"}}}}}, 0x0) readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)=""/199, 0xc7}], 0x2) kernel console output (not intermixed with test programs): syz.0.5251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22bf03aeb9 code=0x0 [ 283.143038][ T3302] Alternate GPT is invalid, using primary GPT. [ 283.149926][ T3302] loop4: p2 p3 p7 [ 283.161041][T19308] Alternate GPT is invalid, using primary GPT. [ 283.167538][T19308] loop4: p2 p3 p7 [ 283.226764][T19315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5251'. [ 283.705051][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5257'. [ 283.714246][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5257'. [ 283.765831][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5260'. [ 283.783633][T19337] loop5: detected capacity change from 0 to 2048 [ 283.803784][T19337] EXT4-fs mount: 10 callbacks suppressed [ 283.803803][T19337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.882150][T19347] batadv_slave_1: entered promiscuous mode [ 283.890982][T19346] batadv_slave_1: left promiscuous mode [ 283.938695][ T29] audit: type=1400 audit(1770160957.509:10827): avc: denied { rename } for pid=19335 comm="syz.5.5259" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.311319][T19370] Cannot find set identified by id 3 to match [ 284.385788][T19373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19373 comm=syz.0.5272 [ 284.686048][ T3606] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 284.738768][ T4867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.800699][ T29] audit: type=1400 audit(1770160958.369:10828): avc: denied { read write } for pid=19378 comm="syz.5.5274" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 284.825583][T19379] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5274'. [ 284.854787][ T29] audit: type=1400 audit(1770160958.369:10829): avc: denied { open } for pid=19378 comm="syz.5.5274" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 284.878300][ T29] audit: type=1400 audit(1770160958.369:10830): avc: denied { ioctl } for pid=19378 comm="syz.5.5274" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 284.994894][ T29] audit: type=1326 audit(1770160958.559:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19380 comm="syz.3.5276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f120dbfaeb9 code=0x0 [ 285.097156][T19391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5276'. [ 285.646134][ T9269] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 286.107431][T19486] lo speed is unknown, defaulting to 1000 [ 286.121676][T19532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19532 comm=syz.4.5293 [ 286.204563][T19486] chnl_net:caif_netlink_parms(): no params data found [ 286.263281][ T29] audit: type=1326 audit(1770160959.829:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.3.5299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f120dbfaeb9 code=0x0 [ 286.266920][T19486] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.293679][T19486] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.301093][T19486] bridge_slave_0: entered allmulticast mode [ 286.307981][T19486] bridge_slave_0: entered promiscuous mode [ 286.314893][T19486] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.322038][T19486] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.329361][T19486] bridge_slave_1: entered allmulticast mode [ 286.335845][T19486] bridge_slave_1: entered promiscuous mode [ 286.356429][T19486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.373573][T19486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.396784][T19550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5299'. [ 286.423156][T19486] team0: Port device team_slave_0 added [ 286.433576][T19486] team0: Port device team_slave_1 added [ 286.470027][T19486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.477069][T19486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.503164][T19486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.515629][T19486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.522754][T19486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.548762][T19486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.588682][T19486] hsr_slave_0: entered promiscuous mode [ 286.595340][T19486] hsr_slave_1: entered promiscuous mode [ 286.601823][T19486] debugfs: 'hsr0' already exists in 'hsr' [ 286.607686][T19486] Cannot create hsr debugfs directory [ 286.728889][T19486] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.738856][T19486] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36492 - 0 [ 286.798049][T19486] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.807997][T19486] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36492 - 0 [ 286.868318][T19486] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.878198][T19486] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36492 - 0 [ 286.927716][T19486] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.937716][T19486] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36492 - 0 [ 287.023922][T19486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 287.049057][T19486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 287.059809][T19486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.070395][T19486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 287.138212][T19486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.150311][T19486] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.167984][ T5509] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.175085][ T5509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.270705][T19648] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5307'. [ 287.290701][T19620] lo speed is unknown, defaulting to 1000 [ 287.337309][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.344521][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.393832][T19654] loop5: detected capacity change from 0 to 512 [ 287.408271][T19654] EXT4-fs: Ignoring removed orlov option [ 287.414130][T19654] EXT4-fs: Ignoring removed i_version option [ 287.420352][T19654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.454718][T19654] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 287.462791][T19654] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 287.471671][T19654] EXT4-fs (loop5): orphan cleanup on readonly fs [ 287.478154][T19654] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 287.488058][T19654] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 287.494911][T19620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=19620 comm=syz.3.5306 [ 287.502724][T19654] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 287.523863][T19654] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5309: bg 0: block 40: padding at end of block bitmap is not set [ 287.546750][T19654] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 287.562664][T17669] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 287.583935][T19654] EXT4-fs (loop5): 1 truncate cleaned up [ 287.590436][T19654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.656593][T17669] batman_adv: batadv0: Removing interface: ip6gretap1 [ 287.700193][ T4867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.777954][T17669] bond0 (unregistering): Released all slaves [ 287.787909][T17669] bond1 (unregistering): Released all slaves [ 287.798256][T17669] bond2 (unregistering): Released all slaves [ 287.807531][T17669] bond3 (unregistering): Released all slaves [ 287.816832][T17669] bond4 (unregistering): Released all slaves [ 287.826683][T17669] bond5 (unregistering): (slave wireguard1): Releasing backup interface [ 287.835481][T17669] wireguard1: left promiscuous mode [ 287.842763][T17669] bond5 (unregistering): Released all slaves [ 287.852698][T17669] bond6 (unregistering): Released all slaves [ 287.862314][T17669] bond7 (unregistering): Released all slaves [ 287.871700][T17669] bond8 (unregistering): Released all slaves [ 287.880961][T17669] bond9 (unregistering): Released all slaves [ 287.891261][T17669] bond10 (unregistering): Released all slaves [ 287.901889][T17669] bond11 (unregistering): Released all slaves [ 287.911226][T17669] bond12 (unregistering): Released all slaves [ 287.920978][T17669] bond13 (unregistering): Released all slaves [ 287.930872][T17669] bond14 (unregistering): Released all slaves [ 287.945938][T19486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.991448][T19674] loop4: detected capacity change from 0 to 512 [ 288.015495][T19674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 288.036872][T17669] tipc: Left network mode [ 288.048875][T17669] hsr_slave_0: left promiscuous mode [ 288.050688][T19674] EXT4-fs (loop4): 1 truncate cleaned up [ 288.059995][T17669] hsr_slave_1: left promiscuous mode [ 288.084640][T19674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.145249][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.206211][T17374] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 288.221662][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5319'. [ 288.311927][T19703] loop5: detected capacity change from 0 to 512 [ 288.327087][T19703] EXT4-fs: Ignoring removed orlov option [ 288.332858][T19703] EXT4-fs: Ignoring removed i_version option [ 288.339314][T19703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.346885][T19705] netlink: 'syz.2.5325': attribute type 1 has an invalid length. [ 288.378319][T19703] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 288.386317][T19703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 288.400349][T19705] bond3: entered promiscuous mode [ 288.421578][T19703] EXT4-fs (loop5): orphan cleanup on readonly fs [ 288.422027][T19705] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.428203][T19703] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 288.445088][T19703] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 288.459750][T19703] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 288.473344][T19703] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5323: bg 0: block 40: padding at end of block bitmap is not set [ 288.474791][T19715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.494592][T19703] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 288.505791][T19703] EXT4-fs (loop5): 1 truncate cleaned up [ 288.512169][T19703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.529488][T19715] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 288.540153][T19715] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 288.555612][T19715] bond3: (slave wireguard0): making interface the new active one [ 288.563449][T19715] wireguard0: entered promiscuous mode [ 288.572292][T19715] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 288.584159][T19486] veth0_vlan: entered promiscuous mode [ 288.593147][T19486] veth1_vlan: entered promiscuous mode [ 288.601725][ T4867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.605724][T19705] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 288.624586][T19705] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 288.662921][T19486] veth0_macvtap: entered promiscuous mode [ 288.666372][T19722] loop5: detected capacity change from 0 to 512 [ 288.675218][T19486] veth1_macvtap: entered promiscuous mode [ 288.688969][T19486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.699428][T19486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.716414][T19705] loop2: detected capacity change from 0 to 512 [ 288.724074][T17669] IPVS: stop unused estimator thread 0... [ 288.730030][T19705] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 288.744894][T19722] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 288.768645][T19705] EXT4-fs (loop2): 1 truncate cleaned up [ 288.774862][T19705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.797660][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.806634][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.815439][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.825154][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.843715][T19722] EXT4-fs (loop5): 1 truncate cleaned up [ 288.850272][T19722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.875036][ T29] audit: type=1400 audit(1770160962.439:10833): avc: denied { mounton } for pid=19704 comm="syz.2.5325" path="/1002/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.919561][T19730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5332'. [ 288.929314][ T29] audit: type=1400 audit(1770160962.479:10834): avc: denied { mounton } for pid=19486 comm="syz-executor" path="/root/syzkaller.ytQXqc/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 288.954165][ T29] audit: type=1400 audit(1770160962.479:10835): avc: denied { mount } for pid=19486 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 289.006035][ T4867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.019423][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.218273][T19745] IPVS: Scheduler module ip_vs_ not found [ 289.311532][T19752] loop2: detected capacity change from 0 to 2048 [ 289.419087][T19752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.444601][T19757] lo speed is unknown, defaulting to 1000 [ 289.629308][T19757] chnl_net:caif_netlink_parms(): no params data found [ 289.740202][T19757] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.747409][T19757] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.766423][T19757] bridge_slave_0: entered allmulticast mode [ 289.772890][T19757] bridge_slave_0: entered promiscuous mode [ 