last executing test programs: 1m12.699469881s ago: executing program 0 (id=2686): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f0000000000)='./file0/file0\x00') 1m12.559805212s ago: executing program 0 (id=2689): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x800000000000}, 0x18) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x193c02, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) io_submit(0x0, 0x2, &(0x7f0000000400)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x2, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000580)="893e667c7c0cee151353424cef0a3fd65718aa6921d9510b7c79119c82cbe9361f2722070d2892423f053cf170567e31041b02f9a933e74b3e7e6af2218ccaf20ac5d25bb28bd153f6013bd20a3ecd35ac5431d7bbcca2d7a7a3a75a22e8078bc27167fea17d607903801d75d15c8d49e74a94676b8b7b398b60b95ab7efd1ba27a98d69008efed27c50325682cfcfbfb83f97b414c7d47f093976f89939becec76129cbc8bfcbc7deb0bce5", 0xac, 0x6, 0x0, 0x2, r0}]) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) dup(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m12.470164839s ago: executing program 0 (id=2691): symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffff001}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) io_setup(0x9, &(0x7f0000000b80)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") 1m12.153769894s ago: executing program 0 (id=2698): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='4', 0x1}, {&(0x7f0000000600)}], 0x2) 1m11.974459277s ago: executing program 0 (id=2700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa08000000001c000000000002907800000000e0000300110010d4ad9078000000000000000000"], 0x0) 1m11.820053709s ago: executing program 0 (id=2701): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018e72300000000000097a10400000000000002000000"], 0x0, 0x1a}, 0x28) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x12, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000d0ff0800000074e585e700851000040600000018000000002310d7cc49ad843f8772f203890df1b77180731e72466e912f895815596ed400da014115dec1a37f674e0baf4589360db3ef8b6bc4ca090da5c34540ec933dd467d49fe8e84d0ded05031122813a1962b92d0d8cd929354d6cf83452190d724255bd325b831866038bfd70095661353339a8f3124a47756d91332b80fa6a64a8b953741b64b9fe0e8e2e1a1976fc00ab7f48dfc38bb8415dbe7b2c20ecccaabdb6", @ANYRES32, @ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="0000000000fdff0d00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='ext4_fc_stats\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32, @ANYRES8=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) 1m11.801167351s ago: executing program 32 (id=2701): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018e72300000000000097a10400000000000002000000"], 0x0, 0x1a}, 0x28) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x12, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000d0ff0800000074e585e700851000040600000018000000002310d7cc49ad843f8772f203890df1b77180731e72466e912f895815596ed400da014115dec1a37f674e0baf4589360db3ef8b6bc4ca090da5c34540ec933dd467d49fe8e84d0ded05031122813a1962b92d0d8cd929354d6cf83452190d724255bd325b831866038bfd70095661353339a8f3124a47756d91332b80fa6a64a8b953741b64b9fe0e8e2e1a1976fc00ab7f48dfc38bb8415dbe7b2c20ecccaabdb6", @ANYRES32, @ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="0000000000fdff0d00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='ext4_fc_stats\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32, @ANYRES8=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) 1.946221737s ago: executing program 1 (id=4007): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.570497577s ago: executing program 5 (id=4021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) brk(0x7fffffffffffffff) 1.552173228s ago: executing program 5 (id=4023): syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x3, 0x30d}, &(0x7f0000000340), &(0x7f0000000300)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x10000, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)=' ', 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.53585948s ago: executing program 2 (id=4024): socket$unix(0x1, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 1.513385981s ago: executing program 5 (id=4025): syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) 1.478306564s ago: executing program 2 (id=4026): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2a8, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x268, 0x2, [@TCA_BPF_ACT={0x168, 0x1, [@m_simple={0x164, 0x3, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '](@\')\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8001, 0x7, 0x9, 0x7}}, @TCA_DEF_DATA={0xb, 0x3, '!./+-!\x00'}, @TCA_DEF_DATA={0xc, 0x3, '!\xa9/\x88$/[\x00'}]}, {0xf9, 0x6, "d446c5f60b3a07eb601315acf8e8cf437236e0dd82dc2e5e962f6efb94b48ade80c7bd51203b06fcf9815209be7a595fc64ca9a00c29dd047328af60f38c1637f789a6af415ef115cf9112e1a16fbb75b8e80aaebc85a49c3cd48e3bb5cdcba47e7d2c3492e04c7db27d77ae7f4c173f5d60911d618ff4e28cd7d0f900523781f77274552360df7a44eef00ea69fefa63fe99f7ff3d73186833313fae039488b66d6f2f1669d23821af359d44a2a5879a872438ba58f74765ad8f69ba88cac8c3fd4404ef93627bccedb31ff3add6ce3f6c260cc42bf8415b81f35e19eee6e5470f88986f2fc10005b1e0cd1775074e6c6fc056823"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_ACT={0xfc, 0x1, [@m_connmark={0xf8, 0x15, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc6e, 0x0, 0x0, 0x5, 0x1}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x200, 0x6, 0x8, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5b98, 0x1, 0x0, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x8, 0x3ff, 0x1}, 0x661}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0xfffffff9, 0x7, 0x10000, 0x5}, 0xfb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8dcb, 0x5, 0x6, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb772, 0x4, 0x3, 0x2}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x80}, 0x200400a0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.478167364s ago: executing program 1 (id=4027): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.423370548s ago: executing program 2 (id=4030): epoll_create1(0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.422951538s ago: executing program 5 (id=4031): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1.282118559s ago: executing program 2 (id=4032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.164772489s ago: executing program 4 (id=4035): syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x3, 0x30d}, &(0x7f0000000340), &(0x7f0000000300)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)=' ', 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.136651671s ago: executing program 4 (id=4036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 1.125938162s ago: executing program 3 (id=4037): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x800, 0x0, 0x3, 0x1, 0x8, 0x6}, 0x20) 1.080189815s ago: executing program 3 (id=4038): socket$unix(0x1, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 1.079673575s ago: executing program 4 (id=4039): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 998.561042ms ago: executing program 3 (id=4040): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000700001000000000000000000070000", @ANYRES32=r2], 0x44}}, 0x0) 991.786502ms ago: executing program 1 (id=4041): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2a8, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x268, 0x2, [@TCA_BPF_ACT={0x168, 0x1, [@m_simple={0x164, 0x3, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '](@\')\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8001, 0x7, 0x9, 0x7}}, @TCA_DEF_DATA={0xb, 0x3, '!./+-!\x00'}, @TCA_DEF_DATA={0xc, 0x3, '!\xa9/\x88$/[\x00'}]}, {0xf9, 0x6, "d446c5f60b3a07eb601315acf8e8cf437236e0dd82dc2e5e962f6efb94b48ade80c7bd51203b06fcf9815209be7a595fc64ca9a00c29dd047328af60f38c1637f789a6af415ef115cf9112e1a16fbb75b8e80aaebc85a49c3cd48e3bb5cdcba47e7d2c3492e04c7db27d77ae7f4c173f5d60911d618ff4e28cd7d0f900523781f77274552360df7a44eef00ea69fefa63fe99f7ff3d73186833313fae039488b66d6f2f1669d23821af359d44a2a5879a872438ba58f74765ad8f69ba88cac8c3fd4404ef93627bccedb31ff3add6ce3f6c260cc42bf8415b81f35e19eee6e5470f88986f2fc10005b1e0cd1775074e6c6fc056823"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_ACT={0xfc, 0x1, [@m_connmark={0xf8, 0x15, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc6e, 0x0, 0x0, 0x5, 0x1}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x200, 0x6, 0x8, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5b98, 0x1, 0x0, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x8, 0x3ff, 0x1}, 0x661}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0xfffffff9, 0x7, 0x10000, 0x5}, 0xfb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8dcb, 0x5, 0x6, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb772, 0x4, 0x3, 0x2}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x80}, 0x200400a0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 954.637565ms ago: executing program 4 (id=4042): epoll_create1(0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 921.765888ms ago: executing program 1 (id=4043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file1\x00', 0xa500014c) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 921.450828ms ago: executing program 1 (id=4044): io_setup(0x25dc, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 852.370563ms ago: executing program 3 (id=4045): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in6=@remote, @in=@private=0xa010100, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x8, 0x0, 0x0, 0x40000000000000}, {0x958}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="65010000"], 0x188}}, 0x0) 846.514453ms ago: executing program 4 (id=4046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)) fcntl$lock(r0, 0x24, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 806.871867ms ago: executing program 2 (id=4047): syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x3, 0x30d}, &(0x7f0000000340), &(0x7f0000000300)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)=' ', 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 787.285068ms ago: executing program 3 (id=4048): r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000805}, 0x8000) close(0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x20040000) syz_emit_ethernet(0x3e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 734.521702ms ago: executing program 4 (id=4049): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 734.317762ms ago: executing program 2 (id=4050): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r4, 0xffffffffffffffff, 0x33, 0x0, @void}, 0x10) mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 615.442852ms ago: executing program 3 (id=4051): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) mknod(&(0x7f0000000740)='./file2\x00', 0xc000, 0x7) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) sendmmsg$inet(r1, 0x0, 0x0, 0x40) write$UHID_INPUT2(r0, 0x0, 0xe8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 255.75314ms ago: executing program 5 (id=4052): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.621979ms ago: executing program 1 (id=4053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300012a69d3204e6330bf0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 5 (id=4054): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x18, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8880}, 0x810) kernel console output (not intermixed with test programs): `syz.0.2637'. [ 348.668128][T13023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2637'. [ 348.684287][T13023] bridge18: entered promiscuous mode [ 348.689710][T13023] bridge18: entered allmulticast mode [ 348.705934][T13035] loop1: detected capacity change from 0 to 512 [ 348.712487][T13035] EXT4-fs: Ignoring removed i_version option [ 348.718521][T13035] EXT4-fs: Ignoring removed bh option [ 348.733385][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.796702][T13035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.809522][T13035] ext4 filesystem being mounted at /519/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.991635][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.083425][T13051] loop4: detected capacity change from 0 to 512 [ 349.089943][T13051] EXT4-fs: Ignoring removed i_version option [ 349.095962][T13051] EXT4-fs: Ignoring removed bh option [ 349.112343][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.147575][T13051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.160592][T13051] ext4 filesystem being mounted at /544/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.179839][T13063] serio: Serial port ptm0 [ 349.212896][T13064] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 349.234776][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2646'. [ 349.234851][T13064] bond0: (slave dummy0): Releasing backup interface [ 349.263728][T13068] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 349.281158][T13064] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 349.290828][T13064] team0: Failed to send options change via netlink (err -105) [ 349.298405][T13064] team0: Port device dummy0 added [ 349.308483][T13066] vti0: entered promiscuous mode [ 349.313530][T13066] vti0: entered allmulticast mode [ 349.325417][T13068] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 349.365481][T13068] team0: Failed to send options change via netlink (err -105) [ 349.373333][T13068] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 349.382795][T13068] team0: Port device dummy0 removed [ 349.390849][T13068] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 349.421327][T13069] loop3: detected capacity change from 0 to 512 [ 349.466224][T13069] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.480227][T13073] loop1: detected capacity change from 0 to 512 [ 349.487815][T13073] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 349.515898][T13069] EXT4-fs error (device loop3): __ext4_iget:5426: inode #15: block 1803188595: comm syz.3.2646: invalid block [ 349.528532][T13073] EXT4-fs (loop1): 1 truncate cleaned up [ 349.534845][T13073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.548279][T13069] EXT4-fs (loop3): Remounting filesystem read-only [ 349.557321][T13069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.629692][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.679013][T13082] loop1: detected capacity change from 0 to 512 [ 349.687162][T13082] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.697388][T13082] EXT4-fs (loop1): orphan cleanup on readonly fs [ 349.704262][T13082] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2653: Allocating blocks 41-42 which overlap fs metadata [ 349.718872][T13082] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2653: Allocating blocks 41-42 which overlap fs metadata [ 349.733119][T13082] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2653: Failed to acquire dquot type 1 [ 