last executing test programs: 3m35.407619393s ago: executing program 32 (id=524): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) write(r0, 0x0, 0x0) 3m14.19514902s ago: executing program 33 (id=617): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m50.854501328s ago: executing program 34 (id=2487): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ipv6_route\x00') exit(0xffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) fchdir(r0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 1m32.107229751s ago: executing program 5 (id=2778): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1m31.42621106s ago: executing program 5 (id=2787): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x3, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r1, 0x4) sendfile(r0, r1, 0x0, 0x10) 1m31.42608722s ago: executing program 35 (id=2787): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x3, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r1, 0x4) sendfile(r0, r1, 0x0, 0x10) 1m27.227999735s ago: executing program 7 (id=2851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0x80000000, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x7ffe}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m27.037328606s ago: executing program 7 (id=2845): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x210, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1m26.700116246s ago: executing program 7 (id=2857): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80}) r1 = syz_io_uring_setup(0x18b0, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000340)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 1m26.62484432s ago: executing program 7 (id=2858): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 1m26.548573275s ago: executing program 7 (id=2860): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0xdc) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) 1m26.272045441s ago: executing program 7 (id=2863): r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x3c, 0x9, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mq_timedreceive(r0, &(0x7f0000000280)=""/196, 0xc4, 0x27, 0x0) mq_timedreceive(r0, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) 1m26.197061355s ago: executing program 36 (id=2863): r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x3c, 0x9, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mq_timedreceive(r0, &(0x7f0000000280)=""/196, 0xc4, 0x27, 0x0) mq_timedreceive(r0, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) 39.12506826s ago: executing program 8 (id=3644): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x49cc, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x0, r2}, 0x10) 39.086561762s ago: executing program 8 (id=3645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 38.95209064s ago: executing program 8 (id=3648): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38.859823985s ago: executing program 8 (id=3650): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_remount}, {@noload}, {@debug}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 38.608552371s ago: executing program 8 (id=3654): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000009, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc}, 0x94) 38.460007859s ago: executing program 8 (id=3659): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) 38.43315705s ago: executing program 37 (id=3659): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) 26.669324446s ago: executing program 6 (id=3907): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090) openat$rtc(0xffffffffffffff9c, 0x0, 0x4082, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000280), 0x8) 26.640608328s ago: executing program 6 (id=3908): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000001040)=0x8, 0x4) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) 26.570142902s ago: executing program 6 (id=3911): r0 = syz_io_uring_setup(0x62c, &(0x7f0000000180)={0x0, 0xffffdfbb, 0x10100, 0x0, 0x3d1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 26.504232176s ago: executing program 6 (id=3913): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@grpjquota}, {@debug}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f00000005c0)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 26.289372478s ago: executing program 6 (id=3918): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 25.492315055s ago: executing program 6 (id=3937): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x6d}, {&(0x7f00000006c0)=""/254, 0x6d}], 0x2}, 0xffffffff}], 0x1, 0x10000, 0x0) 25.483290505s ago: executing program 38 (id=3937): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x6d}, {&(0x7f00000006c0)=""/254, 0x6d}], 0x2}, 0xffffffff}], 0x1, 0x10000, 0x0) 11.107607263s ago: executing program 2 (id=4093): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.850336168s ago: executing program 2 (id=4096): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x9}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, 0x0) 10.654025449s ago: executing program 2 (id=4099): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 10.531745576s ago: executing program 2 (id=4101): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') 10.090135862s ago: executing program 2 (id=4106): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 9.799519589s ago: executing program 2 (id=4113): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 9.667836337s ago: executing program 39 (id=4113): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 6.107121805s ago: executing program 1 (id=4150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @empty, @void, {@mpls_uc}}, 0x0) 6.02294748s ago: executing program 1 (id=4142): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.826053691s ago: executing program 1 (id=4147): syz_emit_ethernet(0xf8, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450000ea006400000011907800000000e000000100044e2200d6"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.761358055s ago: executing program 1 (id=4155): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') 5.49558807s ago: executing program 1 (id=4159): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r1, 0x0, 0x9, 0x2000403) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 5.142807751s ago: executing program 1 (id=4162): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@delalloc}, {@noload}, {@mb_optimize_scan}, {@nodiscard}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) fcntl$getownex(r1, 0x10, 0x0) 5.130606981s ago: executing program 40 (id=4162): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@delalloc}, {@noload}, {@mb_optimize_scan}, {@nodiscard}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) fcntl$getownex(r1, 0x10, 0x0) 1.88613517s ago: executing program 4 (id=4203): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x1d0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.798321146s ago: executing program 4 (id=4205): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.695343092s ago: executing program 4 (id=4207): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) 1.618337496s ago: executing program 9 (id=4209): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r1, 0x409, 0xb) 1.595139908s ago: executing program 4 (id=4210): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10020) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.444836547s ago: executing program 0 (id=4211): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 1.369503481s ago: executing program 0 (id=4212): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x26000, 0x0, 0x1e, 0x0, 0x0, 0x0) 930.534496ms ago: executing program 0 (id=4215): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x600000, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 929.923206ms ago: executing program 9 (id=4224): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 775.061045ms ago: executing program 4 (id=4218): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 606.251476ms ago: executing program 4 (id=4220): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 478.155513ms ago: executing program 3 (id=4221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 478.040303ms ago: executing program 5 (id=4163): open(&(0x7f0000000080)='./file0\x00', 0x1e587f, 0xed) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 382.354508ms ago: executing program 3 (id=4222): r0 = socket$inet6(0xa, 0x80001, 0x0) fchdir(r0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000823b3b670200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000000000050000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0x0, {{0xa, 0x4e20, 0x1, @mcast1, 0x5}}, 0x1}, 0x90) 375.338869ms ago: executing program 5 (id=4223): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 358.25285ms ago: executing program 9 (id=4225): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 327.275232ms ago: executing program 3 (id=4226): r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = inotify_init() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10040, 0x0) dup3(r3, r1, 0x80000) r4 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 288.975954ms ago: executing program 5 (id=4227): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="08f54333ad27da608a27860c1b0a6e88cce5f070eddd0c66", @ANYBLOB="7ab032dd4b5508b435bba00997841e6b98691bcb2c40feab214c74aab3505d70905165246038bcfdba35d6efc2780c5efda0127557a743e93abfdac87269e1961def09"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400), &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 268.595805ms ago: executing program 9 (id=4228): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) futex(0x0, 0x80, 0x2, &(0x7f0000001680)={0x0, 0x989680}, 0x0, 0x1) 257.362336ms ago: executing program 3 (id=4229): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 240.699266ms ago: executing program 0 (id=4230): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x8}, 0x1c) setuid(0xee00) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x4, @empty, 0x82}, 0x1c) 189.590799ms ago: executing program 5 (id=4231): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000000000f609dadac678dd84281e26268a0000000a0000070900010073797a31000000000900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 184.8422ms ago: executing program 0 (id=4232): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x104}], 0x1, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000480), 0x1, 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 170.60745ms ago: executing program 3 (id=4233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 167.694251ms ago: executing program 9 (id=4234): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x400c84, &(0x7f0000000140)={[{}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@auto_da_alloc}]}, 0x41, 