289.786964][T19757] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.794216][T19757] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.816115][T19757] bridge_slave_1: entered allmulticast mode [ 289.826527][T19757] bridge_slave_1: entered promiscuous mode [ 289.848013][T19757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.861651][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 289.861665][ T29] audit: type=1400 audit(1770160963.429:10841): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 289.892647][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.898842][T19757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.914966][ T29] audit: type=1400 audit(1770160963.479:10842): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.936558][ T29] audit: type=1400 audit(1770160963.479:10843): avc: denied { search } for pid=3040 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.958476][ T29] audit: type=1400 audit(1770160963.479:10844): avc: denied { search } for pid=3040 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.962212][T19757] team0: Port device team_slave_0 added [ 289.980453][ T29] audit: type=1400 audit(1770160963.479:10845): avc: denied { read } for pid=3040 comm="dhcpcd" name="n31" dev="tmpfs" ino=21399 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.007911][ T29] audit: type=1400 audit(1770160963.479:10846): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=21399 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.031210][ T29] audit: type=1400 audit(1770160963.479:10847): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=21399 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.061763][T19757] team0: Port device team_slave_1 added [ 290.080559][T17669] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 290.116327][T17669] batman_adv: batadv0: Removing interface: ip6gretap1 [ 290.148145][T17669] gretap0 (unregistering): left promiscuous mode [ 290.329129][T17669] bond0 (unregistering): Released all slaves [ 290.338247][T17669] bond1 (unregistering): Released all slaves [ 290.346717][T17669] bond2 (unregistering): Released all slaves [ 290.355320][T17669] bond3 (unregistering): Released all slaves [ 290.364154][T17669] bond4 (unregistering): Released all slaves [ 290.372849][T17669] bond5 (unregistering): Released all slaves [ 290.383088][T19757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.390222][T19757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.416317][T19757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.427854][T19757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.434855][T19757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.460918][T19757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.486482][T17669] tipc: Left network mode [ 290.497130][T19757] hsr_slave_0: entered promiscuous mode [ 290.503479][T19757] hsr_slave_1: entered promiscuous mode [ 290.509797][T19757] debugfs: 'hsr0' already exists in 'hsr' [ 290.515580][T19757] Cannot create hsr debugfs directory [ 290.524507][ T29] audit: type=1400 audit(1770160964.089:10848): avc: denied { read open } for pid=19781 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.552004][T17669] hsr_slave_0: left promiscuous mode [ 290.556137][ T29] audit: type=1400 audit(1770160964.089:10849): avc: denied { getattr } for pid=19781 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.582800][T17669] hsr_slave_1: left promiscuous mode [ 290.589068][T17669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.631320][ T29] audit: type=1400 audit(1770160964.199:10850): avc: denied { add_name } for pid=19780 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.088161][T19757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.098081][T19757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.109568][T19757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.118974][T19757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.169038][T19757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.188343][T17669] IPVS: stop unused estimator thread 0... [ 291.189017][T19757] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.211363][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.218508][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.240643][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.247837][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.265886][T19757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.321655][T19757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.429948][T19757] veth0_vlan: entered promiscuous mode [ 291.437703][T19757] veth1_vlan: entered promiscuous mode [ 291.452825][T19757] veth0_macvtap: entered promiscuous mode [ 291.460093][T19757] veth1_macvtap: entered promiscuous mode [ 291.471183][T19757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.480198][T19757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.493306][T17669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.503238][T17669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.512077][T17669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.522542][T17669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.565312][T19886] loop4: detected capacity change from 0 to 512 [ 291.572362][T19886] EXT4-fs: Ignoring removed orlov option [ 291.578310][T19886] EXT4-fs: Ignoring removed i_version option [ 291.584409][T19886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.596415][T19886] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 291.604369][T19886] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 291.613037][T19886] EXT4-fs (loop4): orphan cleanup on readonly fs [ 291.619662][T19886] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 291.634370][T19886] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 291.642619][T19886] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5339: bg 0: block 40: padding at end of block bitmap is not set [ 291.657246][T19886] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 291.666606][T19886] EXT4-fs (loop4): 1 truncate cleaned up [ 291.672597][T19886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.745436][T19757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.377420][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 299.377436][ T29] audit: type=1400 audit(1770160972.949:10856): avc: denied { create } for pid=19888 comm="syz.0.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 299.432369][T19896] 9p: Bad value for 'rfdno' [ 299.450478][T19896] loop4: detected capacity change from 0 to 512 [ 299.500559][T19896] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5348: couldn't read orphan inode 26 (err -116) [ 299.517249][T19896] EXT4-fs (loop4): Remounting filesystem read-only [ 299.534242][T19896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.547177][T19896] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.582522][T19757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.591960][T19910] FAULT_INJECTION: forcing a failure. [ 299.591960][T19910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.605082][T19910] CPU: 0 UID: 0 PID: 19910 Comm: syz.0.5350 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.605178][T19910] Tainted: [W]=WARN [ 299.605187][T19910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.605203][T19910] Call Trace: [ 299.605212][T19910] [ 299.605222][T19910] __dump_stack+0x1d/0x30 [ 299.605314][T19910] dump_stack_lvl+0x95/0xd0 [ 299.605340][T19910] dump_stack+0x15/0x1b [ 299.605364][T19910] should_fail_ex+0x263/0x280 [ 299.605404][T19910] should_fail+0xb/0x20 [ 299.605475][T19910] should_fail_usercopy+0x1a/0x20 [ 299.605515][T19910] _copy_from_user+0x1c/0xb0 [ 299.605541][T19910] ___sys_sendmsg+0xc1/0x1e0 [ 299.605582][T19910] __x64_sys_sendmsg+0xd4/0x160 [ 299.605721][T19910] x64_sys_call+0x17ba/0x3000 [ 299.605789][T19910] do_syscall_64+0xc0/0x2a0 [ 299.605824][T19910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.605853][T19910] RIP: 0033:0x7f806512aeb9 [ 299.605874][T19910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.605941][T19910] RSP: 002b:00007f8063b87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.606077][T19910] RAX: ffffffffffffffda RBX: 00007f80653a5fa0 RCX: 00007f806512aeb9 [ 299.606167][T19910] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 299.606182][T19910] RBP: 00007f8063b87090 R08: 0000000000000000 R09: 0000000000000000 [ 299.606195][T19910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.606208][T19910] R13: 00007f80653a6038 R14: 00007f80653a5fa0 R15: 00007fff143aff48 [ 299.606229][T19910] [ 299.894301][T19923] loop2: detected capacity change from 0 to 2048 [ 299.902337][T16161] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.939318][T19906] lo speed is unknown, defaulting to 1000 [ 299.958056][T16161] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.970659][T19898] Alternate GPT is invalid, using primary GPT. [ 299.977309][T19898] loop2: p2 p3 p7 [ 300.017957][ T29] audit: type=1326 audit(1770160973.589:10857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.041869][ T29] audit: type=1326 audit(1770160973.589:10858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.065662][ T29] audit: type=1326 audit(1770160973.589:10859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.090375][T16161] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.100310][ T29] audit: type=1326 audit(1770160973.589:10860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.124089][ T29] audit: type=1326 audit(1770160973.589:10861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.147899][ T29] audit: type=1326 audit(1770160973.609:10862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.171484][ T29] audit: type=1326 audit(1770160973.609:10863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.195220][ T29] audit: type=1326 audit(1770160973.609:10864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.218969][ T29] audit: type=1326 audit(1770160973.609:10865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 300.248481][T19923] Alternate GPT is invalid, using primary GPT. [ 300.254840][T19923] loop2: p2 p3 p7 [ 300.305440][T16161] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.390849][T16161] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 300.428078][T19965] udevd[19965]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 300.444700][T19953] udevd[19953]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 300.448744][T19902] udevd[19902]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 300.494653][T16161] batman_adv: batadv0: Removing interface: ip6gretap1 [ 300.536341][T16161] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 300.567916][T16161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.577604][T16161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.588875][T16161] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 300.600338][T16161] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 300.611009][T16161] bond0 (unregistering): Released all slaves [ 300.618719][T16161] bond1 (unregistering): Released all slaves [ 300.628437][T16161] bond2 (unregistering): Released all slaves [ 300.637970][T16161] bond3 (unregistering): Released all slaves [ 300.647378][T16161] bond4 (unregistering): Released all slaves [ 300.657241][T16161] bond5 (unregistering): Released all slaves [ 300.666268][T16161] bond6 (unregistering): Released all slaves [ 300.675285][T16161] bond7 (unregistering): Released all slaves [ 300.685162][T16161] bond8 (unregistering): Released all slaves [ 300.694227][T16161] bond9 (unregistering): Released all slaves [ 300.705380][T16161] bond10 (unregistering): Released all slaves [ 300.714481][T16161] bond11 (unregistering): Released all slaves [ 300.724224][T16161] bond12 (unregistering): Released all slaves [ 300.733424][T19967] C: renamed from team_slave_0 (while UP) [ 300.749419][T19967] netlink: 'syz.0.5370': attribute type 4 has an invalid length. [ 300.757289][T19967] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5370'. [ 300.766429][T19967] net_ratelimit: 12 callbacks suppressed [ 300.766446][T19967] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 300.788507][T19969] netlink: 'syz.3.5371': attribute type 4 has an invalid length. [ 300.796557][T19969] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5371'. [ 300.805602][T19969] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 300.828854][T19906] chnl_net:caif_netlink_parms(): no params data found [ 300.852169][T16161] tipc: Left network mode [ 300.921200][T16161] hsr_slave_0: left promiscuous mode [ 300.927806][T16161] hsr_slave_1: left promiscuous mode [ 300.933471][T16161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.067493][T19983] netlink: 'syz.0.5375': attribute type 4 has an invalid length. [ 301.075387][T19983] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5375'. [ 301.084692][T19983] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 301.121464][T19906] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.128647][T19906] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.136274][T19906] bridge_slave_0: entered allmulticast mode [ 301.143110][T19906] bridge_slave_0: entered promiscuous mode [ 301.150061][T19906] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.157197][T19906] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.164801][T19906] bridge_slave_1: entered allmulticast mode [ 301.175021][T19906] bridge_slave_1: entered promiscuous mode [ 301.192723][T19999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5381'. [ 