last executing test programs: 1.124547352s ago: executing program 3 (id=286): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) 874.906476ms ago: executing program 3 (id=294): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 795.046677ms ago: executing program 1 (id=299): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1) 749.887868ms ago: executing program 1 (id=302): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 713.984619ms ago: executing program 3 (id=304): munmap(&(0x7f0000006000/0x2000)=nil, 0x2000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0xfffffffffffffef6, 0x739, &(0x7f0000000100)="330e30", 0x0, 0x1, 0x503, 0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x23) 644.7072ms ago: executing program 3 (id=305): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x10000}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 436.174823ms ago: executing program 2 (id=307): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x4000) 432.117923ms ago: executing program 1 (id=308): pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) 388.567924ms ago: executing program 3 (id=310): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x20008000) 365.348404ms ago: executing program 4 (id=311): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000001080)=""/112, 0x70}], 0x1, 0x0, 0x2) 360.725524ms ago: executing program 0 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 343.236715ms ago: executing program 3 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_usbip_server_init(0x3) 334.391515ms ago: executing program 1 (id=314): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@user_xattr}, {@sysvgroups}, {@i_version}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 329.816425ms ago: executing program 0 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x6}, 0x10004, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c"], 0x40c}}, 0x0) 316.925275ms ago: executing program 2 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 282.186196ms ago: executing program 4 (id=317): perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 274.015366ms ago: executing program 2 (id=318): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1) 214.167407ms ago: executing program 4 (id=319): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 160.633158ms ago: executing program 2 (id=320): r0 = semget(0x2, 0x4, 0x200) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}], 0x2) semop(r0, &(0x7f0000000080)=[{0x2, 0x6, 0x1000}, {0x2, 0x8, 0x1000}, {0x2, 0xfff9}, {0x1, 0x200, 0x800}, {0x3, 0x4, 0x1000}, {0x0, 0xd}, {0x0, 0x7, 0x1800}], 0x7) 157.691618ms ago: executing program 0 (id=321): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000001300), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 118.044309ms ago: executing program 2 (id=322): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x3, 0x0, r0, 0x0}]) 114.348658ms ago: executing program 4 (id=323): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) 106.296729ms ago: executing program 1 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001e000800000006001d"], 0x2c}}, 0x0) 100.715369ms ago: executing program 0 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x59}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x3404c080) 70.272899ms ago: executing program 0 (id=326): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 38.997059ms ago: executing program 4 (id=327): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$can_raw(0x1d, 0x3, 0x1) 23.1538ms ago: executing program 4 (id=328): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r0, 0x409, 0x8) fallocate(r0, 0x3, 0x9100, 0x3) 16.21519ms ago: executing program 1 (id=329): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3b89e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb0100"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x2000004) 7.25295ms ago: executing program 2 (id=330): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 0s ago: executing program 0 (id=331): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32, @ANYBLOB="14000600"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 23.211727][ T29] audit: type=1400 audit(1753289995.974:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.212649][ T3294] cgroup: Unknown subsys name 'net' [ 23.234804][ T29] audit: type=1400 audit(1753289995.974:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.262767][ T29] audit: type=1400 audit(1753289996.004:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.404844][ T3294] cgroup: Unknown subsys name 'cpuset' [ 23.411323][ T3294] cgroup: Unknown subsys name 'rlimit' [ 23.599459][ T29] audit: type=1400 audit(1753289996.364:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.623033][ T29] audit: type=1400 audit(1753289996.364:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.644285][ T29] audit: type=1400 audit(1753289996.364:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.659715][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.665165][ T29] audit: type=1400 audit(1753289996.364:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.694710][ T29] audit: type=1400 audit(1753289996.374:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.701901][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.720303][ T29] audit: type=1400 audit(1753289996.374:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.753500][ T29] audit: type=1400 audit(1753289996.444:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.840235][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 24.884401][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 24.895141][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 24.927503][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.934852][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.942258][ T3305] bridge_slave_0: entered allmulticast mode [ 24.949265][ T3305] bridge_slave_0: entered promiscuous mode [ 24.958008][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.965204][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.972390][ T3305] bridge_slave_1: entered allmulticast mode [ 24.978723][ T3305] bridge_slave_1: entered promiscuous mode [ 