last executing test programs: 2m10.326675445s ago: executing program 1 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x12d, &(0x7f00000035c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x5, r0, 0x0, 0x0, 0x4}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12b, r0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}]) 2m10.223318231s ago: executing program 1 (id=229): add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r0) 2m10.123980487s ago: executing program 1 (id=233): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x1, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xbee}}, 0x5, 0xfffd}, &(0x7f0000000140)=0x90) 2m10.06208915s ago: executing program 1 (id=236): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x4007}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x7) 2m9.72562887s ago: executing program 1 (id=247): setreuid(0x0, 0xee00) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m9.362062841s ago: executing program 1 (id=264): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x2, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000001c0)) 2m9.310364754s ago: executing program 32 (id=264): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x2, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000001c0)) 1m24.360675053s ago: executing program 3 (id=2182): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(r0, &(0x7f00000000c0)) 1m24.333143315s ago: executing program 3 (id=2185): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x27, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbe930da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894acfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d00"}, 0xd8) 1m24.25068754s ago: executing program 3 (id=2188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m24.002275204s ago: executing program 3 (id=2197): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x200, 0x10000, 0x8, 0x1, 0x8, 0x7, 0x6, 0x0, 0x0, 0x0, 0x12000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1m23.937597608s ago: executing program 3 (id=2198): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1m23.878726871s ago: executing program 3 (id=2201): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x599f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0x2, 0x800}], 0x1, &(0x7f0000000500)={0x0, 0x989680}) 1m8.804070476s ago: executing program 33 (id=2201): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x599f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0x2, 0x800}], 0x1, &(0x7f0000000500)={0x0, 0x989680}) 36.826645393s ago: executing program 4 (id=4021): r0 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000004500)=""/4104, 0x1, 0x1008}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) 36.799108324s ago: executing program 4 (id=4025): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xfffff010}, {0x6, 0x0, 0xea}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 36.716283538s ago: executing program 4 (id=4030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r1, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}]}, 0x34}}, 0x4000) 36.69772466s ago: executing program 4 (id=4032): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) 35.811732081s ago: executing program 4 (id=4072): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00') 35.772375004s ago: executing program 4 (id=4075): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x604) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 20.748265496s ago: executing program 34 (id=4075): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x604) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 944.733045ms ago: executing program 6 (id=5720): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x100, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 944.310915ms ago: executing program 0 (id=5721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x9, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 931.157506ms ago: executing program 0 (id=5723): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 930.625966ms ago: executing program 7 (id=5733): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) 924.855416ms ago: executing program 6 (id=5725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) 877.115049ms ago: executing program 7 (id=5728): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c13, &(0x7f0000000240)={[{@session={'session', 0x3d, 0x26}}, {@uid}, {@unhide}, {@session={'session', 0x3d, 0x39}}, {@overriderock}, {@map_acorn}, {@map_off}, {@nojoliet}, {@nojoliet}, {@dmode={'dmode', 0x3d, 0x1}}, {@overriderock}, {@cruft}]}, 0x2, 0xa2f, &(0x7f0000000600)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 825.086532ms ago: executing program 6 (id=5730): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 736.442057ms ago: executing program 7 (id=5731): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x200) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000400)={0x13, 0x8, 0xa, 0x4, 0x0, 0x81}) 731.320977ms ago: executing program 0 (id=5734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0x800004, 0x1000}) 668.539581ms ago: executing program 0 (id=5737): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x411203, 0x70) 668.299681ms ago: executing program 7 (id=5739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x2c, r1, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4088}, 0x840) 631.079654ms ago: executing program 6 (id=5741): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x81, 0x5}, 0x2012, 0x0, 0x7, 0x5, 0x2, 0x8d5e, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 576.821706ms ago: executing program 5 (id=5743): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004200000000000000202020005000300000000000900010073797a300000000005000400"], 0x5c}, 0x1, 0x40030000000000, 0x0, 0x24000085}, 0x0) 576.660526ms ago: executing program 0 (id=5744): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) 576.559406ms ago: executing program 7 (id=5745): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) 539.103719ms ago: executing program 5 (id=5747): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 492.778691ms ago: executing program 7 (id=5748): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x2000000, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 492.465531ms ago: executing program 5 (id=5750): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[]) 476.617742ms ago: executing program 2 (id=5751): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x2, [{0x1, 0x1}, {0x8, 0x1}]}) 424.406615ms ago: executing program 2 (id=5752): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x10003}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 261.000525ms ago: executing program 5 (id=5753): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 260.887485ms ago: executing program 2 (id=5754): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x400) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) 260.772255ms ago: executing program 6 (id=5755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x94}, 0x1, 0x0, 0x0, 0x44002}, 0x0) 204.142348ms ago: executing program 2 (id=5756): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {0x0}], 0x2, 0x6, 0x1) 72.104696ms ago: executing program 5 (id=5757): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414280000000033"], 0xf8}}, 0x0) 686.97µs ago: executing program 5 (id=5758): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x6) 422.42µs ago: executing program 2 (id=5759): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x3, 0x8e}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 293.9µs ago: executing program 6 (id=5760): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 109.76µs ago: executing program 2 (id=5761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="928e04b416f09fa7a009aee21be2", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=5762): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/127, 0x7f}], 0x1, 0x4a9, 0x200) lseek(r0, 0x10, 0x0) kernel console output (not intermixed with test programs): 0-0000-000000000000. [ 109.801992][T10104] loop6: detected capacity change from 0 to 512 [ 109.847509][T10109] loop5: detected capacity change from 0 to 1024 [ 109.867775][T10109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.872149][T10104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.900515][T10109] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.918302][T10104] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.960694][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.982825][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.027534][T10126] loop5: detected capacity change from 0 to 512 [ 110.054462][T10126] EXT4-fs: Ignoring removed nobh option [ 110.063697][T10130] loop0: detected capacity change from 0 to 512 [ 110.072594][T10126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.086633][T10130] EXT4-fs: Ignoring removed i_version option [ 110.110126][T10130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.115136][T10126] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.173572][T10130] ext4 filesystem being mounted at /622/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.185820][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.236839][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.388548][T10165] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2891'. [ 110.425117][T10167] loop2: detected capacity change from 0 to 1024 [ 110.438462][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 110.442926][T10167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.465326][T10167] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 110.477888][T10167] System zones: 0-1, 3-36 [ 110.488015][T10167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.536575][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.610250][T10184] loop4: detected capacity change from 0 to 512 [ 110.653514][T10184] EXT4-fs: Ignoring removed bh option [ 110.659072][T10184] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.705939][T10184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.720281][T10184] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.731556][T10184] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.2901: invalid fast symlink length 10 [ 110.746015][T10196] loop5: detected capacity change from 0 to 512 [ 110.783433][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.803896][T10196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.825225][T10196] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.913039][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 110.913058][ T29] audit: type=1400 audit(1769063956.880:1101): avc: denied { remount } for pid=10217 comm="syz.2.2914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 110.996784][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.009077][ T29] audit: type=1400 audit(1769063956.960:1102): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.077809][T10229] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2921'. [ 111.298248][T10258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2934'. [ 111.413849][T10274] loop4: detected capacity change from 0 to 512 [ 111.440916][T10274] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.449726][T10274] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.479628][T10274] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2940: Allocating blocks 41-42 which overlap fs metadata [ 111.535018][T10274] Quota error (device loop4): write_blk: dquota write failed [ 111.542494][T10274] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 111.564248][T10274] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 111.577126][T10274] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2940: Failed to acquire dquot type 1 [ 111.583507][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2949'. [ 111.605012][T10274] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 111.645996][T10274] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2940: corrupted inode contents [ 111.676388][T10306] netlink: 'syz.0.2952': attribute type 3 has an invalid length. [ 111.696313][T10274] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.2940: mark_inode_dirty error [ 111.713209][T10274] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2940: corrupted inode contents [ 111.733183][T10274] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2940: mark_inode_dirty error [ 111.746061][T10274] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2940: corrupted inode contents [ 111.758917][T10274] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 111.768024][T10274] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2940: corrupted inode contents [ 111.798530][T10274] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.2940: mark_inode_dirty error [ 111.817226][T10316] netlink: 4124 bytes leftover after parsing attributes in process `syz.5.2959'. [ 111.829484][T10274] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 111.854146][T10274] EXT4-fs (loop4): 1 truncate cleaned up [ 111.864450][T10274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.882793][T10324] loop6: detected capacity change from 0 to 512 [ 111.895882][T10324] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 111.916542][T10324] EXT4-fs (loop6): 1 truncate cleaned up [ 111.927313][T10324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.947434][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.981254][T10324] EXT4-fs warning (device loop6): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 112.027371][T10334] vlan4: entered promiscuous mode [ 112.032480][T10334] hsr0: entered promiscuous mode [ 112.039458][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.090786][T10340] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.106531][T10340] ext4 filesystem being mounted at /577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.179733][T10343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.197856][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.199044][ T29] audit: type=1400 audit(1769063958.170:1103): avc: denied { setattr } for pid=10342 comm="syz.5.2970" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.251082][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.709978][ T29] audit: type=1400 audit(1769063958.590:1104): avc: denied { map } for pid=10370 comm="syz.5.2983" path="socket:[27469]" dev="sockfs" ino=27469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 112.821748][ T29] audit: type=1326 audit(1769063958.780:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10382 comm="syz.5.