301.207213][T19906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.217591][T19906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.238276][T19906] team0: Port device team_slave_0 added [ 301.253253][T19999] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 301.292826][T19999] batman_adv: batadv0: Adding interface: ip6gretap1 [ 301.299591][T19999] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.342097][T19999] batman_adv: batadv0: Interface activated: ip6gretap1 [ 301.351028][T19906] team0: Port device team_slave_1 added [ 301.374832][T19906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.381916][T19906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.407889][T19906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.440177][T19999] loop4: detected capacity change from 0 to 128 [ 301.459447][T19999] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 301.470247][T19999] EXT4-fs (loop4): group descriptors corrupted! [ 301.489817][T19906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.496862][T19906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.522888][T19906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.592484][T19906] hsr_slave_0: entered promiscuous mode [ 301.611003][T19906] hsr_slave_1: entered promiscuous mode [ 301.676723][T20030] loop4: detected capacity change from 0 to 512 [ 301.685521][T20030] EXT4-fs: Ignoring removed orlov option [ 301.691432][T20030] EXT4-fs: Ignoring removed i_version option [ 301.697561][T20030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.751578][T20030] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 301.759589][T20030] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 301.776270][T20030] EXT4-fs (loop4): orphan cleanup on readonly fs [ 301.788815][T20030] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 301.803495][T20030] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 301.819152][T20030] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5389: bg 0: block 40: padding at end of block bitmap is not set [ 301.834069][T20030] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 301.849230][T20030] EXT4-fs (loop4): 1 truncate cleaned up [ 301.855556][T20030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.878932][T20030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5389'. [ 301.931031][T20054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5390'. [ 301.941374][T19757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.998219][T19906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.004008][T20058] netlink: 'syz.4.5392': attribute type 2 has an invalid length. [ 302.012842][T20058] netlink: 'syz.4.5392': attribute type 1 has an invalid length. [ 302.023282][T19906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.035735][T19906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.057525][T19906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.072655][T20061] loop4: detected capacity change from 0 to 2048 [ 302.102351][T20061] Alternate GPT is invalid, using primary GPT. [ 302.108942][T20061] loop4: p2 p3 p7 [ 302.154818][T20066] netlink: 'syz.2.5394': attribute type 4 has an invalid length. [ 302.162749][T20066] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5394'. [ 302.171946][T20066] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 302.247460][T19906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.295615][T19906] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.318303][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.325476][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.368648][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.375843][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.553933][T19906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.627917][T20061] loop4: detected capacity change from 0 to 1024 [ 302.716891][T20061] loop4: detected capacity change from 0 to 2048 [ 302.786665][T19965] loop4: p2 < > p4 [ 302.797115][T19965] loop4: p4 size 262144 extends beyond EOD, truncated [ 302.822864][T20139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5406'. [ 302.834197][T20061] loop4: p2 < > p4 [ 302.839395][T20061] loop4: p4 size 262144 extends beyond EOD, truncated [ 302.894928][T20139] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 302.919467][T20149] netlink: 'syz.3.5410': attribute type 11 has an invalid length. [ 302.927439][T20149] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5410'. [ 302.988752][T20150] loop0: detected capacity change from 0 to 128 [ 302.990370][T20139] batman_adv: batadv0: Adding interface: ip6gretap1 [ 303.001828][T20139] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.022065][T20150] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 303.038168][T20150] EXT4-fs (loop0): group descriptors corrupted! [ 303.046602][T19965] udevd[19965]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 303.056555][T20139] batman_adv: batadv0: Interface activated: ip6gretap1 [ 303.071618][T20152] C: renamed from team_slave_0 (while UP) [ 303.077848][T19902] udevd[19902]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 303.089230][T20152] netlink: 'syz.4.5411': attribute type 4 has an invalid length. [ 303.097085][T20152] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5411'. [ 303.106340][T20152] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 303.127560][T19906] veth0_vlan: entered promiscuous mode [ 303.158147][T19906] veth1_vlan: entered promiscuous mode [ 303.202567][T19906] veth0_macvtap: entered promiscuous mode [ 303.218808][T19906] veth1_macvtap: entered promiscuous mode [ 303.241767][T19906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.276857][T19906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.293810][T15678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.337475][T15678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.347898][T15678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.358724][T20166] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.392143][T15678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.437818][T20166] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.438962][T20178] loop0: detected capacity change from 0 to 512 [ 303.459504][T20176] loop5: detected capacity change from 0 to 1024 [ 303.497069][T20176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.511095][T20166] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.567071][T20178] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 303.588204][T20166] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.610988][T20176] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.5345: inode #778331508: comm syz.5.5345: iget: illegal inode # [ 303.622872][T20178] EXT4-fs (loop0): orphan cleanup on readonly fs [ 303.643568][T20176] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.5345: error while reading EA inode 778331508 err=-117 [ 303.658421][T20176] EXT4-fs error (device loop5): ext4_xattr_block_list:766: inode #15: comm syz.5.5345: corrupted xattr block 113: invalid header [ 303.672144][T20178] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.5421: Failed to acquire dquot type 1 [ 303.721328][T17669] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.746931][T20178] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5421: bg 0: block 40: padding at end of block bitmap is not set [ 303.767122][T15678] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.789123][T15678] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.804039][T20178] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 303.814262][ T8760] syz_tun (unregistering): left allmulticast mode [ 303.823249][T20178] EXT4-fs (loop0): 1 truncate cleaned up [ 303.830195][T20178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.846245][T17669] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.900621][T20214] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.915240][T19486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.944331][T20192] lo speed is unknown, defaulting to 1000 [ 303.981248][T20214] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.042841][T20214] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.110104][T20192] chnl_net:caif_netlink_parms(): no params data found [ 304.131512][T20214] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.251265][ T3438] bridge_slave_0: left allmulticast mode [ 304.257211][ T3438] bridge_slave_0: left promiscuous mode [ 304.263013][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.295115][T19906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.497470][ T3438] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 304.504599][ T3438] batadv0: mtu less than device minimum [ 304.510938][ T3438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 304.521828][ T3438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 304.532801][ T3438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 304.543520][ T3438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 304.575755][ T3438] tipc: Resetting bearer [ 304.611067][T20298] loop4: detected capacity change from 0 to 2048 [ 304.629153][T20298] EXT4-fs (loop4): #clusters per group too big: 16384 [ 304.657601][ T3438] batman_adv: batadv0: Removing interface: ip6gretap1 [ 304.674548][T20299] loop5: detected capacity change from 0 to 2048 [ 304.693427][T20299] EXT4-fs (loop5): #clusters per group too big: 16384 [ 304.709764][ T3438] tipc: Disabling bearer [ 304.717191][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 304.717211][ T29] audit: type=1400 audit(1770160978.289:10914): avc: denied { kexec_image_load } for pid=20295 comm="syz.5.5429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 304.836755][T20306] loop0: detected capacity change from 0 to 128 [ 304.860822][T20306] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 304.871452][T20306] EXT4-fs (loop0): group descriptors corrupted! [ 304.948222][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.958019][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.968476][ T3438] bond0 (unregistering): Released all slaves [ 304.976069][ T3438] bond1 (unregistering): Released all slaves [ 304.985048][ T3438] bond2 (unregistering): Released all slaves [ 304.994135][ T3438] bond3 (unregistering): Released all slaves [ 305.003424][ T3438] bond4 (unregistering): Released all slaves [ 305.012660][ T3438] bond5 (unregistering): Released all slaves [ 305.021930][ T3438] bond6 (unregistering): Released all slaves [ 305.031666][ T3438] bond7 (unregistering): Released all slaves [ 305.040884][ T3438] bond8 (unregistering): Released all slaves [ 305.049669][ T3438] bond9 (unregistering): Released all slaves [ 305.059240][ T3438] bond10 (unregistering): Released all slaves [ 305.068125][ T3438] bond11 (unregistering): Released all slaves [ 305.077776][ T3438] bond12 (unregistering): Released all slaves [ 305.088283][ T3438] bond13 (unregistering): Released all slaves [ 305.114942][T20296] batman_adv: batadv0: Adding interface: ipvlan2 [ 305.121547][T20296] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.146894][T20296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.157516][T20296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.169092][T20296] batman_adv: batadv0: Interface activated: ipvlan2 [ 305.176610][T20303] netlink: 'syz.4.5433': attribute type 4 has an invalid length. [ 305.186444][T20192] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.193585][T20192] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.208278][T20192] bridge_slave_0: entered allmulticast mode [ 305.214856][T20192] bridge_slave_0: entered promiscuous mode [ 305.222935][T20192] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.230051][T20192] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.238166][T20192] bridge_slave_1: entered allmulticast mode [ 305.244769][T20192] bridge_slave_1: entered promiscuous mode [ 305.252813][ T3438] tipc: Disabling bearer [ 305.258113][ T3438] tipc: Left network mode [ 305.285113][ T3438] hsr_slave_0: left promiscuous mode [ 305.294825][T20311] netlink: 'syz.5.5434': attribute type 1 has an invalid length. [ 305.303082][ T3438] hsr_slave_1: left promiscuous mode [ 305.309017][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.317706][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.328475][ T3438] batman_adv: batadv0: Interface deactivated: dummy0 [ 305.335320][ T3438] batman_adv: batadv0: Removing interface: dummy0 [ 305.349397][ T3438] pim6reg (unregistering): left allmulticast mode [ 305.394951][T20318] loop0: detected capacity change from 0 to 1024 [ 305.418703][T20318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.435891][T20318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.5438: inode #778331508: comm syz.0.5438: iget: illegal inode # [ 305.450033][T20318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5438: error while reading EA inode 778331508 err=-117 [ 305.467613][T20323] loop5: detected capacity change from 0 to 512 [ 305.474772][T20323] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 305.487909][T20318] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.5438: corrupted xattr block 113: invalid header [ 305.505772][T20323] EXT4-fs (loop5): 1 truncate cleaned up [ 305.513853][T20192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.531236][T20323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.577481][T20192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.603664][T20192] team0: Port device team_slave_0 added [ 305.610937][T20192] team0: Port device team_slave_1 added [ 