last executing test programs: 4m18.470620478s ago: executing program 32 (id=3633): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) 3m51.315564767s ago: executing program 33 (id=4413): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m27.023367516s ago: executing program 34 (id=5118): r0 = io_uring_setup(0x423a, &(0x7f0000000100)={0x0, 0x290e, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x0, 0x2a615ba5], 0x2) 3m13.765780429s ago: executing program 35 (id=5068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xf, '\x00', 0x2, 0x4, 0x8000, 0x734}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) 2m0.673828413s ago: executing program 36 (id=7139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m57.800486814s ago: executing program 37 (id=7200): openat$rfkill(0xffffffffffffff9c, 0x0, 0xe0000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000180)) 1m39.01642239s ago: executing program 38 (id=7473): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0xfffffffd, 0x9, 0x3, 0x1, 0x1, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3b5a7dd1, 0x10000, 0xa895, 0x7, 0xf, 0x20f8019b}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xaf88, 0x3, 0xffffff81}}]}]}}}]}, 0x90}}, 0x10) 1m4.836884384s ago: executing program 2 (id=8891): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1m4.66587824s ago: executing program 2 (id=8893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0x78}}, 0x0) 1m4.584726593s ago: executing program 2 (id=8895): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m4.522598555s ago: executing program 2 (id=8907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="497560507000ffdbdf250f0000001400078008000100ff0100eb0700"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 1m4.425850299s ago: executing program 2 (id=8899): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m4.38608699s ago: executing program 2 (id=8900): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_send_signal(0xffffffffffffffff, 0x29, 0x0, 0x0) 53.149348113s ago: executing program 9 (id=9139): bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.013173388s ago: executing program 9 (id=9140): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 52.591576562s ago: executing program 9 (id=9146): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x1d0, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x34e6}, @CTA_EXPECT_NAT={0x130, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x28}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 52.411046949s ago: executing program 9 (id=9153): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 52.357916961s ago: executing program 9 (id=9155): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x1005, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&-0\t||') 52.267930264s ago: executing program 9 (id=9160): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 52.242162445s ago: executing program 3 (id=9161): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 52.157958008s ago: executing program 3 (id=9164): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 52.08462146s ago: executing program 3 (id=9168): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/244, 0xf4}], 0x1, 0x185, 0x0) 52.055442901s ago: executing program 3 (id=9170): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000b00)="3d25ff0706000000000000c186dd", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.007278543s ago: executing program 3 (id=9172): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) unlink(&(0x7f0000000280)='./file1\x00') 51.981974294s ago: executing program 3 (id=9174): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x5bd7, 0x2}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 49.22541183s ago: executing program 39 (id=8900): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_send_signal(0xffffffffffffffff, 0x29, 0x0, 0x0) 37.225182429s ago: executing program 40 (id=9160): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 36.93017999s ago: executing program 41 (id=9174): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x5bd7, 0x2}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 24.426739777s ago: executing program 1 (id=9621): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setresuid(0xee01, 0xee00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 24.407776327s ago: executing program 1 (id=9622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 24.365171629s ago: executing program 1 (id=9624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080)="8a", &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040)="a0", &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 24.33498697s ago: executing program 1 (id=9626): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 24.013647881s ago: executing program 1 (id=9636): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) syz_io_uring_setup(0x136f, 0x0, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000000)) 23.729001741s ago: executing program 1 (id=9643): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 23.679005003s ago: executing program 42 (id=9643): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 21.325201385s ago: executing program 8 (id=9675): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x9) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x1, r1}]) 21.221422289s ago: executing program 8 (id=9678): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x1, 0x40000000}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100, @val=0x80}}}}}}}, 0x0) 21.153721421s ago: executing program 8 (id=9681): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 21.121581282s ago: executing program 8 (id=9682): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 20.837156352s ago: executing program 8 (id=9686): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/218, 0xda) 20.488678274s ago: executing program 8 (id=9692): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000}}) 20.436617336s ago: executing program 43 (id=9692): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000}}) 15.529786417s ago: executing program 6 (id=9792): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sctp\x00') fcntl$notify(r0, 0x402, 0x8000001d) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x1, 0x1) getdents64(r1, 0xffffffffffffffff, 0x43) 15.4573883s ago: executing program 6 (id=9793): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x18, 0x1000) 15.340790964s ago: executing program 6 (id=9795): r0 = getpid() r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000006}) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000100)={r2, r2, 0x8}) 15.289706576s ago: executing program 6 (id=9798): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0}, 0x3e96564ea7a9e37e, 0x30, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu<=-||!') 15.132126881s ago: executing program 6 (id=9803): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 15.056789254s ago: executing program 6 (id=9804): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb080045000078000000020011907800"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 640.781468ms ago: executing program 4 (id=10113): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = syz_clone(0x1184600, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) write$cgroup_pid(r1, &(0x7f0000000480)=r2, 0x12) 547.977791ms ago: executing program 4 (id=10116): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) fchdir(r1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 470.957864ms ago: executing program 4 (id=10118): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}], 0x1}, 0x10182) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a00016000feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e0000000535000002"], 0x138}}, 0x844) 439.047825ms ago: executing program 7 (id=10119): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xe) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x4}) 395.508796ms ago: executing program 7 (id=10122): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) 388.470827ms ago: executing program 4 (id=10123): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x28510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, @perf_config_ext={0x200000000008, 0x2c}, 0x7e75, 0x5, 0x2000, 0x7, 0x2008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x802, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r1, 0x78a8c000) write(r0, &(0x7f0000000080)="08008edf673c8000", 0x8) 368.441558ms ago: executing program 7 (id=10124): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/104, 0x5f}}], 0x4000008, 0x40012041, 0x0) 339.203728ms ago: executing program 5 (id=10125): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2d, 'cpu'}, {0x2d, 'rlimit'}]}, 0xd) 318.755899ms ago: executing program 4 (id=10126): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x0, 0x7fc, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x0, 0x100}, 0x10) 305.92109ms ago: executing program 7 (id=10127): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xf7f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x30, r0, 0x62c21a4ade68aba1, 0xf0bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x76}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x2000c800) 287.951141ms ago: executing program 5 (id=10128): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x10004000) 267.619681ms ago: executing program 0 (id=10129): io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x126, @time={0xfffffff1, 0xfffffffe}, 0x0, {}, 0x2, 0x0, 0xf}) 254.815631ms ago: executing program 7 (id=10130): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r0, 0x1, 0x12, &(0x7f00000000c0)=""/44, &(0x7f0000000140)=0x2c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) 237.320302ms ago: executing program 0 (id=10131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)="30bfd70d", 0x4}], 0x1, &(0x7f0000002240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 231.944293ms ago: executing program 7 (id=10132): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x6}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) 220.953622ms ago: executing program 4 (id=10133): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x40012002, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 196.976994ms ago: executing program 0 (id=10134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 167.312865ms ago: executing program 5 (id=10135): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) 158.387895ms ago: executing program 0 (id=10136): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x127) fcntl$notify(r0, 0x402, 0x80000027) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 116.219757ms ago: executing program 0 (id=10137): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0xf60, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&') 83.419667ms ago: executing program 5 (id=10138): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_socket_connect_nvme_tcp() 52.338768ms ago: executing program 5 (id=10139): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 36.416179ms ago: executing program 44 (id=9804): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb080045000078000000020011907800"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 9.86395ms ago: executing program 5 (id=10141): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 0s ago: executing program 0 (id=10142): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x300, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0xe, 0x747f}, 0xa, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000927, 0x0, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): vice [ 317.133347][ T2086] loop2: rw=1, sector=13896, nr_sectors = 2568 limit=512 [ 317.137045][T24266] syz.9.8403: attempt to access beyond end of device [ 317.137045][T24266] loop9: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 317.168335][T24266] buffer_io_error: 6 callbacks suppressed [ 317.168412][T24266] Buffer I/O error on dev loop9, logical block 108, lost async page write [ 317.190321][T24266] Buffer I/O error on dev loop9, logical block 120, lost async page write [ 317.199917][T24266] Buffer I/O error on dev loop9, logical block 124, lost async page write [ 317.209522][T24266] Buffer I/O error on dev loop9, logical block 112, lost async page write [ 317.219171][T24266] Buffer I/O error on dev loop9, logical block 116, lost async page write [ 317.281223][ T28] audit: type=1326 audit(2000001249.118:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24281 comm="syz.1.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 317.339420][T24289] program syz.1.8413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.422685][T24299] loop2: detected capacity change from 0 to 256 [ 317.640539][T24321] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 318.108889][T24366] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 318.122762][T24366] bond1 (unregistering): Released all slaves [ 318.216434][T24379] loop9: detected capacity change from 0 to 4096 [ 318.223683][T24379] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (20471!=26926) [ 318.233328][T24379] EXT4-fs (loop9): group descriptors corrupted! [ 318.440732][ C1] vcan0: j1939_tp_rxtimer: 0xffff888128581800: rx timeout, send abort [ 318.473493][T24410] loop3: detected capacity change from 0 to 128 [ 318.675881][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.949098][ C1] vcan0: j1939_tp_rxtimer: 0xffff888128581800: abort rx timeout. Force session deactivation [ 319.050633][T24459] loop3: detected capacity change from 0 to 128 [ 319.071177][T24459] msdos: Bad value for 'gid' [ 319.079821][T24459] msdos: Bad value for 'gid' [ 319.737553][T24509] loop9: detected capacity change from 0 to 512 [ 320.127175][T24520] loop3: detected capacity change from 0 to 512 [ 320.161021][T24520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.181144][T24520] ext4 filesystem being mounted at /1687/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.193722][T24520] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 320.630599][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.642096][T24524] ip6tnl1: entered promiscuous mode [ 320.655834][T24524] ip6tnl1: entered allmulticast mode [ 320.665519][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.801144][T24542] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 320.818956][T24550] __nla_validate_parse: 14 callbacks suppressed [ 320.818974][T24550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8530'. [ 320.982304][T24576] loop2: detected capacity change from 0 to 256 [ 321.001084][T24578] loop1: detected capacity change from 0 to 1024 [ 321.044222][T24578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.111329][T21278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.376821][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 321.376835][ T28] audit: type=1326 audit(2000001254.216:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.408315][ T28] audit: type=1326 audit(2000001254.216:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.431732][ T28] audit: type=1326 audit(2000001254.216:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.455614][ T28] audit: type=1326 audit(2000001254.216:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.506350][ T28] audit: type=1326 audit(2000001254.216:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.556560][ T28] audit: type=1326 audit(2000001254.216:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.592314][ T28] audit: type=1326 audit(2000001254.216:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.644177][ T28] audit: type=1326 audit(2000001254.216:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.694472][ T28] audit: type=1326 audit(2000001254.216:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 321.718259][ T28] audit: type=1326 audit(2000001254.216:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.9.