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 112.846752][ T29] audit: type=1326 audit(1769063958.780:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10382 comm="syz.5.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 112.870970][ T29] audit: type=1326 audit(1769063958.780:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10382 comm="syz.5.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 112.977611][T10394] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2994'. [ 113.095567][T10410] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.169253][T10410] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.218663][T10410] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.234628][T10423] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 113.288387][T10410] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.323364][ T2830] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.347393][ T2830] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.385450][ T2830] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.408639][T10436] netlink: 'syz.5.3014': attribute type 8 has an invalid length. [ 113.426879][ T2830] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.469840][ T2830] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.749341][T10476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10476 comm=syz.6.3032 [ 113.859439][T10485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.920572][T10485] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #2: comm syz.5.3034: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 113.972525][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.192473][T10527] loop4: p1 < > p4 [ 114.201129][T10527] loop4: p4 size 8388608 extends beyond EOD, truncated [ 114.222829][T10542] delete_channel: no stack [ 114.227796][T10541] delete_channel: no stack [ 114.341079][T10556] usb usb7: usbfs: process 10556 (syz.5.3057) did not claim interface 0 before use [ 114.447520][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3064'. [ 114.463560][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3065'. [ 114.525570][T10579] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3069'. [ 114.588489][T10589] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.627927][T10591] netlink: 'syz.4.3074': attribute type 13 has an invalid length. [ 114.637261][T10591] syz_tun: refused to change device tx_queue_len [ 114.643629][T10591] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 114.710740][T10589] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.805958][T10589] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.918708][T10589] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.930301][T10625] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 115.007828][ T2830] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.021868][T10636] set_capacity_and_notify: 6 callbacks suppressed [ 115.021916][T10636] loop0: detected capacity change from 0 to 512 [ 115.038370][ T583] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.055552][ T583] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.074382][ T583] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.154250][T10643] program syz.0.3097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.395868][ T4126] Bluetooth: hci0: command 0x1003 tx timeout [ 115.396573][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.629800][T10669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.704713][T10669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.778583][T10669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.860968][T10669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.933120][T10685] loop5: detected capacity change from 0 to 128 [ 115.934127][T10681] loop6: detected capacity change from 0 to 512 [ 115.952744][T10681] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 115.986875][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.996429][T10685] FAT-fs (loop5): Directory bread(block 32) failed [ 116.003481][T10681] EXT4-fs (loop6): 1 truncate cleaned up [ 116.011042][T10681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.026034][T10685] FAT-fs (loop5): Directory bread(block 33) failed [ 116.027319][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.032595][T10685] FAT-fs (loop5): Directory bread(block 34) failed [ 116.032616][T10685] FAT-fs (loop5): Directory bread(block 35) failed [ 116.032654][T10685] FAT-fs (loop5): Directory bread(block 36) failed [ 116.043165][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.071087][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.081409][T10685] FAT-fs (loop5): Directory bread(block 37) failed [ 116.088090][T10685] FAT-fs (loop5): Directory bread(block 38) failed [ 116.095534][T10685] FAT-fs (loop5): Directory bread(block 39) failed [ 116.102095][T10685] FAT-fs (loop5): Directory bread(block 40) failed [ 116.110050][T10681] EXT4-fs warning (device loop6): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 116.112821][T10685] FAT-fs (loop5): Directory bread(block 41) failed [ 116.145625][T10681] EXT4-fs warning (device loop6): ext4_group_extend:1891: can't read last block, resize aborted [ 116.161601][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 116.161617][ T29] audit: type=1400 audit(1769063962.130:1165): avc: denied { remount } for pid=10682 comm="syz.5.3117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 116.234238][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.332329][T10711] __nla_validate_parse: 3 callbacks suppressed [ 116.332345][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3128'. [ 116.399717][T10720] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.416162][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 116.437616][T10720] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.462967][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3136'. [ 116.483885][T10727] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3137' sets config #1 [ 116.497231][T10720] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.555748][ T29] audit: type=1400 audit(1769063962.530:1166): avc: denied { watch watch_reads } for pid=10732 comm="syz.0.3140" path="/proc/1410/net" dev="proc" ino=28328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 116.582251][T10720] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.651202][ T2325] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.682196][ T2325] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.707037][T10743] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3144'. [ 116.707887][ T2325] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.768748][ T2325] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.973517][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3158'. [ 117.007051][T10771] loop0: detected capacity change from 0 to 1024 [ 117.014019][T10771] EXT4-fs: Ignoring removed bh option [ 117.054048][T10771] EXT4-fs: inline encryption not supported [ 117.081701][T10771] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.094270][T10771] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 117.104191][T10771] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.3157: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.118366][T10780] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 117.133188][T10771] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 117.141470][T10771] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.3157: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.156873][T10771] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 117.165708][T10771] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3157: Failed to acquire dquot type 0 [ 117.205520][T10771] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 117.228704][T10771] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.3157: mark_inode_dirty error [ 117.255147][T10771] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 117.275804][T10771] EXT4-fs (loop0): 1 orphan inode deleted [ 117.282059][T10771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.294952][ T887] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.318833][ T887] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 117.327396][ T887] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 117.427740][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.472912][ T3325] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 117.481083][T10805] netlink: 'syz.4.3174': attribute type 1 has an invalid length. [ 117.522368][ T3325] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 117.561925][ T3325] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 117.643159][T10821] loop0: detected capacity change from 0 to 512 [ 117.659988][T10821] EXT4-fs (loop0): orphan cleanup on readonly fs [ 117.667910][T10821] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 117.676968][T10821] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.3172: invalid block [ 117.688837][T10821] EXT4-fs (loop0): Remounting filesystem read-only [ 117.701087][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3183'. [ 117.714603][T10821] EXT4-fs (loop0): 1 truncate cleaned up [ 117.720977][T10821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.748044][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3185'. [ 117.798099][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.974907][T10848] xt_hashlimit: size too large, truncated to 1048576 [ 117.996231][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 118.109504][T10859] loop6: detected capacity change from 0 to 128 [ 118.485538][T10896] loop4: detected capacity change from 0 to 512 [ 118.507496][T10896] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3218: bg 0: block 248: padding at end of block bitmap is not set [ 118.507695][T10896] Quota error (device loop4): write_blk: dquota write failed [ 118.507716][T10896] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 118.507744][T10896] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3218: Failed to acquire dquot type 1 [ 118.508350][T10896] EXT4-fs (loop4): 1 truncate cleaned up [ 118.508902][T10896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.508984][T10896] ext4 filesystem being mounted at /636/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.531904][ T29] audit: type=1400 audit(1769063964.490:1167): avc: denied { create } for pid=10895 comm="syz.4.3218" name="ext4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 118.634365][T10896] syz.4.3218 (10896) used greatest stack depth: 9104 bytes left [ 118.658750][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.668594][ T31] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 118.677976][ T31] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 118.683870][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 118.699224][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 118.821877][T10925] loop5: detected capacity change from 0 to 1024 [ 118.845918][T10925] EXT4-fs: Ignoring removed bh option [ 118.867835][T10927] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.926538][T10927] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.012015][T10941] loop2: detected capacity change from 0 to 8192 [ 119.020530][T10927] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.097166][T10927] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.188859][ T583] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.205820][ T583] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.244603][ T583] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.283665][ T583] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.305060][ T29] audit: type=1400 audit(1769063965.280:1168): avc: denied { connect } for pid=10968 comm="syz.2.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.432493][T10990] loop6: detected capacity change from 0 to 512 [ 119.508189][T10996] vlan2: entered promiscuous mode [ 119.513273][T10996] gretap0: entered promiscuous mode [ 119.544560][T11003] netlink: 'syz.5.3261': attribute type 1 has an invalid length. [ 119.950362][T11050] xt_hashlimit: max too large, truncated to 1048576 [ 119.951005][T11050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.024547][T11056] program syz.6.3279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.223570][T11076] rdma_op ffff888114f41980 conn xmit_rdma 0000000000000000 [ 120.327227][T11090] syz.0.3290 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.804914][T11166] xt_hashlimit: max too large, truncated to 1048576 [ 120.994476][T11188] loop4: detected capacity change from 0 to 128 [ 121.410953][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 121.410969][ T29] audit: type=1400 audit(1769063967.380:1182): avc: denied { ioctl } for pid=11226 comm="syz.4.3350" path="socket:[31104]" dev="sockfs" ino=31104 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.481122][T11231] sock: sock_set_timeout: `syz.4.3352' (pid 11231) tries to set negative timeout [ 121.494084][T11233] loop6: detected capacity change from 0 to 1024 [ 121.503806][T11233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.522853][T11233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 121.548402][T11233] System zones: 0-1, 3-36 [ 121.578937][ T29] audit: type=1400 audit(1769063967.550:1183): avc: denied { create } for pid=11238 comm="syz.4.3354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 121.678207][ T29] audit: type=1400 audit(1769063967.650:1184): avc: denied { read } for pid=11246 comm="syz.6.