305.629143][T20192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.636172][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.662181][T20192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.677753][T20192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.684757][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.710789][T20192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.732234][ T29] audit: type=1326 audit(1770161235.291:10915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 305.756021][ T29] audit: type=1326 audit(1770161235.291:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 305.779673][ T29] audit: type=1326 audit(1770161235.291:10917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 305.784859][T20192] hsr_slave_0: entered promiscuous mode [ 305.803270][ T29] audit: type=1326 audit(1770161235.291:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 305.803318][ T29] audit: type=1326 audit(1770161235.291:10919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 305.813080][T20192] hsr_slave_1: entered promiscuous mode [ 305.833090][ T29] audit: type=1326 audit(1770161235.291:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 305.833125][ T29] audit: type=1326 audit(1770161235.291:10921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 305.889719][T20192] debugfs: 'hsr0' already exists in 'hsr' [ 305.909505][ T29] audit: type=1326 audit(1770161235.291:10922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 305.915272][T20192] Cannot create hsr debugfs directory [ 305.938826][ T29] audit: type=1326 audit(1770161235.291:10923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f702a18aeb9 code=0x7ffc0000 [ 306.022668][T19906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.066424][T16161] Bluetooth: hci0: Frame reassembly failed (-84) [ 306.118974][T16161] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.137438][T16161] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.156907][T16161] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.165806][T16161] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.202970][ T3438] IPVS: stop unused estimator thread 0... [ 306.237099][T19486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.321205][T20377] loop0: detected capacity change from 0 to 512 [ 306.357571][T20377] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 306.376815][T20192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.377131][T20377] EXT4-fs (loop0): orphan cleanup on readonly fs [ 306.398148][T20192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.405171][T20377] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 306.422902][T20377] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 306.429923][T20377] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #16: comm syz.0.5444: inode has both inline data and extents flags [ 306.437845][T20192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.458706][T20377] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5444: couldn't read orphan inode 16 (err -117) [ 306.471354][T20377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.484517][T20366] netlink: 'syz.2.5442': attribute type 6 has an invalid length. [ 306.493359][T20366] netlink: 'syz.2.5442': attribute type 7 has an invalid length. [ 306.501672][T20366] netlink: 'syz.2.5442': attribute type 8 has an invalid length. [ 306.509871][T20192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.567800][T19486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.581962][T20192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.595682][T20192] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.626891][T15685] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.634034][T15685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.661271][T20412] __nla_validate_parse: 4 callbacks suppressed [ 306.661288][T20412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5449'. [ 306.690036][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.697239][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.862103][T20192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.934247][T20447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5456'. [ 307.039436][T20192] veth0_vlan: entered promiscuous mode [ 307.060294][T20192] veth1_vlan: entered promiscuous mode [ 307.088688][T20474] loop4: detected capacity change from 0 to 512 [ 307.113841][T20474] EXT4-fs: Ignoring removed i_version option [ 307.120059][T20474] EXT4-fs: Ignoring removed bh option [ 307.133448][T20192] veth0_macvtap: entered promiscuous mode [ 307.141058][T20192] veth1_macvtap: entered promiscuous mode [ 307.148626][T20478] FAULT_INJECTION: forcing a failure. [ 307.148626][T20478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.161781][T20478] CPU: 1 UID: 0 PID: 20478 Comm: syz.2.5460 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.161822][T20478] Tainted: [W]=WARN [ 307.161830][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.161845][T20478] Call Trace: [ 307.161852][T20478] [ 307.161860][T20478] __dump_stack+0x1d/0x30 [ 307.161889][T20478] dump_stack_lvl+0x95/0xd0 [ 307.161914][T20478] dump_stack+0x15/0x1b [ 307.162008][T20478] should_fail_ex+0x263/0x280 [ 307.162044][T20478] should_fail+0xb/0x20 [ 307.162080][T20478] should_fail_usercopy+0x1a/0x20 [ 307.162168][T20478] _copy_from_user+0x1c/0xb0 [ 307.162193][T20478] ___sys_sendmsg+0xc1/0x1e0 [ 307.162224][T20478] __x64_sys_sendmsg+0xd4/0x160 [ 307.162279][T20478] x64_sys_call+0x17ba/0x3000 [ 307.162382][T20478] do_syscall_64+0xc0/0x2a0 [ 307.162418][T20478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.162499][T20478] RIP: 0033:0x7fb67027aeb9 [ 307.162514][T20478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.162536][T20478] RSP: 002b:00007fb66ecd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.162561][T20478] RAX: ffffffffffffffda RBX: 00007fb6704f5fa0 RCX: 00007fb67027aeb9 [ 307.162579][T20478] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 307.162653][T20478] RBP: 00007fb66ecd7090 R08: 0000000000000000 R09: 0000000000000000 [ 307.162672][T20478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.162688][T20478] R13: 00007fb6704f6038 R14: 00007fb6704f5fa0 R15: 00007ffddecc8d18 [ 307.162710][T20478] [ 307.252033][T20192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.351691][T20192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.366684][ T3438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.375479][ T3438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.379352][T20474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.384288][ T3438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.410513][ T3438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.428964][T20474] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.444277][T20485] loop0: detected capacity change from 0 to 512 [ 307.455705][T20485] EXT4-fs: Ignoring removed orlov option [ 307.461540][T20485] EXT4-fs: Ignoring removed i_version option [ 307.467633][T20485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.495096][T20485] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 307.503272][T20485] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 307.518945][T20485] EXT4-fs (loop0): orphan cleanup on readonly fs [ 307.525439][T20485] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 307.540198][T20485] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 307.551582][T20485] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5461: bg 0: block 40: padding at end of block bitmap is not set [ 307.569377][T20485] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 307.578680][T20485] EXT4-fs (loop0): 1 truncate cleaned up [ 307.584857][T20485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.707234][T19486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.862791][T19757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.043437][T20525] loop3: detected capacity change from 0 to 2048 [ 308.098517][T20525] Alternate GPT is invalid, using primary GPT. [ 308.105188][T20525] loop3: p2 p3 p7 [ 308.116185][ T9269] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 308.589422][T20548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5484'. [ 308.631114][T20548] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 308.645728][T20548] batman_adv: batadv0: Adding interface: ip6gretap1 [ 308.652443][T20548] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.679054][T20548] batman_adv: batadv0: Interface activated: ip6gretap1 [ 308.775341][T20552] loop5: detected capacity change from 0 to 128 [ 308.791986][T20552] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 308.802718][T20552] EXT4-fs (loop5): group descriptors corrupted! [ 308.955463][T20535] chnl_net:caif_netlink_parms(): no params data found [ 309.072549][T20566] netlink: 'syz.4.5490': attribute type 4 has an invalid length. [ 309.080446][T20566] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5490'. [ 309.089710][T20566] net_ratelimit: 16 callbacks suppressed [ 309.089725][T20566] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.139007][T20562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.147291][T19965] loop3: p2 < > p4 [ 309.183081][T19965] loop3: p4 size 262144 extends beyond EOD, truncated [ 309.218393][T20525] loop3: p2 < > p4 [ 309.223186][T20525] loop3: p4 size 262144 extends beyond EOD, truncated [ 309.231593][T20535] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.239481][T20535] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.253908][T20535] bridge_slave_0: entered allmulticast mode [ 309.266862][T20535] bridge_slave_0: entered promiscuous mode [ 309.273848][T20535] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.281048][T20535] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.281940][T20535] bridge_slave_1: entered allmulticast mode [ 309.294710][T20535] bridge_slave_1: entered promiscuous mode [ 309.319000][T20535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.329627][T20535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.360888][T20535] team0: Port device team_slave_0 added [ 309.415164][T20535] team0: Port device team_slave_1 added [ 309.462101][T18900] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.473582][T20535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.481013][T20535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.507302][T20535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.532338][T19902] udevd[19902]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 309.544205][T19965] udevd[19965]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 309.587772][T18900] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.602248][T20535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.609294][T20535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.635284][T20535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.675420][T20535] hsr_slave_0: entered promiscuous mode [ 309.683919][T20535] hsr_slave_1: entered promiscuous mode [ 309.708497][T20585] set_capacity_and_notify: 3 callbacks suppressed [ 309.708513][T20585] loop4: detected capacity change from 0 to 1024 [ 309.726493][T20535] debugfs: 'hsr0' already exists in 'hsr' [ 309.726857][ T29] kauditd_printk_skb: 6652 callbacks suppressed [ 309.726901][ T29] audit: type=1326 audit(1770161239.291:17575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.732348][T20535] Cannot create hsr debugfs directory [ 309.746120][ T29] audit: type=1326 audit(1770161239.291:17574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.790731][ T29] audit: type=1326 audit(1770161239.311:17576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.814069][ T29] audit: type=1326 audit(1770161239.311:17577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.837786][ T29] audit: type=1326 audit(1770161239.311:17578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.861353][ T29] audit: type=1326 audit(1770161239.311:17579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.884685][ T29] audit: type=1326 audit(1770161239.311:17580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.908072][ T29] audit: type=1326 audit(1770161239.311:17581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.931531][ T29] audit: type=1326 audit(1770161239.311:17582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.954883][ T29] audit: type=1326 audit(1770161239.311:17583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20519 comm="syz.0.