24.993199][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 25.020406][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.034446][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.041643][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.048986][ T3308] bridge_slave_0: entered allmulticast mode [ 25.055531][ T3308] bridge_slave_0: entered promiscuous mode [ 25.069816][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.084735][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.091882][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.099334][ T3308] bridge_slave_1: entered allmulticast mode [ 25.105720][ T3308] bridge_slave_1: entered promiscuous mode [ 25.136034][ T3305] team0: Port device team_slave_0 added [ 25.155246][ T3305] team0: Port device team_slave_1 added [ 25.163000][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.170615][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.177767][ T3304] bridge_slave_0: entered allmulticast mode [ 25.184262][ T3304] bridge_slave_0: entered promiscuous mode [ 25.192059][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.199540][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.206823][ T3304] bridge_slave_1: entered allmulticast mode [ 25.213299][ T3304] bridge_slave_1: entered promiscuous mode [ 25.220547][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.252160][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.270512][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.277742][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.285068][ T3310] bridge_slave_0: entered allmulticast mode [ 25.291536][ T3310] bridge_slave_0: entered promiscuous mode [ 25.305112][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.324481][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.331699][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.358230][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.369768][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.377042][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.384197][ T3310] bridge_slave_1: entered allmulticast mode [ 25.390618][ T3310] bridge_slave_1: entered promiscuous mode [ 25.397696][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.408921][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 25.419152][ T3308] team0: Port device team_slave_0 added [ 25.425275][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.432262][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.458940][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.485587][ T3308] team0: Port device team_slave_1 added [ 25.498200][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.525278][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.540783][ T3304] team0: Port device team_slave_0 added [ 25.562564][ T3304] team0: Port device team_slave_1 added [ 25.570943][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.578026][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.604433][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.617061][ T3305] hsr_slave_0: entered promiscuous mode [ 25.622966][ T3305] hsr_slave_1: entered promiscuous mode [ 25.629570][ T3310] team0: Port device team_slave_0 added [ 25.641950][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.649018][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.675038][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.689679][ T3310] team0: Port device team_slave_1 added [ 25.723424][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.730522][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.757038][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.768248][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.775529][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.782848][ T3316] bridge_slave_0: entered allmulticast mode [ 25.789404][ T3316] bridge_slave_0: entered promiscuous mode [ 25.808418][ T3308] hsr_slave_0: entered promiscuous mode [ 25.814732][ T3308] hsr_slave_1: entered promiscuous mode [ 25.820644][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.828446][ T3308] Cannot create hsr debugfs directory [ 25.834590][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.841545][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.867964][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.879221][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.886202][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.912545][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.926006][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.933288][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.941350][ T3316] bridge_slave_1: entered allmulticast mode [ 25.947959][ T3316] bridge_slave_1: entered promiscuous mode [ 25.967764][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.975149][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.001266][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.042024][ T3310] hsr_slave_0: entered promiscuous mode [ 26.048196][ T3310] hsr_slave_1: entered promiscuous mode [ 26.054335][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.062404][ T3310] Cannot create hsr debugfs directory [ 26.087573][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.099507][ T3304] hsr_slave_0: entered promiscuous mode [ 26.105667][ T3304] hsr_slave_1: entered promiscuous mode [ 26.111427][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.119205][ T3304] Cannot create hsr debugfs directory [ 26.135654][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.182234][ T3316] team0: Port device team_slave_0 added [ 26.189037][ T3316] team0: Port device team_slave_1 added [ 26.236518][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.243590][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.270193][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.281484][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.288553][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.314628][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.383116][ T3316] hsr_slave_0: entered promiscuous mode [ 26.390108][ T3316] hsr_slave_1: entered promiscuous mode [ 26.396132][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.403768][ T3316] Cannot create hsr