last executing test programs: 14.349041111s ago: executing program 0 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 14.301093565s ago: executing program 0 (id=202): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 14.073785163s ago: executing program 0 (id=206): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x200, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) 13.883536348s ago: executing program 0 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 13.853546471s ago: executing program 0 (id=209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 13.650947877s ago: executing program 0 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 13.592158392s ago: executing program 32 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 4.517860105s ago: executing program 1 (id=392): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r3}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2ca8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80006, 0x0, @perf_config_ext, 0x0, 0x10003, 0x80000000, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) 4.490428567s ago: executing program 1 (id=393): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) sendfile(r1, r1, 0x0, 0x800000009) 4.283380614s ago: executing program 1 (id=397): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3.896116445s ago: executing program 1 (id=404): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000894) 3.849267849s ago: executing program 1 (id=405): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) readahead(r0, 0x7, 0xdf) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000d2105bdb1460"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/134, 0x86}], 0x1) 3.802598203s ago: executing program 1 (id=409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 3.786415304s ago: executing program 33 (id=409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 3.751472727s ago: executing program 2 (id=412): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3.675420883s ago: executing program 2 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000380)}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200010000000007020000f8fff9ffb70300000800e5ffb704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb55b}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d08, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 3.579139171s ago: executing program 2 (id=415): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 3.555907773s ago: executing program 4 (id=416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.322118132s ago: executing program 4 (id=417): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x1, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x18) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 3.320992332s ago: executing program 2 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000948ae58e00"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 3.261996566s ago: executing program 2 (id=419): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.469253931s ago: executing program 4 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000040000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.415182935s ago: executing program 4 (id=429): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.339360001s ago: executing program 3 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) renameat(r3, 0x0, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) 2.299637984s ago: executing program 4 (id=433): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.064637943s ago: executing program 3 (id=437): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.98051766s ago: executing program 3 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 1.891400417s ago: executing program 3 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)) 1.809690314s ago: executing program 5 (id=441): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 1.719275201s ago: executing program 2 (id=442): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000480)=ANY=[], 0xfdef) 1.717302481s ago: executing program 5 (id=443): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='t']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.568161713s ago: executing program 3 (id=444): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syncfs(r2) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1.308288545s ago: executing program 5 (id=445): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7", 0xdb}], 0x1}}], 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 944.404554ms ago: executing program 6 (id=448): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 943.966204ms ago: executing program 6 (id=449): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 943.648544ms ago: executing program 6 (id=450): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000019300)="0f", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) 773.561157ms ago: executing program 4 (id=451): alarm(0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) alarm(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 583.643133ms ago: executing program 3 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) 457.713573ms ago: executing program 5 (id=453): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) 379.374709ms ago: executing program 5 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 305.204005ms ago: executing program 5 (id=455): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x2, 0x7fffffff}, 0x0, 0x0) 48.290636ms ago: executing program 6 (id=456): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x400008bf) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17.366599ms ago: executing program 6 (id=457): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f0000000000)) 0s ago: executing program 6 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x8}, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 22.943082][ T29] audit: type=1400 audit(1755519273.472:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.943948][ T3289] cgroup: Unknown subsys name 'net' [ 22.965803][ T29] audit: type=1400 audit(1755519273.472:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.993282][ T29] audit: type=1400 audit(1755519273.502:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.150704][ T3289] cgroup: Unknown subsys name 'cpuset' [ 23.156957][ T3289] cgroup: Unknown subsys name 'rlimit' [ 23.345358][ T29] audit: type=1400 audit(1755519273.872:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.368599][ T29] audit: type=1400 audit(1755519273.872:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.389129][ T29] audit: type=1400 audit(1755519273.872:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.409558][ T29] audit: type=1400 audit(1755519273.872:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.416477][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.429875][ T29] audit: type=1400 audit(1755519273.882:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.463223][ T29] audit: type=1400 audit(1755519273.882:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.486581][ T29] audit: type=1400 audit(1755519273.972:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.513978][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.291119][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 25.359554][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 25.380364][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.387529][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.394881][ T3301] bridge_slave_0: entered allmulticast mode [ 25.401267][ T3301] bridge_slave_0: entered promiscuous mode [ 25.420569][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.427607][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.434939][ T3301] bridge_slave_1: entered allmulticast mode [ 25.441322][ T3301] bridge_slave_1: entered promiscuous mode [ 25.490388][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.513050][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.527624][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 25.536194][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.543329][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.550533][ T3302] bridge_slave_0: entered allmulticast mode [ 25.556852][ T3302] bridge_slave_0: entered promiscuous mode [ 25.568329][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 25.584663][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.591754][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.598920][ T3302] bridge_slave_1: entered allmulticast mode [ 25.605482][ T3302] bridge_slave_1: entered promiscuous mode [ 25.634429][ T3301] team0: Port device team_slave_0 added [ 25.643693][ T3301] team0: Port device team_slave_1 added [ 25.653914][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.672501][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.683545][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.712950][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.719931][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.745928][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.759104][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.766253][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.792164][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.821548][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.828660][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.835813][ T3315] bridge_slave_0: entered allmulticast mode [ 25.842117][ T3315] bridge_slave_0: entered promiscuous mode [ 25.848854][ T3302] team0: Port device team_slave_0 added [ 25.866141][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.873305][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.880544][ T3315] bridge_slave_1: entered allmulticast mode [ 25.887042][ T3315] bridge_slave_1: entered promiscuous mode [ 25.899654][ T3302] team0: Port device team_slave_1 added [ 25.929348][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.936496][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.944683][ T3307] bridge_slave_0: entered allmulticast mode [ 25.951174][ T3307] bridge_slave_0: entered promiscuous mode [ 25.962334][ T3301] hsr_slave_0: entered promiscuous mode [ 25.968252][ T3301] hsr_slave_1: entered promiscuous mode [ 25.975159][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.984568][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.991532][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.017934][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.028646][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.035716][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.042845][ T3307] bridge_slave_1: entered allmulticast mode [ 26.049116][ T3307] bridge_slave_1: entered promiscuous mode [ 26.061393][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.080577][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.087533][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.113554][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.133282][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.140403][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.148074][ T3312] bridge_slave_0: entered allmulticast mode [ 26.154591][ T3312] bridge_slave_0: entered promiscuous mode [ 26.179714][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.186803][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.194088][ T3312] bridge_slave_1: entered allmulticast mode [ 26.200568][ T3312] bridge_slave_1: entered promiscuous mode [ 26.222703][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.232419][ T3315] team0: Port device team_slave_0 added [ 26.238788][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.253146][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.269193][ T3315] team0: Port device team_slave_1 added [ 26.279522][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.300837][ T3302] hsr_slave_0: entered promiscuous mode [ 26.306829][ T3302] hsr_slave_1: entered promiscuous mode [ 26.312723][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 26.318431][ T3302] Cannot create hsr debugfs directory [ 26.335058][ T3307] team0: Port device team_slave_0 added [ 26.344066][ T3307] team0: Port device team_slave_1 added [ 26.354619][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.361583][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.387622][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.412089][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.419034][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.444955][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.461944][ T3312] team0: Port device team_slave_0 added [ 26.480777][ T3312] team0: Port device team_slave_1 added [ 26.501151][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.508130][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.534116][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.559640][ T3315] hsr_slave_0: entered promiscuous mode [ 26.565771][ T3315] hsr_slave_1: entered promiscuous mode [ 26.571640][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 26.577424][ T3315] Cannot create hsr debugfs directory [ 26.583361][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.590404][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.616439][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.633734][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.640714][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.666646][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.677809][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.684774][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.710689][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.758919][ T3307] hsr_slave_0: entered promiscuous mode [ 26.765087][ T3307] hsr_slave_1: entered promiscuous mode [ 26.771033][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 26.776864][ T3307] Cannot create hsr debugfs directory [ 26.816966][ T3312] hsr_slave_0: entered promiscuous mode [ 26.823189][ T3312] hsr_slave_1: entered promiscuous mode [ 26.829066][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 26.834828][ T3312] Cannot create hsr debugfs directory [ 26.862544][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.883285][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.904557][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.914869][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.975090][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.993140][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.008569][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.019119][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.039023][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.048121][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.071376][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.086751][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.095063][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.108813][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.117800][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.130505][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.154162][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.162736][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.173306][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.181854][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.209166][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.244060][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.260098][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.267324][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.276607][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.283717][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.295065][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.309722][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.323818][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.334999][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.345890][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.353048][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.377827][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.388258][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.402546][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.410985][ T2800] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.418040][ T2800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.426403][ T2800] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.433442][ T2800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.457507][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.480071][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.487125][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.506806][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.523991][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.531118][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.552094][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.570682][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.577746][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.633199][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.646750][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.678011][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.698805][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.714995][ T2800] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.722067][ T2800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.730917][ T2800] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.738573][ T2800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.757808][ T3301] veth0_vlan: entered promiscuous mode [ 27.774335][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.783661][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.805495][ T3307] veth0_vlan: entered promiscuous mode [ 27.830608][ T3301] veth1_vlan: entered promiscuous mode [ 27.849487][ T3307] veth1_vlan: entered promiscuous mode [ 27.881261][ T3301] veth0_macvtap: entered promiscuous mode [ 27.893406][ T3307] veth0_macvtap: entered promiscuous mode [ 27.903930][ T3307] veth1_macvtap: entered promiscuous mode [ 27.910832][ T3301] veth1_macvtap: entered promiscuous mode [ 27.930848][ T3302] veth0_vlan: entered promiscuous mode [ 27.938017][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.950076][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.959563][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.969125][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.982191][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.991928][ T3302] veth1_vlan: entered promiscuous mode [ 28.000703][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.009604][ T2800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.027214][ T3315] veth0_vlan: entered promiscuous mode [ 28.035294][ T2800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.055384][ T2800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.069382][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 28.069395][ T29] audit: type=1400 audit(1755519278.592:81): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.o5hHCY/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.070607][ T3315] veth1_vlan: entered promiscuous mode [ 28.075680][ T29] audit: type=1400 audit(1755519278.592:82): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.101129][ T2800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.121404][ T29] audit: type=1400 audit(1755519278.632:83): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.o5hHCY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.141689][ T3315] veth0_macvtap: entered promiscuous mode [ 28.160921][ T29] audit: type=1400 audit(1755519278.632:84): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.160957][ T29] audit: type=1400 audit(1755519278.632:85): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.o5hHCY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.160981][ T29] audit: type=1400 audit(1755519278.632:86): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.o5hHCY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.168528][ T3315] veth1_macvtap: entered promiscuous mode [ 28.188467][ T29] audit: type=1400 audit(1755519278.632:87): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.276819][ T29] audit: type=1400 audit(1755519278.722:88): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.285783][ T3302] veth0_macvtap: entered promiscuous mode [ 28.299647][ T29] audit: type=1400 audit(1755519278.722:89): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.308976][ T3302] veth1_macvtap: entered promiscuous mode [ 28.333988][ T2800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.348750][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.361016][ T2800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.370207][ T2800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.384691][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.400774][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.408069][ T2804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.425376][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.446008][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.456218][ T2804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.470167][ T29] audit: type=1400 audit(1755519279.002:90): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.481787][ T2804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.552352][ T2804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.577218][ T3312] veth0_vlan: entered promiscuous mode [ 28.599387][ T2804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.610054][ T3312] veth1_vlan: entered promiscuous mode [ 28.643301][ T2804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.656790][ T3312] veth0_macvtap: entered promiscuous mode [ 28.663836][ T3470] loop0: detected capacity change from 0 to 8192 [ 28.709150][ T3312] veth1_macvtap: entered promiscuous mode [ 28.722119][ T3486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.745470][ T2804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.777781][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.787359][ T2804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.808997][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.818691][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 28.837703][ T3491] loop1: detected capacity change from 0 to 128 [ 28.847932][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.871192][ T3491] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 28.887238][ T3486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.901493][ T3494] loop2: detected capacity change from 0 to 1024 [ 28.908631][ T3486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 28.914789][ T3494] EXT4-fs: Ignoring removed orlov option [ 28.925944][ T3491] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 28.935084][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.935372][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.965218][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.986881][ T3494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.017643][ T2804] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.064212][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.129423][ T3514] netlink: 'syz.1.18': attribute type 15 has an invalid length. [ 29.137165][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'. [ 29.289254][ T3535] loop1: detected capacity change from 0 to 512 [ 29.318333][ T3535] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.330663][ T3535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.343818][ T3535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.365310][ T3535] EXT4-fs (loop1): 1 truncate cleaned up [ 29.371998][ T3535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.429307][ T3546] syz.0.31 (3546) used greatest stack depth: 10880 bytes left [ 30.001272][ T3580] bridge: RTM_NEWNEIGH with invalid ether address [ 30.055773][ C1] hrtimer: interrupt took 28260 ns [ 30.292480][ T3547] syz.1.26 (3547) used greatest stack depth: 10864 bytes left [ 30.356056][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.392149][ T3602] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 30.408477][ T3604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.54'. [ 30.417455][ T3604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.54'. [ 30.438344][ T3606] netlink: 96 bytes leftover after parsing attributes in process `syz.3.56'. [ 30.484671][ T3610] loop1: detected capacity change from 0 to 1024 [ 30.514282][ T3610] ======================================================= [ 30.514282][ T3610] WARNING: The mand mount option has been deprecated and [ 30.514282][ T3610] and is ignored by this kernel. Remove the mand [ 30.514282][ T3610] option from the mount to silence this warning. [ 30.514282][ T3610] ======================================================= [ 30.559662][ T3604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.54'. [ 30.568593][ T3604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.54'. [ 30.653650][ T3619] loop4: detected capacity change from 0 to 128 [ 30.717920][ T3610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.741067][ T3604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.54'. [ 30.749995][ T3604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.54'. [ 30.814586][ T3610] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 30.984661][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 31.032862][ T3647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 31.040198][ T3647] IPv6: NLM_F_CREATE should be set when creating new route [ 31.047472][ T3647] IPv6: NLM_F_CREATE should be set when creating new route [ 31.081573][ T3652] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 31.098268][ T3647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 31.166096][ T3652] netlink: 'syz.4.65': attribute type 10 has an invalid length. [ 31.182823][ T3652] dummy0: entered promiscuous mode [ 31.190981][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.205043][ T3652] syz.4.65 (3652) used greatest stack depth: 10832 bytes left [ 31.322654][ T3685] loop4: detected capacity change from 0 to 512 [ 31.334556][ T3685] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.360421][ T3685] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.71: invalid indirect mapped block 4294967295 (level 0) [ 31.388391][ T3685] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.71: invalid indirect mapped block 4294967295 (level 1) [ 31.411681][ T3685] EXT4-fs (loop4): 1 orphan inode deleted [ 31.417443][ T3685] EXT4-fs (loop4): 1 truncate cleaned up [ 31.471463][ T3685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.532974][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.553438][ T3699] wg2: entered promiscuous mode [ 31.558484][ T3699] wg2: entered allmulticast mode [ 31.726763][ T3725] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 31.769799][ T3751] $Hÿ: renamed from bond0 (while UP) [ 31.779296][ T3751] $Hÿ: entered promiscuous mode [ 31.784382][ T3751] bond_slave_0: entered promiscuous mode [ 31.790421][ T3751] bond_slave_1: entered promiscuous mode [ 31.863898][ T3750] mmap: syz.4.74 (3750) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.904252][ T3754] loop1: detected capacity change from 0 to 8192 [ 31.916794][ T3754] msdos: Unknown parameter 'A' [ 32.124554][ T3779] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 32.200118][ T3784] syz.4.95 uses obsolete (PF_INET,SOCK_PACKET) [ 32.213792][ T3786] IPv6: Can't replace route, no match found [ 32.285799][ T3794] bridge: RTM_NEWNEIGH with invalid ether address [ 32.650218][ T3789] syz.1.97 (3789) used greatest stack depth: 10016 bytes left [ 32.712724][ T3835] Illegal XDP return value 4294967289 on prog (id 109) dev N/A, expect packet loss! [ 32.802357][ T3851] syz_tun: entered allmulticast mode [ 32.808953][ T3850] syz_tun: left allmulticast mode [ 32.902363][ T3865] loop3: detected capacity change from 0 to 128 [ 33.140844][ T3888] loop1: detected capacity change from 0 to 1024 [ 33.331964][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 33.331978][ T29] audit: type=1326 audit(1755519283.862:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.389217][ T29] audit: type=1326 audit(1755519283.862:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.412793][ T29] audit: type=1326 audit(1755519283.862:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.436265][ T29] audit: type=1326 audit(1755519283.862:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.459535][ T29] audit: type=1326 audit(1755519283.862:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.482891][ T29] audit: type=1326 audit(1755519283.862:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.506327][ T29] audit: type=1326 audit(1755519283.862:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.529884][ T29] audit: type=1326 audit(1755519283.862:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.553201][ T29] audit: type=1326 audit(1755519283.862:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.577028][ T29] audit: type=1326 audit(1755519283.862:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3acc84ebe9 code=0x7ffc0000 [ 33.640033][ T3888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.789968][ T3949] IPv4: Oversized IP packet from 127.202.26.0 [ 33.883646][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.038379][ T3955] __nla_validate_parse: 2 callbacks suppressed [ 34.038392][ T3955] netlink: 96 bytes leftover after parsing attributes in process `syz.2.131'. [ 34.269202][ T3969] syz_tun: entered allmulticast mode [ 34.551269][ T3995] 9pnet: p9_errstr2errno: server reported unknown error [ 34.571968][ T3996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.912753][ T4032] loop0: detected capacity change from 0 to 2048 [ 34.963151][ T4032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.108380][ T3301] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 35.127163][ T3301] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 35.141809][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.233645][ T4052] loop0: detected capacity change from 0 to 1024 [ 35.250599][ T4052] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.257181][ T4052] EXT4-fs: Ignoring removed bh option [ 35.282780][ T4052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.369001][ T4064] netlink: 'gtp': attribute type 30 has an invalid length. [ 35.433276][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.490436][ T4064] Zero length message leads to an empty skb [ 35.678133][ T4083] loop0: detected capacity change from 0 to 512 [ 35.695310][ T4083] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.729322][ T4083] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.737665][ T4083] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.185: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 35.739071][ T4088] syz.2.188: attempt to access beyond end of device [ 35.739071][ T4088] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 35.775025][ T4083] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.185: Bad quota inode: 3, type: 0 [ 35.794399][ T4083] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 35.809248][ T4083] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 35.817248][ T4091] netlink: 256 bytes leftover after parsing attributes in process `syz.4.189'. [ 35.820703][ T4083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.826991][ T4088] FAT-fs (loop5): unable to read boot sector [ 35.866554][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 35.882225][ T4096] team1: entered promiscuous mode [ 35.887288][ T4096] team1: entered allmulticast mode [ 35.917864][ T4088] loop2: detected capacity change from 0 to 164 [ 35.983678][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.107680][ T4111] veth3: entered promiscuous mode [ 36.268592][ T4125] veth0: entered promiscuous mode [ 36.320839][ T4129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4129 comm=syz.2.203 [ 36.334082][ T4125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 36.383112][ T4129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 36.828028][ T4155] vlan2: entered allmulticast mode [ 36.839148][ T4157] loop3: detected capacity change from 0 to 512 [ 36.865462][ T2800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.887457][ T4157] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.901542][ T4159] netlink: 72 bytes leftover after parsing attributes in process `syz.4.214'. [ 36.910508][ T4159] netlink: 72 bytes leftover after parsing attributes in process `syz.4.214'. [ 36.928605][ T4157] EXT4-fs (loop3): 1 truncate cleaned up [ 36.938675][ T4157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.953409][ T2800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.965750][ T4157] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.999399][ T4165] loop2: detected capacity change from 0 to 8192 [ 37.020829][ T2800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.023188][ T4168] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 37.084347][ T3285] loop2: p1 p2[DM] p3 p4 [ 37.090146][ T3285] loop2: p1 size 196608 extends beyond EOD, truncated [ 37.117559][ T2800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.120960][ T3285] loop2: p2 start 4292936063 is beyond EOD, truncated [ 37.134780][ T3285] loop2: p3 size 189005824 extends beyond EOD, truncated [ 37.180220][ T3285] loop2: p4 size 50331648 extends beyond EOD, truncated [ 37.195749][ T4165] loop2: p1 p2[DM] p3 p4 [ 37.221171][ T4165] loop2: p1 size 196608 extends beyond EOD, truncated [ 37.233406][ T4165] loop2: p2 start 4292936063 is beyond EOD, truncated [ 37.240245][ T4165] loop2: p3 size 189005824 extends beyond EOD, truncated [ 37.252250][ T2800] bridge_slave_1: left allmulticast mode [ 37.258018][ T2800] bridge_slave_1: left promiscuous mode [ 37.263731][ T2800] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.270595][ T4165] loop2: p4 size 50331648 extends beyond EOD, truncated [ 37.305557][ T2800] bridge_slave_0: left allmulticast mode [ 37.311277][ T2800] bridge_slave_0: left promiscuous mode [ 37.316876][ T2800] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.340377][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 37.361622][ T4199] udevd[4199]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 37.372251][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 37.395118][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 37.411872][ T4199] udevd[4199]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 37.423192][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 37.491936][ T2800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.502092][ T2800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.511601][ T2800] bond0 (unregistering): Released all slaves [ 37.535207][ T4202] wg2: entered promiscuous mode [ 37.540134][ T4202] wg2: entered allmulticast mode [ 37.578586][ T2800] hsr_slave_0: left promiscuous mode [ 37.594234][ T2800] hsr_slave_1: left promiscuous mode [ 37.611234][ T2800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.618801][ T2800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.639568][ T2800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.647108][ T2800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.660208][ T4219] loop4: detected capacity change from 0 to 1024 [ 37.673697][ T4219] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 37.683517][ T4219] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 37.693335][ T2800] veth1_macvtap: left promiscuous mode [ 37.694563][ T4219] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 37.700625][ T2800] veth0_macvtap: left promiscuous mode [ 37.715918][ T4219] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.235: iget: special inode unallocated [ 37.729084][ T4219] EXT4-fs (loop4): no journal found [ 37.734429][ T4219] EXT4-fs (loop4): can't get journal size [ 37.740572][ T2800] veth1_vlan: left promiscuous mode [ 37.745896][ T2800] veth0_vlan: left promiscuous mode [ 37.753383][ T4219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.805684][ T4219] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.4.235: path /36/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 37.853432][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.878951][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 37.900232][ T2800] team0 (unregistering): Port device team_slave_1 removed [ 37.917316][ T2800] team0 (unregistering): Port device team_slave_0 removed [ 37.996611][ T4232] team1: entered promiscuous mode [ 38.001822][ T4232] team1: entered allmulticast mode [ 38.067634][ T4247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.074072][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 38.095850][ T4247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.110696][ T4247] loop4: detected capacity change from 0 to 1024 [ 38.117672][ T4247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.142948][ T4247] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.155247][ T4247] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 38.161491][ T4260] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 38.165273][ T4247] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.171176][ T4260] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 38.177794][ T4247] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.247: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.200662][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.207712][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.212990][ T4247] EXT4-fs (loop4): 1 orphan inode deleted [ 38.220987][ T4171] bridge_slave_0: entered allmulticast mode [ 38.221071][ T4247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.239641][ T4171] bridge_slave_0: entered promiscuous mode [ 38.246882][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.254130][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.279238][ T4171] bridge_slave_1: entered allmulticast mode [ 38.288001][ T4171] bridge_slave_1: entered promiscuous mode [ 38.307660][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.327457][ T4273] netlink: 'syz.2.256': attribute type 3 has an invalid length. [ 38.335329][ T4273] netlink: 'syz.2.256': attribute type 3 has an invalid length. [ 38.344700][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.365043][ T4171] team0: Port device team_slave_0 added [ 38.372251][ T4171] team0: Port device team_slave_1 added [ 38.383014][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 38.383028][ T29] audit: type=1400 audit(1755519288.912:667): avc: denied { read } for pid=4274 comm="syz.2.257" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.412615][ T29] audit: type=1400 audit(1755519288.912:668): avc: denied { open } for pid=4274 comm="syz.2.257" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.442624][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.449718][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.475706][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.487713][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.494705][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.520622][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.548050][ T4171] hsr_slave_0: entered promiscuous mode [ 38.554164][ T4171] hsr_slave_1: entered promiscuous mode [ 38.618077][ T4171] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.626589][ T4171] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.634956][ T4171] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.643476][ T4171] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.658745][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.665927][ T4171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.673417][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.680478][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.696958][ T4293] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 38.705180][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.716336][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.724511][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.738096][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.748361][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.755455][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.766017][ T3916] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.773075][ T3916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.836624][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.856266][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.939102][ T4171] veth0_vlan: entered promiscuous mode [ 38.947046][ T4171] veth1_vlan: entered promiscuous mode [ 38.962687][ T4171] veth0_macvtap: entered promiscuous mode [ 38.969996][ T4171] veth1_macvtap: entered promiscuous mode [ 38.982928][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.008461][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.027429][ T29] audit: type=1400 audit(1755519289.552:669): avc: denied { mounton } for pid=4171 comm="syz-executor" path="/root/syzkaller.ZWXOkR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.037360][ T2800] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.064888][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.087186][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.102443][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.163887][ T4329] loop5: detected capacity change from 0 to 128 [ 39.175545][ T29] audit: type=1400 audit(1755519289.702:670): avc: denied { mount } for pid=4328 comm="syz.5.269" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.200968][ T4331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 39.231837][ T4331] team1: entered promiscuous mode [ 39.236892][ T4331] team1: entered allmulticast mode [ 39.263896][ T4329] syz.5.269: attempt to access beyond end of device [ 39.263896][ T4329] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 39.277818][ T4329] syz.5.269: attempt to access beyond end of device [ 39.277818][ T4329] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 39.311117][ T29] audit: type=1326 audit(1755519289.842:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 39.334764][ T29] audit: type=1326 audit(1755519289.842:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 39.344237][ T4337] loop2: detected capacity change from 0 to 128 [ 39.358052][ T29] audit: type=1326 audit(1755519289.842:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 39.365289][ T4329] syz.5.269: attempt to access beyond end of device [ 39.365289][ T4329] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 39.387616][ T29] audit: type=1326 audit(1755519289.842:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 39.387688][ T29] audit: type=1326 audit(1755519289.842:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 39.448162][ T4329] syz.5.269: attempt to access beyond end of device [ 39.448162][ T4329] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 39.464392][ T4329] syz.5.269: attempt to access beyond end of device [ 39.464392][ T4329] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 39.478580][ T4329] syz.5.269: attempt to access beyond end of device [ 39.478580][ T4329] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 39.494570][ T4329] syz.5.269: attempt to access beyond end of device [ 39.494570][ T4329] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 39.508710][ T4329] syz.5.269: attempt to access beyond end of device [ 39.508710][ T4329] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 39.532510][ T29] audit: type=1326 audit(1755519289.842:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 39.543436][ T4337] Process accounting resumed [ 39.556418][ T4329] syz.5.269: attempt to access beyond end of device [ 39.556418][ T4329] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 39.563395][ T4337] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 39.581650][ T4337] FAT-fs (loop2): Filesystem has been set read-only [ 39.590662][ T3383] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 39.606946][ T4340] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.671843][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 39.724689][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.731934][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.787412][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.797792][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.839956][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.848846][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.865042][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.881371][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.948634][ T4369] loop2: detected capacity change from 0 to 1024 [ 39.973053][ T4369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.999857][ T4369] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.285: Allocating blocks 449-513 which overlap fs metadata [ 40.022635][ T4369] SELinux: Context @ is not valid (left unmapped). [ 40.029689][ T4369] EXT4-fs (loop2): pa ffff888107ab40e0: logic 48, phys. 177, len 21 [ 40.037733][ T4369] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 40.058884][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.084514][ T4377] tipc: Started in network mode [ 40.089400][ T4377] tipc: Node identity 4, cluster identity 4711 [ 40.095604][ T4377] tipc: Node number set to 4 [ 40.558790][ T4387] loop5: detected capacity change from 0 to 512 [ 40.567066][ T4387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.590448][ T4171] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.843579][ T4396] loop1: detected capacity change from 0 to 8192 [ 40.872496][ T4400] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.028908][ T4410] loop3: detected capacity change from 0 to 512 [ 41.040254][ T4400] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.074337][ T4410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.122399][ T4417] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 41.133225][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.148761][ T4400] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.182937][ T4417] bond1: entered promiscuous mode [ 41.187994][ T4417] bond1: entered allmulticast mode [ 41.193506][ T4417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.228891][ T4400] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.255155][ T4417] ip6gretap1: entered promiscuous mode [ 41.260803][ T4417] ip6gretap1: entered allmulticast mode [ 41.268534][ T4417] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 41.290442][ T3916] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 41.370546][ T3916] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.407480][ T3916] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.420022][ T31] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 41.449809][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.516785][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.597278][ T4441] loop1: detected capacity change from 0 to 128 [ 41.687152][ T4445] bio_check_eod: 68 callbacks suppressed [ 41.687208][ T4445] syz.1.315: attempt to access beyond end of device [ 41.687208][ T4445] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 41.764075][ T4445] syz.1.315: attempt to access beyond end of device [ 41.764075][ T4445] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 41.777592][ T4445] syz.1.315: attempt to access beyond end of