349.748596][T13084] loop0: detected capacity change from 0 to 512 [ 349.756697][T13084] EXT4-fs: Ignoring removed i_version option [ 349.762868][T13084] EXT4-fs: Ignoring removed bh option [ 349.768676][T13082] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 349.795454][T13082] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2653: corrupted inode contents [ 349.800021][T13084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.820868][T13082] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.2653: mark_inode_dirty error [ 349.832512][T13084] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.845767][T13082] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2653: corrupted inode contents [ 349.853141][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.858340][T13082] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2653: mark_inode_dirty error [ 349.878778][T13082] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2653: corrupted inode contents [ 349.890935][T13082] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 349.900156][T13082] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2653: corrupted inode contents [ 349.912311][T13082] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.2653: mark_inode_dirty error [ 349.923772][T13082] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 349.933073][T13082] EXT4-fs (loop1): 1 truncate cleaned up [ 349.939581][T13082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.019963][T13091] loop2: detected capacity change from 0 to 512 [ 350.030511][T13091] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 350.042181][T13091] EXT4-fs (loop2): 1 truncate cleaned up [ 350.048848][T13091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.073731][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.116110][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.168004][T13102] netlink: 'syz.4.2660': attribute type 10 has an invalid length. [ 350.199286][T13098] ext4: Bad value for 'journal_dev' [ 350.228477][T13104] netlink: 'syz.4.2660': attribute type 10 has an invalid length. [ 350.247152][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.256785][T13102] bond0: (slave dummy0): Releasing backup interface [ 350.270518][T13098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.288461][T13102] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 350.295327][T13098] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.297752][T13102] team0: Failed to send options change via netlink (err -105) [ 350.315227][T13102] team0: Port device dummy0 added [ 350.321421][T13104] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 350.355845][T13104] team0: Failed to send options change via netlink (err -105) [ 350.365402][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.385151][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.392993][T13104] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 350.402518][T13104] team0: Port device dummy0 removed [ 350.402968][T13100] netlink: 'syz.3.2659': attribute type 1 has an invalid length. [ 350.410477][T13104] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 350.492850][T13100] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 350.525038][T13100] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.571536][T13100] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 350.588051][T13100] EXT4-fs (loop3): orphan cleanup on readonly fs [ 350.640513][T13100] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.2659: Inode bitmap for bg 0 marked uninitialized [ 350.739738][T13100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.789256][T13100] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 350.810180][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.828491][T13112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.872449][T13112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.878204][T13118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 350.909745][T13118] EXT4-fs (loop0): 1 truncate cleaned up [ 350.919492][T13118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.985640][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.028890][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.051492][T13112] bridge1: left promiscuous mode [ 351.056614][T13112] bridge1: left allmulticast mode [ 351.061862][T13112] bridge2: left promiscuous mode [ 351.067059][T13112] bridge2: left allmulticast mode [ 351.072247][T13112] bridge3: left promiscuous mode [ 351.077267][T13112] bridge3: left allmulticast mode [ 351.082544][T13112] bridge4: left promiscuous mode [ 351.087608][T13112] bridge4: left allmulticast mode [ 351.092744][T13112] bridge5: left promiscuous mode [ 351.097748][T13112] bridge5: left allmulticast mode [ 351.102876][T13112] bridge6: left promiscuous mode [ 351.107948][T13112] bridge6: left allmulticast mode [ 351.113132][T13112] bridge7: left promiscuous mode [ 351.118167][T13112] bridge7: left allmulticast mode [ 351.131640][T13112] macvtap1: left allmulticast mode [ 351.150863][T13112] bridge8: left promiscuous mode [ 351.155907][T13112] bridge8: left allmulticast mode [ 351.164177][T13112] macvtap2: left allmulticast mode [ 351.174066][T13112] macvtap3: left allmulticast mode [ 351.185240][T13112] macvtap4: left allmulticast mode [ 351.205098][T13112] macvtap5: left allmulticast mode [ 351.218131][T13112] macvtap6: left allmulticast mode [ 351.227068][T13112] macvtap7: left allmulticast mode [ 351.239886][T13133] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 351.247710][T13133] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2666'. [ 351.258761][T13112] macvtap8: left allmulticast mode [ 351.264693][T13112] macvtap9: left allmulticast mode [ 351.270496][T13112] bridge0: left promiscuous mode [ 351.275643][T13112] bridge0: left allmulticast mode [ 351.280808][T13112] bridge9: left promiscuous mode [ 351.285820][T13112] bridge9: left allmulticast mode [ 351.291002][T13112] bridge10: left promiscuous mode [ 351.296085][T13112] bridge10: left allmulticast mode [ 351.299035][T13136] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 351.314525][T13112] veth0_to_batadv: left allmulticast mode [ 351.322037][T13136] EXT4-fs (loop1): 1 truncate cleaned up [ 351.332232][T13136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.357139][T13112] macvtap10: left allmulticast mode [ 351.374062][T13112] bridge11: left promiscuous mode [ 351.379218][T13112] bridge11: left allmulticast mode [ 351.384535][T13112] bridge12: left promiscuous mode [ 351.389937][T13112] bridge12: left allmulticast mode [ 351.395307][T13112] bridge13: left promiscuous mode [ 351.400354][T13112] bridge13: left allmulticast mode [ 351.405664][T13112] bridge14: left promiscuous mode [ 351.410731][T13112] bridge14: left allmulticast mode [ 351.415988][T13112] bridge15: left promiscuous mode [ 351.421085][T13112] bridge15: left allmulticast mode [ 351.426454][T13112] bridge16: left promiscuous mode [ 351.431486][T13112] bridge16: left allmulticast mode [ 351.436738][T13112] bridge17: left promiscuous mode [ 351.441942][T13112] bridge17: left allmulticast mode [ 351.447241][T13112] bridge18: left promiscuous mode [ 351.452414][T13112] bridge18: left allmulticast mode [ 351.459159][T13112] bridge19: left promiscuous mode [ 351.463687][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.464254][T13112] bridge19: left allmulticast mode [ 351.464432][T13112] bridge20: left promiscuous mode [ 351.483513][T13112] bridge20: left allmulticast mode [ 351.489409][ T61] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.502008][ T29] kauditd_printk_skb: 943 callbacks suppressed [ 351.502029][ T29] audit: type=1326 audit(1765659334.142:50765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1edb01f749 code=0x7ffc0000 [ 351.544358][T13127] macvtap14: entered allmulticast mode [ 351.553054][T13127] batman_adv: batadv0: Adding interface: macvtap14 [ 351.559935][T13127] batman_adv: batadv0: The MTU of interface macvtap14 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.585832][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'. [ 351.586642][ T29] audit: type=1326 audit(1765659334.152:50766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.615266][T13127] batman_adv: batadv0: Interface activated: macvtap14 [ 351.618583][ T29] audit: type=1326 audit(1765659334.152:50767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.648776][ T29] audit: type=1326 audit(1765659334.152:50768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.651542][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.672503][ T29] audit: type=1326 audit(1765659334.152:50769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.705135][ T29] audit: type=1326 audit(1765659334.152:50770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.705460][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2669'. [ 351.728936][ T29] audit: type=1326 audit(1765659334.152:50771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.761607][ T29] audit: type=1326 audit(1765659334.202:50772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.785266][ T29] audit: type=1326 audit(1765659334.202:50773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.808954][ T29] audit: type=1326 audit(1765659334.202:50774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13143 comm="syz.1.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0ff9f749 code=0x7ffc0000 [ 351.869987][ T8859] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.878565][ T8859] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.887457][ T8859] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.539094][T13159] EXT4-fs: Ignoring removed i_version option [ 352.545218][T13159] EXT4-fs: Ignoring removed bh option [ 353.678741][T13160] set_capacity_and_notify: 7 callbacks suppressed [ 353.678765][T13160] loop0: detected capacity change from 0 to 512 [ 353.919400][T13160] ext4 filesystem being mounted at /524/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.942126][T13164] netlink: 'syz.2.2675': attribute type 4 has an invalid length. [ 353.992015][T13159] ext4 filesystem being mounted at /548/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.047172][T13164] netlink: 'syz.2.2675': attribute type 4 has an invalid length. [ 354.119776][T13172] loop3: detected capacity change from 0 to 8192 [ 354.142380][T13175] loop2: detected capacity change from 0 to 512 [ 354.155598][T13175] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 354.193880][T13175] EXT4-fs (loop2): orphan cleanup on readonly fs [ 354.204437][T13175] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2678: Allocating blocks 41-42 which overlap fs metadata [ 354.218867][T13180] loop0: detected capacity change from 0 to 512 [ 354.226976][T13175] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2678: Failed to acquire dquot type 1 [ 354.239269][T13175] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 354.259542][T13183] loop1: detected capacity change from 0 to 512 [ 354.279324][T13183] EXT4-fs: Ignoring removed i_version option [ 354.285489][T13183] EXT4-fs: Ignoring removed bh option [ 354.327955][T13183] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.337420][T13175] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2678: corrupted inode contents [ 354.352401][T13180] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.368439][T13175] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.2678: mark_inode_dirty error [ 354.379262][T13180] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.2680: lblock 23 mapped to illegal pblock 18 (length 1) [ 354.396043][T13175] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2678: corrupted inode contents [ 354.409070][T13175] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.2678: mark_inode_dirty error [ 354.420949][T13175] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2678: corrupted inode contents [ 354.433403][T13175] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 354.444148][T13175] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.2678: corrupted inode contents [ 354.453738][T13180] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.2680: lblock 23 mapped to illegal pblock 18 (length 1) [ 354.456948][T13175] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.2678: mark_inode_dirty error [ 354.482023][T13175] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 354.491250][T13175] EXT4-fs (loop2): 1 truncate cleaned up [ 354.563533][T13191] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.2680: lblock 23 mapped to illegal pblock 18 (length 1) [ 354.570260][T13192] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 354.600174][T13192] vti0: entered promiscuous mode [ 354.605206][T13192] vti0: entered allmulticast mode [ 354.643709][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 354.705183][T13194] loop0: detected capacity change from 0 to 512 [ 354.713065][T13194] ext2: Unknown parameter 'measure' [ 354.719743][T13199] netlink: 'syz.4.2685': attribute type 1 has an invalid length. [ 354.796829][T13203] loop2: detected capacity change from 0 to 512 [ 354.808418][T13203] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 354.820055][T13203] EXT4-fs (loop2): 1 truncate cleaned up [ 354.966158][T13211] loop4: detected capacity change from 0 to 512 [ 354.973047][T13211] EXT4-fs: Ignoring removed i_version option [ 354.979165][T13211] EXT4-fs: Ignoring removed bh option [ 355.097596][T13211] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.149028][T13220] loop0: detected capacity change from 0 to 512 [ 355.155654][T13220] EXT4-fs: Ignoring removed i_version option [ 355.161753][T13220] EXT4-fs: Ignoring removed bh option [ 355.187147][T13220] ext4 filesystem being mounted at /530/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.239066][T13232] netlink: 'syz.1.2697': attribute type 1 has an invalid length. [ 355.281727][T13232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.298266][T13232] vti0: entered promiscuous mode [ 355.303463][T13232] vti0: entered allmulticast mode [ 355.336679][T13234] netlink: 'syz.3.2696': attribute type 1 has an invalid length. [ 355.349504][T13234] loop3: detected capacity change from 0 to 1024 [ 355.357131][T13234] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 355.383921][T13234] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.399444][T13234] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 355.407726][T13234] EXT4-fs (loop3): orphan cleanup on readonly fs [ 355.412306][T13238] EXT4-fs: Ignoring removed i_version option [ 355.414385][T13234] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.2696: Inode bitmap for bg 0 marked uninitialized [ 355.420245][T13238] EXT4-fs: Ignoring removed bh option [ 355.442300][T13234] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 