0x7c5, &(0x7f0000000dc0)="$eJzs3ctrXNcZAPDvjkYPy26lQqGPlaDQCoylypXtFrpQ6aIUajC069qDNBaORhqhGRlLCGITAtkEkpBFINl4k00ezi6rQB7b5L/IysZJZBOHQMKEOw9pZM3II1nSONLvB1dzzn3onG/OveeemXu5E8CxNZL+yUT8LiJeSSKG6vOTiOitprIRU7X1ptLs+tp0EpXKf79Oqus8XF+bjqZtUifrmd9GxKcvRpzObC+3tNITEYX8Ui2bZhbHSyurZ67N52bzs/mF8xOTk2cvnLtwfv9i/faL1VP3Xv3Xn96f+v6F39x5+bMkpuJUfVlzHPtlJEbq70lv7b1r8s/9LqzLkm5XgD3J1A++bKR9wFD0VFMAwFH2fERUAIBjJnH+B4BjpvE9wMP1tenG1N1vJA7X/X9ExEAt/kf1qbYkW79mN1C9Djr4MNlyZSSJiOF9KH8kIt768P/vplMc0HVIgFZu3oqIK8Mj2/v/ZNs9C7v159pL01lmU1/9deSx+Z32f65Sw9P7OB3//LXV+C+zMf6JFuOf/hbH7l488fg/sQ+F7CAd//09Ih5tG/9t3LQ23FPP/aI65utNrl4r5NO+7ZcRMRq9/Wl+YocyRh/8+KDdsubx3zevPfdOWn76urlG5m62f+s2M7ly7mlibnb/VsTvs63iTzbaP2kz/r3UYRn//ttLb7ZblsafxtuYtsTf21jr4Hr7yu2IP7Zs/8072tLUeHl++/2JSZy7cH68ujuMN3aKFj748o3BduU3t386peU3PgschrT9B3eOfzip3q+5OpcrFPJLpdqxvxuf3x76pN2yJ8efuZu99faWbdL9vy/5XzXdGEfcyJXLSxMRfcl/ts8/u7ltI99YP41/9A+tj/+d9v9017zSYfzZe1+9t2P8J7vb/jO7av9WibSTbrNoLle482iup135HbV//2Q1NVqf00n/166mjyee5r0DAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJUJJmxjXQmMzZW+w3vX8dgplAslU9fLS4vzET1t7KHozfTeNTlUNPzUCfqz8Nv5M8+lv9LRPwqIl7vP5E0nqM40+XYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDhZJvf/4+42e2qAQAHaaD17ErlsCsCAByaNud/AOAI29X5v+/g6gEAHB6f/wHg+On8/F+puCkAAI6GvX7+T7L7XBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOqksXL6ZT5bv1tek0P3N9ZXmueP3MTL40Nza/PD02XVxaHJstFmcL+bHp4vyT/l+hWFycjIXlG+PlfKk8XlpZvTxfXF4oX742n5vNX873HkpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA7pZXVuVyhkF+S2EOi8mxUo/uJnvrudNBlJT9UKocS10eLtYA6WTl5JppgnxIDjZC72SsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Hz8FAAA//+I9yIn") write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x64842, 0x389b0d52417bb212) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$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") 94.755225ms ago: executing program 0 (id=4235): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000140)=[{r1, 0x601}, {r1, 0x2304}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21.066999ms ago: executing program 3 (id=4236): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2b, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque="e9"}}}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002bc0), 0x17, 0x10102, 0x0) 0s ago: executing program 9 (id=4237): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): .990:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 210.056414][ T28] audit: type=1326 audit(2000000085.000:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.9.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 210.371569][T13010] syzkaller0: entered promiscuous mode [ 210.377187][T13010] syzkaller0: entered allmulticast mode [ 210.543732][T13025] ipip0: entered promiscuous mode [ 210.605451][T13030] syz_tun: entered allmulticast mode [ 210.615913][T13029] syz_tun: left allmulticast mode [ 210.954576][T13069] loop4: detected capacity change from 0 to 512 [ 210.977203][T13069] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 210.994059][T13069] EXT4-fs (loop4): 1 truncate cleaned up [ 211.000570][T13069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.015631][T13056] loop8: detected capacity change from 0 to 1024 [ 211.062221][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.068200][T13056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.097748][T13056] EXT4-fs (loop8): shut down requested (0) [ 211.143867][T11936] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.139871][T13120] xt_hashlimit: size too large, truncated to 1048576 [ 212.186992][T13124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3117'. [ 212.859698][T13169] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 213.129596][T13185] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3136'. [ 213.331312][T13204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3143'. [ 213.353092][T13204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3143'. [ 215.048231][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 215.048252][ T28] audit: type=1400 audit(2000000090.190:1966): avc: denied { read } for pid=13252 comm="syz.4.3156" path="socket:[43517]" dev="sockfs" ino=43517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 215.128682][T13258] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3155'. [ 215.428695][ T28] audit: type=1400 audit(2000000090.520:1967): avc: denied { read } for pid=13263 comm="syz.8.3160" path="socket:[42955]" dev="sockfs" ino=42955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.475240][T13268] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3156'. [ 216.158691][T13298] bond0: (slave bond_slave_1): Releasing backup interface [ 216.282548][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 216.294832][T13308] ip6gre1: entered promiscuous mode [ 216.327020][T13308] ip6gre1: entered allmulticast mode [ 216.345161][T13311] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.386987][T13310] syzkaller0: refused to change device tx_queue_len [ 216.420281][ T28] audit: type=1400 audit(2000000091.570:1968): avc: denied { accept } for pid=13314 comm="syz.6.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.519807][T13323] loop4: detected capacity change from 0 to 128 [ 216.543640][T13323] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.568459][ T7158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.576144][ T7158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.584232][T13323] ext4 filesystem being mounted at /671/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.598373][ T3380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.669592][ T28] audit: type=1400 audit(2000000091.820:1969): avc: denied { setattr } for pid=13320 comm="syz.4.3184" path="/671/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 216.711283][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.773031][T13337] loop4: detected capacity change from 0 to 128 [ 216.792833][T13337] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.864423][ T28] audit: type=1400 audit(2000000092.000:1970): avc: denied { bind } for pid=13343 comm="syz.8.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.919866][ T1030] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.948953][ T28] audit: type=1400 audit(2000000092.040:1971): avc: denied { setopt } for pid=13345 comm="syz.9.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.992199][ T28] audit: type=1400 audit(2000000092.120:1972): avc: denied { remount } for pid=13336 comm="syz.4.3187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 217.142887][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3199'. [ 217.160697][T13360] netlink: 'syz.8.3199': attribute type 5 has an invalid length. [ 217.176942][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3199'. [ 217.201197][T13360] geneve2: entered promiscuous mode [ 217.213978][T13353] loop9: detected capacity change from 0 to 1024 [ 217.233153][T13360] geneve2: entered allmulticast mode [ 217.247521][ T7166] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 38403 - 0 [ 217.256500][ T7166] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 38403 - 0 [ 217.296634][ T7166] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 38403 - 0 [ 217.329552][ T28] audit: type=1400 audit(2000000092.470:1973): avc: denied { shutdown } for pid=13362 comm="syz.6.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.350013][ T1030] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.574164][ T7166] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 38403 - 0 [ 217.633728][T13353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.762977][T13353] EXT4-fs (loop9): shut down requested (0) [ 217.829313][T13387] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3209'. [ 217.844625][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3209'. [ 217.850992][T12240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.944570][T13395] loop6: detected capacity change from 0 to 128 [ 217.961340][T13395] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.983359][T13395] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.442726][T13425] SELinux: failed to load policy [ 218.510412][T13432] loop8: detected capacity change from 0 to 128 [ 218.517340][T13432] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.540506][T13432] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.740036][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3234'. [ 219.014971][T13470] loop4: detected capacity change from 0 to 1024 [ 219.023283][T13470] EXT4-fs: Ignoring removed nobh option [ 219.042213][T13470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 219.064634][T13470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.079014][T13476] loop9: detected capacity change from 0 to 164 [ 219.140117][T13485] loop8: detected capacity change from 0 to 128 [ 219.143738][T13476] iso9660: Unknown parameter '00000000000000000004ÅûÁ|†­ëšw(;šÃ£Þë—wfXç"„ saZ„@D§Ç¶üVëºÿí¼' [ 219.161719][T13470] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 219.177426][T13485] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.193550][T13485] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.266555][T11936] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.277322][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.334537][T13496] loop4: detected capacity change from 0 to 128 [ 219.362961][T13496] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.432734][T13496] ext4 filesystem being mounted at /681/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.482461][T13496] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.543528][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.015648][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 220.031932][T13557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3265'. [ 220.344185][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.362544][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.551968][T13624] loop9: detected capacity change from 0 to 1024 [ 220.582323][T13624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 220.590553][T13624] System zones: 0-1, 3-36 [ 220.599386][T13624] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3276: bad orphan inode 134217728 [ 220.618371][T13624] loop9: lost filesystem error report for type 5 error -117 [ 220.621063][T13624] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.646109][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3278'. [ 220.682471][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3278'. [ 220.688771][ T7170] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.708187][ T7170] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.717487][ T7170] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.728067][ T7170] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.858204][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.874621][T13645] netlink: 'syz.8.3292': attribute type 1 has an invalid length. [ 220.894252][T13645] gretap1: entered allmulticast mode [ 220.902090][T13645] bond1: (slave gretap1): making interface the new active one [ 220.910264][T13645] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 221.101431][T12240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.155097][T13663] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.3289'. [ 221.819533][T13688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.839283][T13688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.888226][T13690] netlink: 'syz.3.3301': attribute type 11 has an invalid length. [ 221.894126][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3302'. [ 221.906052][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3301'. [ 221.907299][T13692] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.925474][T13692] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 38403 - 0 [ 221.943754][T13690] netlink: 'syz.3.3301': attribute type 11 has an invalid length. [ 221.951949][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3301'. [ 221.970007][T13692] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.980537][T13692] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 