debugfs directory [ 26.440331][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.451876][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.467242][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.478432][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.508953][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.517816][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.529213][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.538239][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.576974][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.590926][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.599954][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.611832][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.648069][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.664414][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.678560][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.687597][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.706314][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.724030][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.741254][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.752745][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.761762][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.771289][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.778398][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.788066][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.813047][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.820194][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.829230][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.836372][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.844874][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.851936][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.867829][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.876971][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.897566][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.921788][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.932663][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.940112][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.956837][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.964324][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.020084][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.043303][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.053806][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.067436][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.089978][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.100703][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.116283][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.128316][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.135615][ T1578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.151106][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.165856][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.173054][ T1578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.182244][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.189331][ T1578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.204925][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.212359][ T1578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.261300][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.271875][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.290953][ T3305] veth0_vlan: entered promiscuous mode [ 27.298823][ T3305] veth1_vlan: entered promiscuous mode [ 27.331433][ T3305] veth0_macvtap: entered promiscuous mode [ 27.349682][ T3305] veth1_macvtap: entered promiscuous mode [ 27.375428][ T3308] veth0_vlan: entered promiscuous mode [ 27.383174][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.410763][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.420015][ T3308] veth1_vlan: entered promiscuous mode [ 27.428529][ T3310] veth0_vlan: entered promiscuous mode [ 27.436173][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.456488][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.465960][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.476940][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.485996][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.498018][ T3310] veth1_vlan: entered promiscuous mode [ 27.516461][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.527443][ T3310] veth0_macvtap: entered promiscuous mode [ 27.536243][ T3308] veth0_macvtap: entered promiscuous mode [ 27.554927][ T3310] veth1_macvtap: entered promiscuous mode [ 27.564484][ T3308] veth1_macvtap: entered promiscuous mode [ 27.590478][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.605647][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.618521][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.627611][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.639463][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.648482][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.657374][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.666373][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.678005][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.682930][ T3316] veth0_vlan: entered promiscuous mode [ 27.705984][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.714946][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.723945][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.732752][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.770337][ T3316] veth1_vlan: entered promiscuous mode [ 27.825678][ T3316] veth0_macvtap: entered promiscuous mode [ 27.849915][ T3316] veth1_macvtap: entered promiscuous mode [ 27.873008][ T3304] veth0_vlan: entered promiscuous mode [ 27.897337][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.918580][ T3304] veth1_vlan: entered promiscuous mode [ 27.935896][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.972327][ T3304] veth0_macvtap: entered promiscuous mode [ 27.997556][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.006784][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.006814][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.006916][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.032782][ T3304] veth1_macvtap: entered promiscuous mode [ 28.042958][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.060318][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.061520][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.061604][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.061633][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.061711][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.166895][ T3494] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.224890][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 28.224905][ T29] audit: type=1400 audit(1753290000.994:120): avc: denied { write } for pid=3499 comm="syz.0.12" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.232268][ T29] audit: type=1400 audit(1753290000.994:121): avc: denied { create } for pid=3501 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.233498][ T29] audit: type=1400 audit(1753290000.994:122): avc: denied { write } for pid=3501 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.233575][ T29] audit: type=1400 audit(1753290000.994:123): avc: denied { nlmsg_write } for pid=3501 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.233583][ T3505] netlink: 392 bytes leftover after parsing attributes in process `syz.2.13'. [ 28.255783][ T29] audit: type=1400 audit(1753290001.024:124): avc: denied { map } for pid=3499 comm="syz.0.12" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.329981][ T29] audit: type=1400 audit(1753290001.094:125): avc: denied { wake_alarm } for pid=3508 comm="syz.1.16" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.487169][ T3515] loop0: detected capacity change from 0 to 128 [ 28.499830][ T29] audit: type=1400 audit(1753290001.124:126): avc: denied { allowed } for pid=3510 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 28.499899][ T29] audit: type=1400 audit(1753290001.154:127): avc: denied { create } for pid=3510 comm="syz.4.17" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.499930][ T29] audit: type=1400 audit(1753290001.264:128): avc: denied { mount } for pid=3514 comm="syz.0.18" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.673798][ T29] audit: type=1400 audit(1753290001.434:129): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.693329][ T3526] tipc: Enabling of bearer rejected, failed to enable media [ 28.716986][ T3528] loop4: detected capacity change from 0 to 1024 [ 28.783455][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 28.873090][ T3533] loop0: detected capacity change from 0 to 1024 [ 28.873508][ T3533] EXT4-fs: Ignoring removed orlov option [ 28.880753][ T3536] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 28.940990][ T3533] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 28.986584][ T3533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.056364][ T3533] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.080339][ T3549] loop4: detected capacity change from 0 to 512 [ 29.109334][ T3549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.134374][ T3549] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.145862][ T3554] random: crng reseeded on system resumption [ 29.211214][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.221826][ T3549] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.34: bg 0: block 64: padding at end of block bitmap is not set [ 29.275872][ T3562] netlink: 104 bytes leftover after parsing attributes in process `syz.1.40'. [ 29.304604][ T3549] syz.4.34 (3549) used greatest stack depth: 10376 bytes left [ 29.314205][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.367045][ T3569] loop3: detected capacity change from 0 to 1024 [ 29.387272][ T3569] ======================================================= [ 29.387272][ T3569] WARNING: The mand mount option has been deprecated and [ 29.387272][ T3569] and is ignored by this kernel. Remove the mand [ 29.387272][ T3569] option from the mount to silence this warning. [ 29.387272][ T3569] ======================================================= [ 29.452635][ T3574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.45'. [ 29.462135][ T3574] netlink: 35 bytes leftover after parsing attributes in process `syz.4.45'. [ 29.490588][ T3578] tipc: Started in network mode [ 29.497907][ T3578] tipc: Node identity ac14140f, cluster identity 4711 [ 29.508720][ T3578] tipc: Enabled bearer , priority 10 [ 29.541502][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.591888][ T3569] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.627306][ T3590] capability: warning: `syz.0.52' uses 32-bit capabilities (legacy support in use) [ 29.661371][ T3592] loop1: detected capacity change from 0 to 1024 [ 29.685036][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.735040][ T3592] EXT4-fs: Ignoring removed nobh option [ 29.742171][ T3592] EXT4-fs: Ignoring removed bh option [ 29.765261][ T3600] loop0: detected capacity change from 0 to 128 [ 29.775673][ T3592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.818827][ T3600] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 29.834021][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.851913][ T3600] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.929583][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.951833][ T3615] loop4: detected capacity change from 0 to 1024 [ 30.011021][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.051935][ T3624] netlink: 240 bytes leftover after parsing attributes in process `syz.2.67'. [ 30.061111][ T3624] netlink: 80 bytes leftover after parsing attributes in process `syz.2.67'. [ 30.149614][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.187024][ T3641] loop2: detected capacity change from 0 to 1024 [ 30.219477][ T3641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.248242][ T3641] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.407334][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.421865][ T3671] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 30.428889][ T3671] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 30.428989][ T3671] vhci_hcd vhci_hcd.0: Device attached [ 30.455764][ T3672] vhci_hcd: connection closed [ 30.456006][ T31] vhci_hcd: stop threads [ 30.456022][ T31] vhci_hcd: release socket [ 30.456029][ T31] vhci_hcd: disconnect device [ 30.492972][ T3682] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 30.492994][ T3682] netlink: 352 bytes leftover after parsing attributes in process `syz.1.90'. [ 30.602978][ T3692] bridge1: entered promiscuous mode [ 30.603001][ T3692] bridge1: entered allmulticast mode [ 30.610420][ T3692] team0: Port device bridge1 added [ 30.624044][ T10] tipc: Node number set to 2886997007 [ 30.675288][ T3697] netlink: 288 bytes leftover after parsing attributes in process `syz.1.98'. [ 30.885074][ T3708] capability: warning: `syz.2.103' uses deprecated v2 capabilities in a way that may be insecure [ 31.157757][ T3729] syz.4.113 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.230690][ T3737] loop9: detected capacity change from 0 to 7 [ 31.240838][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.264344][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.273651][ T3288] loop9: unable to read partition table [ 31.287405][ T3737] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.309944][ T3737] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.319084][ T3737] loop9: unable to read partition table [ 31.329918][ T3737] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 31.329918][ T3737] ) failed (rc=-5) [ 31.348917][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.361993][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.372804][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.381773][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.393632][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 31.613693][ T3783] loop4: detected capacity change from 0 to 128 [ 31.647067][ T3783] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 31.655787][ T3783] FAT-fs (loop4): Filesystem has been set read-only [ 31.681051][ T3783] FAT-fs (loop4): error, clusters badly computed (3 != 2) [ 31.693455][ T3783] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 31.701341][ T3783] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 31.708948][ T3783] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 31.745676][ T3783] FAT-fs (loop4): error, clusters badly computed (7 != 6) [ 31.774214][ T3798] delete_channel: no stack [ 31.805774][ T3783] syz.4.139: attempt to access beyond end of device [ 31.805774][ T3783] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 31.823014][ T3783] syz.4.139: attempt to access beyond end of device [ 31.823014][ T3783] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 31.874665][ T3809] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 31.897699][ T3783] syz.4.139: attempt to access beyond end of device [ 31.897699][ T3783] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 31.920426][ T3783] syz.4.139: attempt to access beyond end of device [ 31.920426][ T3783] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 31.937769][ T3783] syz.4.139: attempt to access beyond end of device [ 31.937769][ T3783] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 31.951897][ T3783] syz.4.139: attempt to access beyond end of device [ 31.951897][ T3783] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 32.002449][ T3783] syz.4.139: attempt to access beyond end of device [ 32.002449][ T3783] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 32.034584][ T3783] syz.4.139: attempt to access beyond end of device [ 32.034584][ T3783] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 32.052572][ T3783] syz.4.139: attempt to access beyond end of device [ 32.052572][ T3783] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 32.067294][ T3783] syz.4.139: attempt to access beyond end of device [ 32.067294][ T3783] loop4: rw=2049, sector=305, nr_sectors = 9 limit=128 [ 32.157144][ T3849] loop2: detected capacity change from 0 to 512 [ 32.187280][ T3855] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 32.336452][ T3880] netlink: 'syz.3.173': attribute type 32 has an invalid length. [ 32.371943][ T3880] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 32.408323][ T3889] IPVS: Unknown mcast interface: pimreg0 [ 32.709291][ T3943] netlink: 'syz.3.193': attribute type 3 has an invalid length. [ 32.815071][ T3954] loop2: detected capacity change from 0 to 2048 [ 32.876757][ T3968] loop3: detected capacity change from 0 to 512 [ 32.921592][ T3968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.974583][ T3968] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.019290][ T3968] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 33.045679][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.143322][ T3997] tmpfs: Bad value for 'mpol' [ 33.276265][ T4022] mmap: syz.2.218 (4022) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.312592][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 33.312608][ T29] audit: type=1400 audit(1753290006.074:218): avc: denied { bind } for pid=4025 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.312845][ T4028] rdma_op ffff888119008980 conn xmit_rdma 0000000000000000 [ 33.338357][ T29] audit: type=1400 audit(1753290006.074:219): avc: denied { write } for pid=4025 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.410228][ T29] audit: type=1400 audit(1753290006.174:220): avc: denied { read write } for pid=4039 comm="syz.1.223" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.481435][ T29] audit: type=1400 audit(1753290006.174:221): avc: denied { open } for pid=4039 comm="syz.1.223" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.512702][ T4050] __nla_validate_parse: 7 callbacks suppressed [ 33.512823][ T4050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 33.528694][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 33.601323][ T4048] loop1: detected capacity change from 0 to 4096 [ 33.663298][ T4066] loop4: detected capacity change from 0 to 128 [ 33.670606][ T4048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.709473][ T4066] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.725589][ T4048] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #15: comm syz.1.224: corrupted inode contents [ 33.786787][ T4048] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #15: comm syz.1.224: mark_inode_dirty error [ 33.812252][ T4066] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.864931][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 33.885584][ T4048] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #15: comm syz.1.224: corrupted inode contents [ 33.976859][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.041464][ T4048] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.224: mark_inode_dirty error [ 34.129846][ T4048] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #15: comm syz.1.224: corrupted inode contents [ 34.207409][ T4048] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.224: mark_inode_dirty error [ 34.220236][ T4119] batadv1: entered promiscuous mode [ 34.229870][ T4119] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 34.256849][ T4048] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #15: comm syz.1.224: corrupted inode contents [ 34.314865][ T4119] syz.3.242 (4119) used greatest stack depth: 10336 bytes left [ 34.316892][ T4048] EXT4-fs error (device loop1): ext4_truncate:4597: inode #15: comm syz.1.224: mark_inode_dirty error [ 34.373228][ T4048] EXT4-fs error (device loop1) in ext4_setattr:5986: Corrupt filesystem [ 34.433932][ T4071] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #15: comm syz.1.224: corrupted inode contents [ 34.440978][ T29] audit: type=1400 audit(1753290007.194:222): avc: denied { unlink } for pid=4044 comm="syz.1.224" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.492066][ T29] audit: type=1326 audit(1753290007.254:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee3fe9a9 code=0x7ffc0000 [ 34.523883][ T29] audit: type=1326 audit(1753290007.284:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff9ee3fe9a9 code=0x7ffc0000 [ 34.547379][ T29] audit: type=1326 audit(1753290007.284:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee3fe9a9 code=0x7ffc0000 [ 34.547880][ T4152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.249'. [ 34.595572][ T29] audit: type=1326 audit(1753290007.294:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4154 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee3fe9a9 code=0x7ffc0000 [ 34.656509][ T3308] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 34.691569][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.703700][ T4167] loop3: detected capacity change from 0 to 512 [ 34.719688][ T4167] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.728614][ T4167] EXT4-fs (loop3): invalid journal inode [ 34.737719][ T4167] EXT4-fs (loop3): can't get journal size [ 34.764165][ T4167] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.774565][ T4167] EXT4-fs (loop3): 1 truncate cleaned up [ 34.793523][ T4174] loop4: detected capacity change from 0 to 1764 [ 34.805964][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.828675][ T29] audit: type=1400 audit(1753290007.594:227): avc: denied { mount } for pid=4173 comm="syz.4.255" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 34.871109][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.015432][ T4189] loop3: detected capacity change from 0 to 512 [ 35.033786][ T4189] EXT4-fs (loop3): bad s_min_extra_isize: 65528 [ 35.112878][ T4199] loop3: detected capacity change from 0 to 128 [ 35.148878][ T4199] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 35.261655][ T4199] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.274369][ T4199] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.267: checksumming directory block 0 [ 35.290725][ T4199] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.267: checksumming directory block 0 [ 35.348214][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.358682][ T4219] loop4: detected capacity change from 0 to 512 [ 35.364151][ T4221] loop0: detected capacity change from 0 to 140 [ 35.375935][ T4219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.402888][ T4221] EXT4-fs error (device loop0): __ext4_fill_super:5500: inode #2: comm syz.0.276: iget: checksum invalid [ 35.414348][ T4219] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.426836][ T4221] EXT4-fs (loop0): get root inode failed [ 35.432756][ T4221] EXT4-fs (loop0): mount failed [ 35.460339][ T4219] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 35.489887][ T4219] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 35.536214][ T4219] EXT4-fs (loop4): 1 truncate cleaned up [ 35.544432][ T4219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.616720][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.640545][ T4241] loop3: detected capacity change from 0 to 512 [ 35.701748][ T4241] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.286: bad orphan inode 13 [ 35.739294][ T4241] ext4_test_bit(bit=12, block=4) = 1 [ 35.744707][ T4241] is_bad_inode(inode)=0 [ 35.749142][ T4241] NEXT_ORPHAN(inode)=0 [ 35.753441][ T4241] max_ino=32 [ 35.756724][ T4241] i_nlink=1 [ 35.797282][ T4241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.815233][ T4241] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.286: Unrecognised inode hash code 20 [ 35.826734][ T4241] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.286: Corrupt directory, running e2fsck is recommended [ 35.840354][ T4241] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.286: Unrecognised inode hash code 20 [ 35.851819][ T4241] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.286: Corrupt directory, running e2fsck is recommended [ 35.877031][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.986216][ T4274] syz.2.300 (4274): /proc/4273/oom_adj is deprecated, please use /proc/4273/oom_score_adj instead. [ 36.010070][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.018198][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.025989][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.033584][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.041135][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.048733][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.056534][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.058129][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 