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.747413][T11254] sg_read: process 215 (syz.6.3360) changed security contexts after opening file descriptor, this is not allowed. [ 121.762701][ T29] audit: type=1326 audit(1769063967.730:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11251 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 121.789718][T11252] loop2: detected capacity change from 0 to 1024 [ 121.827293][ T29] audit: type=1326 audit(1769063967.730:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11251 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 121.851688][ T29] audit: type=1326 audit(1769063967.760:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11251 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 121.876053][ T29] audit: type=1326 audit(1769063967.760:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11251 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 121.899615][ T29] audit: type=1326 audit(1769063967.760:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11251 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 121.924017][ T29] audit: type=1326 audit(1769063967.780:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11251 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 121.948445][ T29] audit: type=1326 audit(1769063967.780:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11251 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 122.116723][T11276] netlink: 'syz.2.3370': attribute type 10 has an invalid length. [ 122.128428][T11277] __nla_validate_parse: 4 callbacks suppressed [ 122.128443][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3371'. [ 122.155259][T11276] team0: Port device dummy0 added [ 122.165464][T11276] netlink: 'syz.2.3370': attribute type 10 has an invalid length. [ 122.183134][T11276] team0: Port device dummy0 removed [ 122.191715][T11276] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.262428][T11289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3376'. [ 122.383019][T11298] loop2: detected capacity change from 0 to 8192 [ 122.396718][T11298] syz.2.3381: attempt to access beyond end of device [ 122.396718][T11298] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 122.420507][T11298] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 122.429200][T11298] FAT-fs (loop2): Filesystem has been set read-only [ 122.438437][T11298] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 122.450120][T11298] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 122.590125][T11333] loop5: detected capacity change from 0 to 512 [ 122.600960][T11333] ext4 filesystem being mounted at /622/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.754303][T11353] bond0: (slave dummy0): Releasing backup interface [ 122.779841][T11353] bridge_slave_0: left allmulticast mode [ 122.786352][T11353] bridge_slave_0: left promiscuous mode [ 122.792114][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.802352][T11353] bridge_slave_1: left allmulticast mode [ 122.809526][T11353] bridge_slave_1: left promiscuous mode [ 122.815368][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.827380][T11353] bond0: (slave bond_slave_0): Releasing backup interface [ 122.839445][T11353] bond0: (slave bond_slave_1): Releasing backup interface [ 122.856726][T11353] team0: Port device team_slave_0 removed [ 122.874858][T11353] team0: Port device team_slave_1 removed [ 122.881700][T11353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.889841][T11353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.900268][T11353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.907878][T11353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.918699][T11353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.942869][T11363] loop5: detected capacity change from 0 to 512 [ 122.951865][T11363] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 122.975581][T11363] EXT4-fs (loop5): orphan cleanup on readonly fs [ 122.990647][T11363] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.006376][T11363] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 123.013370][T11363] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.3407: inode has both inline data and extents flags [ 123.028788][T11363] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3407: couldn't read orphan inode 16 (err -117) [ 123.066368][T11370] loop2: detected capacity change from 0 to 128 [ 123.073508][T11370] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.138376][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3413'. [ 123.216150][T11385] xt_hashlimit: max too large, truncated to 1048576 [ 123.223579][T11385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.313755][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 123.371581][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'. [ 123.458298][T11408] xt_hashlimit: size too large, truncated to 1048576 [ 123.668227][T11440] loop2: detected capacity change from 0 to 256 [ 123.695587][T11440] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.741700][T11442] netlink: 'syz.4.3448': attribute type 2 has an invalid length. [ 123.797576][T11450] loop6: detected capacity change from 0 to 512 [ 123.813374][T11454] loop0: detected capacity change from 0 to 512 [ 123.849270][T11450] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.856181][T11454] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #12: comm syz.0.3449: corrupted in-inode xattr: bad e_name length [ 123.904275][T11454] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3449: couldn't read orphan inode 12 (err -117) [ 124.154108][T11500] ext4 filesystem being mounted at /733/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.304965][T11522] vlan2: entered promiscuous mode [ 124.310054][T11522] syz_tun: entered promiscuous mode [ 124.476167][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3491'. [ 124.752397][T11584] FAT-fs (loop6): Directory bread(block 32) failed [ 124.805450][T11584] FAT-fs (loop6): Directory bread(block 33) failed [ 124.834860][T11584] FAT-fs (loop6): Directory bread(block 34) failed [ 124.854317][T11584] FAT-fs (loop6): Directory bread(block 35) failed [ 124.873841][T11584] FAT-fs (loop6): Directory bread(block 36) failed [ 124.890725][T11584] FAT-fs (loop6): Directory bread(block 37) failed [ 124.920059][T11584] FAT-fs (loop6): Directory bread(block 38) failed [ 124.938002][T11584] FAT-fs (loop6): Directory bread(block 39) failed [ 124.944626][T11584] FAT-fs (loop6): Directory bread(block 40) failed [ 124.966137][T11584] FAT-fs (loop6): Directory bread(block 41) failed [ 126.112600][T11683] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3555'. [ 126.219138][T11689] Invalid ELF header magic: != ELF [ 126.343442][T11695] set_capacity_and_notify: 4 callbacks suppressed [ 126.343463][T11695] loop5: detected capacity change from 0 to 512 [ 126.397061][T11695] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 126.405075][T11695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 126.436617][T11695] System zones: 0-1, 15-15, 18-18, 34-34 [ 126.442556][T11695] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.450088][T11695] __quota_error: 12 callbacks suppressed [ 126.450105][T11695] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 126.466097][T11695] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 126.480772][T11695] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 126.492636][T11695] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3562: bg 0: block 40: padding at end of block bitmap is not set [ 126.518093][T11695] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 126.575558][T11695] EXT4-fs (loop5): 1 truncate cleaned up [ 126.626642][T11707] bond0: (slave dummy0): Releasing backup interface [ 126.651023][T11707] bridge_slave_0: left allmulticast mode [ 126.657647][T11707] bridge_slave_0: left promiscuous mode [ 126.663369][T11707] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.729096][T11707] bridge_slave_1: left allmulticast mode [ 126.735038][T11707] bridge_slave_1: left promiscuous mode [ 126.740756][T11707] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.757739][T11707] bond0: (slave bond_slave_0): Releasing backup interface [ 126.840264][T11707] bond0: (slave bond_slave_1): Releasing backup interface [ 126.862744][T11707] team0: Port device team_slave_0 removed [ 126.873564][T11707] team0: Port device team_slave_1 removed [ 126.881073][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.889451][T11707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.914609][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.922170][T11707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.932310][T11707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.959165][T11721] netlink: 'syz.6.3572': attribute type 2 has an invalid length. [ 127.004941][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3573'. [ 127.038506][T11729] loop5: detected capacity change from 0 to 512 [ 127.065064][T11729] ext4 filesystem being mounted at /662/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.089759][T11735] netlink: 'syz.2.3577': attribute type 1 has an invalid length. [ 127.097626][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3577'. [ 127.371209][T11767] loop5: detected capacity change from 0 to 512 [ 127.378410][T11761] syz_tun: left allmulticast mode [ 127.383530][T11761] syz_tun: left promiscuous mode [ 127.389310][T11761] bridge0: port 3(syz_tun) entered disabled state [ 127.439565][T11761] bridge_slave_0: left allmulticast mode [ 127.445399][T11761] bridge_slave_0: left promiscuous mode [ 127.451168][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.482681][T11761] bridge_slave_1: left allmulticast mode [ 127.489204][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.502144][T11775] loop6: detected capacity change from 0 to 1024 [ 127.511493][T11761] bond0: (slave bond_slave_0): Releasing backup interface [ 127.522362][T11775] EXT4-fs: Ignoring removed orlov option [ 127.536943][T11761] bond0: (slave bond_slave_1): Releasing backup interface [ 127.558470][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3598'. [ 127.569373][T11775] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 127.582602][T11761] team0: Port device team_slave_0 removed [ 127.592111][T11761] team0: Port device team_slave_1 removed [ 127.599642][T11761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.607774][T11761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.647012][T11761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.654466][T11761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.700310][T11790] rdma_op ffff888109fd0180 conn xmit_rdma 0000000000000000 [ 127.710148][T11761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.734276][T11780] vlan4: entered promiscuous mode [ 127.739559][T11780] gretap0: entered promiscuous mode [ 127.929025][T11802] program syz.2.3610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.103219][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3617'. [ 128.129596][T11818] bridge_slave_0: left allmulticast mode [ 128.135396][T11818] bridge_slave_0: left promiscuous mode [ 128.141141][T11818] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.179792][T11818] bridge_slave_1: left allmulticast mode [ 128.185551][T11818] bridge_slave_1: left promiscuous mode [ 128.191250][T11818] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.211510][T11818] bond0: (slave bond_slave_0): Releasing backup interface [ 128.228796][T11818] bond0: (slave bond_slave_1): Releasing backup interface [ 128.251862][T11818] team0: Port device team_slave_0 removed [ 128.272744][ T29] audit: type=1400 audit(1769063974.240:1203): avc: denied { ioctl } for pid=11832 comm="syz.2.3622" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.300078][T11818] team0: Port device team_slave_1 removed [ 128.316243][T11818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.323677][T11818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.361171][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3626'. [ 128.367913][T11818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.377570][T11818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.389827][T11818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.597984][T11863] loop4: detected capacity change from 0 to 1024 [ 128.703075][T11876] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 128.714540][ T29] audit: type=1400 audit(1769063974.680:1204): avc: denied { relabelto } for pid=11875 comm="syz.2.3646" name="file0" dev="tmpfs" ino=4054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 128.743259][ T29] audit: type=1400 audit(1769063974.680:1205): avc: denied { associate } for pid=11875 comm="syz.2.3646" name="file0" dev="tmpfs" ino=4054 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 128.805986][ T29] audit: type=1400 audit(1769063974.780:1206): avc: denied { unlink } for pid=3323 comm="syz-executor" name="file0" dev="tmpfs" ino=4054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 128.951215][T11893] bridge_slave_0: left allmulticast mode [ 128.956986][T11893] bridge_slave_0: left promiscuous mode [ 128.962713][T11893] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.971148][T11899] xt_hashlimit: max too large, truncated to 1048576 [ 128.982106][T11893] bridge_slave_1: left allmulticast mode [ 128.987930][T11893] bridge_slave_1: left promiscuous mode [ 128.993636][T11893] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.005661][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3653'. [ 129.042550][T11893] bond0: (slave bond_slave_0): Releasing backup interface [ 129.095862][T11893] bond_slave_0: left allmulticast mode [ 129.117503][T11893] bond0: (slave bond_slave_1): Releasing backup interface [ 129.127468][T11893] bond_slave_1: left allmulticast mode [ 129.135504][T11917] loop0: detected capacity change from 0 to 128 [ 129.151399][T11918] loop6: detected capacity change from 0 to 512 [ 129.172491][T11893] team0: Port device team_slave_0 removed [ 129.176807][T11918] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 129.188410][T11918] EXT4-fs (loop6): orphan cleanup on readonly fs [ 129.206138][T11918] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 129.226383][T11893] team0: Port device team_slave_1 removed [ 129.236752][T11893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.244344][T11893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.253802][T11918] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.271497][T11893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.278880][T11918] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 129.279354][T11918] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.3664: inode has both inline data and extents flags [ 129.287398][T11893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.302910][T11918] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3664: couldn't read orphan inode 16 (err -117) [ 129.320987][T11893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.490391][T11937] loop4: detected capacity change from 0 to 2048 [ 129.621700][ T29] audit: type=1326 audit(1769063975.590:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11956 comm="syz.6.