38403 - 0 [ 222.039417][T13692] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.050051][T13692] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 38403 - 0 [ 222.099711][T13692] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.110593][T13692] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 38403 - 0 [ 222.184196][ T7170] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.198187][ T7170] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 38403 - 0 [ 222.213276][ T7170] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.228696][ T7170] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 38403 - 0 [ 222.237220][ T7170] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.245801][ T7170] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 38403 - 0 [ 222.254644][ T7170] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.263191][ T7170] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 38403 - 0 [ 222.290791][T13707] syz_tun: entered allmulticast mode [ 222.299818][T13706] syz_tun: left allmulticast mode [ 222.338502][T13709] set_capacity_and_notify: 1 callbacks suppressed [ 222.338530][T13709] loop8: detected capacity change from 0 to 764 [ 222.366588][T13711] netlink: 'syz.3.3311': attribute type 2 has an invalid length. [ 222.384196][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 222.405448][T13711] netlink: 'syz.3.3311': attribute type 2 has an invalid length. [ 222.414058][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 222.486571][T13720] loop4: detected capacity change from 0 to 128 [ 222.698091][T13734] loop9: detected capacity change from 0 to 512 [ 222.744520][T13723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.768400][T13723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.825174][ T28] audit: type=1400 audit(2000000097.970:1974): avc: denied { map } for pid=13741 comm="syz.9.3325" path="socket:[45370]" dev="sockfs" ino=45370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 222.969861][ T28] audit: type=1400 audit(2000000098.120:1975): avc: denied { ioctl } for pid=13746 comm="syz.9.3327" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.001283][T13749] loop6: detected capacity change from 0 to 512 [ 223.008233][T13749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.043424][T13749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.098213][T13749] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.128595][ T9307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.174885][T13757] loop9: detected capacity change from 0 to 1024 [ 223.184876][T13760] loop6: detected capacity change from 0 to 128 [ 223.195130][T13757] EXT4-fs: Ignoring removed nobh option [ 223.241035][T13757] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 223.264333][T13760] syz.6.3330: attempt to access beyond end of device [ 223.264333][T13760] loop6: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 223.285647][T13757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.300591][T13760] syz.6.3330: attempt to access beyond end of device [ 223.300591][T13760] loop6: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 223.350034][T13757] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 223.372926][T13760] syz.6.3330: attempt to access beyond end of device [ 223.372926][T13760] loop6: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 223.390434][T13760] syz.6.3330: attempt to access beyond end of device [ 223.390434][T13760] loop6: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 223.418975][T13760] syz.6.3330: attempt to access beyond end of device [ 223.418975][T13760] loop6: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 223.433882][T12240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.482209][ T1680] kworker/u8:6: attempt to access beyond end of device [ 223.482209][ T1680] loop6: rw=1, sector=154, nr_sectors = 2 limit=128 [ 223.578848][ T3380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.678270][ T3380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.325108][T13890] loop4: detected capacity change from 0 to 164 [ 224.341089][T13890] iso9660: Unknown parameter '00000000000000000004ÅûÁ|†­ëšw(;šÃ£Þë—wfXç"„ saZ„@D§Ç¶üVëºÿí¼' [ 224.875495][T13912] loop4: detected capacity change from 0 to 2048 [ 224.948773][T13912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.974537][T13912] EXT4-fs: inline encryption not supported [ 224.990239][T13912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.052163][T13924] loop9: detected capacity change from 0 to 128 [ 225.067167][T13924] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.116687][T13924] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.279231][T13924] EXT4-fs (loop9): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.327854][T12240] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.396244][T13928] syz_tun: entered allmulticast mode [ 225.411648][T13927] syz_tun: left allmulticast mode [ 225.420598][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.483401][T13932] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3362'. [ 225.522720][T13932] geneve2: entered promiscuous mode [ 225.528573][ T7170] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.537332][ T7170] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.546633][ T7170] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.555958][ T7170] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.602670][ T28] audit: type=1400 audit(2000000100.750:1976): avc: denied { read } for pid=13934 comm="syz.9.3363" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 225.660563][ T28] audit: type=1400 audit(2000000100.770:1977): avc: denied { open } for pid=13934 comm="syz.9.3363" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 225.867231][ T28] audit: type=1400 audit(2000000100.990:1978): avc: denied { setopt } for pid=13947 comm="syz.9.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.635804][ T28] audit: type=1326 audit(2000000101.780:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13979 comm="syz.8.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f129bf79 code=0x7ffc0000 [ 226.680296][T13980] loop8: detected capacity change from 0 to 128 [ 226.697443][T13980] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 226.733018][T13980] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.752859][ T28] audit: type=1326 audit(2000000101.810:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13979 comm="syz.8.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6f129bf79 code=0x7ffc0000 [ 226.808460][T13980] ext2 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.859466][ T28] audit: type=1326 audit(2000000101.810:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13979 comm="syz.8.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6f129bce2 code=0x7ffc0000 [ 226.911904][T11936] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.961923][ T28] audit: type=1326 audit(2000000101.810:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13979 comm="syz.8.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa6f125c84e code=0x7ffc0000 [ 227.038128][ T28] audit: type=1326 audit(2000000101.810:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13979 comm="syz.8.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa6f129bda7 code=0x7ffc0000 [ 227.470568][T14022] tipc: Started in network mode [ 227.475564][T14022] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 227.518294][T14022] tipc: Enabled bearer , priority 18 [ 228.040052][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 228.040073][ T28] audit: type=1400 audit(2000000103.180:2002): avc: denied { watch } for pid=14070 comm="syz.3.3397" path="/" dev="ramfs" ino=45682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 228.339098][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3398'. [ 228.356521][T14106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.380013][T14106] bond4: option ad_select: unable to set because the bond device is up [ 228.618191][ T1030] tipc: Node number set to 10463914 [ 229.011403][T14118] loop6: detected capacity change from 0 to 128 [ 229.094177][T14123] sctp: [Deprecated]: syz.3.3407 (pid 14123) Use of int in max_burst socket option. [ 229.094177][T14123] Use struct sctp_assoc_value instead [ 229.204421][T14129] random: crng reseeded on system resumption [ 229.208555][ T28] audit: type=1400 audit(2000000104.350:2003): avc: denied { write } for pid=14127 comm="syz.4.3409" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 229.258334][ T28] audit: type=1400 audit(2000000104.350:2004): avc: denied { open } for pid=14127 comm="syz.4.3409" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 229.970437][T14160] loop4: detected capacity change from 0 to 1024 [ 230.077330][T14160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.156622][T14160] EXT4-fs (loop4): shut down requested (0) [ 230.218261][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.072990][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.121314][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 231.155926][ T7174] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.165056][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 231.178395][ T7174] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.199831][ T7174] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.227534][ T7174] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.291766][T14188] geneve4: entered promiscuous mode [ 231.309300][ T7150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.333739][ T7150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.365779][ T7150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.392846][ T7150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.797029][ T28] audit: type=1326 audit(2000000106.940:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.8.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f129bf79 code=0x7ffc0000 [ 231.869754][ T28] audit: type=1326 audit(2000000106.940:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.8.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f129bf79 code=0x7ffc0000 [ 231.903383][T14206] loop8: detected capacity change from 0 to 4096 [ 231.935265][ T28] audit: type=1326 audit(2000000106.940:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.8.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f129bf79 code=0x7ffc0000 [ 231.993950][ T28] audit: type=1326 audit(2000000106.940:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.8.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f129bf79 code=0x7ffc0000 [ 232.043762][ T28] audit: type=1400 audit(2000000106.940:2009): avc: denied { ioctl } for pid=14204 comm="syz.4.3438" path="socket:[46381]" dev="sockfs" ino=46381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.059267][T14206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.088187][ T28] audit: type=1326 audit(2000000106.970:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.8.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6f129bf79 code=0x7ffc0000 [ 232.128316][ T28] audit: type=1326 audit(2000000106.970:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.8.