36.064223][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.073405][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 36.080827][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.097452][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.105065][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.112863][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.120354][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.127994][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.136004][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.144066][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.151592][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.159141][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.166666][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.174130][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.181638][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.189136][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.196834][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.205523][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.212926][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.220373][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.228151][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.235864][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.243584][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.251461][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.259094][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.266654][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.275440][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 36.347869][ T4289] fido_id[4289]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.436903][ T4304] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 36.443701][ T4304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 36.449203][ T4311] loop1: detected capacity change from 0 to 512 [ 36.451321][ T4304] vhci_hcd vhci_hcd.0: Device attached [ 36.492003][ T4311] EXT4-fs: Ignoring removed i_version option [ 36.502915][ T4305] vhci_hcd: connection closed [ 36.504347][ T2175] vhci_hcd: stop threads [ 36.512762][ T4311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.513427][ T2175] vhci_hcd: release socket [ 36.527213][ T4311] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.530583][ T2175] vhci_hcd: disconnect device [ 36.541702][ T4318] loop4: detected capacity change from 0 to 256 [ 36.559267][ T4311] EXT4-fs error (device loop1): ext4_get_first_dir_block:3533: inode #12: block 32: comm syz.1.314: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 36.582015][ T4311] EXT4-fs error (device loop1): ext4_get_first_dir_block:3536: inode #12: comm syz.1.314: directory missing '.' [ 36.650554][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.753316][ T3288] ================================================================== [ 36.761444][ T3288] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 36.768525][ T3288] [ 36.769985][ T4342] netlink: 'syz.0.331': attribute type 11 has an invalid length. [ 36.770841][ T3288] write to 0xffff88810342ec8c of 4 bytes by task 3763 on cpu 0: [ 36.770856][ T3288] shmem_unlink+0x13c/0x170 [ 36.770876][ T3288] shmem_rename2+0x1a1/0x290 [ 36.770891][ T3288] vfs_rename+0x7d9/0xa20 [ 36.778709][ T4342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.331'. [ 36.786240][ T3288] do_renameat2+0x764/0xab0 [ 36.786267][ T3288] __x64_sys_rename+0x58/0x70 [ 36.786281][ T3288] x64_sys_call+0x2aee/0x2fb0 [ 36.786299][ T3288] do_syscall_64+0xd2/0x200 [ 36.828058][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.834140][ T3288] [ 36.836489][ T3288] read to 0xffff88810342ec8c of 4 bytes by task 3288 on cpu 1: [ 36.844054][ T3288] fill_mg_cmtime+0x5b/0x260 [ 36.848665][ T3288] generic_fillattr+0x24a/0x340 [ 36.853635][ T3288] shmem_getattr+0x181/0x200 [ 36.858247][ T3288] vfs_getattr_nosec+0x146/0x1e0 [ 36.863214][ T3288] vfs_statx+0x113/0x390 [ 36.867496][ T3288] vfs_fstatat+0x115/0x170 [ 36.872025][ T3288] __se_sys_newfstatat+0x55/0x260 [ 36.877075][ T3288] __x64_sys_newfstatat+0x55/0x70 [ 36.882120][ T3288] x64_sys_call+0x2c22/0x2fb0 [ 36.886817][ T3288] do_syscall_64+0xd2/0x200 [ 36.891624][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.897621][ T3288] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 36.899984][ T3288] value changed: 0x1f9b4e05 -> 0x1f9efbe5 [ 36.905702][ T3288] [ 36.908019][ T3288] Reported by Kernel Concurrency Sanitizer on: [ 36.914713][ T3288] CPU: 1 UID: 0 PID: 3288 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 36.927231][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.937704][ T3288] ================================================================== [ 37.223104][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.276433][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.347412][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.387019][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.476145][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.508224][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.549358][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.606749][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.664358][ T41] bridge_slave_1: left allmulticast mode [ 37.670289][ T41] bridge_slave_1: left promiscuous mode [ 37.676556][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.686588][ T41] bridge_slave_0: left allmulticast mode [ 37.692289][ T41] bridge_slave_0: left promiscuous mode [ 37.698220][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.707256][ T41] bridge_slave_1: left allmulticast mode [ 37.712935][ T41] bridge_slave_1: left promiscuous mode [ 37.719339][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.727442][ T41] bridge_slave_0: left allmulticast mode [ 37.733277][ T41] bridge_slave_0: left promiscuous mode [ 37.739051][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.865447][ T41] team0: Port device bridge1 removed [ 37.946207][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.956001][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.965797][ T41] bond0 (unregistering): Released all slaves [ 