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 129.665517][ T29] audit: type=1326 audit(1769063975.620:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11956 comm="syz.6.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 129.689862][ T29] audit: type=1326 audit(1769063975.620:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11956 comm="syz.6.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 129.713468][ T29] audit: type=1326 audit(1769063975.620:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11956 comm="syz.6.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 129.724436][T11960] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.990954][T11995] vhci_hcd vhci_hcd.0: invalid port number 26 [ 129.997148][T11995] vhci_hcd vhci_hcd.0: invalid port number 26 [ 130.021031][T11999] loop6: detected capacity change from 0 to 256 [ 130.048765][T11997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.256974][T12009] loop6: detected capacity change from 0 to 2048 [ 130.305241][ T8206] loop6: p1 < > p4 [ 130.319140][ T8206] loop6: p4 size 8388608 extends beyond EOD, truncated [ 130.336760][T12009] loop6: p1 < > p4 [ 130.347842][T12009] loop6: p4 size 8388608 extends beyond EOD, truncated [ 130.458941][ T8206] udevd[8206]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 130.470818][ T6126] udevd[6126]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 130.501013][T12031] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3717'. [ 130.555288][ T8206] udevd[8206]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 130.578382][ T6126] udevd[6126]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 130.662754][T12046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3724'. [ 130.774631][T12055] EXT4-fs mount: 26 callbacks suppressed [ 130.781075][T12055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.950349][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3737'. [ 130.971570][T12075] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3738'. [ 130.990362][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.009448][T12075] lo: entered promiscuous mode [ 131.014264][T12075] lo: entered allmulticast mode [ 131.054548][T12075] tunl0: entered promiscuous mode [ 131.060550][T12075] tunl0: entered allmulticast mode [ 131.106022][T12075] gre0: entered promiscuous mode [ 131.111202][T12075] gre0: entered allmulticast mode [ 131.137493][T12075] gretap0: entered promiscuous mode [ 131.142788][T12075] gretap0: entered allmulticast mode [ 131.157566][T12075] erspan0: entered promiscuous mode [ 131.162855][T12075] erspan0: entered allmulticast mode [ 131.175965][T12075] ip_vti0: entered promiscuous mode [ 131.181237][T12075] ip_vti0: entered allmulticast mode [ 131.189584][T12075] ip6_vti0: entered promiscuous mode [ 131.195104][T12075] ip6_vti0: entered allmulticast mode [ 131.209983][T12075] sit0: entered promiscuous mode [ 131.215698][T12075] sit0: entered allmulticast mode [ 131.249515][T12099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.272728][T12075] ip6tnl0: entered promiscuous mode [ 131.278059][T12075] ip6tnl0: entered allmulticast mode [ 131.286666][T12075] ip6gre0: entered promiscuous mode [ 131.290072][T12099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 131.291962][T12075] ip6gre0: entered allmulticast mode [ 131.302342][T12099] System zones: 1-2, 4-12, 8-8 [ 131.308423][T12075] syz_tun: entered promiscuous mode [ 131.316424][T12075] syz_tun: entered allmulticast mode [ 131.322858][T12099] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3750: iget: bad i_size value: 38620345925642 [ 131.340622][T12099] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3750: couldn't read orphan inode 15 (err -117) [ 131.354272][T12075] ip6gretap0: entered promiscuous mode [ 131.360006][T12075] ip6gretap0: entered allmulticast mode [ 131.367064][T12075] bridge0: entered promiscuous mode [ 131.371297][T12099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.372351][T12075] bridge0: entered allmulticast mode [ 131.392795][T12075] vcan0: entered promiscuous mode [ 131.397955][T12075] vcan0: entered allmulticast mode [ 131.404331][T12075] bond0: entered promiscuous mode [ 131.410395][T12075] bond0: entered allmulticast mode [ 131.417856][T12075] team0: entered promiscuous mode [ 131.423020][T12075] team0: entered allmulticast mode [ 131.430732][T12075] dummy0: entered promiscuous mode [ 131.436189][T12075] dummy0: entered allmulticast mode [ 131.442614][T12075] nlmon0: entered promiscuous mode [ 131.448624][T12075] nlmon0: entered allmulticast mode [ 131.455720][T12075] caif0: entered promiscuous mode [ 131.460928][T12075] caif0: entered allmulticast mode [ 131.467211][T12075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.477187][T12111] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 131.483141][T12090] netlink: 'syz.2.3746': attribute type 4 has an invalid length. [ 131.585693][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.619778][T12113] set_capacity_and_notify: 2 callbacks suppressed [ 131.619799][T12113] loop5: detected capacity change from 0 to 2048 [ 131.693287][T12113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.742325][T12124] loop6: detected capacity change from 0 to 512 [ 131.791292][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.800894][T12133] loop0: detected capacity change from 0 to 128 [ 131.808653][T12124] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 131.855318][T12124] EXT4-fs (loop6): 1 truncate cleaned up [ 131.867584][T12124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.966479][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.324461][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3792'. [ 132.449398][T12204] tipc: Started in network mode [ 132.454379][T12204] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 132.464036][T12204] tipc: Enabling of bearer rejected, failed to enable media [ 132.523625][T12213] tipc: Enabled bearer , priority 28 [ 132.541230][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 132.541245][ T29] audit: type=1400 audit(1769063978.510:1254): avc: denied { shutdown } for pid=12210 comm="syz.6.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.696108][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'. [ 132.898333][T12252] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3821'. [ 132.914632][T12252] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3821'. [ 132.961667][ T29] audit: type=1400 audit(1769063978.930:1255): avc: denied { create } for pid=12253 comm="syz.4.3823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=iucv_socket permissive=1 [ 133.031484][T12259] loop2: detected capacity change from 0 to 512 [ 133.047660][T12259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.075645][T12259] ext4 filesystem being mounted at /821/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.112632][ T29] audit: type=1400 audit(1769063979.080:1256): avc: denied { append } for pid=12258 comm="syz.2.3825" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.164381][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.181094][T12267] loop4: detected capacity change from 0 to 128 [ 133.307641][T12276] bridge0: entered promiscuous mode [ 133.312946][T12276] macvtap1: entered promiscuous mode [ 133.318424][T12276] macvtap1: entered allmulticast mode [ 133.323817][T12276] bridge0: entered allmulticast mode [ 133.345386][T12276] bridge0: port 1(macvtap1) entered blocking state [ 133.352055][T12276] bridge0: port 1(macvtap1) entered disabled state [ 133.386474][T12276] bridge0: left allmulticast mode [ 133.391766][T12276] bridge0: left promiscuous mode [ 133.504790][T12280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3834'. [ 133.652651][T12297] loop4: detected capacity change from 0 to 512 [ 133.670133][T12297] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.682450][T12297] EXT4-fs (loop4): 1 truncate cleaned up [ 133.688932][T12297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.724820][ T29] audit: type=1400 audit(1769063979.680:1257): avc: denied { setattr } for pid=12296 comm="syz.4.3842" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.776519][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.876818][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3850'. [ 133.991789][T12339] loop6: detected capacity change from 0 to 1024 [ 134.022585][T12339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.083414][T12339] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 134.093773][T12352] bridge_slave_0: default FDB implementation only supports local addresses [ 134.112718][T12339] System zones: 0-1, 3-36 [ 134.118777][T12339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.143848][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.146974][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 134.191161][T12356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3868'. [ 134.222745][T12356] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3868'. [ 134.245665][T12366] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 134.300296][ T29] audit: type=1326 audit(1769063980.270:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 134.331394][ T29] audit: type=1326 audit(1769063980.270:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 134.355858][ T29] audit: type=1326 audit(1769063980.270:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 134.379504][ T29] audit: type=1326 audit(1769063980.270:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 134.404068][ T29] audit: type=1326 audit(1769063980.270:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8931acb9 code=0x7ffc0000 [ 134.464516][T12384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3883'. [ 134.476809][T12384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3883'. [ 134.499018][T12387] loop5: detected capacity change from 0 to 512 [ 134.532137][T12388] loop4: detected capacity change from 0 to 128 [ 134.539079][ T29] audit: type=1400 audit(1769063980.400:1263): avc: denied { execute_no_trans } for pid=12377 comm="syz.5.3880" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=34863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 134.636451][T12387] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.651747][T12387] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 134.662390][T12387] EXT4-fs error (device loop5): ext4_orphan_get:1391: comm syz.5.3884: inode #15: comm syz.5.3884: iget: illegal inode # [ 134.682335][T12387] EXT4-fs (loop5): Remounting filesystem read-only [ 134.689778][T12387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.734636][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.871387][T12418] sch_fq: defrate 4294967295 ignored. [ 134.903890][T12424] lo: entered promiscuous mode [ 134.908796][T12424] lo: entered allmulticast mode [ 134.915425][T12424] tunl0: entered promiscuous mode [ 134.920504][T12424] tunl0: entered allmulticast mode [ 134.934621][T12424] gre0: entered promiscuous mode [ 134.939833][T12424] gre0: entered allmulticast mode [ 134.956643][T12424] gretap0: entered promiscuous mode [ 134.961916][T12424] gretap0: entered allmulticast mode [ 134.969159][T12424] erspan0: entered promiscuous mode [ 134.974458][T12424] erspan0: entered allmulticast mode [ 134.981116][T12424] ip_vti0: entered promiscuous mode [ 134.986499][T12424] ip_vti0: entered allmulticast mode [ 135.006358][T12424] ip6_vti0: entered promiscuous mode [ 135.011802][T12424] ip6_vti0: entered allmulticast mode [ 135.021259][T12424] sit0: entered promiscuous mode [ 135.026268][T12424] sit0: entered allmulticast mode [ 135.040469][T12424] ip6tnl0: entered promiscuous mode [ 135.045871][T12424] ip6tnl0: entered allmulticast mode [ 135.052545][T12424] ip6gre0: entered promiscuous mode [ 135.057847][T12424] ip6gre0: entered allmulticast mode [ 135.065803][T12424] syz_tun: entered promiscuous mode [ 135.071106][T12424] syz_tun: entered allmulticast mode [ 135.085560][T12424] ip6gretap0: entered promiscuous mode [ 135.091152][T12424] ip6gretap0: entered allmulticast mode [ 135.098092][T12424] bridge0: entered promiscuous mode [ 135.103526][T12424] bridge0: entered allmulticast mode [ 135.117545][T12424] vcan0: entered promiscuous mode [ 135.122668][T12424] vcan0: entered allmulticast mode [ 135.129571][T12424] bond0: entered promiscuous mode [ 135.135361][T12424] bond0: entered allmulticast mode [ 135.142373][T12424] team0: entered promiscuous mode [ 135.147546][T12424] team0: entered allmulticast mode [ 135.155752][T12424] dummy0: entered promiscuous mode [ 135.160905][T12424] dummy0: entered allmulticast mode [ 135.183485][T12424] nlmon0: entered promiscuous mode [ 135.189310][T12424] nlmon0: entered allmulticast mode [ 135.196697][T12424] caif0: entered promiscuous mode [ 135.201817][T12424] caif0: entered allmulticast mode [ 135.207749][T12424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.250710][T12444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.374139][T12456] xt_hashlimit: max too large, truncated to 1048576 [ 135.741060][T12515] loop6: detected capacity change from 0 to 512 [ 135.774869][T12515] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.798623][T12515] EXT4-fs (loop6): orphan cleanup on readonly fs [ 135.816196][T12529] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.817856][T12515] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 135.837933][T12515] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 135.844560][T12515] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3948: bad orphan inode 768 [ 135.864083][T12515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.889034][T12515] EXT4-fs: Ignoring removed orlov option [ 135.897317][T12515] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 135.906868][T12515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.916508][T12515] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 135.930978][T12532] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.944023][T12515] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 