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x50000 [ 322.036110][T24651] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8575'. [ 322.099377][T24655] ALSA: seq fatal error: cannot create timer (-22) [ 322.125851][T24659] program syz.1.8577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.283659][T24667] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.8582'. [ 322.346620][ T401] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.391494][ T401] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.403602][ T401] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.413560][ T401] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.592377][T24704] set_capacity_and_notify: 1 callbacks suppressed [ 322.592394][T24704] loop1: detected capacity change from 0 to 128 [ 322.699145][T24710] netlink: 200 bytes leftover after parsing attributes in process `syz.3.8602'. [ 323.090799][T24738] loop1: detected capacity change from 0 to 128 [ 323.141514][T24738] msdos: Bad value for 'gid' [ 323.151445][T24738] msdos: Bad value for 'gid' [ 323.289909][T24745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8618'. [ 323.363311][T24749] loop3: detected capacity change from 0 to 128 [ 323.584184][T24761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8625'. [ 323.621175][T24766] loop2: detected capacity change from 0 to 128 [ 323.661812][T24766] bio_check_eod: 28 callbacks suppressed [ 323.661896][T24766] syz.2.8626: attempt to access beyond end of device [ 323.661896][T24766] loop2: rw=2049, sector=138, nr_sectors = 72 limit=128 [ 323.715559][T24766] syz.2.8626: attempt to access beyond end of device [ 323.715559][T24766] loop2: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 323.730308][T24766] syz.2.8626: attempt to access beyond end of device [ 323.730308][T24766] loop2: rw=8390657, sector=216, nr_sectors = 2 limit=128 [ 323.745259][T24766] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 323.754427][T24766] syz.2.8626: attempt to access beyond end of device [ 323.754427][T24766] loop2: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 323.769083][T24766] syz.2.8626: attempt to access beyond end of device [ 323.769083][T24766] loop2: rw=8390657, sector=240, nr_sectors = 2 limit=128 [ 323.793980][T24766] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 323.803431][T24766] syz.2.8626: attempt to access beyond end of device [ 323.803431][T24766] loop2: rw=2049, sector=242, nr_sectors = 8 limit=128 [ 323.836272][T24766] syz.2.8626: attempt to access beyond end of device [ 323.836272][T24766] loop2: rw=8390657, sector=248, nr_sectors = 2 limit=128 [ 323.840909][T24777] xt_hashlimit: size too large, truncated to 1048576 [ 323.906702][T24766] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 323.946927][T24766] syz.2.8626: attempt to access beyond end of device [ 323.946927][T24766] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 323.976358][T24766] syz.2.8626: attempt to access beyond end of device [ 323.976358][T24766] loop2: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 324.015839][T24766] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 324.045090][T24766] syz.2.8626: attempt to access beyond end of device [ 324.045090][T24766] loop2: rw=2049, sector=226, nr_sectors = 8 limit=128 [ 324.061573][T24766] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 324.239514][T24795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8636'. [ 324.675822][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 324.689641][T24837] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 324.980059][T24872] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8672'. [ 325.000559][T24872] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8672'. [ 325.015892][T24872] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8672'. [ 325.212315][T24900] netlink: 'syz.0.8685': attribute type 1 has an invalid length. [ 325.268383][T24907] loop3: detected capacity change from 0 to 128 [ 325.379144][ T47] tipc: Subscription rejected, illegal request [ 325.736038][T24950] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 326.454864][T25006] __nla_validate_parse: 3 callbacks suppressed [ 326.454882][T25006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8728'. [ 326.731908][T25043] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8745'. [ 326.846451][T25058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8753'. [ 327.309667][T25081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8762'. [ 327.331522][T25081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8762'. [ 327.345027][T25081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8762'. [ 327.386464][T25089] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8767'. [ 327.395644][T25089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8767'. [ 327.407009][T25089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8767'. [ 327.537768][T25101] vlan2: entered allmulticast mode [ 327.545045][T25101] bridge_slave_0: entered allmulticast mode [ 327.851679][T25133] loop2: detected capacity change from 0 to 1024 [ 327.881719][T25133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.995115][T23294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.238619][ T28] kauditd_printk_skb: 11351 callbacks suppressed [ 328.238635][ T28] audit: type=1326 audit(2000001261.066:13141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.293438][ T28] audit: type=1326 audit(2000001261.076:13142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.328069][ T28] audit: type=1326 audit(2000001261.076:13143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.352323][ T28] audit: type=1326 audit(2000001261.076:13144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.386065][ T28] audit: type=1326 audit(2000001261.076:13145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.412790][ T28] audit: type=1326 audit(2000001261.076:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.445967][ T28] audit: type=1326 audit(2000001261.076:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.472143][ T28] audit: type=1326 audit(2000001261.076:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.497740][ T28] audit: type=1326 audit(2000001261.076:13149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.527087][ T28] audit: type=1326 audit(2000001261.076:13150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25157 comm="syz.1.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 328.580571][T25175] loop9: detected capacity change from 0 to 512 [ 328.605175][T25175] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.054352][T25198] loop9: detected capacity change from 0 to 512 [ 329.677922][T25216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8819'. [ 329.836880][T25229] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 330.084942][T25227] loop3: detected capacity change from 0 to 32768 [ 330.210103][T25259] loop1: detected capacity change from 0 to 512 [ 330.292797][T25265] netlink: 'syz.0.8840': attribute type 2 has an invalid length. [ 330.358968][T25269] dummy0: entered promiscuous mode [ 330.364475][T25269] macvlan2: entered promiscuous mode [ 330.384153][T25269] macvlan2: entered allmulticast mode [ 330.406777][T25269] dummy0: entered allmulticast mode [ 330.563529][T25288] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 331.203038][T25320] loop9: detected capacity change from 0 to 512 [ 331.232226][T25320] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 331.260574][T25320] EXT4-fs (loop9): 1 orphan inode deleted [ 331.294650][T25320] EXT4-fs (loop9): 1 truncate cleaned up [ 331.327682][T25320] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.392269][T25332] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.421081][T21150] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.500752][T25343] ip6_vti0 speed is unknown, defaulting to 1000 [ 331.531442][T25343] lo speed is unknown, defaulting to 1000 [ 331.857162][T25364] __nla_validate_parse: 5 callbacks suppressed [ 331.857181][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8885'. [ 332.048539][T25376] loop2: detected capacity change from 0 to 512 [ 332.091389][T25376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.204175][T23294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.405253][T25394] loop1: detected capacity change from 0 to 512 [ 332.461093][T25394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.502477][T25394] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.571834][T25394] EXT4-fs: Ignoring removed orlov option [ 332.596909][T25394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 332.605684][T25394] EXT4-fs error (device loop1): __ext4_remount:6829: comm syz.1.8898: Abort forced by user [ 332.629287][T25394] EXT4-fs (loop1): Remounting filesystem read-only [ 332.636227][T25394] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 332.669241][T25410] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 332.745128][T21278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.292894][T25447] loop3: detected capacity change from 0 to 512 [ 333.311196][T25447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.359930][T25447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.372681][T25447] ext4 filesystem being mounted at /1775/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.389831][T25447] __quota_error: 17400 callbacks suppressed [ 333.389848][T25447] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 333.395826][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 333.413778][T25447] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 333.423311][T25447] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.8923: Failed to acquire dquot type 1 [ 333.475735][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.039405][T25467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.048045][T25467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.572772][T25469] loop3: detected capacity change from 0 to 512 [ 334.590840][T25471] loop1: detected capacity change from 0 to 2048 [ 334.619893][T25469] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 334.648667][T25471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.715237][T25469] EXT4-fs (loop3): 1 truncate cleaned up [ 334.726317][T25469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.808579][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.877376][T25485] random: crng reseeded on system resumption [ 334.883477][ T28] audit: type=1400 audit(2000001267.716:30551): avc: denied { write } for pid=25484 comm="syz.3.8935" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 334.928556][T21278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.974959][T25490] loop9: detected capacity change from 0 to 1024 [ 334.987151][T25492] loop3: detected capacity change from 0 to 512 [ 335.003581][T25490] EXT4-fs: Ignoring removed orlov option [ 335.057310][T25492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.086581][T25490] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 335.107663][T25502] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8943'. [ 335.107836][T25490] System zones: [ 335.117324][T25492] ext4 filesystem being mounted at /1781/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.137817][T25490] 0-1, 3-12 [ 335.147833][T25490] EXT4-fs (loop9): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.191169][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.296608][T21150] EXT4-fs (loop9): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 335.331536][T25515] loop3: detected capacity change from 0 to 2048 [ 335.416261][T25515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.617337][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.668589][T25542] loop3: detected capacity change from 0 to 512 [ 335.700236][T25542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.720214][T25542] ext4 filesystem being mounted at /1784/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.787702][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.232133][T25568] loop9: detected capacity change from 0 to 8192 [ 336.544518][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8981'. [ 336.573661][T25589] netlink: 'syz.0.8981': attribute type 20 has an invalid length. [ 336.593742][T25589] netlink: 'syz.0.8981': attribute type 21 has an invalid length. [ 336.636296][T25591] loop9: detected capacity change from 0 to 1024 [ 336.698017][T25591] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.720389][T25591] EXT4-fs error (device loop9): __ext4_new_inode:1079: comm syz.9.8982: reserved inode found cleared - inode=2 [ 336.787468][T25591] EXT4-fs (loop9): Remounting filesystem read-only [ 336.815852][ T28] audit: type=1400 audit(2000001269.646:30552): avc: denied { unlink } for pid=25590 comm="syz.9.8982" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 336.869880][T21150] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.888126][T25606] loop1: detected capacity change from 0 to 736 [ 336.894521][ T28] audit: type=1326 audit(2000001269.716:30553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25605 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 336.941516][ T28] audit: type=1326 audit(2000001269.716:30554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25605 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 336.980085][ T28] audit: type=1326 audit(2000001269.716:30555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25605 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 337.006660][ T28] audit: type=1326 audit(2000001269.716:30556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25605 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6563dac582 code=0x7ffc0000 [ 337.034292][ T28] audit: type=1326 audit(2000001269.726:30557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25605 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6563d6d04e code=0x7ffc0000 [ 337.058204][ T28] audit: type=1326 audit(2000001269.726:30558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25605 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6563dac647 code=0x7ffc0000 [ 337.141728][T25612] random: crng reseeded on system resumption [ 337.321453][T25628] netlink: 'syz.3.8996': attribute type 9 has an invalid length. [ 337.329290][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8996'. [ 337.346414][T25628] hsr0: entered promiscuous mode [ 337.356788][T25628] macvlan1: entered promiscuous