355.474511][T13238] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.698284][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.756825][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.817394][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.832212][T13257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 355.871678][T13257] EXT4-fs (loop4): 1 truncate cleaned up [ 355.941376][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.977885][T13247] chnl_net:caif_netlink_parms(): no params data found [ 356.055891][T13264] netlink: 'syz.4.2704': attribute type 10 has an invalid length. [ 356.101066][T13265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.111624][T13266] netlink: 'syz.4.2704': attribute type 10 has an invalid length. [ 356.146337][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 356.173496][T13265] EXT4-fs (loop3): 1 truncate cleaned up [ 356.229986][T13270] EXT4-fs: Ignoring removed nobh option [ 356.246690][T13270] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #3: comm syz.2.2706: corrupted inode contents [ 356.258884][T13270] EXT4-fs (loop2): Remounting filesystem read-only [ 356.266285][T13270] EXT4-fs (loop2): 1 truncate cleaned up [ 356.272537][T13270] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.977030][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.987193][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.997398][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 357.007525][ T12] bond0 (unregistering): Released all slaves [ 357.016970][ T12] bond1 (unregistering): Released all slaves [ 357.026285][ T12] bond2 (unregistering): Released all slaves [ 357.045356][T13264] bond0: (slave dummy0): Releasing backup interface [ 357.053815][T13264] team0: Port device dummy0 added [ 357.075597][T13266] team0: Port device dummy0 removed [ 357.082420][T13266] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 357.111766][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 357.111785][ T29] audit: type=1326 audit(1765659339.742:51104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.118863][T13275] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 357.152111][ T29] audit: type=1326 audit(1765659339.742:51105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.175895][ T29] audit: type=1326 audit(1765659339.742:51106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.199498][ T29] audit: type=1326 audit(1765659339.742:51107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.223320][ T29] audit: type=1326 audit(1765659339.742:51108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.236317][T13275] EXT4-fs (loop4): 1 truncate cleaned up [ 357.246988][ T29] audit: type=1326 audit(1765659339.742:51109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.247036][ T29] audit: type=1326 audit(1765659339.742:51110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.299810][ T29] audit: type=1326 audit(1765659339.742:51111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.323424][ T29] audit: type=1326 audit(1765659339.742:51112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.347035][ T29] audit: type=1326 audit(1765659339.742:51113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 357.407742][ T12] tipc: Left network mode [ 357.425243][T13247] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.432710][T13247] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.440495][T13247] bridge_slave_0: entered allmulticast mode [ 357.447144][T13247] bridge_slave_0: entered promiscuous mode [ 357.454136][T13247] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.461398][T13247] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.469278][T13247] bridge_slave_1: entered allmulticast mode [ 357.476296][T13247] bridge_slave_1: entered promiscuous mode [ 357.676552][T13284] EXT4-fs: Ignoring removed i_version option [ 357.682616][T13284] EXT4-fs: Ignoring removed bh option [ 357.870838][T13287] EXT4-fs: Ignoring removed i_version option [ 357.876901][T13287] EXT4-fs: Ignoring removed bh option [ 357.889513][T13284] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.928537][T13287] ext4 filesystem being mounted at /537/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.117392][ T12] veth0_to_batadv: left allmulticast mode [ 358.123253][ T12] veth0_to_batadv: left promiscuous mode [ 358.129407][ T12] veth1_macvtap: left promiscuous mode [ 358.135117][ T12] veth0_macvtap: left promiscuous mode [ 358.140791][ T12] veth1_vlan: left promiscuous mode [ 358.146826][ T12] veth0_vlan: left promiscuous mode [ 358.209399][T13304] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 358.220050][T13304] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.235032][T13304] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 358.243181][T13304] EXT4-fs (loop4): orphan cleanup on readonly fs [ 358.251315][T13304] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.2710: Inode bitmap for bg 0 marked uninitialized [ 358.295674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 358.306667][ T12] team0 (unregistering): Port device team_slave_0 removed [ 358.313890][T13296] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 358.357810][T13305] macvtap15: entered allmulticast mode [ 358.366287][T13305] batman_adv: batadv0: Adding interface: macvtap15 [ 358.372867][T13305] batman_adv: batadv0: The MTU of interface macvtap15 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.398532][T13305] batman_adv: batadv0: Interface activated: macvtap15 [ 358.434527][T13318] netlink: 'syz.4.2716': attribute type 10 has an invalid length. [ 358.454838][T13318] bond0: (slave dummy0): Releasing backup interface [ 358.463576][T13318] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 358.472642][T13318] team0: Failed to send options change via netlink (err -105) [ 358.480271][T13318] team0: Port device dummy0 added [ 358.482189][T13320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.501291][T13318] netlink: 'syz.4.2716': attribute type 10 has an invalid length. [ 358.506888][T13247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.514085][T13320] EXT4-fs (loop2): 1 truncate cleaned up [ 358.525291][T13318] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 358.536370][T13318] team0: Failed to send options change via netlink (err -105) [ 358.544152][T13318] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 358.560125][T13318] team0: Port device dummy0 removed [ 358.567092][T13318] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 358.577403][T13247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.608684][T13247] team0: Port device team_slave_0 added [ 358.618835][T13247] team0: Port device team_slave_1 added [ 358.635753][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 358.646800][T13247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.653772][T13247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.680190][T13247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.691794][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 358.707071][T13247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.714126][T13247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.740163][T13247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.776243][T13328] tipc: Enabled bearer , priority 0 [ 358.799343][T13327] tipc: Disabling bearer [ 358.809242][T13247] hsr_slave_0: entered promiscuous mode [ 358.815928][T13247] hsr_slave_1: entered promiscuous mode [ 359.000534][T13341] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 359.008406][T13341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2723'. [ 359.048937][T13339] set_capacity_and_notify: 9 callbacks suppressed [ 359.048955][T13339] loop4: detected capacity change from 0 to 512 [ 359.062221][T13339] EXT4-fs: Ignoring removed i_version option [ 359.068277][T13339] EXT4-fs: Ignoring removed bh option [ 359.094175][T13339] ext4 filesystem being mounted at /560/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.095479][T13247] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.120789][T13247] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.147528][T13247] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 359.192216][T13247] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 359.200695][T13350] netlink: 'syz.1.2725': attribute type 47 has an invalid length. [ 359.208687][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2725'. [ 359.266789][T13351] netlink: 'syz.2.2726': attribute type 4 has an invalid length. [ 359.305478][T13357] loop1: detected capacity change from 0 to 8192 [ 359.318458][T13362] netlink: 'syz.2.2726': attribute type 4 has an invalid length. [ 359.378128][T13361] syzkaller0: entered promiscuous mode [ 359.383653][T13361] syzkaller0: entered allmulticast mode [ 359.483032][T13247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.519603][T13361] tipc: Enabled bearer , priority 0 [ 359.560152][ T4432] tipc: Resetting bearer [ 359.597575][T13247] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.635881][T13358] tipc: Resetting bearer [ 359.662059][T13358] tipc: Disabling bearer [ 359.717699][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.724846][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.740893][T13369] netlink: 'syz.2.2730': attribute type 10 has an invalid length. [ 359.751553][T13247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.762112][T13247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.786738][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.793941][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.794707][T13370] netlink: 'syz.2.2730': attribute type 10 has an invalid length. [ 359.850569][T13369] bond0: (slave dummy0): Releasing backup interface [ 359.872328][T13369] team0: Port device dummy0 added [ 359.881501][T13372] loop4: detected capacity change from 0 to 128 [ 359.927266][T13372] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.938167][T13370] team0: Port device dummy0 removed [ 359.948563][T13370] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.126828][T13378] loop2: detected capacity change from 0 to 1024 [ 360.134868][T13378] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 360.145312][T13378] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 360.158651][T13378] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 360.167886][T13378] EXT4-fs (loop2): orphan cleanup on readonly fs [ 360.176488][T13247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.197227][T13378] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.2732: Inode bitmap for bg 0 marked uninitialized [ 360.219057][T13378] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 360.341182][T13396] loop1: detected capacity change from 0 to 128 [ 360.403823][T13396] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.420796][T13399] loop2: detected capacity change from 0 to 512 [ 360.427531][T13399] ext4: Bad value for 'journal_dev' [ 360.464995][T13399] loop2: detected capacity change from 0 to 2048 [ 360.466616][T13247] veth0_vlan: entered promiscuous mode [ 360.496851][T13399] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.516946][T13405] netlink: 'syz.4.2737': attribute type 47 has an invalid length. [ 360.525191][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2737'. [ 360.537857][T13247] veth1_vlan: entered promiscuous mode [ 360.588424][T13247] veth0_macvtap: entered promiscuous mode [ 360.617072][T13409] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 360.625223][T13247] veth1_macvtap: entered promiscuous mode [ 360.635962][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.644398][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.665320][T13410] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2735: bg 0: block 345: padding at end of block bitmap is not set [ 360.681948][T13409] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 360.701400][T13247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.709404][T13410] EXT4-fs (loop2): Remounting filesystem read-only [ 360.730459][T13247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.763734][ T8859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.779950][ T8859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.797628][T13411] loop4: detected capacity change from 0 to 764 [ 360.811438][ T8859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.828966][T13411] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 360.837830][ T8859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.981729][T13421] loop5: detected capacity change from 0 to 512 [ 361.010013][T13421] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 361.042164][T13421] EXT4-fs (loop5): 1 truncate cleaned up [ 361.069277][T13421] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2740'. [ 361.143436][T13427] loop1: detected capacity change from 0 to 512 [ 361.185810][T13427] ext4: Bad value for 'journal_dev' [ 361.242304][T13431] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 361.356197][T13427] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.370479][T13427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.411665][T13427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.432166][T13435] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 361.440003][T13435] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2744'. [ 361.472062][T13431] EXT4-fs (loop5): orphan cleanup on readonly fs [ 361.493214][T13431] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2743: Allocating blocks 41-42 which overlap fs metadata [ 361.519231][T13431] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2743: Allocating blocks 41-42 which overlap fs metadata [ 361.524520][T13438] netlink: 'syz.2.2745': attribute type 10 has an invalid length. [ 361.554312][T13431] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2743: Failed to acquire dquot type 1 [ 361.582226][T13431] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 361.594522][T13439] netlink: 'syz.2.2745': attribute type 10 has an invalid length. [ 361.597928][T13431] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2743: corrupted inode contents [ 361.617239][T13431] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.2743: mark_inode_dirty error [ 361.628905][T13431] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2743: corrupted inode contents [ 361.641205][T13431] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.2743: mark_inode_dirty error [ 361.652851][T13438] bond0: (slave dummy0): Releasing backup interface [ 361.669016][T13431] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2743: corrupted inode contents [ 361.676013][T13438] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 361.690095][T13431] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 361.705181][T13431] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2743: corrupted inode contents [ 361.712665][T13438] team0: Failed to send options change via netlink (err -105) [ 361.724770][T13438] team0: Port device dummy0 added [ 361.730360][T13431] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.2743: mark_inode_dirty error [ 361.753474][T13439] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 361.762847][T13431] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 361.782295][T13431] EXT4-fs (loop5): 1 truncate cleaned up [ 361.806201][T13439] team0: Failed to send options change via netlink (err -105) [ 361.818217][T13439] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 361.843386][T13439] team0: Port device dummy0 removed [ 361.876342][T13439] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 361.977510][T13445] ext4: Bad value for 'journal_dev' [ 361.995095][T13443] tipc: Enabling of bearer rejected, failed to enable media [ 362.061536][T13456] random: crng reseeded on system resumption [ 362.078763][T13454] ext4: Bad value for 'journal_dev' [ 362.128062][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 362.128081][ T29] audit: type=1326 audit(1765659344.762:51904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.173279][T13460] team0: Failed to send options change via netlink (err -105) [ 362.180928][T13460] team0: Port device dummy0 added [ 362.186391][ T29] audit: type=1326 audit(1765659344.792:51905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.210136][ T29] audit: type=1326 audit(1765659344.792:51906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.219006][T13460] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.233901][ T29] audit: type=1326 audit(1765659344.792:51907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.266345][ T29] audit: type=1326 audit(1765659344.792:51908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.289962][ T29] audit: type=1326 audit(1765659344.792:51909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.313754][ T29] audit: type=1326 audit(1765659344.792:51910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.319202][T13445] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.337390][ T29] audit: type=1326 audit(1765659344.792:51911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.353763][T13454] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.371666][ T29] audit: type=1326 audit(1765659344.792:51912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.405927][ T29] audit: type=1326 audit(1765659344.792:51913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 362.445080][T13460] team0: Failed to send options change via netlink (err -105) [ 362.453457][T13445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.462416][T13460] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.465850][T13468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.472392][T13445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.487398][T13460] team0: Port device dummy0 removed [ 362.495743][T13467] EXT4-fs: Ignoring removed i_version option [ 362.501785][T13467] EXT4-fs: Ignoring removed bh option [ 362.508577][T13468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.510654][T13460] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.557322][T13468] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2751: bg 0: block 345: padding at end of block bitmap is not set [ 362.576570][T13467] ext4 filesystem being mounted at /551/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.587868][T13468] EXT4-fs (loop2): Remounting filesystem read-only [ 362.627012][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'. [ 362.639251][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'. [ 362.767157][T13477] bond0: (slave dummy0): Releasing backup interface [ 362.780827][T13477] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.789764][T13477] team0: Failed to send options change via netlink (err -105) [ 362.797459][T13477] team0: Port device dummy0 added [ 362.817640][T13479] bond0: (slave dummy0): Releasing backup interface [ 362.827447][T13479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.836548][T13479] team0: Failed to send options change via netlink (err -105) [ 362.844102][T13479] team0: Port device dummy0 added [ 362.852088][T13477] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.869000][T13477] team0: Failed to send options change via netlink (err -105) [ 362.885301][T13477] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.895099][T13477] team0: Port device dummy0 removed [ 362.902747][T13477] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.916287][T13479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.959311][T13479] team0: Failed to send options change via netlink (err -105) [ 362.971745][T13483] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 362.981898][T13483] EXT4-fs (loop3): orphan cleanup on readonly fs [ 362.988526][T13479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 362.998133][T13483] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2760: Allocating blocks 41-42 which overlap fs metadata [ 363.012222][T13479] team0: Port device dummy0 removed [ 363.020532][T13479] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 363.038852][T13483] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2760: Allocating blocks 41-42 which overlap fs metadata [ 363.082006][T13483] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2760: Failed to acquire dquot type 1 [ 363.093936][T13483] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 363.185063][T13483] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2760: corrupted inode contents [ 363.207057][T13483] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.2760: mark_inode_dirty error [ 363.264095][T13483] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2760: corrupted inode contents [ 363.478671][T13497] EXT4-fs: Ignoring removed i_version option [ 363.484857][T13497] EXT4-fs: Ignoring removed bh option [ 363.527567][T13483] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2760: mark_inode_dirty error [ 363.580200][T13497] ext4 filesystem being mounted at /547/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.688566][T13483] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2760: corrupted inode contents [ 363.702355][T13501] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2765'. [ 363.725452][T13493] Cannot find add_set index 0 as target [ 363.732524][T13493] SELinux: failed to load policy [ 363.742068][T13483] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 363.765658][T13483] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2760: corrupted inode contents [ 363.785866][T13483] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.2760: mark_inode_dirty error [ 363.815377][T13483] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 363.816230][T13503] tipc: Enabling of bearer rejected, failed to enable media [ 363.824928][T13483] EXT4-fs (loop3): 1 truncate cleaned up [ 363.845200][T13506] macvtap11: entered allmulticast mode [ 363.850714][T13506] veth0_to_batadv: entered allmulticast mode [ 363.877708][T13506] batman_adv: batadv0: Adding interface: macvtap11 [ 363.884306][T13506] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.911012][T13506] batman_adv: batadv0: Interface activated: macvtap11 [ 363.995571][T13511] vti0: entered promiscuous mode [ 364.000565][T13511] vti0: entered allmulticast mode [ 364.131604][T13515] set_capacity_and_notify: 9 callbacks suppressed [ 364.131624][T13515] loop1: detected capacity change from 0 to 512 [ 364.147076][T13514] validate_nla: 7 callbacks suppressed [ 364.147094][T13514] netlink: 'syz.2.2770': attribute type 10 has an invalid length. [ 364.156165][T13515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 364.173035][T13514] bond0: (slave dummy0): Releasing backup interface [ 364.183468][T13514] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 364.203116][T13523] netlink: 'syz.2.2770': attribute type 10 has an invalid length. [ 364.222827][T13514] team0: Failed to send options change via netlink (err -105) [ 364.230452][T13514] team0: Port device dummy0 added [ 364.242306][T13515] EXT4-fs (loop1): 1 truncate cleaned up [ 364.248018][T13523] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 364.258787][T13522] loop3: detected capacity change from 0 to 512 [ 364.280124][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'. [ 364.289145][T13515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2769'. [ 364.326031][T13523] team0: Failed to send options change via netlink (err -105) [ 364.341086][T13522] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2772: EA inode hash validation failed [ 364.355435][T13523] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 364.364472][T13523] team0: Port device dummy0 removed [ 364.372383][T13522] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2772: corrupted inode contents [ 364.388784][T13523] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 364.414764][T13522] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.2772: mark_inode_dirty error [ 364.429016][T13515] bridge30: entered promiscuous mode [ 364.434419][T13515] bridge30: entered allmulticast mode [ 364.444920][T13522] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2772: corrupted inode contents [ 364.465612][T13522] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.2772: mark_inode_dirty error [ 364.480230][T13522] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.2772: mark inode dirty (error -117) [ 364.496094][T13522] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 364.507318][T13522] EXT4-fs (loop3): 1 orphan inode deleted [ 364.547498][T13529] loop2: detected capacity change from 0 to 1024 [ 364.558953][T13529] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 364.569419][T13529] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.593602][T13529] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 364.601890][T13529] EXT4-fs (loop2): orphan cleanup on readonly fs [ 364.608945][T13529] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.2773: Inode bitmap for bg 0 marked uninitialized [ 364.649018][T13528] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 364.713664][T13537] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2775'. [ 364.791766][T13542] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 364.799575][T13542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2777'. [ 364.938773][T13545] syzkaller0: entered promiscuous mode [ 364.944400][T13545] syzkaller0: entered allmulticast mode [ 365.225871][T13551] loop2: detected capacity change from 0 to 512 [ 365.232538][T13551] EXT4-fs: Ignoring removed i_version option [ 365.238576][T13551] EXT4-fs: Ignoring removed bh option [ 365.318590][T13551] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.584710][T13561] netlink: 'syz.4.2783': attribute type 4 has an invalid length. [ 365.609847][T13561] netlink: 'syz.4.2783': attribute type 4 has an invalid length. [ 365.710031][T13567] macvtap12: entered allmulticast mode [ 365.716381][T13567] batman_adv: batadv0: Adding interface: macvtap12 [ 365.723018][T13567] batman_adv: batadv0: The MTU of interface macvtap12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.781527][T13567] batman_adv: batadv0: Interface activated: macvtap12 [ 365.842140][T13565] netlink: 'syz.1.2785': attribute type 1 has an invalid length. [ 365.856005][T13565] loop1: detected capacity change from 0 to 1024 [ 365.863552][T13565] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 365.880063][T13565] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.893908][T13565] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 365.924611][T13565] EXT4-fs (loop1): orphan cleanup on readonly fs [ 365.931623][T13565] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.2785: Inode bitmap for bg 0 marked uninitialized [ 365.966301][T13574] syzkaller0: entered promiscuous mode [ 365.971814][T13574] syzkaller0: entered allmulticast mode [ 366.004212][T13565] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 366.188935][T13582] loop2: detected capacity change from 0 to 512 [ 366.209218][T13582] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.971128][T13590] loop5: detected capacity change from 0 to 512 [ 367.107557][T13590] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.213203][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 367.219532][ T29] audit: type=1326 audit(1765659349.752:52535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.5.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd82b33df90 code=0x7ffc0000 [ 367.243156][ T29] audit: type=1326 audit(1765659349.752:52536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.5.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd82b33e497 code=0x7ffc0000 [ 367.266694][ T29] audit: type=1326 audit(1765659349.752:52537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.5.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd82b33df90 code=0x7ffc0000 [ 367.290378][ T29] audit: type=1326 audit(1765659349.752:52538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.5.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 367.313986][ T29] audit: type=1326 audit(1765659349.752:52539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.5.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 367.385656][ T29] audit: type=1400 audit(1765659350.022:52540): avc: denied { create } for pid=13598 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.421852][ T29] audit: type=1400 audit(1765659350.052:52541): avc: denied { connect } for pid=13598 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.429493][T13597] syzkaller0: entered promiscuous mode [ 367.442180][ T29] audit: type=1400 audit(1765659350.052:52542): avc: denied { getopt } for pid=13598 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.447369][T13597] syzkaller0: entered allmulticast mode [ 367.469584][ T29] audit: type=1400 audit(1765659350.112:52543): avc: denied { create } for pid=13601 comm="syz.2.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.495003][ T29] audit: type=1400 audit(1765659350.122:52544): avc: denied { getopt } for pid=13601 comm="syz.2.