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806512aeb9 code=0x50000 [ 309.979365][T18900] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.025770][T20585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.061566][T20585] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.5496: inode #778331508: comm syz.4.5496: iget: illegal inode # [ 310.076115][T20585] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5496: error while reading EA inode 778331508 err=-117 [ 310.089794][T18900] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.129576][T20593] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.5496: corrupted xattr block 113: invalid header [ 310.230497][T20598] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5498'. [ 310.247940][T19906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.257261][T20599] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5498'. [ 310.310080][T18900] bridge_slave_1: left allmulticast mode [ 310.315801][T18900] bridge_slave_1: left promiscuous mode [ 310.321597][T18900] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.347899][T20605] loop3: detected capacity change from 0 to 164 [ 310.349649][T18900] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 310.367762][T20605] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 310.379605][T20605] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 310.397558][T20605] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 310.410342][T18900] batman_adv: batadv0: Removing interface: ip6gretap1 [ 310.539265][T19757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.571034][T18900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.592170][T18900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.612157][T18900] bond0 (unregistering): Released all slaves [ 310.620148][T18900] bond1 (unregistering): Released all slaves [ 310.643360][T18900] bond2 (unregistering): Released all slaves [ 310.659503][T18900] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 310.674225][T18900] wireguard0: left promiscuous mode [ 310.685054][T18900] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 310.718904][T18900] bond3 (unregistering): Released all slaves [ 310.732448][T20604] C: renamed from team_slave_0 (while UP) [ 310.740034][T20604] netlink: 'syz.5.5501': attribute type 4 has an invalid length. [ 310.747849][T20604] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5501'. [ 310.756991][T20604] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 310.822848][T20620] loop3: detected capacity change from 0 to 1024 [ 310.840213][T18900] tipc: Disabling bearer [ 310.845551][T18900] tipc: Left network mode [ 310.873806][T20624] loop4: detected capacity change from 0 to 2048 [ 310.901821][T20620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.926457][T20624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.947890][T18900] hsr_slave_0: left promiscuous mode [ 310.956208][T18900] hsr_slave_1: left promiscuous mode [ 310.959820][T20620] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.5507: inode #778331508: comm syz.3.5507: iget: illegal inode # [ 310.962419][T18900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.031593][T20620] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5507: error while reading EA inode 778331508 err=-117 [ 311.058930][T20644] loop0: detected capacity change from 0 to 512 [ 311.062401][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5510'. [ 311.082493][T20648] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.5507: corrupted xattr block 113: invalid header [ 311.105306][T20644] EXT4-fs: Ignoring removed orlov option [ 311.111124][T20644] EXT4-fs: Ignoring removed i_version option [ 311.117178][T20644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.147979][T20644] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 311.156166][T20644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 311.181559][T20644] EXT4-fs (loop0): orphan cleanup on readonly fs [ 311.200565][T20644] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 311.215551][T20644] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 311.234507][T20644] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5511: bg 0: block 40: padding at end of block bitmap is not set [ 311.251743][T20644] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 311.261491][T20644] EXT4-fs (loop0): 1 truncate cleaned up [ 311.267910][T20644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.286204][T20645] dummy0: entered promiscuous mode [ 311.293340][T20645] dummy0: left promiscuous mode [ 311.327187][T19486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.396118][T20535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.413268][T20535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.438554][T20535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.468227][T20535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.478039][T19757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.518402][T20679] loop5: detected capacity change from 0 to 512 [ 311.531653][T20679] EXT4-fs warning (device loop5): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 311.588493][T20535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.615116][T20535] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.625238][T16161] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.632417][T16161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.652364][T16161] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.659503][T16161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.678563][T20192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.695872][T17260] Bluetooth: hci0: Frame reassembly failed (-84) [ 311.738296][T20695] loop3: detected capacity change from 0 to 512 [ 311.746538][T18900] IPVS: stop unused estimator thread 0... [ 311.761815][ T362] Bluetooth: hci1: Frame reassembly failed (-84) [ 311.769614][T20695] EXT4-fs: Ignoring removed orlov option [ 311.775416][T20695] EXT4-fs: Ignoring removed i_version option [ 311.781575][T20695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.800061][T20695] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 311.808060][T20695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 311.821054][T20695] EXT4-fs (loop3): orphan cleanup on readonly fs [ 311.828674][T20695] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 311.843357][T20695] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 311.854162][T20695] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5521: bg 0: block 40: padding at end of block bitmap is not set [ 311.868691][T20695] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 311.878459][T20535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.886646][T20695] EXT4-fs (loop3): 1 truncate cleaned up [ 311.893289][T20695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.963293][T20535] veth0_vlan: entered promiscuous mode [ 311.972544][T20535] veth1_vlan: entered promiscuous mode [ 311.984402][T20192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.994843][T20535] veth0_macvtap: entered promiscuous mode [ 312.002682][T20535] veth1_macvtap: entered promiscuous mode [ 312.013658][T20535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.023269][T20535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.041260][T18900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.053811][T18900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.064004][T18900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.077068][T20707] loop3: detected capacity change from 0 to 1024 [ 312.086794][T18900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.116892][T20707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.137818][T20707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.5522: inode #778331508: comm syz.3.5522: iget: illegal inode # [ 312.152138][T20707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5522: error while reading EA inode 778331508 err=-117 [ 312.167044][T20707] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.5522: corrupted xattr block 113: invalid header [ 312.186348][T20715] loop2: detected capacity change from 0 to 512 [ 312.192929][T20715] EXT4-fs: Ignoring removed i_version option [ 312.199228][T20715] EXT4-fs: Ignoring removed bh option [ 312.210089][T20715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.222752][T20715] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.884640][T20192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.971174][T20733] loop3: detected capacity change from 0 to 512 [ 312.978159][T20733] msdos: Bad value for 'uid' [ 312.982855][T20733] msdos: Bad value for 'uid' [ 312.995669][T20535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.018372][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5530'. [ 313.028433][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5530'. [ 313.038215][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5530'. [ 313.090225][T20738] EXT4-fs: Ignoring removed orlov option [ 313.096043][T20738] EXT4-fs: Ignoring removed i_version option [ 313.102083][T20738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.110212][T20738] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 313.118264][T20738] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 313.126930][T20738] EXT4-fs (loop2): orphan cleanup on readonly fs [ 313.133422][T20738] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 313.148077][T20738] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 313.155643][T20738] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5531: bg 0: block 40: padding at end of block bitmap is not set [ 313.170481][T20738] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 313.182943][T20738] EXT4-fs (loop2): 1 truncate cleaned up [ 313.189398][T20738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.212354][T20741] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.225540][T20741] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.239174][T20741] EXT4-fs (loop0): shut down requested (2) [ 313.268634][T20535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.526871][T19486] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.547017][T20749] netlink: 'syz.0.5535': attribute type 4 has an invalid length. [ 313.554830][T20749] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5535'. [ 313.563973][T20749] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 313.716069][T17374] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.722326][ T3606] Bluetooth: hci0: command 0x1003 tx timeout [ 313.748989][T20752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 313.761581][T20752] EXT4-fs (loop0): 1 truncate cleaned up [ 313.767847][T20752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.796192][T17374] Bluetooth: hci1: command 0x1003 tx timeout [ 313.802259][ T9269] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 313.808875][T20756] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20756 comm=syz.4.5537 [ 313.922419][T20763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5536'. [ 313.994508][T20768] EXT4-fs: Ignoring removed i_version option [ 314.000741][T20768] EXT4-fs: Ignoring removed bh option [ 314.021294][T20770] EXT4-fs: Ignoring removed orlov option [ 314.027186][T20770] EXT4-fs: Ignoring removed i_version option [ 314.033247][T20770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.053516][T20770] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 314.061738][T20770] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 314.074622][T20770] EXT4-fs (loop3): orphan cleanup on readonly fs [ 314.081442][T20770] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 314.083854][T20768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.096146][T20770] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 314.109143][T20768] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.126466][T20770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5543: bg 0: block 40: padding at end of block bitmap is not set [ 314.141049][T20770] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 314.150290][T20770] EXT4-fs (loop3): 1 truncate cleaned up [ 314.158249][T20770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.202662][T20775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5544'. [ 314.211753][T20775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5544'. [ 314.328339][T20192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.399436][T20782] C: renamed from team_slave_0 (while UP) [ 314.415424][T20782] netlink: 'syz.3.5547': attribute type 4 has an invalid length. [ 314.423275][T20782] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5547'. [ 314.432372][T20782] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 314.658382][T19486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.742919][T19906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.807237][T20818] set_capacity_and_notify: 5 callbacks suppressed [ 314.807255][T20818] loop3: detected capacity change from 0 to 512 [ 314.824442][T20818] EXT4-fs: Ignoring removed orlov option [ 314.830342][T20818] EXT4-fs: Ignoring removed i_version option [ 314.836482][T20818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.856497][T20818] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 314.864470][T20818] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 314.872897][T20818] EXT4-fs (loop3): orphan cleanup on readonly fs [ 314.892273][T20818] __quota_error: 4546 callbacks suppressed [ 314.892292][T20818] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 314.920537][T20818] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 314.935198][T20818] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 314.946586][T20818] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5556: bg 0: block 40: padding at end of block bitmap is not set [ 314.963470][T20818] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 314.972733][T20818] EXT4-fs (loop3): 1 truncate cleaned up [ 314.979589][T20818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.020579][T20818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5556'. [ 315.050385][ T29] audit: type=1400 audit(1770161244.611:22126): avc: denied { mounton } for pid=20843 comm="syz.4.5559" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 315.102059][ T29] audit: type=1400 audit(1770161244.661:22127): avc: denied { unmount } for pid=19757 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 315.155431][T20192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.209369][ T29] audit: type=1400 audit(1770161244.771:22128): avc: denied { connect } for pid=20861 comm="syz.4.5563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.516036][ T9269] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 316.806221][T20991] pim6reg1: entered promiscuous mode [ 316.811663][T20991] pim6reg1: entered allmulticast mode [ 316.949256][ T29] audit: type=1400 audit(1770161246.501:22129): avc: denied { create } for pid=21021 comm="syz.0.