device [ 41.777592][ T4445] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 41.807842][ T4445] syz.1.315: attempt to access beyond end of device [ 41.807842][ T4445] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 41.841969][ T4445] syz.1.315: attempt to access beyond end of device [ 41.841969][ T4445] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 41.855368][ T4445] syz.1.315: attempt to access beyond end of device [ 41.855368][ T4445] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 41.861617][ T4453] loop3: detected capacity change from 0 to 1024 [ 41.868829][ T4445] syz.1.315: attempt to access beyond end of device [ 41.868829][ T4445] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 41.892826][ T4453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.905363][ T4445] syz.1.315: attempt to access beyond end of device [ 41.905363][ T4445] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 41.919374][ T4453] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.920239][ T4445] syz.1.315: attempt to access beyond end of device [ 41.920239][ T4445] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 41.976337][ T4445] syz.1.315: attempt to access beyond end of device [ 41.976337][ T4445] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 42.023275][ T3383] IPVS: starting estimator thread 0... [ 42.067673][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.109932][ T4467] IPVS: using max 2784 ests per chain, 139200 per kthread [ 42.300657][ T10] IPVS: starting estimator thread 0... [ 42.389899][ T4484] IPVS: using max 2352 ests per chain, 117600 per kthread [ 42.786592][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 43.129576][ T4523] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.319414][ T4523] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.423704][ T4538] smc: net device bond0 applied user defined pnetid SYZ0 [ 43.431238][ T4538] smc: net device bond0 erased user defined pnetid SYZ0 [ 43.460556][ T4523] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.546818][ T4523] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.673338][ T3916] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.710955][ T3916] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.741094][ T3916] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.779422][ T3916] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.896042][ T4551] loop2: detected capacity change from 0 to 512 [ 43.907719][ T4551] EXT4-fs: Ignoring removed bh option [ 43.918814][ T4551] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.927917][ T4551] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 43.949039][ T4553] syzkaller0: entered promiscuous mode [ 43.954602][ T4553] syzkaller0: entered allmulticast mode [ 43.962765][ T4551] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 43.972818][ T4551] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 44.005764][ T4551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.039270][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.129667][ T4560] tipc: Started in network mode [ 44.134695][ T4560] tipc: Node identity 4, cluster identity 4711 [ 44.140881][ T4560] tipc: Node number set to 4 [ 44.141039][ T4563] loop2: detected capacity change from 0 to 8192 [ 44.210267][ T4563] loop2: p2 p3 [ 44.213878][ T4563] loop2: p2 size 65536 extends beyond EOD, truncated [ 44.235413][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 44.235425][ T29] audit: type=1326 audit(1755519294.762:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.277895][ T29] audit: type=1326 audit(1755519294.802:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.301386][ T29] audit: type=1326 audit(1755519294.802:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.324950][ T29] audit: type=1326 audit(1755519294.802:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.348459][ T29] audit: type=1326 audit(1755519294.802:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.371945][ T29] audit: type=1326 audit(1755519294.802:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.395270][ T29] audit: type=1326 audit(1755519294.802:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.418568][ T29] audit: type=1326 audit(1755519294.802:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.442011][ T29] audit: type=1326 audit(1755519294.802:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4562 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc386aebe9 code=0x7ffc0000 [ 44.508330][ T4571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.525767][ T4573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.369'. [ 44.534955][ T4573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.369'. [ 44.563718][ T4573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.369'. [ 44.572729][ T4573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.369'. [ 44.598701][ T4573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.369'. [ 44.608092][ T4573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.369'. [ 44.672699][ T4571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.708632][ T4587] netlink: 'syz.5.373': attribute type 3 has an invalid length. [ 44.816738][ T4571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.893773][ T4571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.032903][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.125320][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.141295][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.205529][ T3916] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.296708][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.304068][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.314266][ T4601] $Hÿ: left promiscuous mode [ 45.319044][ T4601] bond_slave_0: left promiscuous mode [ 45.324829][ T4601] bond_slave_1: left promiscuous mode [ 45.357131][ T4601] wg2: left promiscuous mode [ 45.377233][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.388649][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.422087][ T4601] team1: left promiscuous mode [ 45.481472][ T3916] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.489930][ T3916] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.498320][ T3916] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.504894][ T4613] loop2: detected capacity change from 0 to 512 [ 45.507960][ T3916] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.532455][ T4613] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.380: invalid fast symlink length 0 [ 45.690749][ T4613] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.380: couldn't read orphan inode 17 (err -117) [ 45.703727][ T4613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.740113][ T4613] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 45.740242][ T29] audit: type=1400 audit(1755519296.272:1076): avc: denied { write } for pid=4612 comm="syz.2.380" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.808469][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.838488][ T4629] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 45.871106][ T4634] tipc: Started in network mode [ 45.875995][ T4634] tipc: Node identity 4, cluster identity 4711 [ 45.882198][ T4634] tipc: Node number set to 4 [ 45.924224][ T4641] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 45.934395][ T4641] hsr_slave_0: left promiscuous mode [ 45.940241][ T4641] hsr_slave_1: left promiscuous mode [ 46.074181][ T4648] loop1: detected capacity change from 0 to 1024 [ 46.112398][ T4648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.190208][ T4648] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.393: Allocating blocks 449-513 which overlap fs metadata [ 46.244315][ T4647] EXT4-fs (loop1): pa ffff88810584d070: logic 48, phys. 177, len 21 [ 46.252382][ T4647] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 46.272907][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.298914][ T4658] netlink: 'syz.4.398': attribute type 4 has an invalid length. [ 46.325869][ T4660] ip6gre1: entered allmulticast mode [ 46.379123][ T4664] loop4: detected capacity change from 0 to 128 [ 46.415746][ T4664] FAT-fs (loop4): Directory bread(block 32) failed [ 46.427600][ T4664] FAT-fs (loop4): Directory bread(block 33) failed [ 46.445779][ T4664] FAT-fs (loop4): Directory bread(block 34) failed [ 46.458697][ T4664] FAT-fs (loop4): Directory bread(block 35) failed [ 46.472559][ T4664] FAT-fs (loop4): Directory bread(block 36) failed [ 46.494419][ T4664] FAT-fs (loop4): Directory bread(block 37) failed [ 46.508025][ T4664] FAT-fs (loop4): Directory bread(block 38) failed [ 46.528953][ T4664] FAT-fs (loop4): Directory bread(block 39) failed [ 46.550861][ T4664] FAT-fs (loop4): Directory bread(block 40) failed [ 46.551273][ T4666] loop1: detected capacity change from 0 to 128 [ 46.582783][ T4664] FAT-fs (loop4): Directory bread(block 41) failed [ 46.630275][ T4664] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 46.638818][ T4664] FAT-fs (loop4): Filesystem has been set read-only [ 46.695434][ T3307] syz_tun (unregistering): left allmulticast mode [ 46.780971][ T4664] process 'syz.4.401' launched '/dev/fd/8' with NULL argv: empty string added [ 46.792464][ T4664] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 46.806926][ T4664] bio_check_eod: 10438 callbacks suppressed [ 46.806943][ T4664] syz.4.401: attempt to access beyond end of device [ 46.806943][ T4664] loop4: rw=2049, sector=4180, nr_sectors = 24 limit=128 [ 46.813708][ T4684] macsec0: entered allmulticast mode [ 46.843240][ T4664] syz.4.401: attempt to access beyond end of device [ 46.843240][ T4664] loop4: rw=2049, sector=4212, nr_sectors = 4 limit=128 [ 46.856692][ T4664] Buffer I/O error on dev loop4, logical block 1053, lost async page write [ 46.880300][ T4664] syz.4.401: attempt to access beyond end of device [ 46.880300][ T4664] loop4: rw=2049, sector=4220, nr_sectors = 4 limit=128 [ 46.893745][ T4664] Buffer I/O error on dev loop4, logical block 1055, lost async page write [ 46.906980][ T4664] syz.4.401: attempt to access beyond end of device [ 46.906980][ T4664] loop4: rw=2049, sector=4224, nr_sectors = 4 limit=128 [ 46.938258][ T4688] netlink: 'syz.2.413': attribute type 3 has an invalid length. [ 46.947453][ T4688] netlink: 'syz.2.413': attribute type 3 has an invalid length. [ 47.032326][ T4702] wg2: left promiscuous mode [ 47.036955][ T4702] wg2: left allmulticast mode [ 47.049005][ T12] bridge_slave_1: left allmulticast mode [ 47.054813][ T12] bridge_slave_1: left promiscuous mode [ 47.060684][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.069094][ T12] bridge_slave_0: left allmulticast mode [ 47.074815][ T12] bridge_slave_0: left promiscuous mode [ 47.080550][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.096194][ T12] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 47.105085][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 47.113756][ T12] ip6gretap1 (unregistering): left promiscuous mode [ 47.120355][ T12] ip6gretap1 (unregistering): left allmulticast mode [ 47.162457][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.171745][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.180641][ T12] bond0 (unregistering): Released all slaves [ 47.189025][ T12] bond1 (unregistering): Released all slaves [ 47.198541][ T4702] wg2: entered promiscuous mode [ 47.203471][ T4702] wg2: entered allmulticast mode [ 47.223982][ T12] tipc: Left network mode [ 47.245813][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.426'. [ 47.247554][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.263599][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.264129][ T4707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4707 comm=syz.2.418 [ 47.309204][ T12] team0 (unregistering): Port device team_slave_1 removed [ 47.319317][ T12] team0 (unregistering): Port device team_slave_0 removed [ 47.346943][ T4708] tipc: Started in network mode [ 47.351894][ T4708] tipc: Node identity 4, cluster identity 4711 [ 47.358105][ T4708] tipc: Node number set to 4 [ 47.395330][ T4685] chnl_net:caif_netlink_parms(): no params data found [ 47.436998][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.444344][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.453291][ T4685] bridge_slave_0: entered allmulticast mode [ 47.459770][ T4685] bridge_slave_0: entered promiscuous mode [ 47.466703][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.473785][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.482850][ T4685] bridge_slave_1: entered allmulticast mode [ 47.489335][ T4685] bridge_slave_1: entered promiscuous mode [ 47.510276][ T4685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.521983][ T4685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.542654][ T4685] team0: Port device team_slave_0 added [ 47.549182][ T4685] team0: Port device team_slave_1 added [ 47.568313][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.575324][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.601235][ T4685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.612663][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.619597][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.645684][ T4685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.675684][ T4685] hsr_slave_0: entered promiscuous mode [ 47.681731][ T4685] hsr_slave_1: entered promiscuous mode [ 47.687658][ T4685] debugfs: 'hsr0' already exists in 'hsr' [ 47.693506][ T4685] Cannot create hsr debugfs directory [ 47.763075][ T4685] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 47.772931][ T4685] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 47.785916][ T4685] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.794627][ T4685] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.823457][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.830597][ T4685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.837980][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.845032][ T4685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.898553][ T4685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.910860][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.918774][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.933180][ T4685] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.947329][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.954511][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.965137][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.972207][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.991910][ T4685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.002430][ T4685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.064054][ T4685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.194399][ T4685] veth0_vlan: entered promiscuous mode [ 48.218286][ T4685] veth1_vlan: entered promiscuous mode [ 48.241348][ T4685] veth0_macvtap: entered promiscuous mode [ 48.248577][ T4685] veth1_macvtap: entered promiscuous mode [ 48.273269][ T4767] loop3: detected capacity change from 0 to 512 [ 48.282071][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.293898][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.319911][ T3916] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.338641][ T4767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.348809][ T3916] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.351550][ T4767] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.424627][ T3916] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.472898][ T3916] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.494473][ T4781] ref_ctr increment failed for inode: 0xbe offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888109b83f40 [ 48.506229][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.598363][ T4787] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 48.769150][ T4793] capability: warning: `syz.5.441' uses deprecated v2 capabilities in a way that may be insecure [ 48.798375][ T4793] tipc: New replicast peer: 255.255.255.83 [ 48.804304][ T4793] tipc: Enabled bearer , priority 10 [ 48.853783][ T4795] syzkaller1: entered promiscuous mode [ 48.859300][ T4795] syzkaller1: entered allmulticast mode [ 49.037363][ T4769] loop4: detected capacity change from 0 to 1024 [ 49.057586][ T4769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.182813][ T4769] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.332686][ T4810] loop6: detected capacity change from 0 to 128 [ 49.347460][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 49.347475][ T29] audit: type=1326 audit(1755519299.872:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.6.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2deaebe9 code=0x7ffc0000 [ 49.376983][ T29] audit: type=1326 audit(1755519299.872:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.6.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2deaebe9 code=0x7ffc0000 [ 49.475273][ T29] audit: type=1326 audit(1755519299.932:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.6.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fec2deaebe9 code=0x7ffc0000 [ 49.498879][ T29] audit: type=1326 audit(1755519299.932:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.6.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2deaebe9 code=0x7ffc0000 [ 49.522277][ T29] audit: type=1326 audit(1755519299.932:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.6.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2deaebe9 code=0x7ffc0000 [ 49.783185][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.971968][ T29] audit: type=1326 audit(1755519300.502:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.4.451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3acc84ebe9 code=0x0 [ 50.001863][ T4824] loop3: detected capacity change from 0 to 512 [ 50.008602][ T4824] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.015880][ T4824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.027909][ T4824] EXT4-fs (loop3): 1 truncate cleaned up [ 50.034008][ T4824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.051763][ T29] audit: type=1400 audit(1755519300.582:1212): avc: denied { write } for pid=4823 comm="syz.3.452" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.118856][ T4827] netlink: 'syz.5.453': attribute type 7 has an invalid length. [ 50.126571][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 50.256745][ T29] audit: type=1400 audit(1755519300.782:1213): avc: denied { read write } for pid=4831 comm="syz.5.455" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 50.280910][ T29] audit: type=1400 audit(1755519300.782:1214): avc: denied { open } for pid=4831 comm="syz.5.455" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 50.469778][ T4834] loop6: detected capacity change from 0 to 128 [ 50.476564][ T4834] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.488591][ T4834] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.504056][ T29] audit: type=1400 audit(1755519301.032:1215): avc: denied { watch watch_reads } for pid=4833 comm="syz.6.456" path="/7/file0/file0" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 