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6f129bce2 code=0x7ffc0000 [ 232.287969][T14212] netlink: 'syz.4.3441': attribute type 4 has an invalid length. [ 232.309462][T14212] netlink: 'syz.4.3441': attribute type 4 has an invalid length. [ 232.372391][T14214] io-wq is not configured for unbound workers [ 232.406568][T11936] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.175374][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3451'. [ 233.221953][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3452'. [ 233.237003][T14245] syz.6.3452: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 233.261695][T14245] CPU: 0 UID: 0 PID: 14245 Comm: syz.6.3452 Tainted: G W syzkaller #0 PREEMPT(full) [ 233.261748][T14245] Tainted: [W]=WARN [ 233.261820][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.261839][T14245] Call Trace: [ 233.261847][T14245] [ 233.261858][T14245] __dump_stack+0x1d/0x30 [ 233.261894][T14245] dump_stack_lvl+0x95/0xd0 [ 233.261925][T14245] dump_stack+0x15/0x1b [ 233.261986][T14245] warn_alloc+0x145/0x1c0 [ 233.262068][T14245] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 233.262119][T14245] ? __futex_wait+0x1fd/0x260 [ 233.262173][T14245] ? __pfx_futex_wake_mark+0x10/0x10 [ 233.262234][T14245] ? __rcu_read_unlock+0x4e/0x70 [ 233.262275][T14245] ? avc_has_perm_noaudit+0xab/0x130 [ 233.262343][T14245] ? should_fail_ex+0x30/0x280 [ 233.262377][T14245] ? xskq_create+0x36/0xe0 [ 233.262405][T14245] vmalloc_user_noprof+0x7d/0xb0 [ 233.262521][T14245] ? xskq_create+0x80/0xe0 [ 233.262558][T14245] xskq_create+0x80/0xe0 [ 233.262594][T14245] xsk_init_queue+0x91/0xe0 [ 233.262774][T14245] xsk_setsockopt+0x3f5/0x640 [ 233.262807][T14245] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.262842][T14245] __sys_setsockopt+0x184/0x200 [ 233.262929][T14245] __x64_sys_setsockopt+0x64/0x80 [ 233.262961][T14245] x64_sys_call+0x2327/0x3020 [ 233.262998][T14245] do_syscall_64+0x12c/0x370 [ 233.263111][T14245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.263142][T14245] RIP: 0033:0x7f9d349bbf79 [ 233.263168][T14245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.263269][T14245] RSP: 002b:00007f9d3340f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.263299][T14245] RAX: ffffffffffffffda RBX: 00007f9d34c35fa0 RCX: 00007f9d349bbf79 [ 233.263358][T14245] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 233.263376][T14245] RBP: 00007f9d34a527e0 R08: 0000000000000004 R09: 0000000000000000 [ 233.263395][T14245] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.263414][T14245] R13: 00007f9d34c36038 R14: 00007f9d34c35fa0 R15: 00007ffd59927988 [ 233.263443][T14245] [ 233.263627][T14245] Mem-Info: [ 233.488238][T14245] active_anon:78925 inactive_anon:26 isolated_anon:0 [ 233.488238][T14245] active_file:24599 inactive_file:5536 isolated_file:0 [ 233.488238][T14245] unevictable:0 dirty:232 writeback:0 [ 233.488238][T14245] slab_reclaimable:4163 slab_unreclaimable:104439 [ 233.488238][T14245] mapped:29325 shmem:68097 pagetables:3905 [ 233.488238][T14245] sec_pagetables:0 bounce:0 [ 233.488238][T14245] kernel_misc_reclaimable:0 [ 233.488238][T14245] free:1709439 free_pcp:10910 free_cma:0 [ 233.558262][T14245] Node 0 active_anon:316512kB inactive_anon:104kB active_file:98396kB inactive_file:22144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118012kB dirty:928kB writeback:0kB shmem:273316kB kernel_stack:5328kB pagetables:15388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.605599][T14245] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.639076][T14253] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3456'. [ 233.685097][T14245] lowmem_reserve[]: 0 2880 7858 7858 [ 233.693268][T14245] Node 0 DMA32 free:2945740kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949268kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 233.770772][T14245] lowmem_reserve[]: 0 0 4978 4978 [ 233.786557][T14245] Node 0 Normal free:3879592kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:327044kB inactive_anon:104kB active_file:98396kB inactive_file:22152kB unevictable:0kB writepending:936kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:26432kB local_pcp:10208kB free_cma:0kB [ 233.811590][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 233.811643][ T28] audit: type=1400 audit(2000000108.960:2033): avc: denied { ioctl } for pid=14258 comm="syz.4.3459" path="socket:[45927]" dev="sockfs" ino=45927 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 233.836282][T14245] lowmem_reserve[]: 0 0 0 0 [ 233.862955][T14245] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.876954][T14245] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 2*128kB (M) 4*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2945740kB [ 233.902811][T14245] Node 0 Normal: 837*4kB (UME) 657*8kB (UME) 226*16kB (UE) 254*32kB (UME) 128*64kB (UME) 101*128kB (UME) 79*256kB (UME) 121*512kB (UME) 50*1024kB (UME) 25*2048kB (UM) 892*4096kB (UM) = 3879676kB [ 233.928257][T14245] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 233.928438][ T28] audit: type=1400 audit(2000000109.050:2034): avc: denied { shutdown } for pid=14258 comm="syz.4.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 233.948250][T14245] 101071 total pagecache pages [ 233.964074][T14245] 11 pages in swap cache [ 234.008571][T14266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14266 comm=syz.4.3461 [ 234.021666][T14245] Free swap = 124696kB [ 234.030497][T14245] Total swap = 124996kB [ 234.036966][T14245] 2097051 pages RAM [ 234.043242][T14245] 0 pages HighMem/MovableOnly [ 234.061035][T14245] 81334 pages reserved [ 234.081259][ T28] audit: type=1326 audit(2000000109.120:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.8.3460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6f129bf79 code=0x0 [ 234.109004][T14266] netlink: 'syz.4.3461': attribute type 1 has an invalid length. [ 234.152946][T14266] bond3: (slave bridge3): making interface the new active one [ 234.208562][T14266] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 234.284167][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3465'. [ 234.360277][T14284] loop4: detected capacity change from 0 to 512 [ 234.375047][T14284] EXT4-fs: Ignoring removed oldalloc option [ 234.432633][T14284] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.3469: Parent and EA inode have the same ino 15 [ 234.448937][T14284] loop4: lost filesystem error report for type 5 error -117 [ 234.452231][T14284] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.3469: Parent and EA inode have the same ino 15 [ 234.520220][T14284] loop4: lost filesystem error report for type 5 error -117 [ 234.520484][T14284] EXT4-fs (loop4): 1 orphan inode deleted [ 234.539593][T14292] uprobe: syz.9.3471:14292 failed to unregister, leaking uprobe [ 234.565289][T14284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.598069][ T28] audit: type=1326 audit(2000000109.740:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.9.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 234.632316][T14284] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3469: deleted inode referenced: 15 [ 234.643354][ T28] audit: type=1326 audit(2000000109.740:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.9.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 234.693956][ T28] audit: type=1326 audit(2000000109.750:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.9.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 234.737142][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3469'. [ 234.756462][ T28] audit: type=1326 audit(2000000109.750:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.9.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 234.780963][ T28] audit: type=1326 audit(2000000109.750:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.9.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 234.805847][ T28] audit: type=1326 audit(2000000109.750:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.9.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 234.922043][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.926867][ T28] audit: type=1326 audit(2000000109.750:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.9.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 235.092702][T14332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14332 comm=syz.6.3486 [ 235.335060][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 235.360990][T14350] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 235.384728][T14335] loop9: detected capacity change from 0 to 32768 [ 235.428556][ T3289] loop9: p1 p3 < p5 p6 > [ 235.433040][ T3289] loop9: partition table partially beyond EOD, truncated [ 235.453493][T14335] loop9: p1 p3 < p5 p6 > [ 235.457967][T14335] loop9: partition table partially beyond EOD, truncated [ 235.458384][T14355] ipip0: entered promiscuous mode [ 235.603369][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3499'. [ 235.718286][ T6449] udevd[6449]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 235.730206][ T8905] udevd[8905]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 235.741616][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 235.753287][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 235.784750][ T6449] udevd[6449]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 235.796011][ T8905] udevd[8905]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 235.807283][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 235.819099][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 236.069312][T14391] netlink: 'syz.6.3508': attribute type 1 has an invalid length. [ 236.158212][T14391] netlink: 'syz.6.3508': attribute type 4 has an invalid length. [ 236.180675][T14391] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3508'. [ 236.714613][T14420] netlink: 'syz.4.3520': attribute type 11 has an invalid length. [ 236.732543][T14420] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3520'. [ 236.749735][T14420] netlink: 'syz.4.3520': attribute type 11 has an invalid length. [ 236.760752][T14420] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3520'. [ 236.770085][T14420] netlink: 'syz.4.3520': attribute type 11 has an invalid length. [ 236.792241][T14420] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3520'. [ 237.160047][T14457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3534'. [ 238.448666][T14541] VFS: Mount too revealing [ 238.498707][T14547] serio: Serial port ttyS3 [ 239.444174][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 239.444193][ T28] audit: type=1400 audit(2000000114.590:2050): avc: denied { transition } for pid=14584 comm="syz.9.3588" path="/119/file1" dev="tmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 239.514005][ T28] audit: type=1400 audit(2000000114.590:2051): avc: denied { entrypoint } for pid=14584 comm="syz.9.3588" path="/119/file1" dev="tmpfs" ino=643 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.558381][ T28] audit: type=1400 audit(2000000114.590:2052): avc: denied { share } for pid=14584 comm="syz.9.3588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 239.592526][ T28] audit: type=1400 audit(2000000114.590:2053): avc: denied { noatsecure } for pid=14584 comm="syz.9.3588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 240.026207][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3595'. [ 240.038207][T14605] netlink: 'syz.4.3595': attribute type 12 has an invalid length. [ 240.048581][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3595'. [ 240.068354][T14605] netlink: 'syz.4.3595': attribute type 12 has an invalid length. [ 240.151743][T14611] netlink: 'syz.8.3598': attribute type 5 has an invalid length. [ 240.568783][T14623] netlink: 'syz.8.3603': attribute type 29 has an invalid length. [ 240.577730][T14623] netlink: 'syz.8.3603': attribute type 29 has an invalid length. [ 240.609091][T14623] netlink: 500 bytes leftover after parsing attributes in process `syz.8.3603'. [ 240.627022][ T7168] Bluetooth: hci0: Frame reassembly failed (-84) [ 240.638320][ T28] audit: type=1400 audit(2000000115.790:2054): avc: denied { override_creds } for pid=14628 comm="syz.3.