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 317.223419][ T29] audit: type=1400 audit(1770161246.781:22130): avc: denied { relabelfrom } for pid=21054 comm="syz.3.5625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 317.243993][ T29] audit: type=1400 audit(1770161246.781:22131): avc: denied { relabelto } for pid=21054 comm="syz.3.5625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 317.761983][ T29] audit: type=1400 audit(1770161247.321:22132): avc: denied { ioctl } for pid=21096 comm="syz.3.5643" path="ipc:[4026533133]" dev="nsfs" ino=4026533133 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 318.103313][T21119] syzkaller0: entered promiscuous mode [ 318.108898][T21119] syzkaller0: entered allmulticast mode [ 318.677715][T21146] syzkaller0: entered promiscuous mode [ 318.749506][T21153] syzkaller0: entered promiscuous mode [ 318.755042][T21153] syzkaller0: entered allmulticast mode [ 318.895324][T21179] pim6reg1: entered promiscuous mode [ 318.900789][T21179] pim6reg1: entered allmulticast mode [ 319.268560][ T29] audit: type=1400 audit(1770161248.811:22133): avc: denied { mount } for pid=21183 comm="syz.2.5677" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 319.559934][ T29] audit: type=1400 audit(1770161249.111:22134): avc: denied { checkpoint_restore } for pid=21197 comm="syz.0.5683" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 320.140074][T21226] loop3: detected capacity change from 0 to 128 [ 320.306288][ T29] audit: type=1400 audit(1770161249.701:22135): avc: denied { setattr } for pid=21223 comm="syz.3.5694" name="tty27" dev="devtmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 320.329863][ T29] audit: type=1400 audit(1770161249.711:22136): avc: denied { write } for pid=21223 comm="syz.3.5694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 320.798388][T21269] loop3: detected capacity change from 0 to 128 [ 320.839871][ T29] audit: type=1400 audit(1770161250.401:22137): avc: denied { remount } for pid=21268 comm="syz.3.5713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 321.378722][ T29] audit: type=1400 audit(1770161250.941:22138): avc: denied { create } for pid=21319 comm="syz.4.5736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 321.429999][ T29] audit: type=1400 audit(1770161250.991:22139): avc: denied { ioctl } for pid=21319 comm="syz.4.5736" path="socket:[76757]" dev="sockfs" ino=76757 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 321.498438][T21327] loop3: detected capacity change from 0 to 128 [ 321.525162][T21329] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 321.826326][T21355] tap0: tun_chr_ioctl cmd 1074025677 [ 321.831834][T21355] tap0: linktype set to 773 [ 321.839922][T21355] tap0: tun_chr_ioctl cmd 1074025680 [ 321.941552][T21360] loop4: detected capacity change from 0 to 512 [ 321.950270][T21360] msdos: Unknown parameter 'ts' [ 322.015050][T21360] loop4: detected capacity change from 0 to 8192 [ 322.211925][T21382] syzkaller0: entered promiscuous mode [ 322.217509][T21382] syzkaller0: entered allmulticast mode [ 322.266291][T21365] loop2: detected capacity change from 0 to 32768 [ 322.298100][T21386] pim6reg1: entered promiscuous mode [ 322.303457][T21386] pim6reg1: entered allmulticast mode [ 322.377795][T21392] loop4: detected capacity change from 0 to 256 [ 322.407213][T21390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.442647][T21392] FAT-fs (loop4): Directory bread(block 64) failed [ 322.450548][T21392] FAT-fs (loop4): Directory bread(block 65) failed [ 322.457484][T21392] FAT-fs (loop4): Directory bread(block 66) failed [ 322.464388][T21392] FAT-fs (loop4): Directory bread(block 67) failed [ 322.471266][T21392] FAT-fs (loop4): Directory bread(block 68) failed [ 322.477966][T21392] FAT-fs (loop4): Directory bread(block 69) failed [ 322.484578][T21392] FAT-fs (loop4): Directory bread(block 70) failed [ 322.493736][T21392] FAT-fs (loop4): Directory bread(block 71) failed [ 322.500529][T21392] FAT-fs (loop4): Directory bread(block 72) failed [ 322.507429][T21392] FAT-fs (loop4): Directory bread(block 73) failed [ 322.569617][T21408] loop5: detected capacity change from 0 to 7 [ 322.663045][T21418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.942980][T21425] loop2: detected capacity change from 0 to 512 [ 322.960912][T21425] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 323.209902][T21438] bond1: option lacp_rate: invalid value (5) [ 323.217549][T21438] bond1 (unregistering): Released all slaves [ 323.706048][ T29] audit: type=1400 audit(1770161253.261:22140): avc: denied { name_bind } for pid=21472 comm="syz.0.5803" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 323.854627][ T29] audit: type=1400 audit(1770161253.411:22141): avc: denied { mounton } for pid=21482 comm="syz.4.5808" path="/proc/250/task" dev="proc" ino=77614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 323.939228][T21493] loop0: detected capacity change from 0 to 128 [ 324.071496][T21502] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.170641][T21508] syzkaller0: entered promiscuous mode [ 324.176249][T21508] syzkaller0: entered allmulticast mode [ 324.184707][ T31] syzkaller0: tun_net_xmit 48 [ 324.195470][T21508] syzkaller0: create flow: hash 3859784926 index 1 [ 324.204328][T21507] syzkaller0: delete flow: hash 3859784926 index 1 [ 324.980536][T21617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5870'. [ 324.989718][T21617] netem: change failed [ 325.195621][T21649] set_capacity_and_notify: 1 callbacks suppressed [ 325.195639][T21649] loop5: detected capacity change from 0 to 512 [ 325.222578][T21649] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.298012][T21655] loop0: detected capacity change from 0 to 256 [ 325.318836][T21655] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 325.409414][T21667] loop3: detected capacity change from 0 to 1764 [ 325.488933][T20192] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 325.499196][T21677] loop2: detected capacity change from 0 to 128 [ 325.521065][T20192] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 325.593881][T21683] syzkaller0: entered promiscuous mode [ 325.599550][T21683] syzkaller0: entered allmulticast mode [ 325.734100][T21692] loop2: detected capacity change from 0 to 512 [ 325.740982][T21692] msdos: Unknown parameter 'ts' [ 325.817994][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.911027][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.949480][T21709] syzkaller0: entered promiscuous mode [ 325.955040][T21709] syzkaller0: entered allmulticast mode [ 325.981403][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.042045][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.121660][T21733] loop0: detected capacity change from 0 to 512 [ 326.164237][T21733] msdos: Unknown parameter 'ts' [ 326.191912][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5927'. [ 326.207205][ T31] bridge_slave_1: left allmulticast mode [ 326.212944][ T31] bridge_slave_1: left promiscuous mode [ 326.218839][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.227301][ T31] bridge_slave_0: left allmulticast mode [ 326.233071][ T31] bridge_slave_0: left promiscuous mode [ 326.238851][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.392171][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.402695][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.412687][ T31] bond0 (unregistering): Released all slaves [ 326.441172][T21757] syzkaller0: entered promiscuous mode [ 326.446782][T21757] syzkaller0: entered allmulticast mode [ 326.472999][ T31] hsr_slave_0: left promiscuous mode [ 326.496007][ T31] hsr_slave_1: left promiscuous mode [ 326.501865][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.509304][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.525027][T21770] loop5: detected capacity change from 0 to 512 [ 326.545659][T21770] msdos: Unknown parameter 'ts' [ 326.570589][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.581066][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.654049][ T31] veth1_macvtap: left promiscuous mode [ 326.659754][ T31] veth0_macvtap: left promiscuous mode [ 326.665349][ T31] veth1_vlan: left promiscuous mode [ 326.677649][ T31] veth0_vlan: left promiscuous mode [ 326.887062][ T31] team0 (unregistering): Port device team_slave_1 removed [ 326.907926][ T31] team0 (unregistering): Port device C removed [ 327.022483][T21813] loop5: detected capacity change from 0 to 8192 [ 327.166538][T21832] loop5: detected capacity change from 0 to 7 [ 327.195750][T21725] chnl_net:caif_netlink_parms(): no params data found [ 327.449785][T21725] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.456943][T21725] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.660920][T21725] bridge_slave_0: entered allmulticast mode [ 327.721524][T21725] bridge_slave_0: entered promiscuous mode [ 327.817862][T21725] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.825047][T21725] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.963430][T21725] bridge_slave_1: entered allmulticast mode [ 328.030508][T21725] bridge_slave_1: entered promiscuous mode [ 328.163445][T21725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.246964][T21725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.361018][T21901] loop0: detected capacity change from 0 to 128 [ 328.377120][T21725] team0: Port device team_slave_0 added [ 328.407308][T21725] team0: Port device team_slave_1 added [ 328.473767][T21725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.480794][T21725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.506911][T21725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.774600][T21725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.781740][T21725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.807710][T21725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.007004][T21932] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 329.015589][T21932] FAT-fs (loop2): Filesystem has been set read-only [ 329.404630][T21944] syzkaller0: entered promiscuous mode [ 329.410474][T21944] syzkaller0: entered allmulticast mode [ 329.568822][T21725] hsr_slave_0: entered promiscuous mode [ 329.615938][T21725] hsr_slave_1: entered promiscuous mode [ 329.622102][T21725] debugfs: 'hsr0' already exists in 'hsr' [ 329.627921][T21725] Cannot create hsr debugfs directory [ 329.758550][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6000'. [ 329.939732][T21725] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.958578][T21725] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.992720][T21725] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 330.028906][T21725] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 330.162330][T21725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.226297][T21725] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.249034][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.256169][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.276841][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.283958][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.330473][T21725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.360912][T22047] set_capacity_and_notify: 1 callbacks suppressed [ 330.360934][T22047] loop4: detected capacity change from 0 to 256 [ 330.401427][T22047] FAT-fs (loop4): Directory bread(block 64) failed [ 330.408611][T22047] FAT-fs (loop4): Directory bread(block 65) failed [ 330.423671][T21725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.426492][T22047] FAT-fs (loop4): Directory bread(block 66) failed [ 330.439816][T22047] FAT-fs (loop4): Directory bread(block 67) failed [ 330.446465][T22047] FAT-fs (loop4): Directory bread(block 68) failed [ 330.462596][T22047] FAT-fs (loop4): Directory bread(block 69) failed [ 330.479868][T22047] FAT-fs (loop4): Directory bread(block 70) failed [ 330.518958][T22047] FAT-fs (loop4): Directory bread(block 71) failed [ 330.525611][T22047] FAT-fs (loop4): Directory bread(block 72) failed [ 330.532448][T22047] FAT-fs (loop4): Directory bread(block 73) failed [ 330.573596][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6034'. [ 330.704231][T21725] veth0_vlan: entered promiscuous mode [ 330.731656][T21725] veth1_vlan: entered promiscuous mode [ 330.765165][T21725] veth0_macvtap: entered promiscuous mode [ 330.786080][T21725] veth1_macvtap: entered promiscuous mode [ 330.811206][T21725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.829574][T21725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.848334][ T362] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.867933][T15685] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.897549][T15685] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.929137][ T362] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.991462][T22103] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 331.081372][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6046'. [ 331.178869][T22110] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6048'. [ 331.357240][T22132] syzkaller0: entered promiscuous mode [ 331.362842][T22132] syzkaller0: entered allmulticast mode [ 331.900563][ T29] audit: type=1400 audit(1770161261.461:22142): avc: denied { ioctl } for pid=22191 