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.626846][T13609] netlink: 'syz.1.2796': attribute type 4 has an invalid length. [ 367.654400][T13609] netlink: 'syz.1.2796': attribute type 4 has an invalid length. [ 368.116168][T13618] loop1: detected capacity change from 0 to 512 [ 368.122986][T13618] EXT4-fs: Ignoring removed i_version option [ 368.129025][T13618] EXT4-fs: Ignoring removed bh option [ 368.203124][T13618] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.121188][T13651] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2809'. [ 369.902321][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2822'. [ 369.914419][T13688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.946065][T13688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.617919][T13707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.976022][T13694] Set syz1 is full, maxelem 65536 reached [ 371.158323][T13712] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma? [ 371.254796][T13718] 9pnet_virtio: no channels available for device syz [ 371.340412][T13722] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 371.421679][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 371.473254][T13726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.587875][T13726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.798333][T13739] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2844'. [ 372.048507][T13752] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 372.055074][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 372.063250][T13752] vhci_hcd vhci_hcd.0: Device attached [ 372.135595][T13757] syzkaller0: entered promiscuous mode [ 372.141116][T13757] syzkaller0: entered allmulticast mode [ 372.445531][ T3400] usb 8-1: SetAddress Request (2) to port 0 [ 372.460236][ T3400] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 372.597740][T13755] vhci_hcd: connection reset by peer [ 372.603303][ T31] vhci_hcd vhci_hcd.3: stop threads [ 372.608589][ T31] vhci_hcd vhci_hcd.3: release socket [ 372.614000][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 372.622599][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 372.622613][ T29] audit: type=1400 audit(1765659355.252:52687): avc: denied { bind } for pid=13763 comm="syz.5.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 372.650186][ T29] audit: type=1400 audit(1765659355.282:52688): avc: denied { write } for pid=13763 comm="syz.5.2848" path="socket:[45089]" dev="sockfs" ino=45089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 372.895570][T13772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.914148][T13772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.396146][ T29] audit: type=1400 audit(1765659356.032:52689): avc: denied { create } for pid=13781 comm="syz.1.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.476540][ T29] audit: type=1400 audit(1765659356.112:52690): avc: denied { setopt } for pid=13781 comm="syz.1.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 373.631769][T13809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.645019][T13809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.808578][T13813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2866'. [ 373.825605][T13813] netlink: 'syz.5.2866': attribute type 10 has an invalid length. [ 373.833749][T13813] syz_tun: entered promiscuous mode [ 373.853910][T13813] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 373.930080][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.961848][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.207825][ T29] audit: type=1400 audit(1765659356.842:52691): avc: denied { connect } for pid=13821 comm="syz.3.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.335250][ T29] audit: type=1400 audit(1765659356.952:52692): avc: denied { execute } for pid=13823 comm="syz.1.2871" name="file1" dev="tmpfs" ino=3160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 374.357815][ T29] audit: type=1400 audit(1765659356.952:52693): avc: denied { execute_no_trans } for pid=13823 comm="syz.1.2871" path="/569/file1" dev="tmpfs" ino=3160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 374.616177][ T29] audit: type=1326 audit(1765659357.162:52694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 374.639958][ T29] audit: type=1326 audit(1765659357.162:52695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 374.663649][ T29] audit: type=1326 audit(1765659357.162:52696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7cf786f749 code=0x7ffc0000 [ 374.912879][T13844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.921794][T13844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.071013][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2882'. [ 375.093019][T13854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13854 comm=syz.1.2882 [ 375.372210][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'. [ 376.204325][T13948] 9pnet_virtio: no channels available for device syz [ 376.653526][T13959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.672200][T13959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.787167][T13954] 9pnet_virtio: no channels available for device syz [ 377.291372][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.325442][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.577378][ T3400] usb 8-1: device descriptor read/8, error -110 [ 377.685102][ T3400] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 377.704985][ T3400] usb 8-1: enqueue for inactive port 0 [ 377.713352][ T3400] usb 8-1: enqueue for inactive port 0 [ 377.727455][ T3400] usb 8-1: enqueue for inactive port 0 [ 377.755376][T14016] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 377.946958][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 377.947045][ T29] audit: type=1400 audit(1765659360.582:52711): avc: denied { name_bind } for pid=14043 comm="syz.3.2961" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 377.975305][ T29] audit: type=1400 audit(1765659360.602:52712): avc: denied { append } for pid=14045 comm="syz.5.2962" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 378.000966][T14046] loop6: detected capacity change from 0 to 7 [ 378.067294][ T29] audit: type=1400 audit(1765659360.702:52713): avc: denied { name_bind } for pid=14053 comm="syz.1.2966" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 378.069266][T14056] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2967'. [ 378.098420][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2967'. [ 378.154391][ T29] audit: type=1400 audit(1765659360.782:52714): avc: denied { setopt } for pid=14058 comm="syz.1.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.362538][T14080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2971'. [ 378.394797][ T29] audit: type=1400 audit(1765659361.022:52715): avc: denied { lock } for pid=14077 comm="syz.5.2975" path="socket:[46136]" dev="sockfs" ino=46136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.690195][ T29] audit: type=1400 audit(1765659361.322:52716): avc: denied { read write } for pid=14091 comm="syz.5.2980" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 378.714820][ T29] audit: type=1400 audit(1765659361.322:52717): avc: denied { open } for pid=14091 comm="syz.5.2980" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 378.861457][ T29] audit: type=1400 audit(1765659361.422:52718): avc: denied { getopt } for pid=14091 comm="syz.5.2980" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.899878][T14099] rdma_rxe: rxe_newlink: failed to add syz_tun [ 378.912991][ T29] audit: type=1400 audit(1765659361.522:52719): avc: denied { create } for pid=14097 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 378.933443][ T29] audit: type=1400 audit(1765659361.532:52720): avc: denied { write } for pid=14097 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 379.074291][ T3400] usb usb8-port1: attempt power cycle [ 379.146619][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2987'. [ 379.186572][T14107] veth3: entered promiscuous mode [ 379.191679][T14107] veth3: entered allmulticast mode [ 379.198353][T14107] bridge2: port 1(veth3) entered blocking state [ 379.204689][T14107] bridge2: port 1(veth3) entered disabled state [ 379.232326][T14107] bridge2: port 1(veth3) entered blocking state [ 379.238752][T14107] bridge2: port 1(veth3) entered forwarding state [ 379.256570][ T3437] bridge2: port 1(veth3) entered disabled state [ 379.271940][T14108] veth5: entered promiscuous mode [ 379.277089][T14108] veth5: entered allmulticast mode [ 379.284504][T14108] bridge2: port 2(veth5) entered blocking state [ 379.290882][T14108] bridge2: port 2(veth5) entered disabled state [ 379.306600][T14108] bridge2: port 2(veth5) entered blocking state [ 379.312941][T14108] bridge2: port 2(veth5) entered forwarding state [ 379.328563][ T3437] bridge2: port 2(veth5) entered disabled state [ 379.339760][T14111] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2988'. [ 379.365995][T14111] netlink: 'syz.2.2988': attribute type 10 has an invalid length. [ 379.458259][T14120] netlink: 'syz.2.2992': attribute type 21 has an invalid length. [ 379.466220][T14120] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2992'. [ 379.744680][T14152] tipc: Enabled bearer , priority 0 [ 379.760111][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.780091][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3006'. [ 379.789910][T14152] tipc: Disabling bearer [ 379.809087][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.984783][T14170] syzkaller0: entered promiscuous mode [ 379.990432][T14170] syzkaller0: entered allmulticast mode [ 380.051925][T14174] 9pnet_virtio: no channels available for device syz [ 380.301058][T14136] chnl_net:caif_netlink_parms(): no params data found [ 380.318872][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.380164][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.472475][T14136] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.479746][T14136] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.492705][T14136] bridge_slave_0: entered allmulticast mode [ 380.499542][T14136] bridge_slave_0: entered promiscuous mode [ 380.506959][T14136] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.507022][T14136] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.521392][T14136] bridge_slave_1: entered allmulticast mode [ 380.522180][T14136] bridge_slave_1: entered promiscuous mode [ 380.572391][T14136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.762765][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 380.925432][ T3400] usb usb8-port1: unable to enumerate USB device [ 381.987322][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.997412][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.007496][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 382.016822][ T31] bond0 (unregistering): Released all slaves [ 382.025629][ T31] bond1 (unregistering): Released all slaves [ 382.034520][ T31] bond2 (unregistering): Released all slaves [ 382.043868][T14136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.069743][T14230] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 382.094936][ T31] tipc: Left network mode [ 382.100400][T14136] team0: Port device team_slave_0 added [ 382.106699][ T31] IPVS: stopping master sync thread 10799 ... [ 382.118977][T14136] team0: Port device team_slave_1 added [ 382.178791][T14136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.185866][T14136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.211824][T14136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.230812][ T31] hsr_slave_0: left promiscuous mode [ 382.237004][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.244447][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.252421][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.259970][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.268038][ T31] batman_adv: batadv0: Interface deactivated: macvtap12 [ 382.275033][ T31] batman_adv: batadv0: Removing interface: macvtap12 [ 382.282456][ T31] batman_adv: batadv0: Interface deactivated: macvtap13 [ 382.289529][ T31] batman_adv: batadv0: Removing interface: macvtap13 [ 382.297321][ T31] batman_adv: batadv0: Interface deactivated: macvtap14 [ 382.304301][ T31] batman_adv: batadv0: Removing interface: macvtap14 [ 382.311549][ T31] batman_adv: batadv0: Interface deactivated: macvtap15 [ 382.318576][ T31] batman_adv: batadv0: Removing interface: macvtap15 [ 382.328455][ T31] veth0_to_batadv: left allmulticast mode [ 382.334203][ T31] veth0_to_batadv: left promiscuous mode [ 382.340057][ T31] veth1_macvtap: left promiscuous mode [ 382.345920][ T31] veth0_macvtap: left promiscuous mode [ 382.351563][ T31] veth1_vlan: left promiscuous mode [ 382.356999][ T31] veth0_vlan: left promiscuous mode [ 382.462180][ T31] team0 (unregistering): Port device team_slave_1 removed [ 382.472088][ T31] team0 (unregistering): Port device team_slave_0 removed [ 382.505752][T14136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.512727][T14136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.538833][T14136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.592623][T14136] hsr_slave_0: entered promiscuous mode [ 382.606822][T14136] hsr_slave_1: entered promiscuous mode [ 382.613979][T14136] debugfs: 'hsr0' already exists in 'hsr' [ 382.619817][T14136] Cannot create hsr debugfs directory [ 382.636962][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'. [ 382.661270][T14290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.699754][T14290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.958036][T14136] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.967414][T14136] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.977534][T14136] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.987622][T14136] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.027299][T14136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.040508][T14136] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.050665][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.057872][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.062275][T14343] netlink: 'syz.2.3079': attribute type 33 has an invalid length. [ 383.073079][T14343] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3079'. [ 383.087161][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.094248][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.208441][T14136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.330739][T14136] veth0_vlan: entered promiscuous mode [ 383.342288][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 383.342303][ T29] audit: type=1326 audit(1765659365.972:52726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.3.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437fa8f749 code=0x7ffc0000 [ 383.375995][T14136] veth1_vlan: entered promiscuous mode [ 383.388231][ T29] audit: type=1326 audit(1765659366.012:52727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.3.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f437fa8f749 code=0x7ffc0000 [ 383.412142][ T29] audit: type=1326 audit(1765659366.012:52728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.3.