mode [ 337.362298][T25628] macvlan1: entered allmulticast mode [ 337.385950][T25628] hsr0: entered allmulticast mode [ 337.396623][T25628] hsr_slave_0: entered allmulticast mode [ 337.406907][T25628] hsr_slave_1: entered allmulticast mode [ 337.770658][T25644] msdos: Bad value for 'uid' [ 337.775283][T25644] msdos: Bad value for 'uid' [ 337.887329][T25650] SELinux: Context is not valid (left unmapped). [ 337.944548][T25653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.122210][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.253235][ T47] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.259963][T25672] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.435068][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 338.435081][ T28] audit: type=1400 audit(2000001271.266:30577): avc: denied { read } for pid=25675 comm="syz.1.9020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 338.553405][ T28] audit: type=1400 audit(2000001271.366:30578): avc: denied { setopt } for pid=25675 comm="syz.1.9020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 338.635213][T25679] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9021'. [ 339.293367][T25699] tipc: Enabling of bearer rejected, failed to enable media [ 339.356526][ T28] audit: type=1400 audit(2000001272.196:30579): avc: denied { bind } for pid=25700 comm="syz.1.9033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 340.268280][T25716] batadv_slave_0: entered promiscuous mode [ 340.274962][T25715] batadv_slave_0: left promiscuous mode [ 340.281554][ T4006] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 340.390493][T25724] ip6_vti0 speed is unknown, defaulting to 1000 [ 340.497496][T25724] lo speed is unknown, defaulting to 1000 [ 340.787337][T25770] netlink: 212 bytes leftover after parsing attributes in process `syz.9.9063'. [ 340.818214][T25772] netlink: 'syz.9.9064': attribute type 29 has an invalid length. [ 340.827545][T25772] netlink: 'syz.9.9064': attribute type 29 has an invalid length. [ 340.839311][T25772] netlink: 'syz.9.9064': attribute type 29 has an invalid length. [ 341.145386][T25783] set_capacity_and_notify: 2 callbacks suppressed [ 341.145402][T25783] loop9: detected capacity change from 0 to 1024 [ 341.165523][T25783] EXT4-fs: inline encryption not supported [ 341.174406][T25783] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 341.174406][T25783] [ 341.505355][T25803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9079'. [ 341.626124][ T28] audit: type=1400 audit(2000001274.446:30580): avc: denied { append } for pid=25810 comm="syz.3.9085" name="file0" dev="tmpfs" ino=9408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.855876][T25827] sctp: [Deprecated]: syz.0.9090 (pid 25827) Use of int in max_burst socket option. [ 341.855876][T25827] Use struct sctp_assoc_value instead [ 342.179203][T25848] loop9: detected capacity change from 0 to 256 [ 342.256655][T25854] ip6_vti0 speed is unknown, defaulting to 1000 [ 342.378790][T25854] lo speed is unknown, defaulting to 1000 [ 342.606592][T25879] loop9: detected capacity change from 0 to 1024 [ 342.655498][T25879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.767912][T21150] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.973710][T25900] loop9: detected capacity change from 0 to 128 [ 343.347659][T25916] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9130'. [ 343.462137][T25924] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.486067][T25927] netlink: 265 bytes leftover after parsing attributes in process `syz.9.9135'. [ 343.619253][T25924] lo speed is unknown, defaulting to 1000 [ 343.655059][ T28] audit: type=1326 audit(2000001276.486:30581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 343.720936][ T28] audit: type=1326 audit(2000001276.516:30582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 343.797789][ T28] audit: type=1326 audit(2000001276.516:30583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 343.869608][ T28] audit: type=1326 audit(2000001276.526:30584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 343.904413][T25938] loop9: detected capacity change from 0 to 1024 [ 343.906927][ T28] audit: type=1326 audit(2000001276.526:30585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 343.949950][ T28] audit: type=1326 audit(2000001276.526:30586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 343.974925][ T28] audit: type=1326 audit(2000001276.526:30587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 344.002106][ T28] audit: type=1326 audit(2000001276.526:30588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 344.024486][T25938] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.027040][ T28] audit: type=1326 audit(2000001276.526:30589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 344.062855][ T28] audit: type=1326 audit(2000001276.526:30590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25932 comm="syz.9.9138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece83c819 code=0x7ffc0000 [ 344.096131][T25938] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.122815][T25938] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9140: bg 0: block 112: padding at end of block bitmap is not set [ 344.167719][T25938] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.9140: Freeing blocks not in datazone - block = 0, count = 16 [ 344.265137][T21150] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 344.368969][T25962] loop1: detected capacity change from 0 to 512 [ 344.417691][T25962] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 344.440432][T25962] FAT-fs (loop1): Filesystem has been set read-only [ 344.467221][T25962] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 344.494752][T25962] FAT-fs (loop1): error, invalid access to FAT (entry 0x000000c8) [ 344.743293][T25999] loop1: detected capacity change from 0 to 128 [ 344.751934][T25999] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 344.769986][T25999] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 344.880742][T26011] loop1: detected capacity change from 0 to 128 [ 344.999935][T26015] loop1: detected capacity change from 0 to 512 [ 345.016742][T26015] EXT4-fs: Ignoring removed nobh option [ 345.032578][T26015] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.071108][T26015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.105921][T26015] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.165592][T21278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.831548][T26046] pimreg: entered allmulticast mode [ 345.851017][T26046] pimreg: left allmulticast mode [ 346.075799][T26050] netlink: 'syz.0.9192': attribute type 2 has an invalid length. [ 346.328756][T26057] ip6_vti0 speed is unknown, defaulting to 1000 [ 346.459191][T26057] lo speed is unknown, defaulting to 1000 [ 347.767096][T26082] netlink: 'syz.0.9203': attribute type 3 has an invalid length. [ 347.812367][T26077] ip6_vti0 speed is unknown, defaulting to 1000 [ 347.874306][T26077] lo speed is unknown, defaulting to 1000 [ 348.059517][T26077] chnl_net:caif_netlink_parms(): no params data found [ 348.144778][T26077] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.185859][T26077] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.193396][T26077] bridge_slave_0: entered allmulticast mode [ 348.204797][T26077] bridge_slave_0: entered promiscuous mode [ 348.221421][T26077] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.265854][T26077] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.273068][T26077] bridge_slave_1: entered allmulticast mode [ 348.316608][T26077] bridge_slave_1: entered promiscuous mode [ 348.363610][T26077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.387674][T26077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.479336][T26077] team0: Port device team_slave_0 added [ 348.495712][T26077] team0: Port device team_slave_1 added [ 348.524674][T26077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.542426][T26077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.574478][T26077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.592898][T26077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.600525][T26077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.655823][T26077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.690124][ T73] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.748819][T26077] hsr_slave_0: entered promiscuous mode [ 348.757585][T26077] hsr_slave_1: entered promiscuous mode [ 348.772029][T26077] debugfs: 'hsr0' already exists in 'hsr' [ 348.786014][T26077] Cannot create hsr debugfs directory [ 348.802840][ T73] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.859255][ T73] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.905466][ T73] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.088338][ T73] bridge_slave_1: left allmulticast mode [ 349.095546][ T73] bridge_slave_1: left promiscuous mode [ 349.118712][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.146832][ T73] bridge_slave_0: left allmulticast mode [ 349.152557][ T73] bridge_slave_0: left promiscuous mode [ 349.167734][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.358380][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.369274][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.379431][ T73] bond0 (unregistering): Released all slaves [ 349.548578][ T73] hsr_slave_0: left promiscuous mode [ 349.560261][ T73] hsr_slave_1: left promiscuous mode [ 349.573951][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.581744][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.596248][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.603641][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.635915][ T73] veth1_macvtap: left promiscuous mode [ 349.641414][ T73] veth0_macvtap: left promiscuous mode [ 349.655919][ T73] veth1_vlan: left promiscuous mode [ 349.661173][ T73] veth0_vlan: left promiscuous mode [ 349.800990][ T73] team0 (unregistering): Port device team_slave_1 removed [ 349.813860][ T73] team0 (unregistering): Port device team_slave_0 removed [ 350.035904][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 350.639183][T26077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.654686][T26077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.676889][T26077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.685843][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.695395][T26077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.763320][T26077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.787100][T26077] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.810134][ T2086] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.817243][ T2086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.832551][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.839842][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.878098][T26077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.891795][T26077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.965487][T26077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.165114][T26077] veth0_vlan: entered promiscuous mode [ 351.174299][T26077] veth1_vlan: entered promiscuous mode [ 351.187931][T26077] veth0_macvtap: entered promiscuous mode [ 351.201411][T26077] veth1_macvtap: entered promiscuous mode [ 351.216779][T26077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.229416][T26077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.244508][ T401] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.264305][ T401] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.289764][ T401] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.311970][ T401] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.355333][T26360] ip6tnl1: entered allmulticast mode [ 351.625722][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 351.633322][ T28] audit: type=1400 audit(2000001284.456:30620): avc: denied { mount } for pid=26386 comm="syz.6.9228" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 351.676406][T26357] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.778510][T26357] lo speed is unknown, defaulting to 1000 [ 351.821350][T26404] loop6: detected capacity change from 0 to 1024 [ 351.840795][T26404] EXT4-fs: Ignoring removed bh option [ 351.874709][T26404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.909262][T26404] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 351.927209][T26404] EXT4-fs error (device loop6) in ext4_setattr:6028: error 28 [ 351.952757][T26404] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 351.985476][T26404] EXT4-fs (loop6): This should not happen!! Data will be lost [ 351.985476][T26404] [ 352.000446][T26404] EXT4-fs (loop6): Total free blocks count 0 [ 352.007259][T26404] EXT4-fs (loop6): Free/Dirty block details [ 352.013275][T26404] EXT4-fs (loop6): free_blocks=20480 [ 352.020219][T26404] EXT4-fs (loop6): dirty_blocks=80 [ 352.025596][T26404] EXT4-fs (loop6): Block reservation details [ 352.031934][T26404] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 352.045269][T26403] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 352.073018][T26077] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 352.226331][T26428] loop6: detected capacity change from 0 to 2048 [ 352.267545][T26428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.286051][ T401] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.296527][T26428] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.296699][ T401] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.316154][T21444] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.347785][T26428] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9236: bg 0: block 345: padding at end of block bitmap is not set [ 352.363698][T26428] EXT4-fs (loop6): Remounting filesystem read-only [ 352.413166][T26077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.537903][T26450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.655495][T26462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9249'. [ 352.677360][T26462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9249'. [ 352.782692][T26467] loop6: detected capacity change from 0 to 512 [ 352.789813][T26467] EXT4-fs: Ignoring removed oldalloc option [ 352.797375][T26467] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.808502][T26467] EXT4-fs (loop6): 1 truncate cleaned up [ 352.814903][T26467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.863318][T26077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.896574][T16621] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 353.156113][T16621] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 353.515602][T26485] netlink: 'syz.1.9257': attribute type 6 has an invalid length. [ 353.624671][ T28] audit: type=1326 audit(2000001286.456:30621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 353.654716][ T28] audit: type=1326 audit(2000001286.456:30622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 353.680717][ T28] audit: type=1326 audit(2000001286.456:30623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 353.704847][T26495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9262'. [ 353.715661][ T28] audit: type=1326 audit(2000001286.456:30624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 353.740215][T26495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9262'. [ 353.769623][ T28] audit: type=1326 audit(2000001286.456:30625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 353.805300][ T28] audit: type=1326 audit(2000001286.456:30626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 353.849112][T26502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9264'. [ 353.858843][ T28] audit: type=1326 audit(2000001286.456:30627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 353.900240][ T28] audit: type=1326 audit(2000001286.456:30628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 353.942942][ T28] audit: type=1326 audit(2000001286.456:30629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26492 comm="syz.1.9261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x7ffc0000 [ 355.434897][T26697] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.462435][T26697] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.579438][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 355.977886][T26726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9310'. [ 356.015623][T26730] netlink: 'syz.0.9312': attribute type 5 has an invalid length. [ 356.055857][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 356.084473][T26734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9315'. [ 356.112478][T26734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9315'. [ 356.355956][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 356.447464][T26761] block device autoloading is deprecated and will be removed. [ 356.908373][T26781] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9335'. [ 357.044357][T26796] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.124409][T26807] loop1: detected capacity change from 0 to 128 [ 357.181120][T26796] lo speed is unknown, defaulting to 1000 [ 357.207380][T26813] bio_check_eod: 1 callbacks suppressed [ 357.207395][T26813] syz.1.9339: attempt to access beyond end of device [ 357.207395][T26813] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 357.257527][T26813] syz.1.9339: attempt to access beyond end of device [ 357.257527][T26813] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 357.293626][T26813] syz.1.9339: attempt to access beyond end of device [ 357.293626][T26813] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 357.324781][T26813] syz.1.9339: attempt to access beyond end of device [ 357.324781][T26813] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 357.352048][T26813] syz.1.9339: attempt to access beyond end of device [ 357.352048][T26813] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 357.399607][T26813] syz.1.9339: attempt to access beyond end of device [ 357.399607][T26813] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 357.484944][T26813] syz.1.9339: attempt to access beyond end of device [ 357.484944][T26813] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 357.553835][T26813] syz.1.9339: attempt to access beyond end of device [ 357.553835][T26813] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 357.572117][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 357.572132][ T28] audit: type=1400 audit(2000001290.406:30644): avc: denied { ioctl } for pid=26795 comm="syz.0.9338" path="socket:[78437]" dev="sockfs" ino=78437 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 357.586584][T26813] syz.1.9339: attempt to access beyond end of device [ 357.586584][T26813] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 357.638334][T26813] syz.1.9339: attempt to access beyond end of device [ 357.638334][T26813] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 357.710154][T26845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9340'. [ 357.744383][T26845] bond0: Unable to set down delay as MII monitoring is disabled [ 357.755914][T26848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.764375][T26848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.923793][T26880] loop6: detected capacity change from 0 to 512 [ 357.942669][T26880] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 357.962335][T26880] EXT4-fs (loop6): 1 truncate cleaned up [ 357.997499][T26880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.027578][T26077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.093089][ T28] audit: type=1400 audit(2000001290.926:30645): avc: denied { execmod } for pid=26895 comm="syz.0.9348" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=78477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 358.724430][T26936] ip6_vti0 speed is unknown, defaulting to 1000 [ 358.769859][T26936] lo speed is unknown, defaulting to 1000 [ 358.965118][T26942] loop6: detected capacity change from 0 to 512 [ 358.991740][T26942] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 359.017011][T26942] EXT4-fs (loop6): 1 truncate cleaned up [ 359.023193][T26942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.139534][T26077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.322568][T26963] loop6: detected capacity change from 0 to 164 [ 359.357231][T26963] rock: directory entry would overflow storage [ 359.377665][T26963] rock: sig=0x66, size=4, remaining=3 [ 359.610090][T26988] unsupported nla_type 210 [ 359.715999][ T28] audit: type=1400 audit(2000001292.546:30646): avc: denied { ioctl } for pid=26990 comm="syz.6.9389" path="socket:[78671]" dev="sockfs" ino=78671 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.813933][T27002] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.913410][T27010] loop6: detected capacity change from 0 to 512 [ 359.953314][T27010] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 360.036306][T26875] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.058462][T27002] lo speed is unknown, defaulting to 1000 [ 360.064283][T26997] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.085272][T21733] bridge0: port 3(syz_tun) entered disabled state [ 360.120032][T21733] syz_tun (unregistering): left allmulticast mode [ 360.126551][T21733] syz_tun (unregistering): left promiscuous mode [ 360.133154][T21733] bridge0: port 3(syz_tun) entered disabled state [ 360.147902][T27018] bridge0: entered promiscuous mode [ 360.175128][T26875] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.192378][T26997] lo speed is unknown, defaulting to 1000 [ 360.254776][T27023] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.300264][T26875] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.339070][T27014] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.340725][T27023] lo speed is unknown, defaulting to 1000 [ 360.383656][T26875] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.437376][T27014] lo speed is unknown, defaulting to 1000 [ 360.467877][T26997] chnl_net:caif_netlink_parms(): no params data found [ 360.739588][T26875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.749996][T26875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.760489][T26875] bond0 (unregistering): Released all slaves [ 360.772303][T26997] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.779826][T26997] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.787884][T26997] bridge_slave_0: entered allmulticast mode [ 360.799483][T26997] bridge_slave_0: entered promiscuous mode [ 360.808689][T26997] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.819695][T26997] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.828375][T26997] bridge_slave_1: entered allmulticast mode [ 360.836723][T26997] bridge_slave_1: entered promiscuous mode [ 360.882556][T26997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.895164][T26997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.939905][T26997] team0: Port device team_slave_0 added [ 360.952059][T26875] hsr_slave_0: left promiscuous mode [ 360.958406][T26875] hsr_slave_1: left promiscuous mode [ 360.964468][T26875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.974092][T26875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.987175][T26875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.996209][T26875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.009811][T26875] veth1_macvtap: left promiscuous mode [ 361.015964][T26875] veth0_macvtap: left promiscuous mode [ 361.022963][T26875] veth1_vlan: left promiscuous mode [ 361.030829][T26875] veth0_vlan: left promiscuous mode [ 361.163285][T27134] loop6: detected capacity change from 0 to 512 [ 361.179383][T27134] EXT4-fs: Ignoring removed i_version option [ 361.194767][T27134] EXT4-fs: Ignoring removed bh option [ 361.219390][T27134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.235456][T26875] team0 (unregistering): Port device team_slave_1 removed [ 361.242889][T27134] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.253567][T26875] team0 (unregistering): Port device team_slave_0 removed [ 361.291186][T26077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.312432][T26997] team0: Port device team_slave_1 added [ 361.349365][T26997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.362196][T26997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.392115][T26997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.409742][T26997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.417188][T26997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.444310][T26997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.473176][T27014] chnl_net:caif_netlink_parms(): no params data found [ 361.509349][T26997] hsr_slave_0: entered promiscuous mode [ 361.516156][T26997] hsr_slave_1: entered promiscuous mode [ 361.581136][T26875] IPVS: stop unused estimator thread 0... [ 361.650714][T27014] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.664230][T27014] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.687060][T27014] bridge_slave_0: entered allmulticast mode [ 361.693821][T27014] bridge_slave_0: entered promiscuous mode [ 361.719660][T27014] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.748098][T27014] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.766560][T27014] bridge_slave_1: entered allmulticast mode [ 361.773459][T27014] bridge_slave_1: entered promiscuous mode [ 361.784826][T27204] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9411'. [ 361.916339][T27014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.040310][T27014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.088743][T27014] team0: Port device team_slave_0 added [ 362.107980][T27014] team0: Port device team_slave_1 added [ 362.134252][T27014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.145668][T27014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.176790][T27014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.201888][T27014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.209762][T27014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.236497][T27014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.288659][T27014] hsr_slave_0: entered promiscuous mode [ 362.295619][T27014] hsr_slave_1: entered promiscuous mode [ 362.302147][T27014] debugfs: 'hsr0' already exists in 'hsr' [ 362.310088][T27014] Cannot create hsr debugfs directory [ 362.383423][T27252] loop6: detected capacity change from 0 to 164 [ 362.394611][T26997] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.416587][T27252] rock: directory entry would overflow storage [ 362.426140][T27252] rock: sig=0x5252, size=5, remaining=3 [ 362.438195][T26997] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.462828][T26997] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 362.490884][T26997] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 362.660193][T26997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.694534][T26997] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.704649][T26875] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.711804][T26875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.744381][T26875] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.751579][T26875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.770793][T26997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.782342][T26997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.849664][T27292] loop1: detected capacity change from 0 to 1024 [ 362.895556][T27262] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.913667][T27292] EXT4-fs: Ignoring removed bh option [ 362.921942][T27292] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 362.935845][T27292] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 2: comm syz.1.9422: lblock 2 mapped to illegal pblock 2 (length 1) [ 362.974611][T27292] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.974776][T27292] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 362.984056][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 362.984077][ C1] EXT4-fs (loop1): initial error at time 2000001295: ext4_map_blocks:786: inode 3: block 2 [ 362.984122][ C1] EXT4-fs (loop1): last error at time 2000001295: ext4_map_blocks:786: inode 3: block 2 [ 363.020977][T27292] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 48: comm syz.1.9422: lblock 0 mapped to illegal pblock 48 (length 1) [ 363.024474][T27014] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 363.060390][T27292] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 363.067377][T27014] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 363.088214][T27014] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 363.095108][T27292] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 363.109296][T27014] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 363.135484][T27292] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.9422: Failed to acquire dquot type 0 [ 363.148396][T27292] loop1: lost filesystem error report for type 5 error -117 [ 363.149112][T27292] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 363.166798][T27292] loop1: lost filesystem error report for type 5 error -117 [ 363.167076][T27292] EXT4-fs error (device loop1): ext4_evict_inode:265: inode #11: comm syz.1.9422: mark_inode_dirty error [ 363.195448][T27292] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 363.195689][T27292] EXT4-fs warning (device loop1): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 363.234437][T27292] EXT4-fs (loop1): 1 orphan inode deleted [ 363.250089][T27292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.300039][T26875] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 363.329471][T26997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.339383][T26875] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 363.368116][T26875] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:15: Failed to release dquot type 0 [ 363.393177][T27014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.407964][T21278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.424642][T27014] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.437460][T21278] EXT4-fs error (device loop1): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 363.460532][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.467699][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.475651][T21278] loop1: lost filesystem error report for type 5 error -117 [ 363.477909][T21278] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 363.479542][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.485399][T21278] loop1: lost filesystem error report for type 5 error -117 [ 363.496292][T21278] EXT4-fs error (device loop1): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 363.502105][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.516887][T21278] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 363.530275][T27262] lo speed is unknown, defaulting to 1000 [ 363.545635][T27014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.560639][T27014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.622221][T27323] ip6_vti0 speed is unknown, defaulting to 1000 [ 363.687427][ T28] audit: type=1326 audit(2000001296.526:30647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.9426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6563dac819 code=0x0 [ 363.754783][T27323] lo speed is unknown, defaulting to 1000 [ 363.760549][T27014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.829038][T27355] sctp: [Deprecated]: syz.6.9427 (pid 27355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.829038][T27355] Use struct sctp_sack_info instead [ 363.897502][T26997] veth0_vlan: entered promiscuous mode [ 363.970885][T26997] veth1_vlan: entered promiscuous mode [ 364.100374][T26997] veth0_macvtap: entered promiscuous mode [ 364.115956][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 364.133031][T26997] veth1_macvtap: entered promiscuous mode [ 364.165165][T26997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.199723][T26997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.235370][T26875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.245432][T26875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.299094][T27014] veth0_vlan: entered promiscuous mode [ 364.319529][T26875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.464359][T27014] veth1_vlan: entered promiscuous mode [ 364.476615][T26875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.544749][T27014] veth0_macvtap: entered promiscuous mode [ 364.559442][T27404] tipc: Enabling of bearer rejected, already enabled [ 364.575735][T27014] veth1_macvtap: entered promiscuous mode [ 364.590186][T27014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.668538][T27014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.793606][T26875] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.802995][T26875] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.819947][T26875] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.842140][T26875] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.871266][T27429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9437'. [ 364.936717][T27433] team0 (unregistering): Port device team_slave_0 removed [ 364.957714][T27433] team0 (unregistering): Port device team_slave_1 removed [ 365.161060][T27468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9445'. [ 365.207753][T27468] netlink: 'syz.6.9445': attribute type 30 has an invalid length. [ 365.247934][T26873] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.268440][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9445'. [ 365.270042][T26873] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.302460][T26873] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.313690][T27481] netlink: 'syz.6.9445': attribute type 30 has an invalid length. [ 365.329370][T26873] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.341249][T27486] loop8: detected capacity change from 0 to 512 [ 365.349825][T27486] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 365.361934][T27486] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.9448: Invalid inode bitmap blk 4 in block_group 0 [ 365.376274][T27486] loop8: lost filesystem error report for type 5 error -117 [ 365.377616][T27486] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.428798][T27486] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 365.539253][T27014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.615016][T27515] loop8: detected capacity change from 0 to 128 [ 365.721618][T27527] bio_check_eod: 101 callbacks suppressed [ 365.721636][T27527] syz.8.9456: attempt to access beyond end of device [ 365.721636][T27527] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 365.776353][T27527] syz.8.9456: attempt to access beyond end of device [ 365.776353][T27527] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 365.836712][T27527] syz.8.9456: attempt to access beyond end of device [ 365.836712][T27527] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 365.865261][T27527] syz.8.9456: attempt to access beyond end of device [ 365.865261][T27527] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 365.915997][T27527] syz.8.9456: attempt to access beyond end of device [ 365.915997][T27527] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 365.941701][T27527] syz.8.9456: attempt to access beyond end of device [ 365.941701][T27527] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 365.974268][T27527] syz.8.9456: attempt to access beyond end of device [ 365.974268][T27527] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 365.990605][T27527] syz.8.9456: attempt to access beyond end of device [ 365.990605][T27527] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 366.004440][T27527] syz.8.9456: attempt to access beyond end of device [ 366.004440][T27527] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 366.053808][ T28] audit: type=1400 audit(2000001298.886:30648): avc: denied { relabelfrom } for pid=27555 comm="syz.1.9467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 366.056264][T27527] syz.8.9456: attempt to access beyond end of device [ 366.056264][T27527] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 366.097451][ T28] audit: type=1400 audit(2000001298.916:30649): avc: denied { relabelto } for pid=27555 comm="syz.1.9467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 366.190974][T27569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9470'. [ 366.217196][T27571] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 366.323732][T27580] loop8: detected capacity change from 0 to 8192 [ 366.361125][T27580] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 366.368904][T27580] FAT-fs (loop8): Filesystem has been set read-only [ 366.691581][T27594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.707607][T27594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.718051][T27615] loop6: detected capacity change from 0 to 8192 [ 367.039316][T27664] ip6_vti0 speed is unknown, defaulting to 1000 [ 367.124829][T27664] lo speed is unknown, defaulting to 1000 [ 367.669252][ C1] sd 0:0:1:0: [sda] tag#3330 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 367.679803][ C1] sd 0:0:1:0: [sda] tag#3330 CDB: Read(6) 08 00 00 00 00 00 [ 367.965431][T27770] Invalid argument reading file caps for ./file0 [ 368.019629][T27778] loop6: detected capacity change from 0 to 128 [ 368.120510][T27780] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.299565][T27780] lo speed is unknown, defaulting to 1000 [ 368.851689][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9525'. [ 368.876868][T27851] netlink: 'syz.1.9525': attribute type 30 has an invalid length. [ 368.938712][T27860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9525'. [ 368.955392][T27862] program syz.6.9529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.977408][T27859] loop5: detected capacity change from 0 to 128 [ 368.986013][T27860] netlink: 'syz.1.9525': attribute type 30 has an invalid length. [ 369.146436][T27886] loop1: detected capacity change from 0 to 128 [ 369.350039][T27905] loop1: detected capacity change from 0 to 128 [ 369.367086][T27905] FAT-fs (loop1): Directory bread(block 524322) failed [ 369.398992][T27905] FAT-fs (loop1): Directory bread(block 524323) failed [ 369.436352][T27905] FAT-fs (loop1): Directory bread(block 524324) failed [ 369.467245][T27905] FAT-fs (loop1): Directory bread(block 524325) failed [ 369.528499][T27905] FAT-fs (loop1): Directory bread(block 524326) failed [ 369.535528][T27905] FAT-fs (loop1): Directory bread(block 524327) failed [ 369.558921][T27926] netlink: 'syz.0.9543': attribute type 21 has an invalid length. [ 369.582072][T27926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9543'. [ 369.592596][T27905] FAT-fs (loop1): Directory bread(block 524328) failed [ 369.632073][T27905] FAT-fs (loop1): Directory bread(block 524329) failed [ 369.639714][T27940] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9549'. [ 369.643486][T27905] FAT-fs (loop1): Directory bread(block 524322) failed [ 369.682362][T27905] FAT-fs (loop1): Directory bread(block 524323) failed [ 369.686735][T27947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27947 comm=syz.5.9547 [ 369.779671][ T28] audit: type=1400 audit(2000001302.616:30650): avc: denied { read } for pid=27950 comm="syz.6.9551" lport=56821 faddr=::ffff:10.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 369.833102][T27945] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.840976][T27945] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.867579][ T28] audit: type=1400 audit(2000001302.706:30651): avc: denied { read } for pid=23 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=82094 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 370.070645][T27945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.082367][T27945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.097136][T27988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9562'. [ 370.149369][T27988] bond2: option primary_reselect: invalid value (8) [ 370.157947][T27988] bond2 (unregistering): Released all slaves [ 370.172186][T26873] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.204308][T26873] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.229317][T26873] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.260743][T26873] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.319405][T28002] xt_hashlimit: size too large, truncated to 1048576 [ 370.399808][T28021] loop5: detected capacity change from 0 to 512 [ 370.424762][T28021] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.456562][T28021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.481310][T28021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.507646][T28021] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.633631][T26997] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.699064][T28046] loop5: detected capacity change from 0 to 128 [ 370.756324][T28046] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.776023][T28046] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.850207][T26860] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.875111][ T28] audit: type=1326 audit(2000001303.696:30652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.0.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e621cc819 code=0x7ffc0000 [ 370.905457][ T28] audit: type=1326 audit(2000001303.696:30653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.0.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e621cc819 code=0x7ffc0000 [ 370.930341][ T28] audit: type=1326 audit(2000001303.696:30654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.0.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7e621cc819 code=0x7ffc0000 [ 370.973959][ T28] audit: type=1326 audit(2000001303.696:30655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.0.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e621cc819 code=0x7ffc0000 [ 371.007070][ T28] audit: type=1326 audit(2000001303.696:30656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.0.9580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e621cc819 code=0x7ffc0000 [ 371.032308][ T28] audit: type=1400 audit(2000001303.836:30657): avc: denied { setopt } for pid=28072 comm="syz.6.9583" lport=38288 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 371.140109][T28090] vhci_hcd vhci_hcd.2: invalid port number 96 [ 371.157717][T28090] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 371.199139][ T28] audit: type=1400 audit(2000001304.036:30658): avc: denied { getopt } for pid=28094 comm="syz.6.9589" lport=53254 faddr=255.255.255.254 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 371.394614][T28106] 9p: Bad value for 'rfdno' [ 371.981035][T28131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9604'. [ 372.505515][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9623'. [ 372.529024][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9623'. [ 372.641740][T28193] loop1: detected capacity change from 0 to 4096 [ 372.670604][T28193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.723541][ T28] audit: type=1400 audit(2000001305.556:30659): avc: denied { mounton } for pid=28209 comm="syz.5.9633" path="/proc/88/cgroup" dev="proc" ino=82361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 372.846239][T21278] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 372.859876][T21278] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 372.955371][T27792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.134544][T26875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.165140][T26875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.229012][T26875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.251429][T26875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.334618][T26875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.363513][T26875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.430977][T26875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.450130][T26875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.491927][T28236] ip6_vti0 speed is unknown, defaulting to 1000 [ 373.779320][T26875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.808342][T26875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.843354][T26875] bond0 (unregistering): Released all slaves [ 373.874014][T28236] lo speed is unknown, defaulting to 1000 [ 374.207601][T26875] hsr_slave_0: left promiscuous mode [ 374.217956][T26875] hsr_slave_1: left promiscuous mode [ 374.234226][T26875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.254207][T26875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.276657][T26875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.295539][T26875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.318902][T26875] dummy0: left allmulticast mode [ 374.324588][T26875] veth1_macvtap: left promiscuous mode [ 374.334133][T26875] veth0_macvtap: left promiscuous mode [ 374.344386][T26875] veth1_vlan: left promiscuous mode [ 374.354500][T26875] veth0_vlan: left promiscuous mode [ 374.527681][T26875] team0 (unregistering): Port device team_slave_1 removed [ 374.545088][T26875] team0 (unregistering): Port device team_slave_0 removed [ 374.646941][T28236] chnl_net:caif_netlink_parms(): no params data found [ 374.740009][T28236] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.757582][T28236] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.768358][T28236] bridge_slave_0: entered allmulticast mode [ 374.774989][T28236] bridge_slave_0: entered promiscuous mode [ 374.784171][T28236] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.791694][T28236] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.799758][T28236] bridge_slave_1: entered allmulticast mode [ 374.806352][T28236] bridge_slave_1: entered promiscuous mode [ 374.829325][T28236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.847797][T28236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.881792][T28236] team0: Port device team_slave_0 added [ 374.889099][T28236] team0: Port device team_slave_1 added [ 374.909536][T28236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.917652][T28236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.944627][T28236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.956736][T28236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.963766][T28236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.990156][T28236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.017874][T28236] hsr_slave_0: entered promiscuous mode [ 375.023871][T28236] hsr_slave_1: entered promiscuous mode [ 375.030472][T28236] debugfs: 'hsr0' already exists in 'hsr' [ 375.036316][T28236] Cannot create hsr debugfs directory [ 375.199117][ T3585] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 375.218139][ T3585] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 375.433210][T28372] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.518770][T28372] lo speed is unknown, defaulting to 1000 [ 375.519731][T28236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.571551][T28236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.612779][T28236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.651375][T28236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.825644][T28419] loop8: detected capacity change from 0 to 4096 [ 375.847491][T28419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.879336][T28236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.912581][T28236] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.922771][T26860] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.929870][T26860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.970740][T26864] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.977853][T26864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.001451][T28441] loop5: detected capacity change from 0 to 512 [ 376.024224][T27014] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 376.063098][T28441] EXT4-fs (loop5): 1 truncate cleaned up [ 376.071393][T27014] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 376.118218][T28441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.200194][T28468] SELinux: Context : is not valid (left unmapped). [ 376.228612][T28236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.249705][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 376.249723][ T28] audit: type=1400 audit(2000001309.086:30661): avc: denied { relabelto } for pid=28467 comm="syz.0.9689" name="rdma.current" dev="tmpfs" ino=11129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 376.301266][T28438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.302714][ T28] audit: type=1400 audit(2000001309.086:30662): avc: denied { associate } for pid=28467 comm="syz.0.9689" name="rdma.current" dev="tmpfs" ino=11129 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 376.352540][T28478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9691'. [ 376.382976][ T28] audit: type=1400 audit(2000001309.206:30663): avc: denied { unlink } for pid=3312 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=11129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 376.508346][T26997] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.651425][T28236] veth0_vlan: entered promiscuous mode [ 376.669923][T26875] bridge_slave_1: left allmulticast mode [ 376.675654][T26875] bridge_slave_1: left promiscuous mode [ 376.691785][T26875] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.716835][T26875] bridge_slave_0: left allmulticast mode [ 376.722569][T26875] bridge_slave_0: left promiscuous mode [ 376.728556][T28522] loop5: detected capacity change from 0 to 1024 [ 376.739636][T28522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.751928][T26875] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.889549][T26875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.901093][T26997] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.911966][T26875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.942952][T26875] bond0 (unregistering): Released all slaves [ 376.994183][T28532] bond0: entered promiscuous mode [ 376.999924][T28532] bond_slave_0: entered promiscuous mode [ 377.005633][T28532] bond_slave_1: entered promiscuous mode [ 377.043312][T28532] batadv0: entered promiscuous mode [ 377.049677][T28532] debugfs: 'hsr1' already exists in 'hsr' [ 377.055406][T28532] Cannot create hsr debugfs directory [ 377.103909][T28236] veth1_vlan: entered promiscuous mode [ 377.138876][T28543] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.209497][T28236] veth0_macvtap: entered promiscuous mode [ 377.222065][T28558] loop6: detected capacity change from 0 to 512 [ 377.255449][T28236] veth1_macvtap: entered promiscuous mode [ 377.266178][T28558] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.279658][T28236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.299374][T28236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.338173][T28558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.340739][T28562] netlink: 'syz.0.9706': attribute type 13 has an invalid length. [ 377.362132][T28562] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.9706'. [ 377.375045][T28500] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.393847][ T401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.402669][T28558] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.403124][ T401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.444769][ T401] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.462889][ T401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.466270][T28558] vcan0: tx address claim with different name [ 377.481005][T28543] lo speed is unknown, defaulting to 1000 [ 377.540818][T26077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.639986][T28588] loop6: detected capacity change from 0 to 4096 [ 377.659037][T28588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.715947][T28500] lo speed is unknown, defaulting to 1000 [ 377.879288][T26875] hsr_slave_0: left promiscuous mode [ 377.888230][T26875] hsr_slave_1: left promiscuous mode [ 377.899170][T26875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.917049][T26875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.004914][T26875] team0 (unregistering): Port device team_slave_1 removed [ 378.025221][T26875] team0 (unregistering): Port device team_slave_0 removed [ 378.067402][T28614] loop5: detected capacity change from 0 to 1024 [ 378.089756][T28614] EXT4-fs: Ignoring removed i_version option [ 378.106601][T28614] EXT4-fs: Ignoring removed bh option [ 378.120783][T28614] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 378.132703][T26077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.148413][T28614] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 378.174955][T28614] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 378.210516][T28614] EXT4-fs (loop5): orphan cleanup on readonly fs [ 378.221581][T28614] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 378.234056][T28614] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 378.249065][T28614] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 378.257424][T28614] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.9715: bad orphan inode 11 [ 378.285625][T28500] chnl_net:caif_netlink_parms(): no params data found [ 378.299884][T28614] loop5: lost filesystem error report for type 5 error -117 [ 378.300054][T28614] ext4_test_bit(bit=10, block=1) = 0 [ 378.307385][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 378.307404][ C0] EXT4-fs (loop5): initial error at time 2000001311: ext4_orphan_get:1423 [ 378.307426][ C0] EXT4-fs (loop5): last error at time 2000001311: ext4_orphan_get:1423 [ 378.358396][T28500] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.367474][T28500] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.375020][T28500] bridge_slave_0: entered allmulticast mode [ 378.383331][T28500] bridge_slave_0: entered promiscuous mode [ 378.391314][T28500] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.399277][T28500] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.407494][T28500] bridge_slave_1: entered allmulticast mode [ 378.416727][T28500] bridge_slave_1: entered promiscuous mode [ 378.446988][T28500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.458210][T28500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.481354][T28500] team0: Port device team_slave_0 added [ 378.488877][T28500] team0: Port device team_slave_1 added [ 378.508509][T28614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.528009][T28653] loop6: detected capacity change from 0 to 512 [ 378.536149][T28653] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 378.556011][T28653] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 378.580480][T28500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.588375][T28500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.616052][T28653] EXT4-fs (loop6): group descriptors corrupted! [ 378.622971][T26997] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.789598][T28500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.812522][T28653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9725'. [ 378.820734][T28500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.840121][T28500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.901161][T28500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.010346][T28500] hsr_slave_0: entered promiscuous mode [ 379.018760][T28500] hsr_slave_1: entered promiscuous mode [ 379.025486][T28500] debugfs: 'hsr0' already exists in 'hsr' [ 379.033626][T28500] Cannot create hsr debugfs directory [ 379.052267][T28699] ip6erspan0: entered allmulticast mode [ 379.223924][T28726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9740'. [ 379.262433][ T28] audit: type=1326 audit(2000001312.096:30664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28731 comm="syz.6.9742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146163c819 code=0x7ffc0000 [ 379.297832][ T28] audit: type=1326 audit(2000001312.096:30665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28731 comm="syz.6.9742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146163c819 code=0x7ffc0000 [ 379.352722][ T28] audit: type=1326 audit(2000001312.096:30666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28731 comm="syz.6.9742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f146163c819 code=0x7ffc0000 [ 379.384372][ T28] audit: type=1326 audit(2000001312.096:30667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28731 comm="syz.6.9742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146163c819 code=0x7ffc0000 [ 379.471189][ T28] audit: type=1326 audit(2000001312.096:30668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28731 comm="syz.6.9742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146163c819 code=0x7ffc0000 [ 379.496320][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.504845][ T28] audit: type=1326 audit(2000001312.126:30669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28735 comm="syz.5.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 379.544375][T28763] loop4: detected capacity change from 0 to 512 [ 379.568346][T28500] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.579322][T28763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 379.590375][T28763] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 379.603807][T28763] EXT4-fs (loop4): group descriptors corrupted! [ 379.672387][T28500] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.684158][T28763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9753'. [ 379.733851][T28789] loop6: detected capacity change from 0 to 512 [ 379.773444][T28789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.804918][T28789] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.9758: Invalid block bitmap block 0 in block_group 0 [ 379.828107][T28789] loop6: lost filesystem error report for type 5 error -117 [ 379.828266][T28789] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 379.844272][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 379.844293][ C0] EXT4-fs (loop6): initial error at time 2000001312: ext4_read_block_bitmap_nowait:483 [ 379.844316][ C0] EXT4-fs (loop6): last error at time 2000001312: ext4_read_block_bitmap_nowait:483 [ 379.873717][T28500] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.912659][T28789] loop6: lost filesystem error report for type 5 error -117 [ 379.912995][T28789] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.9758: attempt to clear invalid blocks 983261 len 1 [ 379.934892][T28789] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 379.937754][T28789] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.9758: Invalid inode table block 0 in block_group 0 [ 379.961587][T28813] syz_tun: entered allmulticast mode [ 379.969920][T28812] syz_tun: left allmulticast mode [ 380.007982][T28789] loop6: lost filesystem error report for type 5 error -117 [ 380.008504][T28789] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 380.032921][T28500] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.038219][T28789] loop6: lost filesystem error report for type 5 error -117 [ 380.044410][T28789] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 380.078741][T28789] loop6: lost filesystem error report for type 5 error -117 [ 380.078945][T28789] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.9758: Invalid inode table block 0 in block_group 0 [ 380.108186][T28831] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.118964][T28789] loop6: lost filesystem error report for type 5 error -117 [ 380.119165][T28789] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 380.147541][T28500] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.154554][T28789] loop6: lost filesystem error report for type 5 error -117 [ 380.154713][T28789] EXT4-fs error (device loop6): ext4_truncate:4602: inode #11: comm syz.6.9758: mark_inode_dirty error [ 380.168039][T28500] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.188046][T28500] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 380.199070][T28789] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 380.199218][T28789] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 380.201897][T28500] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 380.226428][T28789] loop6: lost filesystem error report for type 5 error -117 [ 380.226652][T28789] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.9758: Invalid inode table block 0 in block_group 0 [ 380.250130][T28789] loop6: lost filesystem error report for type 5 error -117 [ 380.250388][T28789] EXT4-fs (loop6): 1 truncate cleaned