comm="syz.2.6083" path="/newroot/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x45c0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 331.975254][T22201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6086'. [ 332.054941][T22214] loop2: detected capacity change from 0 to 128 [ 332.073035][T22214] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 332.081739][T22214] FAT-fs (loop2): Filesystem has been set read-only [ 332.132465][T22222] syzkaller0: entered promiscuous mode [ 332.138280][T22222] syzkaller0: entered allmulticast mode [ 332.178978][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6099'. [ 332.191294][T22231] loop5: detected capacity change from 0 to 7 [ 332.398505][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6111'. [ 332.749898][T22292] syzkaller0: entered promiscuous mode [ 332.755502][T22292] syzkaller0: entered allmulticast mode [ 332.915407][T22310] loop6: detected capacity change from 0 to 128 [ 333.118053][ T29] audit: type=1400 audit(1770161262.681:22143): avc: denied { mount } for pid=22336 comm="syz.0.6150" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 333.143423][T22341] loop2: detected capacity change from 0 to 128 [ 333.167422][ T29] audit: type=1400 audit(1770161262.721:22144): avc: denied { unmount } for pid=19486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 333.217691][ T29] audit: type=1400 audit(1770161262.781:22145): avc: denied { mount } for pid=22344 comm="syz.0.6154" name="/" dev="hugetlbfs" ino=81453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 333.279905][ T29] audit: type=1400 audit(1770161262.821:22146): avc: denied { unmount } for pid=19486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 333.382171][T22366] loop5: detected capacity change from 0 to 128 [ 333.503502][T22382] loop0: detected capacity change from 0 to 512 [ 333.510623][T22382] msdos: Unknown parameter 'ts' [ 333.564927][T22382] loop0: detected capacity change from 0 to 8192 [ 333.715225][T22405] loop2: detected capacity change from 0 to 128 [ 333.786641][T22414] loop2: detected capacity change from 0 to 512 [ 333.803471][T22414] msdos: Unknown parameter 'ts' [ 333.983089][T22436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6197'. [ 334.101270][T22455] msdos: Unknown parameter 'ts' [ 334.173252][T22457] iso9660: Unknown parameter 'de' [ 334.321318][T22461] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 334.329943][T22461] FAT-fs (loop4): Filesystem has been set read-only [ 335.634237][T22515] syzkaller0: entered promiscuous mode [ 335.639927][T22515] syzkaller0: entered allmulticast mode [ 335.666124][ T29] audit: type=1400 audit(1770161265.201:22147): avc: denied { recv } for pid=22497 comm="syz.0.6224" saddr=10.128.0.163 src=34368 daddr=10.128.0.70 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 335.961060][T22534] set_capacity_and_notify: 6 callbacks suppressed [ 335.961075][T22534] loop5: detected capacity change from 0 to 128 [ 336.244855][T22549] syzkaller0: entered promiscuous mode [ 336.246313][T22547] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6246'. [ 336.250473][T22549] syzkaller0: entered allmulticast mode [ 336.368176][ T362] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.458912][ T362] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.554447][ T362] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.630807][ T362] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.808030][ T362] bridge_slave_1: left allmulticast mode [ 336.813747][ T362] bridge_slave_1: left promiscuous mode [ 336.819528][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.874040][ T362] bridge_slave_0: left allmulticast mode [ 336.879791][ T362] bridge_slave_0: left promiscuous mode [ 336.885508][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.934299][ T362] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 336.983536][ T362] batman_adv: batadv0: Removing interface: ip6gretap1 [ 337.056270][ T362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.076688][ T362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.090395][ T362] bond0 (unregistering): Released all slaves [ 337.113725][T22595] syzkaller0: entered promiscuous mode [ 337.119349][T22595] syzkaller0: entered allmulticast mode [ 337.157090][ T362] hsr_slave_0: left promiscuous mode [ 337.170371][ T362] hsr_slave_1: left promiscuous mode [ 337.176687][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.184117][ T362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.206402][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.213908][ T362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.246544][ T362] veth1_macvtap: left promiscuous mode [ 337.252064][ T362] veth0_macvtap: left promiscuous mode [ 337.266106][ T362] veth1_vlan: left promiscuous mode [ 337.276297][ T362] veth0_vlan: left promiscuous mode [ 337.434501][ T362] team0 (unregistering): Port device team_slave_1 removed [ 337.447303][ T362] team0 (unregistering): Port device C removed [ 337.590733][T22635] loop5: detected capacity change from 0 to 2048 [ 337.612953][T22563] chnl_net:caif_netlink_parms(): no params data found [ 337.628562][T22635] GPT:first_usable_lbas don't match. [ 337.633998][T22635] GPT:34 != 290 [ 337.637567][T22635] GPT: Use GNU Parted to correct GPT errors. [ 337.643962][T22635] loop5: p1 p2 p3 [ 337.686764][ T29] audit: type=1400 audit(1770161267.251:22148): avc: denied { read write } for pid=22634 comm="syz.5.6272" name="loop5p1" dev="devtmpfs" ino=2396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 337.710412][ T29] audit: type=1400 audit(1770161267.251:22149): avc: denied { open } for pid=22634 comm="syz.5.6272" path="/dev/loop5p1" dev="devtmpfs" ino=2396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 337.882176][T22563] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.889351][T22563] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.915534][T19965] udevd[19965]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 337.936541][T19902] udevd[19902]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 337.946879][T22563] bridge_slave_0: entered allmulticast mode [ 337.963706][T21602] udevd[21602]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 337.976824][T22563] bridge_slave_0: entered promiscuous mode [ 338.018848][T19965] udevd[19965]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 338.018930][T19902] udevd[19902]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 338.040499][T22674] udevd[22674]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 338.049459][T22671] syzkaller0: entered promiscuous mode [ 338.055811][T22671] syzkaller0: entered allmulticast mode [ 338.067831][T22563] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.074943][T22563] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.082577][T22563] bridge_slave_1: entered allmulticast mode [ 338.089263][T22563] bridge_slave_1: entered promiscuous mode [ 338.129487][T22563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.140753][T22563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.260798][T22563] team0: Port device team_slave_0 added [ 338.286940][T22690] loop5: detected capacity change from 0 to 128 [ 338.294646][T22563] team0: Port device team_slave_1 added [ 338.324624][T22694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6288'. [ 338.361698][T22563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.368780][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.395042][T22563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.476741][T22563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.483737][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.509816][T22563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.615190][T22563] hsr_slave_0: entered promiscuous mode [ 338.622019][T22563] hsr_slave_1: entered promiscuous mode [ 338.636865][T22563] debugfs: 'hsr0' already exists in 'hsr' [ 338.642641][T22563] Cannot create hsr debugfs directory [ 338.678299][ T362] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.745519][ T362] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.830587][ T362] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.920603][T22691] chnl_net:caif_netlink_parms(): no params data found [ 338.955610][ T362] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.071080][T22757] syzkaller0: entered promiscuous mode [ 339.076692][T22757] syzkaller0: entered allmulticast mode [ 339.119172][T17256] syzkaller0: tun_net_xmit 48 [ 339.124677][T22769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6301'. [ 339.126652][T22757] syzkaller0: create flow: hash 205217239 index 1 [ 339.160006][T22772] loop5: detected capacity change from 0 to 128 [ 339.183259][T22755] syzkaller0: delete flow: hash 205217239 index 1 [ 339.220229][T22774] loop5: detected capacity change from 0 to 2048 [ 339.222177][T22691] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.233899][T22691] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.243180][T22691] bridge_slave_0: entered allmulticast mode [ 339.249994][T22691] bridge_slave_0: entered promiscuous mode [ 339.274964][T22774] GPT:first_usable_lbas don't match. [ 339.280357][T22774] GPT:34 != 290 [ 339.284010][T22774] GPT: Use GNU Parted to correct GPT errors. [ 339.290191][T22691] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.290292][T22774] loop5: p1 p2 p3 [ 339.297305][T22691] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.298032][T22691] bridge_slave_1: entered allmulticast mode [ 339.315037][T22691] bridge_slave_1: entered promiscuous mode [ 339.357118][T22691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.379833][ T362] bridge_slave_1: left allmulticast mode [ 339.385562][ T362] bridge_slave_1: left promiscuous mode [ 339.391271][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.416331][ T362] bridge_slave_0: left allmulticast mode [ 339.422023][ T362] bridge_slave_0: left promiscuous mode [ 339.427862][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.465723][T19965] udevd[19965]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 339.465730][T19902] udevd[19902]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 339.496729][T22674] udevd[22674]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 339.588964][ T362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.600612][ T362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.611443][ T362] bond0 (unregistering): Released all slaves [ 339.622284][T22691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.635322][T22731] chnl_net:caif_netlink_parms(): no params data found [ 339.697359][T22691] team0: Port device team_slave_0 added [ 339.711881][ T362] hsr_slave_0: left promiscuous mode [ 339.721275][ T362] hsr_slave_1: left promiscuous mode [ 339.727659][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.727948][T22796] loop5: detected capacity change from 0 to 7 [ 339.735098][ T362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.749935][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.757391][ T362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.788130][ T362] veth1_macvtap: left promiscuous mode [ 339.794923][ T362] veth0_macvtap: left promiscuous mode [ 339.804914][ T362] veth1_vlan: left promiscuous mode [ 339.823192][ T362] veth0_vlan: left promiscuous mode [ 339.830096][T22802] sctp: [Deprecated]: syz.2.6313 (pid 22802) Use of int in max_burst socket option. [ 339.830096][T22802] Use struct sctp_assoc_value instead [ 339.969567][ T362] team0 (unregistering): Port device team_slave_1 removed [ 339.992611][ T362] team0 (unregistering): Port device team_slave_0 removed [ 340.080585][T22691] team0: Port device team_slave_1 added [ 340.135326][T22691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.142370][T22691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.168399][T22691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.180107][T22691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.187128][T22691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.213255][T22691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.273279][T22691] hsr_slave_0: entered promiscuous mode [ 340.284308][T22691] hsr_slave_1: entered promiscuous mode [ 340.290715][T22691] debugfs: 'hsr0' already exists in 'hsr' [ 340.296536][T22691] Cannot create hsr debugfs directory [ 340.309119][T22731] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.316336][T22731] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.323546][T22731] bridge_slave_0: entered allmulticast mode [ 340.330695][T22731] bridge_slave_0: entered promiscuous mode [ 340.344645][T22731] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.351940][T22731] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.362594][T22731] bridge_slave_1: entered allmulticast mode [ 340.369229][T22731] bridge_slave_1: entered promiscuous mode [ 340.381878][T22563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.404485][T22563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.419074][T22731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.428320][T22563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.441228][T22563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.453372][T22731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.483100][T22731] team0: Port device team_slave_0 added [ 340.494349][T22731] team0: Port device team_slave_1 added [ 