135.959526][T12532] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.011353][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.021542][ T2799] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.050486][T12545] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.091255][T12545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.124040][T12551] EXT4-fs: inline encryption not supported [ 136.175772][T12551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.198596][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.221741][T12551] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 136.235754][T12565] lo: entered promiscuous mode [ 136.240566][T12565] lo: entered allmulticast mode [ 136.256230][T12565] tunl0: entered promiscuous mode [ 136.261329][T12565] tunl0: entered allmulticast mode [ 136.268145][T12565] gre0: entered promiscuous mode [ 136.268508][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.273122][T12565] gre0: entered allmulticast mode [ 136.289076][T12565] gretap0: entered allmulticast mode [ 136.296214][T12565] erspan0: entered promiscuous mode [ 136.301535][T12565] erspan0: entered allmulticast mode [ 136.308058][T12565] ip_vti0: entered promiscuous mode [ 136.313306][T12565] ip_vti0: entered allmulticast mode [ 136.323240][T12565] ip6_vti0: entered promiscuous mode [ 136.328639][T12565] ip6_vti0: entered allmulticast mode [ 136.335700][T12565] sit0: entered promiscuous mode [ 136.340725][T12565] sit0: entered allmulticast mode [ 136.349312][T12565] ip6tnl0: entered promiscuous mode [ 136.354561][T12565] ip6tnl0: entered allmulticast mode [ 136.361766][T12565] ip6gre0: entered promiscuous mode [ 136.367059][T12565] ip6gre0: entered allmulticast mode [ 136.373539][T12565] syz_tun: entered promiscuous mode [ 136.379477][T12565] syz_tun: entered allmulticast mode [ 136.386318][T12565] ip6gretap0: entered promiscuous mode [ 136.391826][T12565] ip6gretap0: entered allmulticast mode [ 136.398669][T12565] bridge0: entered allmulticast mode [ 136.411141][T12565] vcan0: entered promiscuous mode [ 136.416263][T12565] vcan0: entered allmulticast mode [ 136.443734][T12565] bond0: entered promiscuous mode [ 136.449652][T12565] bond0: entered allmulticast mode [ 136.460137][T12565] team0: entered promiscuous mode [ 136.465272][T12565] team0: entered allmulticast mode [ 136.472658][T12565] dummy0: entered promiscuous mode [ 136.478596][T12565] dummy0: entered allmulticast mode [ 136.486370][T12565] nlmon0: entered promiscuous mode [ 136.491501][T12565] nlmon0: entered allmulticast mode [ 136.499349][T12565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.683215][T12603] set_capacity_and_notify: 3 callbacks suppressed [ 136.683235][T12603] loop6: detected capacity change from 0 to 128 [ 136.726395][T12601] loop4: detected capacity change from 0 to 4096 [ 136.768300][T12601] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 136.788312][T12601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.847681][T12618] lo: entered promiscuous mode [ 136.852540][T12618] lo: entered allmulticast mode [ 136.858792][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.871606][T12618] tunl0: entered promiscuous mode [ 136.877497][T12618] tunl0: entered allmulticast mode [ 136.908782][T12626] netlink: 'syz.0.3998': attribute type 32 has an invalid length. [ 136.923424][T12618] gre0: entered promiscuous mode [ 136.928518][T12618] gre0: entered allmulticast mode [ 136.950087][T12632] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.964458][T12618] gretap0: entered promiscuous mode [ 136.969776][T12618] gretap0: entered allmulticast mode [ 136.992902][T12618] erspan0: entered promiscuous mode [ 136.998248][T12618] erspan0: entered allmulticast mode [ 137.033492][T12640] loop5: detected capacity change from 0 to 512 [ 137.041219][T12640] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.048637][T12641] SELinux: policydb version -224372548 does not match my version range 15-35 [ 137.068094][T12640] EXT4-fs (loop5): 1 orphan inode deleted [ 137.073960][T12640] EXT4-fs (loop5): 1 truncate cleaned up [ 137.080891][T12618] ip_vti0: entered promiscuous mode [ 137.086187][T12618] ip_vti0: entered allmulticast mode [ 137.087731][T12642] xt_limit: Overflow, try lower: 0/0 [ 137.093113][T12640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.110464][T12641] SELinux: failed to load policy [ 137.113133][T12618] ip6_vti0: entered promiscuous mode [ 137.120821][T12618] ip6_vti0: entered allmulticast mode [ 137.127407][T12618] sit0: entered promiscuous mode [ 137.132385][T12618] sit0: entered allmulticast mode [ 137.141342][T12618] ip6tnl0: entered promiscuous mode [ 137.146689][T12618] ip6tnl0: entered allmulticast mode [ 137.153691][T12618] ip6gre0: entered promiscuous mode [ 137.158972][T12618] ip6gre0: entered allmulticast mode [ 137.165697][T12618] syz_tun: entered allmulticast mode [ 137.172252][T12618] ip6gretap0: entered promiscuous mode [ 137.178463][T12618] ip6gretap0: entered allmulticast mode [ 137.185605][T12618] bridge0: entered promiscuous mode [ 137.190843][T12618] bridge0: entered allmulticast mode [ 137.197499][T12618] vcan0: entered promiscuous mode [ 137.202559][T12618] vcan0: entered allmulticast mode [ 137.209788][T12618] bond0: entered promiscuous mode [ 137.215006][T12618] bond0: entered allmulticast mode [ 137.222360][T12618] team0: entered promiscuous mode [ 137.227452][T12618] team0: entered allmulticast mode [ 137.235862][T12618] dummy0: entered promiscuous mode [ 137.241016][T12618] dummy0: entered allmulticast mode [ 137.248521][T12618] nlmon0: entered promiscuous mode [ 137.250330][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.253674][T12618] nlmon0: entered allmulticast mode [ 137.268838][T12618] caif0: entered promiscuous mode [ 137.273942][T12618] caif0: entered allmulticast mode [ 137.279221][T12618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.610757][T12694] loop2: detected capacity change from 0 to 128 [ 137.642052][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 137.642069][ T29] audit: type=1400 audit(1769063983.610:1268): avc: denied { mounton } for pid=12693 comm="syz.2.4029" path="mnt:[4026532381]" dev="nsfs" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.695700][T12694] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.730332][T12694] ext4 filesystem being mounted at mnt:[4026532381] supports timestamps until 2038-01-19 (0x7fffffff) [ 137.773349][ T29] audit: type=1326 audit(1769063983.740:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12712 comm="syz.0.4037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5f143acb9 code=0x0 [ 137.797801][T12694] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.901345][T12724] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 137.986836][ T29] audit: type=1326 audit(1769063983.960:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.5.4049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5dc45acb9 code=0x0 [ 138.013404][ T29] audit: type=1326 audit(1769063983.980:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12732 comm="syz.6.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 138.037936][ T29] audit: type=1326 audit(1769063983.980:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12732 comm="syz.6.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 138.062445][ T29] audit: type=1326 audit(1769063983.980:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12732 comm="syz.6.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 138.086783][ T29] audit: type=1326 audit(1769063983.980:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12732 comm="syz.6.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 138.111102][ T29] audit: type=1326 audit(1769063983.980:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12732 comm="syz.6.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 138.301513][T12763] __nla_validate_parse: 10 callbacks suppressed [ 138.301534][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4061'. [ 138.695711][T12799] nftables ruleset with unbound set [ 138.871137][T12811] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4078'. [ 138.881102][T12813] loop6: detected capacity change from 0 to 128 [ 138.891770][T12813] FAT-fs (loop6): Directory bread(block 414) failed [ 138.915908][T12811] lo: entered promiscuous mode [ 138.920877][T12811] lo: entered allmulticast mode [ 138.922965][T12813] FAT-fs (loop6): Directory bread(block 415) failed [ 138.935766][T12813] FAT-fs (loop6): Directory bread(block 416) failed [ 138.942467][T12813] FAT-fs (loop6): Directory bread(block 417) failed [ 138.949139][T12815] netlink: 'syz.2.4082': attribute type 2 has an invalid length. [ 138.949846][T12813] FAT-fs (loop6): Directory bread(block 418) failed [ 138.964547][T12813] FAT-fs (loop6): Directory bread(block 419) failed [ 138.968431][T12811] tunl0: entered promiscuous mode [ 138.972045][T12813] FAT-fs (loop6): Directory bread(block 420) failed [ 138.978132][T12811] tunl0: entered allmulticast mode [ 138.983276][T12813] FAT-fs (loop6): Directory bread(block 421) failed [ 138.997790][T12811] gre0: entered promiscuous mode [ 139.002797][T12811] gre0: entered allmulticast mode [ 139.009229][T12811] gretap0: entered allmulticast mode [ 139.028475][T12811] erspan0: entered promiscuous mode [ 139.033734][T12811] erspan0: entered allmulticast mode [ 139.039747][T12813] FAT-fs (loop6): FAT read failed (blocknr 128) [ 139.047771][T12811] ip_vti0: entered promiscuous mode [ 139.053031][T12811] ip_vti0: entered allmulticast mode [ 139.068102][T12811] ip6_vti0: entered promiscuous mode [ 139.073458][T12811] ip6_vti0: entered allmulticast mode [ 139.098604][T12811] sit0: entered promiscuous mode [ 139.103626][T12811] sit0: entered allmulticast mode [ 139.110997][T12811] ip6tnl0: entered promiscuous mode [ 139.116975][T12811] ip6tnl0: entered allmulticast mode [ 139.137447][ T29] audit: type=1400 audit(1769063985.110:1276): avc: denied { getopt } for pid=12823 comm="syz.2.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.155739][T12811] ip6gre0: entered promiscuous mode [ 139.162393][T12811] ip6gre0: entered allmulticast mode [ 139.170635][T12811] syz_tun: entered promiscuous mode [ 139.175928][T12811] syz_tun: entered allmulticast mode [ 139.182593][T12811] ip6gretap0: entered promiscuous mode [ 139.188123][T12811] ip6gretap0: entered allmulticast mode [ 139.196386][T12811] bridge0: entered allmulticast mode [ 139.231459][T12811] vcan0: entered promiscuous mode [ 139.236585][T12811] vcan0: entered allmulticast mode [ 139.254144][T12811] bond0: entered promiscuous mode [ 139.262501][T12811] team0: entered promiscuous mode [ 139.267752][T12811] team0: entered allmulticast mode [ 139.276379][T12811] dummy0: entered promiscuous mode [ 139.281554][T12811] dummy0: entered allmulticast mode [ 139.300745][T12811] nlmon0: entered promiscuous mode [ 139.305963][T12811] nlmon0: entered allmulticast mode [ 139.330139][T12811] caif0: entered promiscuous mode [ 139.335277][T12811] caif0: entered allmulticast mode [ 139.340428][T12811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.628822][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4107'. [ 139.776515][ T29] audit: type=1400 audit(1769063985.750:1277): avc: denied { create } for pid=12867 comm="syz.0.4113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_dnrt_socket permissive=1 [ 140.263162][T12917] loop2: detected capacity change from 0 to 512 [ 140.273859][T12917] ext3: Unknown parameter 'measure' [ 140.274153][T12918] loop6: detected capacity change from 0 to 128 [ 140.326619][T12918] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.366821][T12918] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.386580][T12927] loop5: detected capacity change from 0 to 128 [ 140.410855][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4141'. [ 140.419333][T12929] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4140'. [ 140.433107][T12927] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.489778][T12927] ext4 filesystem being mounted at mnt:[4026532374] supports timestamps until 2038-01-19 (0x7fffffff) [ 140.490491][T12935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.505203][T12927] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.521010][T12935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.668610][T12945] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4148'. [ 140.689747][T12945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.071491][ T9748] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.505656][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4178'. [ 141.727084][T13019] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4183'. [ 142.021104][T12979] loop6: detected capacity change from 0 to 1024 [ 142.131207][T12979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.154950][T12979] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.192350][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.100107][T13147] loop6: detected capacity change from 0 to 764 [ 143.136684][T13147] rock: directory entry would overflow storage [ 143.142911][T13147] rock: sig=0x4654, size=5, remaining=4 [ 143.166264][T13154] tipc: Can't bind to reserved service type 0 [ 143.468663][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4260'. [ 143.505855][T13192] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4262'. [ 143.608188][T13201] loop5: detected capacity change from 0 to 256 [ 143.625542][T13199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4265'. [ 143.690811][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 143.690830][ T29] audit: type=1326 audit(1769063989.660:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.4268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5f143acb9 code=0x0 [ 143.742372][ T29] audit: type=1326 audit(1769063989.710:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.2.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc557d6acb9 code=0x7ffc0000 [ 143.766075][ T29] audit: type=1326 audit(1769063989.710:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.2.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc557d6acb9 code=0x7ffc0000 [ 143.789715][ T29] audit: type=1326 audit(1769063989.710:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.2.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc557d6acb9 code=0x7ffc0000 [ 143.813446][ T29] audit: type=1326 audit(1769063989.710:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.2.