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.660650][T14623] unsupported nla_type 66 [ 240.702714][T14635] netlink: 'syz.8.3608': attribute type 1 has an invalid length. [ 240.732877][T14635] bond2: (slave ip6gretap1): making interface the new active one [ 240.754024][T14635] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.762030][T14635] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.769933][T14635] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 240.857860][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3611'. [ 242.171216][ T28] audit: type=1326 audit(2000000117.320:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14721 comm="syz.9.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 242.237776][ T28] audit: type=1326 audit(2000000117.320:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14721 comm="syz.9.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 242.297395][ T28] audit: type=1326 audit(2000000117.320:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14721 comm="syz.9.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 242.345667][ T28] audit: type=1326 audit(2000000117.340:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14721 comm="syz.9.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 242.397662][ T28] audit: type=1326 audit(2000000117.540:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14721 comm="syz.9.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 242.701017][ T3961] Bluetooth: hci0: command 0x1003 tx timeout [ 242.707301][ T3683] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 243.383095][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3648'. [ 243.467648][T14816] loop8: detected capacity change from 0 to 512 [ 243.481556][T14816] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 243.507277][T14816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 243.528015][T14816] System zones: 1-12 [ 243.560688][T14816] EXT4-fs (loop8): 1 truncate cleaned up [ 243.566940][T14816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.674855][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 243.688230][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3653'. [ 243.710492][T11936] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 243.728133][T11936] EXT4-fs (loop8): Remounting filesystem read-only [ 243.774597][T14827] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3655'. [ 243.830085][T11936] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.941144][T14839] loop4: detected capacity change from 0 to 512 [ 243.994936][T14839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.018961][T14839] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 244.029629][T14839] System zones: 1-2, 4-12, 8-8 [ 244.055095][T14839] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3662: iget: bad i_size value: 38620345925642 [ 244.107294][T14839] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 244.107555][T14839] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3662: couldn't read orphan inode 15 (err -117) [ 244.204165][T14839] loop4: lost filesystem error report for type 5 error -117 [ 244.204970][T14839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.267108][T14839] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3662: bg 0: block 5: invalid block bitmap [ 244.288513][T14839] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 244.331146][T14839] EXT4-fs (loop4): This should not happen!! Data will be lost [ 244.331146][T14839] [ 244.341379][T14839] EXT4-fs (loop4): Total free blocks count 0 [ 244.351497][T14839] EXT4-fs (loop4): Free/Dirty block details [ 244.357605][T14839] EXT4-fs (loop4): free_blocks=0 [ 244.364344][T14839] EXT4-fs (loop4): dirty_blocks=64 [ 244.390107][T14839] EXT4-fs (loop4): Block reservation details [ 244.396393][T14839] EXT4-fs (loop4): i_reserved_data_blocks=64 [ 244.431030][T14841] chnl_net:caif_netlink_parms(): no params data found [ 244.448679][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.519254][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 244.519272][ T28] audit: type=1400 audit(2000000119.670:2073): avc: denied { ioctl } for pid=14864 comm="syz.4.3667" path="socket:[48298]" dev="sockfs" ino=48298 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.605619][T14841] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.637085][T14841] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.644852][T14841] bridge_slave_0: entered allmulticast mode [ 244.646114][ T28] audit: type=1400 audit(2000000119.760:2074): avc: denied { sys_nice } for pid=14872 comm="syz.9.3669" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 244.652343][T14841] bridge_slave_0: entered promiscuous mode [ 244.704909][T14841] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.722406][T14841] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.742645][T14841] bridge_slave_1: entered allmulticast mode [ 244.766957][T14841] bridge_slave_1: entered promiscuous mode [ 244.827082][T14841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.848784][T14841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.884074][T14887] syzkaller1: entered promiscuous mode [ 244.890677][T14887] syzkaller1: entered allmulticast mode [ 244.904052][T14841] team0: Port device team_slave_0 added [ 244.932026][T14841] team0: Port device team_slave_1 added [ 244.958864][T14841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.965947][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.018125][T14841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.032962][T14841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.045466][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.091863][T14841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.130215][T14841] hsr_slave_0: entered promiscuous mode [ 245.136554][T14841] hsr_slave_1: entered promiscuous mode [ 245.142815][T14841] debugfs: 'hsr0' already exists in 'hsr' [ 245.148962][T14841] Cannot create hsr debugfs directory [ 245.162922][T14901] loop4: detected capacity change from 0 to 512 [ 245.169879][T14901] ext4: Unknown parameter 'dont_appraise' [ 245.316544][T14912] geneve3: entered promiscuous mode [ 245.345902][T14841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.419607][T14841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.462845][T14924] tipc: Failed to remove unknown binding: 66,1,1/0:2597501583/2597501585 [ 245.472159][T14924] tipc: Failed to remove unknown binding: 66,1,1/0:2597501583/2597501585 [ 245.495045][T14841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.569562][T14841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.596000][T14935] loop9: detected capacity change from 0 to 4096 [ 245.607905][T14935] EXT4-fs: inline encryption not supported [ 245.614726][T14935] EXT4-fs: test_dummy_encryption option not supported [ 245.709016][T14841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.730650][T14841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.748900][T14841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.766165][T14841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.791233][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'. [ 245.894163][T14841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.921571][T14960] lo: entered promiscuous mode [ 245.927265][T14960] lo: left promiscuous mode [ 245.937792][T14841] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.960303][ T2374] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.967517][ T2374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.992296][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.999943][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.077703][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 246.088388][T14969] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.149712][T14969] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.195024][T14841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.210263][T14969] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.244482][T14982] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3709'. [ 246.313490][T14969] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.367826][ T2374] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.399771][ T7143] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.415781][T14841] veth0_vlan: entered promiscuous mode [ 246.431824][ T7143] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.449912][ T7143] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.465069][T14841] veth1_vlan: entered promiscuous mode [ 246.472849][T14990] loop6: detected capacity change from 0 to 2048 [ 246.487311][T14841] veth0_macvtap: entered promiscuous mode [ 246.497180][T14990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.512221][T14990] EXT4-fs: inline encryption not supported [ 246.533651][T14841] veth1_macvtap: entered promiscuous mode [ 246.555403][T14841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.567640][T14841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.584683][T14990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.600433][ T7162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.611616][ T7162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.620837][ T7162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.649526][ T7162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.899214][ T9307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.342793][T15028] loop9: detected capacity change from 0 to 2048 [ 247.404738][T15028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.422624][T15028] EXT4-fs: inline encryption not supported [ 247.459312][T15028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.723183][T12240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.849817][ T28] audit: type=1326 audit(2000000123.000:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15058 comm="syz.2.3734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efcf565bf79 code=0x0 [ 247.977443][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3736'. [ 247.995043][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3736'. [ 248.138159][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.175636][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 249.197723][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 249.220008][ T28] audit: type=1326 audit(2000000124.370:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15117 comm="syz.9.3758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a661abf79 code=0x0 [ 250.158208][ T3380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.198138][T15175] loop6: detected capacity change from 0 to 512 [ 250.231056][T15175] journal_path: Non-blockdev passed as './bus' [ 250.237274][T15175] EXT4-fs: error: could not find journal device path [ 250.258511][T15177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.338504][T15177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.415357][T15196] random: crng