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437fa8f749 code=0x7ffc0000 [ 383.419710][T14136] veth0_macvtap: entered promiscuous mode [ 383.445963][T14136] veth1_macvtap: entered promiscuous mode [ 383.457421][T14136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.469393][T14136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.480658][ T982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.490712][ T982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.500330][ T982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.513872][ T982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.628298][T14401] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3098'. [ 383.694231][T14413] netlink: 'syz.1.3101': attribute type 1 has an invalid length. [ 383.706605][T14413] ip6erspan0: entered promiscuous mode [ 383.783010][T14397] chnl_net:caif_netlink_parms(): no params data found [ 383.827805][T14397] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.835149][T14397] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.842607][T14397] bridge_slave_0: entered allmulticast mode [ 383.849151][T14397] bridge_slave_0: entered promiscuous mode [ 383.856312][T14397] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.863398][T14397] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.870749][T14397] bridge_slave_1: entered allmulticast mode [ 383.877480][T14397] bridge_slave_1: entered promiscuous mode [ 383.904513][T14397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.917973][T14397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.958860][T14397] team0: Port device team_slave_0 added [ 383.965939][T14397] team0: Port device team_slave_1 added [ 383.985488][T14397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.992514][T14397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.018555][T14397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.030448][T14397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.037528][T14397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.047831][T14437] netlink: 'syz.5.3110': attribute type 4 has an invalid length. [ 384.063628][T14397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.082151][T14437] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3110'. [ 384.105276][T14397] hsr_slave_0: entered promiscuous mode [ 384.111671][T14397] hsr_slave_1: entered promiscuous mode [ 384.117735][T14397] debugfs: 'hsr0' already exists in 'hsr' [ 384.123479][T14397] Cannot create hsr debugfs directory [ 384.181131][ T29] audit: type=1400 audit(1765659366.812:52729): avc: denied { write } for pid=14440 comm="syz.2.3111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 384.216395][T14397] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.267245][T14397] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.306214][T14397] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.323387][T14458] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 384.337266][T14458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.349649][T14458] ip6erspan0: entered promiscuous mode [ 384.367276][T14397] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.415961][T14397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.426154][T14397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.435584][T14397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.445234][T14397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.477441][T14477] tipc: Enabling of bearer rejected, failed to enable media [ 384.504140][T14397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.520690][T14397] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.531315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.538625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.551801][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.558944][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.651126][T14397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.745872][T14397] veth0_vlan: entered promiscuous mode [ 384.755598][T14397] veth1_vlan: entered promiscuous mode [ 384.776814][T14397] veth0_macvtap: entered promiscuous mode [ 384.785782][T14397] veth1_macvtap: entered promiscuous mode [ 384.800075][T14397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.817338][T14397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.829192][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.841298][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.851425][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.864193][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.945814][ T29] audit: type=1400 audit(1765659367.572:52730): avc: denied { bind } for pid=14526 comm="syz.1.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 384.965714][ T29] audit: type=1400 audit(1765659367.572:52731): avc: denied { listen } for pid=14526 comm="syz.1.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 384.985542][ T29] audit: type=1400 audit(1765659367.572:52732): avc: denied { accept } for pid=14526 comm="syz.1.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.013632][ T29] audit: type=1400 audit(1765659367.642:52733): avc: denied { write } for pid=14526 comm="syz.1.3142" path="socket:[47461]" dev="sockfs" ino=47461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.166546][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3144'. [ 385.204278][T14536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.377223][T14536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.729042][ T1462] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.052599][T14565] 9pnet_virtio: no channels available for device syz [ 386.149961][ T1462] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.239918][ T1462] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.287171][ T1462] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.301115][T14543] chnl_net:caif_netlink_parms(): no params data found [ 386.343991][T14543] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.351275][T14543] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.355485][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3159'. [ 386.358897][T14543] bridge_slave_0: entered allmulticast mode [ 386.373873][T14543] bridge_slave_0: entered promiscuous mode [ 386.383627][T14584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.405587][T14543] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.412706][T14543] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.435168][T14543] bridge_slave_1: entered allmulticast mode [ 386.441866][T14543] bridge_slave_1: entered promiscuous mode [ 386.494141][T14543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.649511][ T29] audit: type=1400 audit(1765659369.282:52734): avc: denied { create } for pid=14599 comm="syz.1.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 386.718483][T14603] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3167'. [ 387.367802][ T1462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.378053][ T1462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.388005][ T1462] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 387.397422][ T1462] bond0 (unregistering): Released all slaves [ 387.407344][ T1462] bond1 (unregistering): Released all slaves [ 387.417263][T14543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.432161][T14603] team0: No ports can be present during mode change [ 387.458644][ T3914] syz1: Port: 1 Link DOWN [ 387.459594][ T1462] tipc: Left network mode [ 387.464383][T14543] team0: Port device team_slave_0 added [ 387.570084][T14543] team0: Port device team_slave_1 added [ 387.601771][ T1462] hsr_slave_0: left promiscuous mode [ 387.607744][ T1462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.615241][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.629396][ T1462] batman_adv: batadv0: Interface deactivated: macvtap8 [ 387.636394][ T1462] batman_adv: batadv0: Removing interface: macvtap8 [ 387.643527][ T1462] batman_adv: batadv0: Interface deactivated: macvtap9 [ 387.650485][ T1462] batman_adv: batadv0: Removing interface: macvtap9 [ 387.657803][ T1462] batman_adv: batadv0: Interface deactivated: macvtap10 [ 387.664853][ T1462] batman_adv: batadv0: Removing interface: macvtap10 [ 387.671942][ T1462] batman_adv: batadv0: Interface deactivated: macvtap11 [ 387.679033][ T1462] batman_adv: batadv0: Removing interface: macvtap11 [ 387.687822][ T1462] batman_adv: batadv0: Interface deactivated: macvtap12 [ 387.695071][ T1462] batman_adv: batadv0: Removing interface: macvtap12 [ 387.706057][ T1462] veth0_to_batadv: left allmulticast mode [ 387.711886][ T1462] veth0_to_batadv: left promiscuous mode [ 387.718244][ T1462] veth1_macvtap: left promiscuous mode [ 387.723843][ T1462] veth0_macvtap: left promiscuous mode [ 387.729592][ T1462] veth1_vlan: left promiscuous mode [ 387.735225][ T1462] veth0_vlan: left promiscuous mode [ 387.741945][T14617] 9pnet_virtio: no channels available for device syz [ 387.751244][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 388.096669][ T1462] team0 (unregistering): Port device team_slave_1 removed [ 388.107574][ T1462] team0 (unregistering): Port device team_slave_0 removed [ 388.121014][ T61] smc: removing ib device syz1 [ 388.156018][T14613] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 388.166172][T14613] ip6erspan0: entered promiscuous mode [ 388.175339][T14614] vlan2: entered promiscuous mode [ 388.180531][T14614] vlan2: entered allmulticast mode [ 388.185731][T14614] hsr_slave_1: entered allmulticast mode [ 388.218386][ T29] audit: type=1400 audit(1765659370.852:52735): avc: denied { read } for pid=14622 comm="syz.5.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.250641][T14543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.257799][T14543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.283919][T14543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.298168][T14543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.305305][T14543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.331261][T14543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.537402][T14543] hsr_slave_0: entered promiscuous mode [ 388.574288][T14543] hsr_slave_1: entered promiscuous mode [ 388.600304][T14543] debugfs: 'hsr0' already exists in 'hsr' [ 388.606104][T14543] Cannot create hsr debugfs directory [ 388.767665][ T29] audit: type=1400 audit(1765659371.402:52736): avc: denied { bind } for pid=14634 comm="syz.4.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.874109][T14637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3178'. [ 388.887789][T14637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3178'. [ 388.887789][ T61] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.905379][ T61] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.913965][ T61] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.942912][ T61] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.349965][T14543] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.439144][T14543] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.559664][T14543] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.573840][T14543] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.663272][T14543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.679447][T14543] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.727656][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.734853][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.901810][T14543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.912351][T14543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.007688][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.014912][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.086563][T14543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.096252][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3201'. [ 390.211732][T14543] veth0_vlan: entered promiscuous mode [ 390.228902][T14543] veth1_vlan: entered promiscuous mode [ 390.259442][T14543] veth0_macvtap: entered promiscuous mode [ 390.280335][T14543] veth1_macvtap: entered promiscuous mode [ 390.306128][T14543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.327844][T14543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.344476][ T982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.398220][ T982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.418351][ T982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.433831][ T982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.490450][T14746] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 390.552629][T14751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3214'. [ 391.107262][ T982] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.316091][ T982] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.426936][ T982] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.487723][ T982] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.526862][T14771] chnl_net:caif_netlink_parms(): no params data found [ 391.630662][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.637897][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.647416][T14771] bridge_slave_0: entered allmulticast mode [ 391.654026][T14771] bridge_slave_0: entered promiscuous mode [ 391.661218][T14771] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.668373][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.686140][ T29] audit: type=1400 audit(1765659374.312:52737): avc: denied { shutdown } for pid=14791 comm="syz.2.3223" lport=50546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.707571][T14771] bridge_slave_1: entered allmulticast mode [ 391.715833][T14771] bridge_slave_1: entered promiscuous mode [ 391.751334][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3231'. [ 391.763351][T14811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.775046][T14811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.786976][T14771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.197666][ T982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.207784][ T982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.218414][ T982] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 393.227567][ T982] bond0 (unregistering): Released all slaves [ 393.238400][T14771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.271704][T14771] team0: Port device team_slave_0 added [ 393.283632][T14771] team0: Port device team_slave_1 added [ 393.292788][ T982] tipc: Left network mode [ 393.304702][ T982] hsr_slave_0: left promiscuous mode [ 393.310425][ T982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.318125][ T982] batman_adv: batadv0: Interface deactivated: macvtap11 [ 393.325249][ T982] batman_adv: batadv0: Removing interface: macvtap11 [ 393.332439][ T982] batman_adv: batadv0: Interface deactivated: macvtap12 [ 393.339527][ T982] batman_adv: batadv0: Removing interface: macvtap12 [ 393.347316][ T982] veth0_to_batadv: left allmulticast mode [ 393.389223][ T982] team0 (unregistering): Port device team_slave_1 removed [ 393.398660][ T982] team0 (unregistering): Port device team_slave_0 removed [ 393.443785][T14771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.450865][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.476925][T14771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.488308][T14771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.495520][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.521607][T14771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.539263][T14887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.547944][T14887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.564297][T14771] hsr_slave_0: entered promiscuous mode [ 393.570547][T14771] hsr_slave_1: entered promiscuous mode [ 393.576659][T14771] debugfs: 'hsr0' already exists in 'hsr' [ 393.582412][T14771] Cannot create hsr debugfs directory [ 393.848733][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.857259][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.891406][T14771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.901085][T14771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.910192][T14771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.919583][T14771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.958661][T14771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.972928][T14771] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.983182][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.990339][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.002144][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.009330][ T885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.092551][T14771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.153516][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'. [ 394.162771][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3274'. [ 394.172609][T14926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.198125][T14926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.265343][T14771] veth0_vlan: entered promiscuous mode [ 394.273335][T14771] veth1_vlan: entered promiscuous mode [ 394.289790][T14771] veth0_macvtap: entered promiscuous mode [ 394.297574][T14771] veth1_macvtap: entered promiscuous mode [ 394.309541][T14771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.321354][T14771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.337313][ T885] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.348019][ T885] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.365924][ T885] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.446241][ T885] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.502199][T14967] tmpfs: Unknown parameter 'usrquota' [ 394.577879][T14972] 9pnet_virtio: no channels available for device syz [ 394.846475][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'. [ 395.117345][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 395.126548][T15013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.139381][T15013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.579708][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3318'. [ 395.916267][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.943212][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.695496][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3329'. [ 396.899212][T15081] infiniband syz1: set active [ 396.903950][T15081] infiniband syz1: added syz_tun [ 396.946290][T15081] RDS/IB: syz1: added [ 396.955003][T15081] smc: adding ib device syz1 with port count 1 [ 396.971401][T15081] smc: ib device syz1 port 1 has no pnetid [ 397.135695][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 397.145863][T15113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.169791][T15113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.722843][ T29] audit: type=1400 audit(1765659381.352:52738): avc: denied { module_load } for pid=15153 comm="syz.5.3357" path="/148/bus" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 398.746429][T15154] Invalid ELF header magic: != ELF [ 398.770334][T15156] rdma_rxe: rxe_newlink: failed to add syz_tun [ 399.056315][T15173] tipc: Enabling of bearer rejected, failed to enable media [ 399.697555][T15189] tipc: Can't bind to reserved service type 2 [ 400.003703][T15210] ip6erspan0: entered promiscuous mode [ 400.006970][ T29] audit: type=1400 audit(1765659382.632:52739): avc: denied { mount } for pid=15211 comm="syz.1.3382" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 400.056820][T15214] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3383'. [ 400.066096][T15214] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3383'. [ 400.075262][T15214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3383'. [ 400.226094][T15232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3392'. [ 400.355049][T15242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.363690][T15242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.024242][T15253] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 401.043209][ T29] audit: type=1400 audit(1765659383.672:52740): avc: denied { read } for pid=15254 comm="syz.2.3401" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 401.067837][ T29] audit: type=1400 audit(1765659383.672:52741): avc: denied { open } for pid=15254 comm="syz.2.3401" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 401.107879][ T29] audit: type=1400 audit(1765659383.712:52742): avc: denied { ioctl } for pid=15254 comm="syz.2.3401" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 401.379023][T15296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.387775][T15296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.089414][T15310] syzkaller0: entered promiscuous mode [ 402.095077][T15310] syzkaller0: entered allmulticast mode [ 402.282768][T15331] syz1: rxe_newlink: already configured on syz_tun [ 403.068955][T15366] veth3: entered promiscuous mode [ 403.074059][T15366] veth3: entered allmulticast mode [ 403.404124][T15392] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 403.434996][ T29] audit: type=1400 audit(1765659386.032:52743): avc: denied { read append } for pid=15391 comm="syz.4.3463" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 403.460094][ T29] audit: type=1400 audit(1765659386.032:52744): avc: denied { open } for pid=15391 comm="syz.4.3463" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 404.337277][T15428] 9pnet_virtio: no channels available for device syz [ 405.334240][T15481] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 405.352902][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.361588][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.379579][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.390459][ T29] audit: type=1400 audit(1765659388.012:52745): avc: denied { ioctl } for pid=15484 comm="syz.2.3501" path="socket:[51165]" dev="sockfs" ino=51165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.395564][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.285405][T15553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.294387][T15553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.839903][T15591] tmpfs: Unknown parameter 'quota' [ 407.055912][T15612] netlink: 812 bytes leftover after parsing attributes in process `syz.2.3552'. [ 407.630110][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'. [ 407.847513][ T29] audit: type=1400 audit(1765659390.482:52746): avc: denied { create } for pid=15675 comm="syz.3.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 407.867990][ T29] audit: type=1400 audit(1765659390.482:52747): avc: denied { ioctl } for pid=15675 comm="syz.3.3575" path="socket:[51687]" dev="sockfs" ino=51687 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 407.893488][ T29] audit: type=1400 audit(1765659390.482:52748): avc: denied { bind } for pid=15675 comm="syz.3.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 407.977832][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3577'. [ 408.147921][T15706] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3586'. [ 408.279697][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3589'. [ 408.306176][T15720] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 408.426873][T15738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.435850][T15738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.630244][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 408.658651][ T29] audit: type=1400 audit(1765659391.292:52749): avc: denied { ioctl } for pid=15751 comm="syz.4.3604" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 409.322643][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 409.331696][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 409.583533][ T29] audit: type=1400 audit(1765659392.212:52750): avc: denied { create } for pid=15776 comm="syz.4.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 409.638630][ T29] audit: type=1400 audit(1765659392.272:52751): avc: denied { write } for pid=15776 comm="syz.4.3614" path="socket:[51886]" dev="sockfs" ino=51886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 409.866607][T15792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3621'. [ 409.889948][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.898654][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.625705][T15831] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 411.122096][T15859] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 411.206961][T15867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.215738][T15867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.638955][ T29] audit: type=1400 audit(1765659395.272:52752): avc: denied { create } for pid=15949 comm="syz.4.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 412.678817][ T29] audit: type=1400 audit(1765659395.302:52753): avc: denied { connect } for pid=15949 comm="syz.4.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 412.788156][T15956] syzkaller0: entered promiscuous mode [ 412.793883][T15956] syzkaller0: entered allmulticast mode [ 413.144278][T15986] syzkaller0: entered promiscuous mode [ 413.149914][T15986] syzkaller0: entered allmulticast mode [ 413.652344][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 414.013377][T16076] 9pnet_virtio: no channels available for device syz [ 414.473404][ T29] audit: type=1326 audit(1765659397.102:52754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16092 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 414.499725][ T29] audit: type=1326 audit(1765659397.102:52755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16092 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 414.524055][ T29] audit: type=1326 audit(1765659397.102:52756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16092 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 414.559341][T16096] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 414.629189][ T29] audit: type=1326 audit(1765659397.262:52757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16092 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 414.652860][ T29] audit: type=1326 audit(1765659397.262:52758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16092 comm="syz.5.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b33f749 code=0x7ffc0000 [ 414.905103][ T29] audit: type=1400 audit(1765659397.542:52759): avc: denied { setopt } for pid=16109 comm="syz.3.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 414.999267][T16121] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 415.150970][T16135] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3765'. [ 415.169202][T16137] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3766'. [ 415.230654][T16141] 9pnet_virtio: no channels available for device syz [ 415.262163][T16144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3768'. [ 415.612485][ T29] audit: type=1400 audit(1765659398.242:52760): avc: denied { read append } for pid=16146 comm="syz.2.3769" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 415.612517][ T29] audit: type=1400 audit(1765659398.242:52761): avc: denied { open } for pid=16146 comm="syz.2.3769" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 415.617265][T16151] 9p: Bad value for 'rfdno' [ 415.928518][T16186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.937336][T16186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.448973][T16225] 9pnet_virtio: no channels available for device syz [ 418.296121][ T29] audit: type=1400 audit(1765659400.932:52762): avc: denied { mounton } for pid=16284 comm="syz.4.3826" path="/proc/236/task" dev="proc" ino=54340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 418.553222][T16268] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3820'. [ 418.690186][T16293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.704660][T16293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.550058][T16316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16316 comm=syz.1.3839 [ 419.788902][T16326] syzkaller0: entered promiscuous mode [ 419.794530][T16326] syzkaller0: entered allmulticast mode [ 420.173868][T16355] 9pnet_virtio: no channels available for device syz [ 420.725041][ T29] audit: type=1400 audit(1765659402.912:52763): avc: denied { lock } for pid=16351 comm="syz.2.3856" path="socket:[53620]" dev="sockfs" ino=53620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 420.801880][T16367] syzkaller0: entered promiscuous mode [ 420.807506][T16367] syzkaller0: entered allmulticast mode [ 421.078228][T16400] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3878'. [ 421.130854][T16409] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 421.437546][T16448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.446435][T16448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.658065][T16448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.671865][T16448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.699005][ T3996] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 421.706832][ T3996] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 421.714727][ T3996] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 421.727425][ T3996] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 421.829654][ T29] audit: type=1400 audit(1765659404.462:52764): avc: denied { write } for pid=16475 comm="syz.2.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 421.854744][ T29] audit: type=1400 audit(1765659404.492:52765): avc: denied { read } for pid=16475 comm="syz.2.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 421.897042][ T29] audit: type=1400 audit(1765659404.532:52766): avc: denied { ioctl } for pid=16477 comm="syz.2.3913" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.137315][T16486] FAT-fs (loop11): unable to read boot sector [ 422.144513][ T29] audit: type=1400 audit(1765659404.772:52767): avc: denied { create } for pid=16482 comm="syz.5.3914" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 422.165496][ T29] audit: type=1400 audit(1765659404.772:52768): avc: denied { mounton } for pid=16482 comm="syz.5.3914" path="/240/file0" dev="tmpfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 422.433127][ T29] audit: type=1400 audit(1765659405.062:52769): avc: denied { create } for pid=16495 comm="syz.3.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 422.458304][ T29] audit: type=1400 audit(1765659405.092:52770): avc: denied { write } for pid=16495 comm="syz.3.