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc557d6acb9 code=0x7ffc0000 [ 143.837112][ T29] audit: type=1326 audit(1769063989.710:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13208 comm="syz.2.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc557d6acb9 code=0x7ffc0000 [ 143.892155][T13214] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4271'. [ 143.928602][T13214] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4271'. [ 143.940940][ T29] audit: type=1400 audit(1769063989.900:1345): avc: denied { read } for pid=13217 comm="syz.6.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.063021][T13233] loop5: detected capacity change from 0 to 512 [ 144.081795][T13233] EXT4-fs: Ignoring removed orlov option [ 144.111905][T13233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.150817][T13233] ext4 filesystem being mounted at /813/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.178225][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4283'. [ 144.216602][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.380510][T13252] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4289'. [ 144.389583][T13252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4289'. [ 144.682792][ T29] audit: type=1400 audit(1769063990.650:1346): avc: denied { remount } for pid=13277 comm="syz.0.4301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 144.714489][T13280] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4302'. [ 144.731198][T13280] 0ªX¹¦À: renamed from caif0 [ 144.738940][T13280] 0ªX¹¦À: left promiscuous mode [ 144.743918][T13280] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 144.744888][ T29] audit: type=1400 audit(1769063990.680:1347): avc: denied { unmount } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 144.790779][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4303'. [ 145.443466][ T29] audit: type=1326 audit(1769063991.410:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13359 comm="syz.0.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 145.540872][T13370] loop6: detected capacity change from 0 to 512 [ 145.579222][T13370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 145.592021][T13370] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.606076][T13370] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.4345: Failed to acquire dquot type 0 [ 145.637396][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 146.682898][T13457] netlink: 'syz.6.4385': attribute type 3 has an invalid length. [ 147.486037][T13547] loop6: detected capacity change from 0 to 1024 [ 147.519245][T13547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.561919][T13547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.595251][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.616258][T13555] Invalid logical block size (4095) [ 147.913397][T13597] loop6: detected capacity change from 0 to 512 [ 147.954927][T13597] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.976241][T13597] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 148.006627][T13597] EXT4-fs error (device loop6): ext4_orphan_get:1391: comm syz.6.4451: inode #15: comm syz.6.4451: iget: illegal inode # [ 148.029636][T13597] EXT4-fs (loop6): Remounting filesystem read-only [ 148.049264][T13597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.140463][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.181463][T13616] netlink: 'syz.2.4460': attribute type 2 has an invalid length. [ 148.647676][T13663] Invalid logical block size (9) [ 148.677634][T13667] loop5: detected capacity change from 0 to 512 [ 148.703889][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 148.703907][ T29] audit: type=1326 audit(1769063994.670:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 148.734101][T13667] EXT4-fs: Ignoring removed nobh option [ 148.742335][T13667] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.753785][ T29] audit: type=1326 audit(1769063994.710:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 148.778534][ T29] audit: type=1326 audit(1769063994.710:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 148.802170][ T29] audit: type=1326 audit(1769063994.710:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 148.827158][ T29] audit: type=1326 audit(1769063994.710:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 148.850625][ T29] audit: type=1400 audit(1769063994.710:1399): avc: denied { ioctl } for pid=13669 comm="syz.0.4484" path="socket:[39046]" dev="sockfs" ino=39046 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.877085][ T29] audit: type=1326 audit(1769063994.710:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 148.900609][ T29] audit: type=1326 audit(1769063994.710:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 148.927880][T13667] EXT4-fs (loop5): 1 truncate cleaned up [ 148.933981][T13667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.961644][T13679] __nla_validate_parse: 10 callbacks suppressed [ 148.961671][T13679] netlink: 424 bytes leftover after parsing attributes in process `syz.0.4487'. [ 148.978474][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.478474][T13698] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4506'. [ 149.494203][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4493'. [ 149.557775][T13705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4497'. [ 149.568253][T13705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4497'. [ 149.789552][ T29] audit: type=1326 audit(1769063995.760:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 149.814575][ T29] audit: type=1326 audit(1769063995.760:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e59dacb9 code=0x7ffc0000 [ 149.841727][T13725] tipc: Invalid UDP bearer configuration [ 149.841742][T13725] tipc: Enabling of bearer rejected, failed to enable media [ 149.975983][T13735] usb usb2: usbfs: process 13735 (syz.6.4515) did not claim interface 9 before use [ 150.153754][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4527'. [ 150.162857][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4527'. [ 150.371385][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4537'. [ 150.381827][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4537'. [ 150.394451][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'. [ 150.581513][T13805] sg_write: data in/out 1530911619/1 bytes for SCSI command 0x8e-- guessing data in; [ 150.581513][T13805] program syz.5.4550 not setting count and/or reply_len properly [ 150.934618][T13845] netlink: 'syz.0.4569': attribute type 14 has an invalid length. [ 150.942690][T13845] netlink: 'syz.0.4569': attribute type 12 has an invalid length. [ 151.053764][T13859] team0: Cannot enslave team device to itself [ 151.060016][T13859] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.468022][T13909] usb usb9: usbfs: process 13909 (syz.2.4600) did not claim interface 0 before use [ 152.077518][T13960] loop6: detected capacity change from 0 to 1024 [ 152.111257][T13960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.114976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.151075][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.681029][T14005] SELinux: security_context_str_to_sid () failed with errno=-22 [ 153.372802][T14070] netlink: 'syz.6.4677': attribute type 2 has an invalid length. [ 153.384017][T14072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.391299][T14072] IPv6: NLM_F_CREATE should be set when creating new route [ 153.419205][T14075] loop5: detected capacity change from 0 to 512 [ 153.439683][T14075] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.584041][T14090] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 153.716695][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 153.716713][ T29] audit: type=1400 audit(1769063999.690:1526): avc: denied { bind } for pid=14101 comm="syz.5.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.783395][T14110] tipc: Enabling not permitted [ 153.788963][T14110] tipc: Enabling of bearer rejected, failed to enable media [ 153.797420][ T29] audit: type=1400 audit(1769063999.730:1527): avc: denied { create } for pid=14106 comm="syz.6.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.816972][ T29] audit: type=1400 audit(1769063999.740:1528): avc: denied { setopt } for pid=14106 comm="syz.6.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.838544][T14112] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 153.914708][ T29] audit: type=1400 audit(1769063999.820:1529): avc: denied { write } for pid=14107 comm="syz.2.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.989498][ T29] audit: type=1400 audit(1769063999.920:1530): avc: denied { write } for pid=14123 comm="syz.5.4701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.009364][ T29] audit: type=1400 audit(1769063999.950:1531): avc: denied { setopt } for pid=14126 comm="syz.2.4702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.029257][ T29] audit: type=1400 audit(1769063999.950:1532): avc: denied { bind } for pid=14126 comm="syz.2.4702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.073043][T14137] __nla_validate_parse: 13 callbacks suppressed [ 154.073065][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4704'. [ 154.117112][ T31] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.189239][ T31] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.277132][ T31] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.326189][T14099] chnl_net:caif_netlink_parms(): no params data found [ 154.339803][ T29] audit: type=1400 audit(1769064000.310:1533): avc: denied { load_policy } for pid=14160 comm="syz.6.4716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 154.339864][T14161] SELinux: policydb string does not match my string SE Linux [ 154.339927][T14161] SELinux: failed to load policy [ 154.378545][ T31] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.393565][ T29] audit: type=1400 audit(1769064000.360:1534): avc: denied { execute } for pid=14164 comm="syz.5.4718" dev="hugetlbfs" ino=40284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 154.393597][ T29] audit: type=1400 audit(1769064000.360:1535): avc: denied { execute_no_trans } for pid=14164 comm="syz.5.4718" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=40284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 154.406201][T14167] loop5: detected capacity change from 0 to 512 [ 154.432404][T14167] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.4719: iget: bad i_size value: 38620345925642 [ 154.438943][T14167] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4719: couldn't read orphan inode 15 (err -117) [ 154.440279][T14167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.452707][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.528701][T14099] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.597705][T14099] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.606594][T14099] bridge_slave_0: entered allmulticast mode [ 154.613065][T14099] bridge_slave_0: entered promiscuous mode [ 154.623740][T14099] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.623775][T14099] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.626447][T14099] bridge_slave_1: entered allmulticast mode [ 154.627176][T14099] bridge_slave_1: entered promiscuous mode [ 154.702660][T14185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4725'. [ 154.741133][T14189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.748441][T14189] IPv6: NLM_F_CREATE should be set when creating new route [ 154.786976][ T31] bond0 (unregistering): Released all slaves [ 154.799682][T14099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.827276][T14099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.848244][ T31] hsr_slave_0: left promiscuous mode [ 154.863464][ T31] hsr_slave_1: left promiscuous mode [ 154.885458][T14197] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.908982][ T31] veth1_macvtap: left promiscuous mode [ 154.914518][ T31] veth0_macvtap: left promiscuous mode [ 154.944666][ T31] veth1_vlan: left promiscuous mode [ 154.950286][ T31] veth0_vlan: left promiscuous mode [ 155.210296][T14246] SET target dimension over the limit! [ 155.253413][T14099] team0: Port device team_slave_0 added [ 155.278151][T14099] team0: Port device team_slave_1 added [ 155.317058][T14258] loop5: detected capacity change from 0 to 128 [ 155.339328][T14099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.347108][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.373261][T14099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.460047][T14099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.467787][T14099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.493883][T14099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.526216][ T583] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.544408][ T583] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.588125][ T583] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.602550][T14099] hsr_slave_0: entered promiscuous mode [ 155.614104][T14099] hsr_slave_1: entered promiscuous mode [ 155.620275][T14099] debugfs: 'hsr0' already exists in 'hsr' [ 155.626870][T14099] Cannot create hsr debugfs directory [ 155.642878][ T583] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.675867][T14289] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.770023][T14099] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 155.795698][T14099] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 155.817296][T14099] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 155.831045][T14099] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 155.942264][T14099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.975531][T14099] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.004199][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.011330][ T2799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.027696][T14333] SELinux: policydb string does not match my string SE Linux [ 156.061989][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.069134][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.085121][T14333] SELinux: failed to load policy [ 156.187270][T14348] netlink: 380 bytes leftover after parsing attributes in process `syz.0.4778'. [ 