50.710399][ T4828] ================================================================== [ 50.718505][ T4828] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 50.726856][ T4828] [ 50.729177][ T4828] write to 0xffff888119cc1fec of 4 bytes by task 4824 on cpu 1: [ 50.736799][ T4828] inode_update_timestamps+0x147/0x270 [ 50.742261][ T4828] file_modified_flags+0x2aa/0x350 [ 50.747375][ T4828] file_modified+0x17/0x20 [ 50.751794][ T4828] ext4_file_write_iter+0x9b1/0xf00 [ 50.757002][ T4828] iter_file_splice_write+0x666/0x9e0 [ 50.762370][ T4828] direct_splice_actor+0x153/0x2a0 [ 50.767477][ T4828] splice_direct_to_actor+0x30f/0x680 [ 50.772836][ T4828] do_splice_direct+0xda/0x150 [ 50.777581][ T4828] do_sendfile+0x380/0x650 [ 50.781986][ T4828] __x64_sys_sendfile64+0x105/0x150 [ 50.787174][ T4828] x64_sys_call+0x2bb0/0x2ff0 [ 50.791836][ T4828] do_syscall_64+0xd2/0x200 [ 50.796327][ T4828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.802637][ T4828] [ 50.804948][ T4828] read to 0xffff888119cc1fec of 4 bytes by task 4828 on cpu 0: [ 50.812471][ T4828] atime_needs_update+0x2a8/0x3e0 [ 50.817489][ T4828] touch_atime+0x4a/0x340 [ 50.821983][ T4828] filemap_splice_read+0x6ba/0x740 [ 50.827094][ T4828] ext4_file_splice_read+0x8f/0xb0 [ 50.832301][ T4828] splice_direct_to_actor+0x26f/0x680 [ 50.837673][ T4828] do_splice_direct+0xda/0x150 [ 50.842465][ T4828] do_sendfile+0x380/0x650 [ 50.846878][ T4828] __x64_sys_sendfile64+0x105/0x150 [ 50.852076][ T4828] x64_sys_call+0x2bb0/0x2ff0 [ 50.856748][ T4828] do_syscall_64+0xd2/0x200 [ 50.861250][ T4828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.867146][ T4828] [ 50.869481][ T4828] value changed: 0x0dddd4a5 -> 0x0e766b25 [ 50.875185][ T4828] [ 50.877552][ T4828] Reported by Kernel Concurrency Sanitizer on: [ 50.883797][ T4828] CPU: 0 UID: 0 PID: 4828 Comm: syz.3.452 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 50.894389][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 50.904560][ T4828] ================================================================== [ 51.186163][ T4828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.196536][ T3916] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.261153][ T3916] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.321314][ T3916] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.421258][ T3916] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.482013][ T3916] bridge_slave_1: left allmulticast mode [ 51.487666][ T3916] bridge_slave_1: left promiscuous mode [ 51.493412][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.501126][ T3916] bridge_slave_0: left allmulticast mode [ 51.506749][ T3916] bridge_slave_0: left promiscuous mode [ 51.512414][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.651689][ T3916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.661727][ T3916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.671103][ T3916] bond0 (unregistering): Released all slaves [ 51.752920][ T3916] hsr_slave_0: left promiscuous mode [ 51.758471][ T3916] hsr_slave_1: left promiscuous mode [ 51.764222][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.771618][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.781167][ T3916] veth1_macvtap: left promiscuous mode [ 51.786620][ T3916] veth0_macvtap: left promiscuous mode [ 51.792532][ T3916] veth1_vlan: left promiscuous mode [ 51.797732][ T3916] veth0_vlan: left promiscuous mode [ 51.846071][ T3916] team0 (unregistering): Port device team_slave_1 removed [ 51.855607][ T3916] team0 (unregistering): Port device team_slave_0 removed [ 52.091434][ T3916] IPVS: stop unused estimator thread 0... [ 52.353048][ T3916] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.422192][ T3916] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.492994][ T3916] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.552340][ T3916] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.632810][ T3916] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.701115][ T3916] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.771377][ T3916] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.831038][ T3916] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.920971][ T3916] bridge_slave_1: left allmulticast mode [ 52.926624][ T3916] bridge_slave_1: left promiscuous mode [ 52.932217][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.939628][ T3916] bridge_slave_0: left promiscuous mode [ 52.945301][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.953382][ T3916] bridge_slave_1: left allmulticast mode [ 52.959088][ T3916] bridge_slave_1: left promiscuous mode [ 52.964701][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.972500][ T3916] bridge_slave_0: left allmulticast mode [ 52.978119][ T3916] bridge_slave_0: left promiscuous mode [ 52.983888][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.992010][ T3916] bridge_slave_1: left allmulticast mode [ 52.997629][ T3916] bridge_slave_1: left promiscuous mode [ 53.003310][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.010985][ T3916] bridge_slave_0: left allmulticast mode [ 53.016681][ T3916] bridge_slave_0: left promiscuous mode [ 53.022702][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.102017][ T3916] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.111355][ T3916] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.120329][ T3916] $Hÿ (unregistering): Released all slaves [ 53.128124][ T3916] bond0 (unregistering): Released all slaves [ 53.222171][ T3916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.231682][ T3916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.241356][ T3916] bond0 (unregistering): Released all slaves [ 53.249255][ T3916] bond1 (unregistering): Released all slaves [ 53.322153][ T3916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.331635][ T3916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.340747][ T3916] bond0 (unregistering): Released all slaves [ 53.382947][ T3916] tipc: Left network mode [ 53.387488][ T3916] tipc: Disabling bearer [ 53.392449][ T3916] tipc: Left network mode [ 53.397007][ T3916] tipc: Left network mode [ 53.405300][ T3916] hsr_slave_0: left promiscuous mode [ 53.411276][ T3916] hsr_slave_1: left promiscuous mode [ 53.416784][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.424747][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.433759][ T3916] hsr_slave_0: left promiscuous mode [ 53.439308][ T3916] hsr_slave_1: left promiscuous mode [ 53.445064][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.452434][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.459917][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.467277][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.475405][ T3916] hsr_slave_0: left promiscuous mode [ 53.481033][ T3916] hsr_slave_1: left promiscuous mode [ 53.486542][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.494007][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.501387][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.508738][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.519463][ T3916] veth1_macvtap: left promiscuous mode [ 53.524986][ T3916] veth0_macvtap: left promiscuous mode [ 53.530532][ T3916] veth1_vlan: left promiscuous mode [ 53.535873][ T3916] veth0_vlan: left promiscuous mode [ 53.541608][ T3916] veth1_macvtap: left promiscuous mode [ 53.547087][ T3916] veth0_macvtap: left promiscuous mode [ 53.618903][ T3916] team0 (unregistering): Port device team_slave_1 removed [ 53.629319][ T3916] team0 (unregistering): Port device team_slave_0 removed [ 53.674554][ T3916] team0 (unregistering): Port device team_slave_1 removed [ 53.684365][ T3916] team0 (unregistering): Port device team_slave_0 removed [ 53.723615][ T3916] team0 (unregistering): Port device team_slave_1 removed [ 53.732935][ T3916] team0 (unregistering): Port device team_slave_0 removed [ 54.413297][ T3916] IPVS: stop unused estimator thread 0... [ 54.473256][ T3916] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.542331][ T3916] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.611813][ T3916] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.661977][ T3916] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.721592][ T3916] bridge_slave_1: left allmulticast mode [ 54.727251][ T3916] bridge_slave_1: left promiscuous mode [ 54.733024][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.740550][ T3916] bridge_slave_0: left allmulticast mode [ 54.746240][ T3916] bridge_slave_0: left promiscuous mode [ 54.751867][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.841578][ T3916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.851206][ T3916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.860657][ T3916] bond0 (unregistering): Released all slaves [ 54.882681][ T3916] hsr_slave_0: left promiscuous mode [ 54.888297][ T3916] hsr_slave_1: left promiscuous mode [ 54.893814][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.901271][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.908653][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.916039][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.925546][ T3916] veth1_macvtap: left promiscuous mode [ 54.931017][ T3916] veth0_macvtap: left promiscuous mode [ 54.936481][ T3916] veth1_vlan: left promiscuous mode [ 54.941844][ T3916] veth0_vlan: left promiscuous mode [ 54.993283][ T3916] team0 (unregistering): Port device team_slave_1 removed [ 55.002745][ T3916] team0 (unregistering): Port device team_slave_0 removed