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 422.545892][T16504] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3924'. [ 422.707967][T16522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.721463][T16522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.838804][ T29] audit: type=1400 audit(1765659405.472:52771): avc: denied { unlink } for pid=13247 comm="syz-executor" name="file0" dev="tmpfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 422.906477][T16531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3936'. [ 423.044665][T16555] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3948'. [ 423.183187][T16576] syz_tun: entered allmulticast mode [ 423.189198][T16575] syz_tun: left allmulticast mode [ 423.208991][T16579] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3959'. [ 423.476355][ T29] audit: type=1400 audit(1765659406.112:52772): avc: denied { create } for pid=16588 comm="syz.3.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 423.529212][ T29] audit: type=1400 audit(1765659406.132:52773): avc: denied { getopt } for pid=16588 comm="syz.3.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 423.626243][T16599] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 423.750240][T16605] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3970'. [ 424.218426][T16637] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3986'. [ 424.356545][ T29] audit: type=1400 audit(1765659406.892:52774): avc: denied { map } for pid=16638 comm="syz.5.3987" path="socket:[55099]" dev="sockfs" ino=55099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 425.046278][T16658] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 425.411889][T16669] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4000'. [ 425.533093][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.540450][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.601661][T16681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.671338][ T29] audit: type=1400 audit(1765659408.302:52775): avc: denied { create } for pid=16704 comm="syz.3.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 425.739287][ T4432] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.767234][ T29] audit: type=1400 audit(1765659408.322:52776): avc: denied { sys_admin } for pid=16704 comm="syz.3.4015" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 425.813833][ T4432] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.852770][ T4432] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.865755][T16720] support for cryptoloop has been removed. Use dm-crypt instead. [ 425.879518][ T4432] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.975874][ T29] audit: type=1400 audit(1765659408.612:52777): avc: denied { create } for pid=16729 comm="syz.1.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 425.980734][T16731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4027'. [ 426.046939][T16733] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.054251][T16733] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.107731][T16733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.154321][ T23] syz1: Port: 1 Link DOWN [ 426.176722][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.187957][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.197099][T16742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4027'. [ 426.206244][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.249206][T16749] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.256595][T16749] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.293318][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4032'. [ 426.346788][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4032'. [ 426.355815][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 426.381260][T16749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.433472][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.474085][T16753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.509452][T16763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.533544][T16763] bond1: (slave bond0): making interface the new active one [ 426.547851][T16763] bond1: (slave bond0): Enslaving as an active interface with an up link [ 426.556570][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.588683][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.597927][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.606985][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.630335][T16780] netlink: 173 bytes leftover after parsing attributes in process `syz.3.4045'. [ 426.689598][ T29] audit: type=1326 audit(1765659409.322:52778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.4.4049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f835b76f749 code=0x0 [ 426.841921][T16797] loop3: detected capacity change from 0 to 512 [ 426.852180][T16797] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4051: inode has both inline data and extents flags [ 426.919677][T16801] 9pnet_virtio: no channels available for device syz [ 427.188311][T16797] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4051: couldn't read orphan inode 15 (err -117) [ 427.215528][T16797] EXT4-fs mount: 78 callbacks suppressed [ 427.215551][T16797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.324408][ T29] audit: type=1400 audit(1765659409.952:52779): avc: denied { mounton } for pid=16796 comm="syz.3.4051" path="/185/file1/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 427.349135][ T29] audit: type=1400 audit(1765659409.982:52780): avc: denied { create } for pid=16796 comm="syz.3.4051" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 427.400291][T16810] batman_adv: batadv0: Adding interface: dummy0 [ 427.406802][T16810] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.424553][T16808] loop3: detected capacity change from 512 to 0 [ 427.439449][T16810] batman_adv: batadv0: Interface activated: dummy0 [ 427.450308][T16810] batadv0: mtu less than device minimum [ 427.454927][ C1] I/O error, dev loop3, sector 74 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 427.456682][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.465666][ C1] Buffer I/O error on dev loop3, logical block 37, lost sync page write [ 427.476751][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.495332][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.499419][T16814] netlink: 'syz.1.4053': attribute type 1 has an invalid length. [ 427.506530][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.513553][T16814] netlink: 'syz.1.4053': attribute type 2 has an invalid length. [ 427.524473][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.542880][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.553835][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.564993][T16797] EXT4-fs error (device loop3): ext4_free_data:978: inode #18: block 37: comm syz.3.4051: IO error syncing itable block [ 427.565012][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.565156][T16797] ================================================================== [ 427.565189][T16797] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 427.565224][T16797] [ 427.565234][T16797] write to 0xffffffff88ebe755 of 68 bytes by task 16810 on cpu 0: [ 427.565253][T16797] vsnprintf+0x2ce/0x860 [ 427.565280][T16797] vscnprintf+0x41/0x90 [ 427.565303][T16797] printk_sprint+0x30/0x2d0 [ 427.565338][T16797] vprintk_store+0x599/0x860 [ 427.565373][T16797] vprintk_emit+0x15a/0x610 [ 427.565402][T16797] vprintk_default+0x26/0x30 [ 427.565441][T16797] vprintk+0x1d/0x30 [ 427.565465][T16797] _printk+0x79/0xa0 [ 427.565480][T16797] batadv_tt_local_resize_to_mtu+0x17c/0x1c0 [ 427.565506][T16797] batadv_hard_if_event+0x1cd/0xe00 [ 427.565536][T16797] raw_notifier_call_chain+0x6f/0x1b0 [ 427.565592][T16797] call_netdevice_notifiers_mtu+0xb6/0x110 [ 427.565617][T16797] netif_set_mtu_ext+0x391/0x480 [ 427.565639][T16797] netif_set_mtu+0x4a/0xf0 [ 427.565669][T16797] dev_set_mtu+0xc1/0x170 [ 427.565690][T16810] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.565695][T16797] dev_ifsioc+0x474/0xaa0 [ 427.565740][T16797] dev_ioctl+0x70a/0x960 [ 427.565769][T16797] sock_do_ioctl+0x197/0x220 [ 427.565790][T16797] sock_ioctl+0x41b/0x610 [ 427.565830][T16797] __se_sys_ioctl+0xce/0x140 [ 427.565864][T16797] __x64_sys_ioctl+0x43/0x50 [ 427.565899][T16797] x64_sys_call+0x14b0/0x3000 [ 427.565924][T16797] do_syscall_64+0xd8/0x2a0 [ 427.565954][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.565981][T16797] [ 427.565990][T16797] read to 0xffffffff88ebe778 of 8 bytes by task 16797 on cpu 1: [ 427.566012][T16797] data_push_tail+0x100/0x470 [ 427.566048][T16797] data_alloc+0x11b/0x390 [ 427.566082][T16797] prb_reserve+0x964/0xb60 [ 427.566115][T16797] vprintk_store+0x56d/0x860 [ 427.566150][T16797] vprintk_emit+0x15a/0x610 [ 427.566189][T16797] vprintk_default+0x26/0x30 [ 427.566219][T16797] vprintk+0x1d/0x30 [ 427.566240][T16797] _printk+0x79/0xa0 [ 427.566255][T16797] __ext4_error_inode+0x30f/0x3f0 [ 427.566277][T16797] __ext4_handle_dirty_metadata+0x26c/0x470 [ 427.566310][T16797] ext4_free_data+0x251/0x2a0 [ 427.566349][T16797] ext4_free_branches+0x62/0x410 [ 427.566370][T16797] ext4_ind_truncate+0x503/0x830 [ 427.566392][T16797] ext4_truncate+0x6de/0xae0 [ 427.566423][T16797] ext4_write_end+0x549/0x730 [ 427.566448][T16797] generic_perform_write+0x312/0x490 [ 427.566475][T16797] ext4_buffered_write_iter+0x1ee/0x3c0 [ 427.566494][T16797] ext4_file_write_iter+0x387/0xf60 [ 427.566530][T16797] vfs_write+0x52a/0x960 [ 427.566552][T16797] ksys_write+0xda/0x1a0 [ 427.566569][T16797] __x64_sys_write+0x40/0x50 [ 427.566586][T16797] x64_sys_call+0x2847/0x3000 [ 427.566617][T16797] do_syscall_64+0xd8/0x2a0 [ 427.566652][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.566676][T16797] [ 427.566683][T16797] value changed: 0x00000001000007e9 -> 0x77656e2074696620 [ 427.566697][T16797] [ 427.566702][T16797] Reported by Kernel Concurrency Sanitizer on: [ 427.566724][T16797] CPU: 1 UID: 0 PID: 16797 Comm: syz.3.4051 Not tainted syzkaller #0 PREEMPT(voluntary) [ 427.566749][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.566763][T16797] ================================================================== [ 427.575989][ T29] audit: type=1400 audit(1765659410.212:52781): avc: denied { rename } for pid=16796 comm="syz.3.4051" name="file2" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 427.589838][T16797] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 427.940662][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 427.947483][T16797] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.4051: Error while async write back metadata [ 427.960579][T16797] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 427.968876][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 427.976909][T16797] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.4051: Error while async write back metadata [ 427.990171][T16797] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 427.998518][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 428.005457][T16797] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.4051: Error while async write back metadata [ 428.018287][T16797] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 428.026699][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 428.033591][T16797] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.4051: Error while async write back metadata [ 428.046406][T16797] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 428.054701][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 428.061667][T16797] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.4051: Error while async write back metadata [ 428.074289][T16797] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 428.082556][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 428.089420][T16797] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.4051: Error while async write back metadata [ 428.102056][T16797] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 428.110353][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 428.117200][T16797] Buffer I/O error on dev loop3, logical block 37, lost sync page write [ 428.125772][T16797] EXT4-fs error (device loop3): ext4_splice_branch:472: inode #18: block 37: comm syz.3.4051: IO error syncing itable block [ 428.138701][T16797] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 428.147117][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 428.153887][T16797] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.4051: Error while async write back metadata [ 428.166528][T16797] EXT4-fs (loop3): I/O error while writing superblock [ 428.173305][T16797] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.4051: Error while async write back metadata [ 428.186298][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 428.197536][T16797] Buffer I/O error on device loop3, logical block 41 [ 428.204242][T16797] Buffer I/O error on device loop3, logical block 42 [ 428.210948][T16797] Buffer I/O error on device loop3, logical block 43 [ 428.217644][T16797] Buffer I/O error on device loop3, logical block 44 [ 428.224444][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 428.235671][T16797] Buffer I/O error on device loop3, logical block 49 [ 428.242371][T16797] Buffer I/O error on device loop3, logical block 50 [ 428.249047][T16797] Buffer I/O error on device loop3, logical block 51 [ 428.255781][T16797] Buffer I/O error on device loop3, logical block 52 [ 428.262619][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 428.273793][T16797] Buffer I/O error on device loop3, logical block 57 [ 428.280480][T16797] Buffer I/O error on device loop3, logical block 58 [ 428.287378][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 428.298594][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 428.309872][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 428.321065][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 428.332281][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 428.343542][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 428.354888][T16797] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 428.388309][ T1004] smc: removing ib device syz1 [ 428.691171][ T37] bridge_slave_1: left allmulticast mode [ 428.696927][ T37] bridge_slave_1: left promiscuous mode [ 428.702667][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.711790][ T37] bridge_slave_0: left allmulticast mode [ 428.717508][ T37] bridge_slave_0: left promiscuous mode [ 428.723203][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.807582][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.817127][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.826234][ T37] bond0 (unregistering): Released all slaves [ 428.869948][ T37] hsr_slave_0: left promiscuous mode [ 428.876033][ T37] hsr_slave_1: left promiscuous mode [ 428.881885][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.914768][ T37] team0 (unregistering): Port device team_slave_1 removed [ 428.924772][ T37] team0 (unregistering): Port device team_slave_0 removed