reseeded on system resumption [ 250.475712][T15177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.577785][T15177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.775941][ T2374] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.803317][ T2374] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.845738][ T2374] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.865947][ T2374] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.028197][T12632] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.112879][ T28] audit: type=1326 audit(2000000127.260:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.163945][ T28] audit: type=1326 audit(2000000127.290:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.188800][ T28] audit: type=1326 audit(2000000127.290:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.212721][ T28] audit: type=1326 audit(2000000127.290:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.236993][ T28] audit: type=1326 audit(2000000127.290:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.308151][ T28] audit: type=1326 audit(2000000127.290:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.400789][T15279] netlink: 'syz.6.3822': attribute type 1 has an invalid length. [ 252.425797][ T28] audit: type=1326 audit(2000000127.290:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.469359][T15279] bond3: entered promiscuous mode [ 252.474709][T15279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.492707][ T28] audit: type=1326 audit(2000000127.290:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.517517][T15279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.524955][T15279] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 252.545327][T15279] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 252.567504][ T28] audit: type=1326 audit(2000000127.290:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.569502][T15279] bond3: (slave vcan1): making interface the new active one [ 252.598784][T15279] vcan1: entered promiscuous mode [ 252.606230][T15279] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 252.657776][ T28] audit: type=1326 audit(2000000127.290:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz.6.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d349bbf79 code=0x7ffc0000 [ 252.708689][T15289] loop2: detected capacity change from 0 to 1024 [ 252.766882][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3825'. [ 252.776520][T15289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.860524][T15298] loop6: detected capacity change from 0 to 512 [ 252.915844][T15298] EXT4-fs: Ignoring removed oldalloc option [ 252.939539][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.958921][T15298] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3827: Parent and EA inode have the same ino 15 [ 252.971362][T15298] loop6: lost filesystem error report for type 5 error -117 [ 252.990268][T15298] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3827: Parent and EA inode have the same ino 15 [ 253.015348][T15298] loop6: lost filesystem error report for type 5 error -117 [ 253.054891][T15298] EXT4-fs (loop6): 1 orphan inode deleted [ 253.084202][T15298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.100690][T15298] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.3827: deleted inode referenced: 15 [ 253.119085][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3827'. [ 253.233474][ T9307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.341598][T15335] loop2: detected capacity change from 0 to 128 [ 253.382442][T15335] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.458458][T15335] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.546171][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3847'. [ 253.555401][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3847'. [ 253.564556][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3847'. [ 253.575009][T14841] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.586522][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3847'. [ 253.666011][T12632] hid-generic 0080:0005:FFFFFFFE.0003: unknown main item tag 0x0 [ 253.678186][T12632] hid-generic 0080:0005:FFFFFFFE.0003: unknown main item tag 0x0 [ 253.716114][T12632] hid-generic 0080:0005:FFFFFFFE.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 253.754426][T15360] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3851'. [ 253.807469][T15358] fido_id[15358]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.907515][T15374] loop2: detected capacity change from 0 to 512 [ 254.069013][T15374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.129780][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3860'. [ 254.155025][T15384] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3863'. [ 254.208756][T14841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.514279][T15408] loop4: detected capacity change from 0 to 512 [ 254.530227][T15408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.569067][T15408] ext4 filesystem being mounted at /801/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.599453][T15408] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 254.687882][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.102195][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3887'. [ 255.425018][T15469] loop6: detected capacity change from 0 to 128 [ 255.443982][T15469] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.468523][T15469] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.516257][ T9307] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.841511][T15500] loop6: detected capacity change from 0 to 1024 [ 255.861439][T15500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.886508][T15500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.918553][T15500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 255.927299][T15500] System zones: 0-1, 3-36 [ 255.939787][T15500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.079513][T13413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.171829][T15517] loop2: detected capacity change from 0 to 8192 [ 256.233314][T14841] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 256.243354][T14841] FAT-fs (loop2): Filesystem has been set read-only [ 256.893282][ T7166] team0: Port device netdevsim1 removed [ 257.168737][ T7166] bridge_slave_1: left allmulticast mode [ 257.174443][ T7166] bridge_slave_1: left promiscuous mode [ 257.188262][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.215120][ T7166] bridge_slave_0: left allmulticast mode [ 257.238190][ T7166] bridge_slave_0: left promiscuous mode [ 257.259028][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.305425][ T7166] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 257.331984][ T7166] ip6gretap1 (unregistering): left promiscuous mode [ 257.358145][ T7166] ip6gretap1 (unregistering): left allmulticast mode [ 257.413823][ T7166] bond1 (unregistering): (slave gretap1): Releasing active interface [ 257.571592][ T7166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.608050][ T7166] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 257.647660][ T7166] bond0 (unregistering): Released all slaves [ 257.674761][ T7166] bond1 (unregistering): Released all slaves [ 257.701804][ T7166] bond2 (unregistering): Released all slaves [ 257.748502][ T7166] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 257.756473][ T7166] vcan1: left promiscuous mode [ 257.868988][ T7166] bond3 (unregistering): Released all slaves [ 257.983905][ T7166] tipc: Disabling bearer [ 258.021012][ T7166] tipc: Left network mode [ 258.250191][ T7166] hsr_slave_0: left promiscuous mode [ 258.262274][ T7166] hsr_slave_1: left promiscuous mode [ 258.272364][ T7166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.308631][ T7166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.337533][T15605] __nla_validate_parse: 3 callbacks suppressed [ 258.337579][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3944'. [ 258.459952][ T7166] team0 (unregistering): Port device team_slave_1 removed [ 258.477856][ T7166] team0 (unregistering): Port device team_slave_0 removed [ 258.705456][T15561] chnl_net:caif_netlink_parms(): no params data found [ 258.948248][T15561] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.976229][T15561] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.004144][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 259.004162][ T28] audit: type=1400 audit(2000000134.130:2117): avc: denied { write } for pid=15633 comm="syz.4.3950" path="socket:[52042]" dev="sockfs" ino=52042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.048329][T15561] bridge_slave_0: entered allmulticast mode [ 259.068477][T15561] bridge_slave_0: entered promiscuous mode [ 259.088059][T15561] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.114279][T15561] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.128418][T15561] bridge_slave_1: entered allmulticast mode [ 259.140314][T15561] bridge_slave_1: entered promiscuous mode [ 259.255887][T15561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.289871][T15561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.368990][T15561] team0: Port device team_slave_0 added [ 259.390943][T15561] team0: Port device team_slave_1 added [ 259.417901][T15561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.449244][T15561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.508124][T15561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.538949][T15561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.545959][T15561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.634892][T15561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.719033][T15561] hsr_slave_0: entered promiscuous mode [ 259.745789][T15561] hsr_slave_1: entered promiscuous mode [ 259.758767][T15561] debugfs: 'hsr0' already exists in 'hsr' [ 259.778308][T15561] Cannot create hsr debugfs directory [ 259.904305][ T28] audit: type=1326 audit(2000000135.050:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf565bf79 code=0x7ffc0000 [ 259.983289][ T28] audit: type=1326 audit(2000000135.080:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7efcf565bf79 code=0x7ffc0000 [ 260.028273][ T28] audit: type=1326 audit(2000000135.090:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf565bf79 code=0x7ffc0000 [ 260.070372][ T28] audit: type=1326 audit(2000000135.090:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7efcf565bf79 code=0x7ffc0000 [ 260.174871][T15682] loop9: detected capacity change from 0 to 512 [ 260.183144][T15682] EXT4-fs: Ignoring removed oldalloc option [ 260.234597][T15682] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.3955: Parent and EA inode have the same ino 15 [ 260.247683][T15682] loop9: lost filesystem error report for type 5 error -117 [ 260.250851][ T28] audit: type=1326 audit(2000000135.380:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf565bf79 code=0x7ffc0000 [ 260.253739][T15682] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.3955: Parent and EA inode have the same ino 15 [ 260.299387][T15682] loop9: lost filesystem error report for type 5 error -117 [ 260.308613][T15682] EXT4-fs (loop9): 1 orphan inode deleted [ 260.314967][ T28] audit: type=1326 audit(2000000135.380:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf565bf79 code=0x7ffc0000 [ 260.316840][T15682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.376258][T15561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.390892][T15682] EXT4-fs