340.517520][T22731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.524534][T22731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.550540][T22731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.570918][T22731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.577980][T22731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.604019][T22731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.633790][T22691] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.657661][T22731] hsr_slave_0: entered promiscuous mode [ 340.663963][T22731] hsr_slave_1: entered promiscuous mode [ 340.671067][T22731] debugfs: 'hsr0' already exists in 'hsr' [ 340.676904][T22731] Cannot create hsr debugfs directory [ 340.710325][T22691] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.735320][T22563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.771158][T22563] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.791825][T16161] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.799110][T16161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.810864][T22691] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.837209][T16161] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.844342][T16161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.862478][T22563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.872957][T22563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.899317][T22691] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.984566][T22563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.045323][T22691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.055197][T22691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.066986][T22691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.082719][T22691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.167993][T22691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.197477][T22691] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.224773][T15685] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.231903][T15685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.249818][T15685] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.257017][T15685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.345085][T22691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.355526][T22691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.382117][T22563] veth0_vlan: entered promiscuous mode [ 341.401446][T22731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.417828][T22731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 341.440013][T22731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 341.451045][T22731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 341.461753][T22563] veth1_vlan: entered promiscuous mode [ 341.535370][T22563] veth0_macvtap: entered promiscuous mode [ 341.558773][T22563] veth1_macvtap: entered promiscuous mode [ 341.588555][T22691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.607558][T22563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.647590][T22563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.678306][T17256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.699456][T22731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.714268][T17256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.739797][T22731] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.756584][T17256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.770626][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.777845][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.800476][ T5509] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.807612][ T5509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.854586][T17256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.971259][T22691] veth0_vlan: entered promiscuous mode [ 341.981927][T22691] veth1_vlan: entered promiscuous mode [ 342.033784][T22691] veth0_macvtap: entered promiscuous mode [ 342.069032][T22731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.102111][T22691] veth1_macvtap: entered promiscuous mode [ 342.137767][T22691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.177860][T22691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.198134][T16161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.240830][T16161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.261326][T16161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.272920][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.473009][T22731] veth0_vlan: entered promiscuous mode [ 342.503213][T22731] veth1_vlan: entered promiscuous mode [ 342.526765][T22731] veth0_macvtap: entered promiscuous mode [ 342.538090][T22731] veth1_macvtap: entered promiscuous mode [ 342.549994][T22731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.563444][T22731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.575823][T17256] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.601721][T17256] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.638373][T17256] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.648053][T17256] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.785399][T23059] loop6: detected capacity change from 0 to 512 [ 342.822623][T23059] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 343.249772][ T29] audit: type=1400 audit(1770161272.811:22150): avc: denied { read } for pid=23117 comm="syz.4.6355" lport=28010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 343.762374][T23189] bridge_slave_1: default FDB implementation only supports local addresses [ 343.828595][ T3001] ================================================================== [ 343.836740][ T3001] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 343.844847][ T3001] [ 343.847194][ T3001] write to 0xffff8881302fa630 of 8 bytes by task 22674 on cpu 0: [ 343.855066][ T3001] dentry_unlink_inode+0x65/0x260 [ 343.860132][ T3001] d_delete+0xc8/0xe0 [ 343.864142][ T3001] d_delete_notify+0x32/0x100 [ 343.868867][ T3001] vfs_unlink+0x331/0x440 [ 343.873215][ T3001] do_unlinkat+0x1e2/0x4b0 [ 343.877672][ T3001] __x64_sys_unlink+0x2e/0x40 [ 343.882384][ T3001] x64_sys_call+0x2f48/0x3000 [ 343.887080][ T3001] do_syscall_64+0xc0/0x2a0 [ 343.891613][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.897527][ T3001] [ 343.899866][ T3001] read to 0xffff8881302fa630 of 8 bytes by task 3001 on cpu 1: [ 343.907421][ T3001] step_into_slowpath+0x12c/0x4c0 [ 343.912489][ T3001] path_lookupat+0x330/0x500 [ 343.917117][ T3001] filename_lookup+0x190/0x390 [ 343.921929][ T3001] do_readlinkat+0x7d/0x340 [ 343.926488][ T3001] __x64_sys_readlink+0x47/0x60 [ 343.931381][ T3001] x64_sys_call+0x2af1/0x3000 [ 343.936085][ T3001] do_syscall_64+0xc0/0x2a0 [ 343.940621][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.946530][ T3001] [ 343.948870][ T3001] value changed: 0xffff888104ab2648 -> 0x0000000000000000 [ 343.955987][ T3001] [ 343.958321][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 343.964487][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 343.975355][ T3001] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 343.979164][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.989233][ T3001] ================================================================== [ 344.004741][ T29] audit: type=1400 audit(1770161273.571:22151): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[808]" dev="pipefs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 344.402154][T17256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.509802][T17256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.568876][T17256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.649118][T17256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.719265][T17256] bridge_slave_1: left allmulticast mode [ 344.724951][T17256] bridge_slave_1: left promiscuous mode [ 344.730733][T17256] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.738610][T17256] bridge_slave_0: left allmulticast mode [ 344.744307][T17256] bridge_slave_0: left promiscuous mode [ 344.750075][T17256] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.858090][T17256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.868277][T17256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.878160][T17256] bond0 (unregistering): Released all slaves [ 344.922025][T17256] hsr_slave_0: left promiscuous mode [ 344.927806][T17256] hsr_slave_1: left promiscuous mode [ 344.933683][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.941186][T17256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.949293][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.956758][T17256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.967709][T17256] veth1_vlan: left promiscuous mode [ 344.973107][T17256] veth0_vlan: left promiscuous mode [ 345.039995][T17256] team0 (unregistering): Port device team_slave_1 removed [ 345.049852][T17256] team0 (unregistering): Port device team_slave_0 removed [ 345.371576][T17256] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.429216][T17256] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.480508][T17256] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.558984][T17256] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.641207][T17256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.659026][T17256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.720847][T17256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.760023][T17256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.836941][T17256] bridge_slave_1: left allmulticast mode [ 345.842713][T17256] bridge_slave_1: left promiscuous mode [ 345.848441][T17256] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.857634][T17256] bridge_slave_0: left allmulticast mode [ 345.863310][T17256] bridge_slave_0: left promiscuous mode [ 345.869115][T17256] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.878078][T17256] bridge_slave_1: left allmulticast mode [ 345.883760][T17256] bridge_slave_1: left promiscuous mode [ 345.889547][T17256] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.897722][T17256] bridge_slave_0: left allmulticast mode [ 345.903498][T17256] bridge_slave_0: left promiscuous mode [ 345.909385][T17256] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.019285][T17256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.029245][T17256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.039155][T17256] bond0 (unregistering): Released all slaves [ 346.108490][T17256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.118558][T17256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.128112][T17256] bond0 (unregistering): Released all slaves [ 346.183866][T17256] hsr_slave_0: left promiscuous mode [ 346.189821][T17256] hsr_slave_1: left promiscuous mode [ 346.196276][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.203681][T17256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.212611][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.220138][T17256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.230404][T17256] hsr_slave_0: left promiscuous mode [ 346.236224][T17256] hsr_slave_1: left promiscuous mode [ 346.241963][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.249434][T17256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.257427][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.264847][T17256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.279289][T17256] veth1_macvtap: left promiscuous mode [ 346.284811][T17256] veth0_macvtap: left promiscuous mode [ 346.290566][T17256] veth1_vlan: left promiscuous mode [ 346.296206][T17256] veth0_vlan: left promiscuous mode [ 346.301976][T17256] veth1_macvtap: left promiscuous mode [ 346.308024][T17256] veth0_macvtap: left promiscuous mode [ 346.313548][T17256] veth1_vlan: left promiscuous mode [ 346.319063][T17256] veth0_vlan: left promiscuous mode [ 346.424920][T17256] team0 (unregistering): Port device team_slave_1 removed [ 346.435006][T17256] team0 (unregistering): Port device team_slave_0 removed [ 346.496161][T17256] team0 (unregistering): Port device team_slave_1 removed [ 346.505768][T17256] team0 (unregistering): Port device team_slave_0 removed [ 346.979825][T17256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.031126][T17256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.079738][T17256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.140866][T17256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.205188][T17256] bridge_slave_1: left allmulticast mode [ 347.210985][T17256] bridge_slave_1: left promiscuous mode [ 347.216751][T17256] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.224806][T17256] bridge_slave_0: left allmulticast mode [ 347.230621][T17256] bridge_slave_0: left promiscuous mode [ 347.236484][T17256] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.318699][T17256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.328499][T17256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.338437][T17256] bond0 (unregistering): Released all slaves [ 347.374798][T17256] hsr_slave_0: left promiscuous mode [ 347.380852][T17256] hsr_slave_1: left promiscuous mode [ 347.386775][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.394188][T17256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.402193][T17256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.409764][T17256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.420805][T17256] veth1_macvtap: left promiscuous mode [ 347.426384][T17256] veth0_macvtap: left promiscuous mode [ 347.431913][T17256] veth1_vlan: left promiscuous mode [ 347.437470][T17256] veth0_vlan: left promiscuous mode [ 347.518102][T17256] team0 (unregistering): Port device team_slave_1 removed [ 347.527985][T17256] team0 (unregistering): Port device team_slave_0 removed