up [ 380.267499][T28831] lo speed is unknown, defaulting to 1000 [ 380.272489][T28789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.290491][T28844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9773'. [ 380.386237][T26077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.448670][T28500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.611640][T28500] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.636353][T26871] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.643458][T26871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.662733][T26871] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.669892][T26871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.942016][T28889] bridge2: left promiscuous mode [ 380.954845][T28889] bridge2: left allmulticast mode [ 380.970392][T28889] veth1_vlan: left allmulticast mode [ 380.989068][T28889] macvtap1: left promiscuous mode [ 380.996055][T28889] macvtap1: left allmulticast mode [ 381.020843][T28889] ip6erspan0: left allmulticast mode [ 381.164990][T26864] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.184278][T26864] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.212239][T28500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.340989][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 381.341004][ T28] audit: type=1400 audit(2000001314.176:30675): avc: denied { watch watch_reads } for pid=28925 comm="syz.6.9792" path="/proc/356/net/sctp" dev="proc" ino=4026533728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 381.419045][T26864] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.442006][T26864] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.587338][ T28] audit: type=1400 audit(2000001314.426:30676): avc: denied { setopt } for pid=28945 comm="syz.5.9799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 381.643290][T28943] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.655995][ T3585] IPVS: starting estimator thread 0... [ 381.755810][T28957] IPVS: using max 2496 ests per chain, 124800 per kthread [ 381.857667][T28500] veth0_vlan: entered promiscuous mode [ 381.865342][T28977] loop5: detected capacity change from 0 to 1024 [ 381.885851][T28943] lo speed is unknown, defaulting to 1000 [ 381.904626][T28500] veth1_vlan: entered promiscuous mode [ 381.921396][T28977] EXT4-fs: inline encryption not supported [ 381.975274][T28977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 381.979163][T28500] veth0_macvtap: entered promiscuous mode [ 381.995379][T28500] veth1_macvtap: entered promiscuous mode [ 382.003519][T28977] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.039730][T28500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.067390][T28500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.087715][T26873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.096501][T28977] EXT4-fs (loop5): shut down requested (1) [ 382.140195][T26997] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 382.150331][T26873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.177549][T26860] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.223736][T26860] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.485507][T29014] ip6_vti0 speed is unknown, defaulting to 1000 [ 382.633867][T29014] lo speed is unknown, defaulting to 1000 [ 383.094649][ T28] audit: type=1326 audit(2000001315.926:30677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29034 comm="syz.5.9817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 383.149596][ T28] audit: type=1326 audit(2000001315.926:30678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29034 comm="syz.5.9817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 383.235076][ T28] audit: type=1326 audit(2000001315.926:30679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29034 comm="syz.5.9817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 383.288441][T29039] loop7: detected capacity change from 0 to 1024 [ 383.378383][T29039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.407301][ T28] audit: type=1326 audit(2000001315.926:30680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29034 comm="syz.5.9817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 383.543609][T28500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.554550][ T28] audit: type=1326 audit(2000001315.926:30681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29034 comm="syz.5.9817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 383.640593][T29056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9821'. [ 383.650519][ T28] audit: type=1326 audit(2000001315.926:30682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29034 comm="syz.5.9817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 383.678759][ T3392] kernel write not supported for file bpf-prog (pid: 3392 comm: kworker/1:4) [ 383.756713][ T28] audit: type=1326 audit(2000001315.926:30683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29034 comm="syz.5.9817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 383.951785][T29076] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.060078][T29076] lo speed is unknown, defaulting to 1000 [ 384.243730][T29090] loop4: detected capacity change from 0 to 1024 [ 384.290407][T29090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.338835][T29090] EXT4-fs (loop4): shut down requested (0) [ 384.403762][T28236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.546529][T29108] loop7: detected capacity change from 0 to 512 [ 384.596842][T29112] loop4: detected capacity change from 0 to 512 [ 384.605203][T29108] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #3: comm syz.7.9837: corrupted inode contents [ 384.668293][T29108] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 384.669889][T29108] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #3: comm syz.7.9837: mark_inode_dirty error [ 384.679688][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 384.679720][ C0] EXT4-fs (loop7): initial error at time 2000001317: ext4_do_update_inode:5602: inode 3 [ 384.679746][ C0] EXT4-fs (loop7): last error at time 2000001317: ext4_do_update_inode:5602: inode 3 [ 384.813735][T29112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.823209][T29108] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 384.827052][T29108] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #3: comm syz.7.9837: corrupted inode contents [ 384.849776][T29108] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 384.851219][T29112] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.871068][T29108] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.9837: mark_inode_dirty error [ 384.883372][T29108] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 384.887016][T29108] Quota error (device loop7): write_blk: dquota write failed [ 384.909331][T29108] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.9837: Failed to acquire dquot type 0 [ 384.923706][T29108] loop7: lost filesystem error report for type 5 error -117 [ 384.928162][T29108] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.9837: corrupted inode contents [ 384.979229][T29108] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 384.979463][T29108] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #16: comm syz.7.9837: mark_inode_dirty error [ 385.043277][T29108] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.043495][T29108] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.9837: corrupted inode contents [ 385.066521][T29108] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.066807][T29108] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.9837: mark_inode_dirty error [ 385.113150][T29108] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.113392][T29108] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.9837: corrupted inode contents [ 385.136970][T29108] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.137159][T29108] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 385.225793][T29108] loop7: lost filesystem error report for type 5 error -117 [ 385.226095][T29108] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.9837: corrupted inode contents [ 385.269038][T29187] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.337222][T29108] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.337418][T29108] EXT4-fs error (device loop7): ext4_truncate:4602: inode #16: comm syz.7.9837: mark_inode_dirty error [ 385.382773][T28236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.384552][T29187] lo speed is unknown, defaulting to 1000 [ 385.402412][T29108] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.402752][T29108] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 385.455875][T29108] loop7: lost filesystem error report for type 5 error -117 [ 385.475351][T29108] EXT4-fs (loop7): 1 truncate cleaned up [ 385.516247][T29108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.522525][T29194] netlink: 'syz.4.9847': attribute type 15 has an invalid length. [ 385.561820][T29108] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.644336][T29108] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #3: comm syz.7.9837: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 385.644336][T29108] [ 385.713097][T28500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.752253][T29211] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.944645][T29218] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.947961][T29211] lo speed is unknown, defaulting to 1000 [ 386.107038][T29218] lo speed is unknown, defaulting to 1000 [ 386.126881][T29224] serio: Serial port ttyS3 [ 386.194671][T29229] loop5: detected capacity change from 0 to 512 [ 386.214606][T29229] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 386.246604][T29229] EXT4-fs (loop5): 1 truncate cleaned up [ 386.258285][T29229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.368304][T26997] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.773091][T29263] loop7: detected capacity change from 0 to 4096 [ 386.816868][T29267] loop4: detected capacity change from 0 to 128 [ 386.821872][T29263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.839824][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 386.839841][ T28] audit: type=1400 audit(2000001319.676:30720): avc: denied { mounton } for pid=29265 comm="syz.4.9877" path="/29/file0/bus" dev="loop4" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 386.944577][T29269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 387.008727][T29273] pim6reg1: entered promiscuous mode [ 387.032458][T29273] pim6reg1: entered allmulticast mode [ 387.306357][T28500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.442391][T26875] tipc: Subscription rejected, illegal request [ 387.466428][T29306] loop4: detected capacity change from 0 to 1764 [ 387.474534][T29306] ISOFS: Unable to identify CD-ROM format. [ 387.490957][T29313] loop5: detected capacity change from 0 to 128 [ 387.510907][T29313] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 387.537659][T29313] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 387.629401][ T70] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 387.667161][T29329] loop5: detected capacity change from 0 to 128 [ 387.704467][T21446] IPVS: starting estimator thread 0... [ 387.825866][T29334] IPVS: using max 2352 ests per chain, 117600 per kthread [ 387.855181][T29353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9906'. [ 387.884010][T29353] macsec1: entered promiscuous mode [ 387.902649][T29353] dummy0: entered promiscuous mode [ 387.914114][ T28] audit: type=1326 audit(2000001320.746:30721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 387.938596][T29353] macsec1: entered allmulticast mode [ 387.954823][T29353] dummy0: entered allmulticast mode [ 387.963488][ T28] audit: type=1326 audit(2000001320.746:30722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 387.989821][T29353] dummy0: left allmulticast mode [ 387.995324][T29353] dummy0: left promiscuous mode [ 388.003559][ T28] audit: type=1326 audit(2000001320.746:30723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 388.030872][ T28] audit: type=1326 audit(2000001320.746:30724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 388.057170][ T28] audit: type=1326 audit(2000001320.786:30725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 388.095476][ T28] audit: type=1326 audit(2000001320.786:30726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 388.120722][ T28] audit: type=1326 audit(2000001320.786:30727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 388.122058][T29357] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 388.144868][ T28] audit: type=1326 audit(2000001320.786:30728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 388.144957][ T28] audit: type=1326 audit(2000001320.786:30729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29354 comm="syz.4.9907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31404dc819 code=0x7ffc0000 [ 388.262073][T29368] netlink: 'syz.7.9912': attribute type 13 has an invalid length. [ 388.273551][T29368] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.9912'. [ 389.155648][T29440] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.200545][T29440] lo speed is unknown, defaulting to 1000 [ 389.228648][T29442] tipc: Started in network mode [ 389.233546][T29442] tipc: Node identity ac14142f, cluster identity 4711 [ 389.256571][T29442] tipc: New replicast peer: 0.0.0.0 [ 389.262038][T29442] tipc: Enabled bearer , priority 10 [ 389.284941][T29442] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 389.661324][T29471] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9950'. [ 389.681312][T29471] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9950'. [ 389.710857][T29471] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9950'. [ 389.729926][T29471] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9950'. [ 389.780820][T29480] loop5: detected capacity change from 0 to 512 [ 389.795421][T29480] EXT4-fs: Ignoring removed mblk_io_submit option [ 389.805693][T29480] EXT4-fs error (device loop5): __ext4_iget:5393: inode #11: block 1: comm syz.5.9953: invalid block [ 389.825900][T29480] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 389.826042][T29480] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.9953: couldn't read orphan inode 11 (err -117) [ 389.847276][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 389.847299][ C1] EXT4-fs (loop5): initial error at time 2000001322: __ext4_iget:5393: inode 11: block 1 [ 389.847345][ C1] EXT4-fs (loop5): last error at time 2000001322: __ext4_iget:5393: inode 11: block 1 [ 389.978485][T29480] loop5: lost filesystem error report for type 5 error -117 [ 389.984327][T29480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.083415][T29501] loop4: detected capacity change from 0 to 512 [ 390.112449][T29501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 390.155886][T29501] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.244879][T28236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 390.375874][ T35] tipc: Node number set to 2886997039 [ 390.417246][T29535] netlink: 92 bytes leftover after parsing attributes in process `syz.7.9976'. [ 