156.214151][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4778'. [ 156.264730][T14099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.372787][T14383] loop6: detected capacity change from 0 to 256 [ 156.388563][T14386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4788'. [ 156.616459][T14413] loop6: detected capacity change from 0 to 512 [ 156.623830][T14099] veth0_vlan: entered promiscuous mode [ 156.635443][T14099] veth1_vlan: entered promiscuous mode [ 156.642733][T14413] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.686019][T14099] veth0_macvtap: entered promiscuous mode [ 156.712338][T14099] veth1_macvtap: entered promiscuous mode [ 156.751792][T14099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.766382][T14099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.786861][ T2799] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.803016][ T2799] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.816656][ T2799] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.842074][ T2799] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.112611][T14471] SELinux: failed to load policy [ 157.209066][T14482] loop7: detected capacity change from 0 to 2048 [ 157.223565][T14485] sch_fq: defrate 0 ignored. [ 157.236217][T14482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 157.273663][T14099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 157.314543][T14495] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4829'. [ 157.476972][T14518] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4840'. [ 157.613331][T14537] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.792411][T14556] loop6: detected capacity change from 0 to 1764 [ 157.823477][T14561] SET target dimension over the limit! [ 158.143584][T14617] xt_NFQUEUE: number of total queues is 0 [ 158.313008][T14647] loop5: detected capacity change from 0 to 128 [ 158.577463][T14683] loop6: detected capacity change from 0 to 4096 [ 158.606458][T14683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.765584][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 158.765602][ T29] audit: type=1400 audit(1769064004.740:2049): avc: denied { shutdown } for pid=14704 comm="syz.5.4930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.792736][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.918343][ T29] audit: type=1400 audit(1769064004.890:2050): avc: denied { read } for pid=14718 comm="syz.7.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.100482][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4948'. [ 159.111500][ T29] audit: type=1400 audit(1769064005.080:2051): avc: denied { mount } for pid=14736 comm="syz.6.4946" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 159.184255][T14747] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4951'. [ 159.206569][T14749] vlan2: entered promiscuous mode [ 159.211715][T14749] geneve1: entered promiscuous mode [ 159.217034][T14749] vlan2: entered allmulticast mode [ 159.222170][T14749] geneve1: entered allmulticast mode [ 159.297089][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4954'. [ 159.445611][ T29] audit: type=1400 audit(1769064005.420:2052): avc: denied { create } for pid=14774 comm="syz.5.4963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.512307][ T29] audit: type=1400 audit(1769064005.440:2053): avc: denied { bind } for pid=14774 comm="syz.5.4963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.533084][ T29] audit: type=1400 audit(1769064005.440:2054): avc: denied { ioctl } for pid=14774 comm="syz.5.4963" path="socket:[42583]" dev="sockfs" ino=42583 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.625657][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4970'. [ 159.634610][T14791] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4970'. [ 159.716416][T14803] loop7: detected capacity change from 0 to 128 [ 159.857522][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4982'. [ 160.120448][ T29] audit: type=1400 audit(1769064006.090:2055): avc: denied { unmount } for pid=14099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.193892][ T29] audit: type=1400 audit(1769064006.160:2056): avc: denied { read append } for pid=14842 comm="syz.6.4997" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.218411][ T29] audit: type=1400 audit(1769064006.160:2057): avc: denied { open } for pid=14842 comm="syz.6.4997" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.254205][ T29] audit: type=1400 audit(1769064006.210:2058): avc: denied { ioctl } for pid=14842 comm="syz.6.4997" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.487815][T14877] netlink: 'syz.2.5014': attribute type 6 has an invalid length. [ 160.521250][T14883] netlink: 'syz.0.5016': attribute type 2 has an invalid length. [ 160.705869][T14906] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5028'. [ 160.767316][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5028'. [ 160.779161][T14916] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.795764][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5030'. [ 160.804908][T14911] netlink: 580 bytes leftover after parsing attributes in process `syz.0.5030'. [ 161.216828][T14984] loop5: detected capacity change from 0 to 1024 [ 161.223699][T14984] EXT4-fs: Ignoring removed orlov option [ 161.264540][T14984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.278691][T14995] tipc: Enabling of bearer rejected, failed to enable media [ 161.337197][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.371555][T15005] loop7: detected capacity change from 0 to 512 [ 161.378556][T15005] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 161.417904][T15005] EXT4-fs (loop7): 1 truncate cleaned up [ 161.431052][T15005] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.526299][T14099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.609621][T15043] gretap0: entered promiscuous mode [ 161.622120][T15043] vlan2: entered promiscuous mode [ 162.044515][T15103] loop5: detected capacity change from 0 to 8192 [ 162.565421][T15161] tipc: Enabling of bearer rejected, already enabled [ 162.847769][T15204] loop6: detected capacity change from 0 to 1024 [ 162.873424][T15204] EXT4-fs: Ignoring removed bh option [ 162.879011][T15204] EXT4-fs: inline encryption not supported [ 162.906516][T15204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.923443][T15204] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 162.938360][T15204] EXT4-fs (loop6): Remounting filesystem read-only [ 162.955089][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.109222][T15236] loop5: detected capacity change from 0 to 1024 [ 163.143130][T15236] EXT4-fs: Ignoring removed orlov option [ 163.182035][T15236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.262860][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.048187][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 164.048205][ T29] audit: type=1326 audit(1769064010.020:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.5.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 164.087798][ T29] audit: type=1326 audit(1769064010.050:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.5.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 164.111511][ T29] audit: type=1326 audit(1769064010.050:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.5.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 164.135063][ T29] audit: type=1326 audit(1769064010.050:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.5.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 164.158786][ T29] audit: type=1326 audit(1769064010.050:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.5.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 164.182470][ T29] audit: type=1326 audit(1769064010.050:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15381 comm="syz.5.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dc45acb9 code=0x7ffc0000 [ 164.255363][ T29] audit: type=1400 audit(1769064010.230:2132): avc: denied { node_bind } for pid=15395 comm="syz.0.5258" saddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 164.310669][T15400] loop5: detected capacity change from 0 to 128 [ 164.334532][T15402] loop6: detected capacity change from 0 to 512 [ 164.368978][T15402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.400395][T15402] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.436044][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.502807][ T29] audit: type=1326 audit(1769064010.460:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 164.526651][ T29] audit: type=1326 audit(1769064010.460:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 164.550420][ T29] audit: type=1326 audit(1769064010.460:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5f143acb9 code=0x7ffc0000 [ 164.589717][T15422] loop6: detected capacity change from 0 to 512 [ 164.659701][T15422] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 164.675557][T15430] xt_hashlimit: max too large, truncated to 1048576 [ 164.684767][T15422] EXT4-fs (loop6): mount failed [ 164.784732][T15444] loop6: detected capacity change from 0 to 1024 [ 164.794369][T15444] EXT4-fs: Ignoring removed orlov option [ 164.812867][T15445] netlink: 'syz.2.5279': attribute type 4 has an invalid length. [ 164.839187][T15444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.889073][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.940206][T15460] __nla_validate_parse: 5 callbacks suppressed [ 164.940227][T15460] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5287'. [ 164.975874][T15460] netlink: 'syz.5.5287': attribute type 5 has an invalid length. [ 165.094380][T15490] loop5: detected capacity change from 0 to 256 [ 165.454840][T15528] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 165.525161][T15536] tipc: Enabled bearer , priority 0 [ 165.700944][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5331'. [ 165.816182][T15559] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.081654][T15577] loop5: detected capacity change from 0 to 512 [ 166.132404][T15577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.208266][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.499560][T15639] netlink: 'syz.6.5371': attribute type 29 has an invalid length. [ 166.516092][T15640] loop7: detected capacity change from 0 to 764 [ 166.552693][T15640] rock: directory entry would overflow storage [ 166.558975][T15640] rock: sig=0x4f50, size=4, remaining=3 [ 166.564595][T15640] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 166.618960][T15649] netlink: 5236 bytes leftover after parsing attributes in process `syz.2.5374'. [ 166.628416][T15649] netlink: 5236 bytes leftover after parsing attributes in process `syz.2.5374'. [ 166.931284][T15680] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5388'. [ 167.011128][T15691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5392'. [ 167.341181][T15740] netlink: 'syz.0.5407': attribute type 1 has an invalid length. [ 167.639128][T15791] loop6: detected capacity change from 0 to 512 [ 167.667711][T15795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5424'. [ 167.676877][T15795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5424'. [ 167.711503][T15795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5424'. [ 167.715627][T15791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.720852][T15795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5424'. [ 167.749142][T15804] loop5: detected capacity change from 0 to 512 [ 167.788307][T15804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.808979][T15804] ext4 filesystem being mounted at /1075/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.828913][T15808] loop7: detected capacity change from 0 to 2048 [ 167.855291][T15808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.870128][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.887029][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.936159][T15808] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 167.951531][T15808] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 167.964044][T15808] EXT4-fs (loop7): This should not happen!! Data will be lost [ 167.964044][T15808] [ 167.974081][T15808] EXT4-fs (loop7): Total free blocks count 0 [ 167.980216][T15808] EXT4-fs (loop7): Free/Dirty block details [ 167.986222][T15808] EXT4-fs (loop7): free_blocks=2415919104 [ 167.991971][T15808] EXT4-fs (loop7): dirty_blocks=32 [ 167.997275][T15808] EXT4-fs (loop7): Block reservation details [ 168.003287][T15808] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 168.009278][T15824] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 168.071842][T14099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.281606][T15866] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.5452: iget: bad i_size value: 12154757448730 [ 168.303704][T15866] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5452: couldn't read orphan inode 13 (err -117) [ 168.319875][T15866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.334600][T15866] EXT4-fs warning (device loop6): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 168.373069][T15866] EXT4-fs warning (device loop6): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 168.410345][T15882] netlink: 'syz.5.5459': attribute type 2 has an invalid length. [ 168.425839][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.654237][T15920] netlink: 'syz.6.5474': attribute type 1 has an invalid length. [ 168.827016][T15950] netlink: 'syz.7.5489': attribute type 2 has an invalid length. [ 168.915314][T15961] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 169.025469][T15968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.045238][T15968] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.5494: missing EA_INODE flag [ 169.076557][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 169.076575][ T29] audit: type=1400 audit(1769064015.050:2283): avc: denied { getopt } for pid=15976 comm="syz.5.5497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.105255][T15968] EXT4-fs (loop6): Remounting filesystem read-only [ 169.135032][ T29] audit: type=1400 audit(1769064015.110:2284): avc: denied { mount } for pid=15979 comm="syz.7.5498" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 169.162851][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.225980][ T29] audit: type=1400 audit(1769064015.190:2285): avc: denied { name_bind } for pid=15988 comm="syz.6.5501" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 169.276298][ T29] audit: type=1400 audit(1769064015.250:2286): avc: denied { create } for pid=15994 comm="syz.2.5505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.296769][ T29] audit: type=1400 audit(1769064015.270:2287): avc: denied { setopt } for pid=15994 comm="syz.2.5505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.342140][ T29] audit: type=1400 audit(1769064015.310:2288): avc: denied { create } for pid=16003 comm="syz.2.5509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.368129][ T29] audit: type=1400 audit(1769064015.330:2289): avc: denied { setopt } for pid=16003 comm="syz.2.5509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.432451][T16013] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 169.509964][ T29] audit: type=1400 audit(1769064015.480:2290): avc: denied { block_suspend } for pid=16022 comm="syz.5.5518" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.554353][ T29] audit: type=1400 audit(1769064015.510:2291): avc: denied { read write } for pid=16026 comm="syz.6.5519" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.578581][ T29] audit: type=1400 audit(1769064015.510:2292): avc: denied { open } for pid=16026 comm="syz.6.5519" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.606190][T16029] netlink: 'syz.7.5520': attribute type 2 has an invalid length. [ 169.650373][T16039] netlink: 'syz.6.5525': attribute type 1 has an invalid length. [ 169.709956][T16046] set_capacity_and_notify: 3 callbacks suppressed [ 169.709973][T16046] loop6: detected capacity change from 0 to 128 [ 169.765287][T16046] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.800764][T16046] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.039960][T16085] __nla_validate_parse: 8 callbacks suppressed [ 170.039999][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5548'. [ 170.191066][T16103] netlink: 'syz.6.5555': attribute type 1 has an invalid length. [ 170.243821][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5562'. [ 170.855727][T16184] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5595'. [ 170.899594][T16188] loop5: detected capacity change from 0 to 512 [ 170.910658][T16190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5598'. [ 170.937869][T16188] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.5597: iget: bad i_size value: 12154757448730 [ 170.971791][T16188] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5597: couldn't read orphan inode 13 (err -117) [ 170.995650][T16188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.027855][T16188] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 171.041113][T16188] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 171.069563][ T3400] IPVS: starting estimator thread 0... [ 171.093941][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.164998][T16210] IPVS: using max 1824 ests per chain, 91200 per kthread [ 171.186974][T16227] netlink: 192 bytes leftover after parsing attributes in process `syz.7.5614'. [ 171.281557][T16241] loop7: detected capacity change from 0 to 128 [ 171.301844][T16241] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.334487][T16241] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.496808][T16269] netlink: 'syz.5.5634': attribute type 1 has an invalid length. [ 171.551640][T16275] loop5: detected capacity change from 0 to 128 [ 171.567740][T16275] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.581438][T16275] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.747089][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 171.919875][T16301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=16301 comm=syz.6.5649 [ 171.932572][T16301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=118 sclass=netlink_xfrm_socket pid=16301 comm=syz.6.5649 [ 171.991984][T16305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5651'. [ 172.001073][T16305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5651'. [ 172.034476][T16305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5651'. [ 172.043573][T16305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5651'. [ 172.092436][T16305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5651'. [ 172.235543][T16320] loop5: detected capacity change from 0 to 128 [ 172.257174][T16320] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 322) [ 172.265420][T16320] FAT-fs (loop5): Filesystem has been set read-only [ 172.322953][ T3486] IPVS: starting estimator thread 0... [ 172.414717][T16332] IPVS: using max 2064 ests per chain, 103200 per kthread [ 172.634791][T16377] loop7: detected capacity change from 0 to 1024 [ 172.641948][T16377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.658106][T16377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 172.675343][T16377] System zones: 0-1, 3-36 [ 172.695453][T16377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.725057][T14099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.734999][T16382] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 172.767357][T16389] loop6: detected capacity change from 0 to 512 [ 172.802432][T16393] netlink: 'syz.2.5689': attribute type 29 has an invalid length. [ 172.815731][T16389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.873796][T16389] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5697: invalid indirect mapped block 4294967295 (level 1) [ 172.964447][T16389] EXT4-fs (loop6): Remounting filesystem read-only [ 172.991705][T16389] EXT4-fs (loop6): 2 truncates cleaned up [ 172.997988][T16389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.097515][ T9748] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.219307][T16439] netlink: 'syz.7.5713': attribute type 24 has an invalid length. [ 173.452907][T16472] loop7: detected capacity change from 0 to 1764 [ 173.550906][T16478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.820849][T16520] loop5: detected capacity change from 0 to 1024 [ 174.005148][T16520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.040850][ T4082] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.075466][T16533] netlink: 'syz.6.5755': attribute type 2 has an invalid length. [ 174.109905][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 174.109920][ T29] audit: type=1400 audit(1769064020.080:2361): avc: denied { read write } for pid=16536 comm="syz.2.5756" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.139521][ T29] audit: type=1400 audit(1769064020.080:2362): avc: denied { open } for pid=16536 comm="syz.2.5756" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.142919][T16535] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 174.179861][ T29] audit: type=1400 audit(1769064020.150:2363): avc: denied { ioctl } for pid=16536 comm="syz.2.5756" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.307868][ T3008] ================================================================== [ 174.316031][ T3008] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 174.323635][ T3008] [ 174.325987][ T3008] write to 0xffff88811a131c00 of 4 bytes by task 8206 on cpu 0: [ 174.333647][ T3008] d_make_discardable+0x4f/0xa0 [ 174.338546][ T3008] simple_unlink+0x68/0x80 [ 174.343017][ T3008] shmem_unlink+0x12d/0x140 [ 174.347562][ T3008] vfs_unlink+0x28b/0x440 [ 174.351934][ T3008] do_unlinkat+0x1e2/0x4b0 [ 174.356386][ T3008] __x64_sys_unlink+0x2e/0x40 [ 174.361103][ T3008] x64_sys_call+0x2f48/0x3000 [ 174.365820][ T3008] do_syscall_64+0xc0/0x2a0 [ 174.370362][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.376301][ T3008] [ 174.378652][ T3008] read to 0xffff88811a131c00 of 4 bytes by task 3008 on cpu 1: [ 174.386221][ T3008] do_readlinkat+0xa9/0x340 [ 174.390771][ T3008] __x64_sys_readlink+0x47/0x60 [ 174.395658][ T3008] x64_sys_call+0x2af1/0x3000 [ 174.400371][ T3008] do_syscall_64+0xc0/0x2a0 [ 174.404928][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.410858][ T3008] [ 174.413208][ T3008] value changed: 0x08300080 -> 0x00300180 [ 174.418951][ T3008] [ 174.421290][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 174.427477][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.438356][ T3008] Tainted: [W]=WARN [ 174.442170][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 174.452247][ T3008] ================================================================== [ 174.462340][ T29] audit: type=1400 audit(1769064020.430:2364): avc: denied { write } for pid=3308 comm="syz-executor" path="pipe:[376]" dev="pipefs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 174.491722][T16549] loop5: detected capacity change from 0 to 2048 [ 174.498475][T16549] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.543555][ T29] audit: type=1400 audit(1769064020.490:2365): avc: denied { recv } for pid=16515 comm="syz.7.5748" saddr=10.128.0.163 src=39958 daddr=10.128.1.231 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 174.590000][T16549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.826794][ T4773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.887183][ T31] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.966611][ T31] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.018821][ T31] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.067075][ T31] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.296857][ T31] bond0 (unregistering): Released all slaves [ 175.358684][ T31] tipc: Left network mode [ 175.367526][ T31] hsr_slave_0: left promiscuous mode [ 175.373378][ T31] hsr_slave_1: left promiscuous mode [ 175.383794][ T31] veth1_macvtap: left promiscuous mode [ 175.389475][ T31] veth0_macvtap: left promiscuous mode [ 175.396139][ T31] veth1_vlan: left promiscuous mode [ 175.401494][ T31] veth0_vlan: left promiscuous mode [ 175.668038][ T31] IPVS: stop unused estimator thread 0... [ 175.731761][ T31] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.741713][ T31] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.786551][ T31] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.796543][ T31] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.846447][ T31] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.856388][ T31] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.886547][ T31] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.896522][ T31] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.955186][ T31] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.965009][ T31] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.016250][ T31] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.026126][ T31] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.066702][ T31] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.076536][ T31] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.147756][ T31] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.157838][ T31] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.225299][ T31] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.266404][ T31] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.317229][ T31] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.366317][ T31] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.444612][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.488585][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.527883][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.583164][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.658933][ T31] bridge_slave_1: left allmulticast mode [ 176.664605][ T31] bridge_slave_1: left promiscuous mode [ 176.670465][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.678394][ T31] bridge_slave_0: left allmulticast mode [ 176.684073][ T31] bridge_slave_0: left promiscuous mode [ 176.689828][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.957310][ T31] bond0 (unregistering): Released all slaves [ 177.046449][ T31] bond0 (unregistering): Released all slaves [ 177.118102][ T31] bond0 (unregistering): Released all slaves [ 177.125941][ T31] bond1 (unregistering): Released all slaves [ 177.197464][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.207583][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.217411][ T31] bond0 (unregistering): Released all slaves [ 177.264816][ T31] tipc: Disabling bearer [ 177.270068][ T31] tipc: Disabling bearer [ 177.275352][ T31] tipc: Left network mode [ 177.280536][ T31] tipc: Disabling bearer [ 177.285872][ T31] tipc: Disabling bearer [ 177.291795][ T31] tipc: Left network mode [ 177.301642][ T31] IPVS: stopping backup sync thread 3898 ... [ 177.310998][ T31] hsr_slave_0: left promiscuous mode [ 177.317028][ T31] hsr_slave_1: left promiscuous mode [ 177.324588][ T31] hsr_slave_0: left promiscuous mode [ 177.331084][ T31] hsr_slave_1: left promiscuous mode [ 177.338993][ T31] hsr_slave_0: left promiscuous mode [ 177.345291][ T31] hsr_slave_1: left promiscuous mode [ 177.353180][ T31] hsr_slave_0: left promiscuous mode [ 177.359168][ T31] hsr_slave_1: left promiscuous mode [ 177.365943][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.373359][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.381086][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.388545][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.409793][ T31] veth1_macvtap: left promiscuous mode [ 177.415542][ T31] veth0_macvtap: left promiscuous mode [ 177.421862][ T31] veth1_vlan: left promiscuous mode [ 177.427470][ T31] veth0_vlan: left promiscuous mode [ 177.438394][ T31] veth0_macvtap: left promiscuous mode [ 177.444299][ T31] veth1_vlan: left promiscuous mode [ 177.450022][ T31] veth0_vlan: left promiscuous mode [ 177.460690][ T31] veth1_macvtap: left promiscuous mode [ 177.466340][ T31] veth0_macvtap: left promiscuous mode [ 177.472169][ T31] veth1_vlan: left promiscuous mode [ 177.477600][ T31] veth0_vlan: left promiscuous mode [ 177.487316][ T31] veth1_macvtap: left promiscuous mode [ 177.492801][ T31] veth0_macvtap: left promiscuous mode [ 177.498595][ T31] veth1_vlan: left promiscuous mode [ 177.503853][ T31] veth0_vlan: left promiscuous mode [ 177.842176][ T31] team0 (unregistering): Port device team_slave_1 removed [ 177.851862][ T31] team0 (unregistering): Port device team_slave_0 removed [ 178.816147][ T31] IPVS: stop unused estimator thread 0... [ 178.822296][ T31] IPVS: stop unused estimator thread 0... [ 178.829201][ T31] IPVS: stop unused estimator thread 0...