38.036237][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.046135][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.056116][ T41] bond0 (unregistering): Released all slaves [ 38.108705][ T41] hsr_slave_0: left promiscuous mode [ 38.115616][ T41] hsr_slave_1: left promiscuous mode [ 38.121381][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.128929][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.137397][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.145059][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.154624][ T41] hsr_slave_0: left promiscuous mode [ 38.160477][ T41] hsr_slave_1: left promiscuous mode [ 38.166361][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.173860][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.181617][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.189696][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.201997][ T41] veth1_macvtap: left promiscuous mode [ 38.207926][ T41] veth0_macvtap: left promiscuous mode [ 38.214100][ T41] veth1_vlan: left promiscuous mode [ 38.219695][ T41] veth0_vlan: left promiscuous mode [ 38.226026][ T41] veth1_macvtap: left promiscuous mode [ 38.231855][ T41] veth0_macvtap: left promiscuous mode [ 38.237572][ T41] veth1_vlan: left promiscuous mode [ 38.242838][ T41] veth0_vlan: left promiscuous mode [ 38.325393][ T41] team0 (unregistering): Port device team_slave_1 removed [ 38.335022][ T41] team0 (unregistering): Port device team_slave_0 removed [ 38.382599][ T41] team0 (unregistering): Port device team_slave_1 removed [ 38.392161][ T41] team0 (unregistering): Port device team_slave_0 removed [ 38.832316][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.877452][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.927189][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.976607][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.025842][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.066404][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.117270][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.177637][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.264340][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.307321][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.366688][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.416194][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.506567][ T41] bridge_slave_1: left allmulticast mode [ 39.512356][ T41] bridge_slave_1: left promiscuous mode [ 39.518042][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.526603][ T41] bridge_slave_0: left allmulticast mode [ 39.532333][ T41] bridge_slave_0: left promiscuous mode [ 39.538108][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.546381][ T41] bridge_slave_1: left allmulticast mode [ 39.552100][ T41] bridge_slave_1: left promiscuous mode [ 39.557842][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.565961][ T41] bridge_slave_0: left allmulticast mode [ 39.571677][ T41] bridge_slave_0: left promiscuous mode [ 39.577452][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.585404][ T41] bridge_slave_1: left allmulticast mode [ 39.591117][ T41] bridge_slave_1: left promiscuous mode [ 39.596857][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.604921][ T41] bridge_slave_0: left allmulticast mode [ 39.610710][ T41] bridge_slave_0: left promiscuous mode [ 39.616701][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.725813][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.735707][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.745284][ T41] bond0 (unregistering): Released all slaves [ 39.806498][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.816288][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.825651][ T41] bond0 (unregistering): Released all slaves [ 39.915972][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.925699][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.935254][ T41] bond0 (unregistering): Released all slaves [ 39.976704][ T41] tipc: Disabling bearer [ 39.982065][ T41] tipc: Left network mode [ 39.990566][ T41] hsr_slave_0: left promiscuous mode [ 39.997202][ T41] hsr_slave_1: left promiscuous mode [ 40.002914][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.010358][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.019050][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.026536][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.037183][ T41] hsr_slave_0: left promiscuous mode [ 40.042989][ T41] hsr_slave_1: left promiscuous mode [ 40.048878][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.056630][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.064353][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.071864][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.081222][ T41] hsr_slave_0: left promiscuous mode [ 40.087016][ T41] hsr_slave_1: left promiscuous mode [ 40.092626][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.100461][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.108258][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.116441][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.130671][ T41] veth1_macvtap: left promiscuous mode [ 40.136260][ T41] veth0_macvtap: left promiscuous mode [ 40.142022][ T41] veth1_vlan: left promiscuous mode [ 40.147519][ T41] veth0_vlan: left promiscuous mode [ 40.153196][ T41] veth1_macvtap: left promiscuous mode [ 40.158940][ T41] veth0_macvtap: left promiscuous mode [ 40.165059][ T41] veth1_vlan: left promiscuous mode [ 40.171146][ T41] veth0_vlan: left promiscuous mode [ 40.177061][ T41] veth1_macvtap: left promiscuous mode [ 40.182893][ T41] veth0_macvtap: left promiscuous mode [ 40.188607][ T41] veth1_vlan: left promiscuous mode [ 40.194065][ T41] veth0_vlan: left promiscuous mode [ 40.308093][ T41] team0 (unregistering): Port device team_slave_1 removed [ 40.318070][ T41] team0 (unregistering): Port device team_slave_0 removed [ 40.363678][ T41] team0 (unregistering): Port device team_slave_1 removed [ 40.373314][ T41] team0 (unregistering): Port device team_slave_0 removed [ 40.422842][ T41] team0 (unregistering): Port device team_slave_1 removed [ 40.433134][ T41] team0 (unregistering): Port device team_slave_0 removed