390.818565][T29559] loop4: detected capacity change from 0 to 32768 [ 390.838317][T29576] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9994'. [ 390.856870][T29576] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9994'. [ 390.869920][T29559] loop4: p1 p3 < > [ 390.908804][T29578] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.027814][T29583] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.027814][T29578] lo speed is unknown, defaulting to 1000 [ 391.150492][T29583] lo speed is unknown, defaulting to 1000 [ 391.287127][T29608] loop7: detected capacity change from 0 to 8192 [ 391.312970][ T3000] loop4: p1 p3 < > [ 391.349890][T29608] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.700348][T29637] loop7: detected capacity change from 0 to 1024 [ 391.709199][T29637] EXT4-fs: inline encryption not supported [ 391.731381][T29637] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 391.746900][T29637] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 2: comm syz.7.10020: lblock 2 mapped to illegal pblock 2 (length 1) [ 391.762036][T29637] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 391.762211][T29637] EXT4-fs (loop7): Remounting filesystem read-only [ 391.771357][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 391.771378][ C0] EXT4-fs (loop7): initial error at time 2000001324: ext4_map_blocks:786: inode 3: block 2 [ 391.771419][ C0] EXT4-fs (loop7): last error at time 2000001324: ext4_map_blocks:786: inode 3: block 2 [ 391.808706][T29637] EXT4-fs (loop7): 1 orphan inode deleted [ 391.815005][T29637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.840137][T28500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.985522][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 391.985538][ T28] audit: type=1326 audit(2000001324.816:30786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29647 comm="syz.5.10023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x0 [ 392.026807][T29650] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10024'. [ 392.046061][T29650] netlink: 'syz.7.10024': attribute type 32 has an invalid length. [ 392.054062][T29650] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 392.105331][ T28] audit: type=1400 audit(2000001324.936:30787): avc: denied { read } for pid=29654 comm="syz.7.10026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.161137][ T28] audit: type=1400 audit(2000001324.996:30788): avc: denied { accept } for pid=29658 comm="syz.7.10028" path="socket:[87547]" dev="sockfs" ino=87547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.261231][ T28] audit: type=1326 audit(2000001325.096:30789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29666 comm="syz.7.10032" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe121cbc819 code=0x0 [ 393.416194][T29780] loop7: detected capacity change from 0 to 512 [ 393.426941][T29780] EXT4-fs: Ignoring removed i_version option [ 393.438993][T29780] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 393.450195][T29780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 393.458239][T29780] System zones: 1-12 [ 393.462402][T29780] EXT4-fs (loop7): orphan cleanup on readonly fs [ 393.469379][T29780] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 33619980: comm syz.7.10062: invalid block [ 393.492757][T29780] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 393.492939][T29780] EXT4-fs (loop7): Remounting filesystem read-only [ 393.502244][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 393.502260][ C0] EXT4-fs (loop7): initial error at time 2000001326: ext4_get_branch:178: inode 11: block 33619980 [ 393.502290][ C0] EXT4-fs (loop7): last error at time 2000001326: ext4_get_branch:178: inode 11: block 33619980 [ 393.541637][T29780] EXT4-fs (loop7): 1 truncate cleaned up [ 393.547908][T29780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 393.632970][T28500] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 393.784113][ T28] audit: type=1326 audit(2000001326.616:30790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29808 comm="syz.5.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 393.842573][ T28] audit: type=1326 audit(2000001326.616:30791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29808 comm="syz.5.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 393.915919][ T28] audit: type=1326 audit(2000001326.616:30792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29808 comm="syz.5.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 393.943959][T29826] Invalid argument reading file caps for ./file0 [ 393.977517][ T28] audit: type=1326 audit(2000001326.616:30793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29808 comm="syz.5.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 394.021016][T29828] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.059839][ T28] audit: type=1326 audit(2000001326.616:30794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29808 comm="syz.5.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 394.139840][ T28] audit: type=1326 audit(2000001326.616:30795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29808 comm="syz.5.10068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5b4c819 code=0x7ffc0000 [ 394.203267][T29828] lo speed is unknown, defaulting to 1000 [ 394.279845][ T3585] kernel write not supported for file /sg0 (pid: 3585 comm: kworker/1:7) [ 394.943758][T29897] loop4: detected capacity change from 0 to 512 [ 394.978476][T29897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.029857][T29897] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.270418][T28236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.185136][T29939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10110'. [ 396.241711][T29939] bond2: Invalid ad_actor_system MAC address. [ 396.256691][T29939] bond2: option ad_actor_system: invalid value (4294967295) [ 396.295907][T29939] bond2 (unregistering): Released all slaves [ 396.405622][T29959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10118'. [ 396.442770][T29959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10118'. [ 396.870986][T30005] ================================================================== [ 396.879108][T30005] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 396.887026][T30005] [ 396.889354][T30005] write to 0xffff8881048dae90 of 8 bytes by task 30007 on cpu 0: [ 396.897166][T30005] cpu_map_kthread_run+0x4fe/0x1680 [ 396.902378][T30005] kthread+0x22a/0x280 [ 396.906453][T30005] ret_from_fork+0x150/0x360 [ 396.911055][T30005] ret_from_fork_asm+0x1a/0x30 [ 396.915972][T30005] [ 396.918486][T30005] read to 0xffff8881048dae90 of 8 bytes by task 30005 on cpu 1: [ 396.927234][T30005] bq_flush_to_queue+0x124/0x360 [ 396.938607][T30005] cpu_map_enqueue+0x1ad/0x1c0 [ 396.945559][T30005] xdp_do_redirect_frame+0x27b/0x580 [ 396.952822][T30005] bpf_test_run_xdp_live+0xac3/0x1360 [ 396.960790][T30005] bpf_prog_test_run_xdp+0x57b/0xa10 [ 396.968457][T30005] bpf_prog_test_run+0x204/0x340 [ 396.974964][T30005] __sys_bpf+0x52e/0x7e0 [ 396.980040][T30005] __x64_sys_bpf+0x41/0x50 [ 396.985344][T30005] x64_sys_call+0x10cb/0x3020 [ 396.993252][T30005] do_syscall_64+0x12c/0x370 [ 396.999578][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.007059][T30005] [ 397.009492][T30005] value changed: 0xffff88813c445070 -> 0x0000000000000000 [ 397.021220][T30005] [ 397.023640][T30005] Reported by Kernel Concurrency Sanitizer on: [ 397.029813][T30005] CPU: 1 UID: 0 PID: 30005 Comm: syz.5.10141 Tainted: G W syzkaller #0 PREEMPT(full) [ 397.040873][T30005] Tainted: [W]=WARN [ 397.044689][T30005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.054955][T30005] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 397.074438][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 397.074451][ T28] audit: type=1400 audit(2000001329.906:30835): avc: denied { write } for pid=3296 comm="syz-executor" path="pipe:[2547]" dev="pipefs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 397.399523][T30005] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.468903][ T2086] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.480025][ T2086] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.548603][ T2086] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.562842][ T2086] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.629313][ T2086] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.640281][ T2086] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.678544][ T2086] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.689112][ T2086] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.786666][ T2086] bridge_slave_1: left allmulticast mode [ 397.792411][ T2086] bridge_slave_1: left promiscuous mode [ 397.798398][ T2086] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.806248][ T2086] bridge_slave_0: left allmulticast mode [ 397.811879][ T2086] bridge_slave_0: left promiscuous mode [ 397.818086][ T2086] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.907454][ T2086] bond0 (unregistering): left promiscuous mode [ 397.913716][ T2086] bond_slave_0: left promiscuous mode [ 397.919233][ T2086] bond_slave_1: left promiscuous mode [ 397.925282][ T2086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.935039][ T2086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.944634][ T2086] bond0 (unregistering): Released all slaves [ 397.952050][ T2086] bond1 (unregistering): Released all slaves [ 398.048870][ T2086] batadv0: left promiscuous mode [ 398.059161][ T2086] hsr_slave_0: left promiscuous mode [ 398.064771][ T2086] hsr_slave_1: left promiscuous mode [ 398.071281][ T2086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.078840][ T2086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.088368][ T2086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.095736][ T2086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.106177][ T2086] veth1_macvtap: left promiscuous mode [ 398.111647][ T2086] veth0_macvtap: left promiscuous mode [ 398.118044][ T2086] veth1_vlan: left promiscuous mode [ 398.123260][ T2086] veth0_vlan: left promiscuous mode [ 398.461477][ T2086] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.499388][ T2086] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.548710][ T2086] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.601254][ T2086] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.668149][ T2086] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.719018][ T2086] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.759993][ T2086] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.809142][ T2086] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.885598][ T2086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.939405][ T2086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.989650][ T2086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.039763][ T2086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.117477][ T2086] bridge_slave_1: left allmulticast mode [ 399.123154][ T2086] bridge_slave_1: left promiscuous mode [ 399.129104][ T2086] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.137046][ T2086] bridge_slave_0: left allmulticast mode [ 399.142758][ T2086] bridge_slave_0: left promiscuous mode [ 399.148719][ T2086] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.157151][ T2086] bridge_slave_1: left allmulticast mode [ 399.162777][ T2086] bridge_slave_1: left promiscuous mode [ 399.168630][ T2086] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.177030][ T2086] bridge_slave_0: left allmulticast mode [ 399.182702][ T2086] bridge_slave_0: left promiscuous mode [ 399.188707][ T2086] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.198505][ T2086] bridge_slave_1: left allmulticast mode [ 399.204218][ T2086] bridge_slave_1: left promiscuous mode [ 399.210010][ T2086] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.218370][ T2086] bridge_slave_0: left allmulticast mode [ 399.224394][ T2086] bridge_slave_0: left promiscuous mode [ 399.230160][ T2086] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.377972][ T2086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.388210][ T2086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.398017][ T2086] bond0 (unregistering): Released all slaves [ 399.429192][ T2086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.439906][ T2086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.450241][ T2086] bond0 (unregistering): Released all slaves [ 399.498741][ T2086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.511028][ T2086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.521514][ T2086] bond0 (unregistering): Released all slaves [ 399.572143][ T2086] tipc: Disabling bearer [ 399.578239][ T2086] tipc: Left network mode [ 399.700780][ T2086] hsr_slave_0: left promiscuous mode [ 399.706606][ T2086] hsr_slave_1: left promiscuous mode [ 399.712654][ T2086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.720954][ T2086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.728680][ T2086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.736657][ T2086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.747269][ T2086] hsr_slave_0: left promiscuous mode [ 399.755243][ T2086] hsr_slave_1: left promiscuous mode [ 399.761412][ T2086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.769103][ T2086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.777719][ T2086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.785213][ T2086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.794715][ T2086] hsr_slave_0: left promiscuous mode [ 399.801505][ T2086] hsr_slave_1: left promiscuous mode [ 399.807325][ T2086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.814680][ T2086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.823328][ T2086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.830959][ T2086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.846865][ T2086] veth1_macvtap: left promiscuous mode [ 399.852373][ T2086] veth0_macvtap: left promiscuous mode [ 399.858439][ T2086] veth1_vlan: left promiscuous mode [ 399.863937][ T2086] veth0_vlan: left promiscuous mode [ 399.870281][ T2086] veth1_macvtap: left promiscuous mode [ 399.877063][ T2086] veth0_macvtap: left promiscuous mode [ 399.882557][ T2086] veth1_vlan: left promiscuous mode [ 399.887814][ T2086] veth0_vlan: left promiscuous mode [ 399.894010][ T2086] veth1_macvtap: left promiscuous mode [ 399.900257][ T2086] veth0_macvtap: left promiscuous mode [ 399.905828][ T2086] veth1_vlan: left promiscuous mode [ 399.911258][ T2086] veth0_vlan: left promiscuous mode [ 400.054176][ T2086] team0 (unregistering): Port device team_slave_1 removed [ 400.065080][ T2086] team0 (unregistering): Port device team_slave_0 removed [ 400.118493][ T2086] team0 (unregistering): Port device team_slave_1 removed [ 400.128114][ T2086] team0 (unregistering): Port device team_slave_0 removed [ 400.183325][ T2086] team0 (unregistering): Port device team_slave_1 removed [ 400.192785][ T2086] team0 (unregistering): Port device team_slave_0 removed [ 400.766266][ T2086] IPVS: stop unused estimator thread 0... [ 400.772914][ T2086] IPVS: stop unused estimator thread 0...