error (device loop9): ext4_lookup:1789: inode #2: comm syz.9.3955: deleted inode referenced: 15 [ 260.415566][T15693] loop4: detected capacity change from 0 to 512 [ 260.422386][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3955'. [ 260.429563][T15561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.441547][T15693] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 260.464546][T15693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 260.472894][T15693] System zones: 1-12 [ 260.479594][T15693] EXT4-fs (loop4): 1 truncate cleaned up [ 260.485756][T15693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.504269][T15561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.526521][T15561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.586122][ T3307] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 260.625792][ T3307] EXT4-fs (loop4): Remounting filesystem read-only [ 260.647675][T12240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.797328][T15561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.871251][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3965'. [ 260.882602][T15561] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.910145][T15730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3965'. [ 260.930340][ T2374] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.937560][ T2374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.963748][ T2374] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.970892][ T2374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.991025][T15561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.014622][T15561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.035854][T12632] IPVS: starting estimator thread 0... [ 261.139565][T15739] IPVS: using max 2016 ests per chain, 100800 per kthread [ 261.149555][T15561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.160054][ T28] audit: type=1326 audit(2000000136.310:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 261.212238][ T28] audit: type=1326 audit(2000000136.310:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 261.258860][ T28] audit: type=1326 audit(2000000136.310:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.9.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 261.442672][T15561] veth0_vlan: entered promiscuous mode [ 261.451931][T15561] veth1_vlan: entered promiscuous mode [ 261.485009][T15561] veth0_macvtap: entered promiscuous mode [ 261.503114][T15561] veth1_macvtap: entered promiscuous mode [ 261.516867][T15561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.556327][T15561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.581451][ T7156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.597569][ T7156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.617125][ T7156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.648693][ T9091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.657824][ T7156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.712022][T15790] netlink: 'syz.1.3938': attribute type 1 has an invalid length. [ 261.783208][ T7156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.849625][ T7156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.939093][T15805] loop1: detected capacity change from 0 to 512 [ 261.948969][ T7156] team0: Port device netdevsim1 removed [ 261.965575][ T7156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.976978][T15805] EXT4-fs: Ignoring removed oldalloc option [ 262.015059][T15805] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.3971: Parent and EA inode have the same ino 15 [ 262.068293][T15805] loop1: lost filesystem error report for type 5 error -117 [ 262.073595][T15805] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.3971: Parent and EA inode have the same ino 15 [ 262.163876][T15805] loop1: lost filesystem error report for type 5 error -117 [ 262.164230][T15805] EXT4-fs (loop1): 1 orphan inode deleted [ 262.209210][T15805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.269407][T15805] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.3971: deleted inode referenced: 15 [ 262.302615][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3971'. [ 262.345701][T15805] veth0_macvtap: left promiscuous mode [ 262.488231][T12632] IPVS: starting estimator thread 0... [ 262.563040][T15857] syz.9.3977 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 262.565880][T15807] chnl_net:caif_netlink_parms(): no params data found [ 262.588162][T15848] IPVS: using max 2208 ests per chain, 110400 per kthread [ 262.634444][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.642069][T15807] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.649480][T15807] bridge_slave_0: entered allmulticast mode [ 262.661249][T15807] bridge_slave_0: entered promiscuous mode [ 262.692850][T15807] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.732363][T15807] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.756352][T15807] bridge_slave_1: entered allmulticast mode [ 262.782668][T15807] bridge_slave_1: entered promiscuous mode [ 262.865010][T15807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.885187][T15807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.946887][T15807] team0: Port device team_slave_0 added [ 262.992532][T15807] team0: Port device team_slave_1 added [ 263.020915][T15807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.027912][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.054590][T15807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.083860][T15807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.108301][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.136673][T15807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.165153][T15834] chnl_net:caif_netlink_parms(): no params data found [ 263.194701][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3979'. [ 263.206956][T15807] hsr_slave_0: entered promiscuous mode [ 263.213467][T15807] hsr_slave_1: entered promiscuous mode [ 263.219981][T15807] debugfs: 'hsr0' already exists in 'hsr' [ 263.228305][T15807] Cannot create hsr debugfs directory [ 263.294931][T15561] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.393534][T15834] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.406892][T15834] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.414498][T15834] bridge_slave_0: entered allmulticast mode [ 263.421444][T15834] bridge_slave_0: entered promiscuous mode [ 263.443253][T15834] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.450642][T15834] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.465073][T15834] bridge_slave_1: entered allmulticast mode [ 263.479003][T15834] bridge_slave_1: entered promiscuous mode [ 263.605090][T15834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.651948][T15834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.718780][ T7156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.818553][T15834] team0: Port device team_slave_0 added [ 263.832916][T15834] team0: Port device team_slave_1 added [ 263.886867][T15950] netlink: 'syz.9.3987': attribute type 1 has an invalid length. [ 263.909699][T15834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.917271][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.955885][T15834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.967702][T15834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.974897][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.002501][T15834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.019917][T12632] IPVS: starting estimator thread 0... [ 264.048327][T15950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.087282][ T7156] bridge_slave_1: left allmulticast mode [ 264.099832][ T7156] bridge_slave_1: left promiscuous mode [ 264.105693][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.138130][T15955] IPVS: using max 2208 ests per chain, 110400 per kthread [ 264.153747][ T7156] bridge_slave_0: left allmulticast mode [ 264.178343][ T7156] bridge_slave_0: left promiscuous mode [ 264.184436][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.429509][ T7156] bond3 (unregistering): (slave bridge3): Releasing active interface [ 264.480141][ T7156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.489853][ T7156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.499267][ T7156] bond0 (unregistering): Released all slaves [ 264.506944][ T7156] bond1 (unregistering): Released all slaves [ 264.515928][ T7156] bond2 (unregistering): Released all slaves [ 264.524452][ T7156] bond3 (unregistering): Released all slaves [ 264.547018][T15834] hsr_slave_0: entered promiscuous mode [ 264.553522][T15834] hsr_slave_1: entered promiscuous mode [ 264.560063][T15834] debugfs: 'hsr0' already exists in 'hsr' [ 264.565825][T15834] Cannot create hsr debugfs directory [ 264.609141][ T7156] tipc: Left network mode [ 264.751099][ T7156] hsr_slave_0: left promiscuous mode [ 264.758277][ T7156] hsr_slave_1: left promiscuous mode [ 264.767092][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.862423][ T7156] team0 (unregistering): Port device team_slave_1 removed [ 264.884882][ T7156] team0 (unregistering): Port device team_slave_0 removed [ 265.001256][T15807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.022436][T15834] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.035348][T15807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.046872][T15807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.061311][T15807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.101534][T15834] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.129522][T15807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.144111][T15807] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.165858][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.172992][ T7166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.191724][T15834] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.213436][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.220622][ T7166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.263843][T15834] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.295752][T16027] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 265.374341][T15834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.400480][T15834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.427206][T15834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.451244][T15834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.488043][T15807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.525255][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4003'. [ 265.598402][T15834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.624544][T15834] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.662750][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.670054][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.720700][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.727966][ T7143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.857282][T15834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.912271][T15807] veth0_vlan: entered promiscuous mode [ 265.931408][T15807] veth1_vlan: entered promiscuous mode [ 265.951338][T15807] veth0_macvtap: entered promiscuous mode [ 265.960024][T15807] veth1_macvtap: entered promiscuous mode [ 265.973314][T15807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.986407][T15807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.008933][ T1680] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.034719][T15834] veth0_vlan: entered promiscuous mode [ 266.041240][ T1680] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.053309][ T1680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.070722][T15834] veth1_vlan: entered promiscuous mode [ 266.082353][ T1680] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.117223][T15834] veth0_macvtap: entered promiscuous mode [ 266.150604][T15834] veth1_macvtap: entered promiscuous mode [ 266.160065][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 266.160155][ T28] audit: type=1400 audit(2000000141.310:2135): avc: denied { read } for pid=16090 comm="syz.9.4023" path="socket:[53003]" dev="sockfs" ino=53003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.190632][T15834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.256875][T15834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.299098][ T7166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.311065][ T7166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.360538][ T7166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.392941][ T7166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.426345][T16101] veth0: entered promiscuous mode [ 266.432092][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4016'. [ 266.453849][T16101] veth0 (unregistering): left promiscuous mode [ 266.521778][T16104] loop1: detected capacity change from 0 to 8192 [ 266.562555][T15561] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 266.571311][T15561] FAT-fs (loop1): Filesystem has been set read-only [ 266.594586][ T28] audit: type=1326 audit(2000000141.740:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.625410][ T28] audit: type=1326 audit(2000000141.740:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.693978][ T28] audit: type=1326 audit(2000000141.740:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.724840][ T28] audit: type=1326 audit(2000000141.740:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.760521][ T28] audit: type=1326 audit(2000000141.740:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.785458][ T28] audit: type=1326 audit(2000000141.740:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.843839][ T7156] IPVS: stop unused estimator thread 0... [ 266.855694][ T28] audit: type=1326 audit(2000000141.740:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.920019][ T28] audit: type=1326 audit(2000000141.740:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.949234][ T7156] bridge_slave_1: left allmulticast mode [ 266.961386][ T7156] bridge_slave_1: left promiscuous mode [ 266.982824][ T28] audit: type=1326 audit(2000000141.740:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16114 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d93bf79 code=0x7ffc0000 [ 266.988446][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.061066][ T7156] bridge_slave_0: left allmulticast mode [ 267.106335][ T7156] bridge_slave_0: left promiscuous mode [ 267.112982][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.122393][T16136] loop4: detected capacity change from 0 to 256 [ 267.129997][T16136] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.619227][ T7156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.637569][ T7156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.661785][ T7156] bond0 (unregistering): Released all slaves [ 267.753947][T16145] loop4: detected capacity change from 0 to 512 [ 267.838671][T16145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.998223][T16145] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.040802][ T7156] hsr_slave_0: left promiscuous mode [ 268.050588][T16145] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4032: corrupted inode contents [ 268.072374][ T7156] hsr_slave_1: left promiscuous mode [ 268.088583][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.128385][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.136299][T16145] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4032: mark_inode_dirty error [ 268.157008][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.208213][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.315769][T16145] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4032: corrupted inode contents [ 268.414954][ T7156] veth1_macvtap: left promiscuous mode [ 268.422706][T16145] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4032: mark_inode_dirty error [ 268.441026][ T7156] veth0_macvtap: left promiscuous mode [ 268.446727][ T7156] veth1_vlan: left promiscuous mode [ 268.468666][ T7156] veth0_vlan: left promiscuous mode [ 268.596880][T15807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.732558][ T7156] team0 (unregistering): Port device team_slave_1 removed [ 268.850134][ T7156] team0 (unregistering): Port device team_slave_0 removed [ 268.960426][T16173] syzkaller0: entered promiscuous mode [ 268.966139][T16173] syzkaller0: entered allmulticast mode [ 269.133642][T16195] loop1: detected capacity change from 0 to 128 [ 269.221338][ T7156] IPVS: stop unused estimator thread 0... [ 269.563304][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4052'. [ 270.070758][T16245] team0: Device gtp0 is of different type [ 270.429962][T16270] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4079'. [ 270.485442][T16270] team1: entered promiscuous mode [ 270.496519][T16270] team1: entered allmulticast mode [ 270.503052][T16270] 8021q: adding VLAN 0 to HW filter on device team1 [ 270.612918][T16277] loop4: detected capacity change from 0 to 2048 [ 270.821190][T16277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.869609][T16277] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 270.939464][T16277] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 270.993918][T15807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.046863][T16303] loop9: detected capacity change from 0 to 512 [ 271.108840][T16303] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.4090: iget: bad i_size value: 38620345925642 [ 271.138140][T16303] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.160798][T16303] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4090: couldn't read orphan inode 15 (err -117) [ 271.216020][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4093'. [ 271.225316][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4093'. [ 271.246299][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4093'. [ 271.250072][ T2374] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.255753][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4093'. [ 271.268321][T16303] loop9: lost filesystem error report for type 5 error -117 [ 271.298619][T16303] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.338908][ T2374] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.347755][ T2374] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.406898][ T2374] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.424935][T16303] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4090: bg 0: block 5: invalid block bitmap [ 271.469946][T16303] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 483 with error 28 [ 271.507301][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 271.507320][ T28] audit: type=1326 audit(2000000146.650:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.530003][T16303] EXT4-fs (loop9): This should not happen!! Data will be lost [ 271.530003][T16303] [ 271.551593][T16303] EXT4-fs (loop9): Total free blocks count 0 [ 271.557948][T16303] EXT4-fs (loop9): Free/Dirty block details [ 271.564924][T16303] EXT4-fs (loop9): free_blocks=0 [ 271.570115][T16303] EXT4-fs (loop9): dirty_blocks=484 [ 271.575503][T16303] EXT4-fs (loop9): Block reservation details [ 271.581884][T16303] EXT4-fs (loop9): i_reserved_data_blocks=484 [ 271.598975][ T28] audit: type=1326 audit(2000000146.650:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.624034][ T28] audit: type=1326 audit(2000000146.650:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.682976][ T28] audit: type=1326 audit(2000000146.650:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.725357][ T28] audit: type=1326 audit(2000000146.650:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.749476][ T28] audit: type=1326 audit(2000000146.650:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.773233][ T28] audit: type=1326 audit(2000000146.650:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.796972][ T28] audit: type=1326 audit(2000000146.700:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.800509][T12240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 271.821250][ T28] audit: type=1326 audit(2000000146.700:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.869114][T16343] loop2: detected capacity change from 0 to 128 [ 271.876651][ T28] audit: type=1326 audit(2000000146.700:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.2.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106fecbf79 code=0x7ffc0000 [ 271.900730][T16343] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.913526][T16343] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.023085][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4104'. [ 272.028548][T16343] loop2: detected capacity change from 128 to 64 [ 272.049971][T16359] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Out of memory [ 272.099034][T16359] EXT4-fs error (device loop2): __ext4_unlink:3268: inode #2: comm syz.2.4101: mark_inode_dirty error [ 272.186213][T15834] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Out of memory [ 272.196882][T15834] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 272.368668][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4111'. [ 272.470476][T15834] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.482062][ T7166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.504722][ T7166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.555722][T16396] loop4: detected capacity change from 0 to 1024 [ 272.632491][ T7166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.649543][ T7166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.668720][T16396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 272.757432][T16396] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.791811][ T7166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.824989][ T7166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.838647][T16396] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4112: bg 0: block 112: padding at end of block bitmap is not set [ 272.870008][T16395] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.4112: lblock 0 mapped to illegal pblock 0 (length 1) [ 272.885694][T16395] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.4112: lblock 0 mapped to illegal pblock 0 (length 1) [ 272.917338][T16395] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.4112: lblock 0 mapped to illegal pblock 0 (length 1) [ 272.932055][ T7166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.943778][T16395] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.4112: lblock 0 mapped to illegal pblock 0 (length 1) [ 272.957532][ T7166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.987149][T16395] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.4112: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.007899][T16395] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.4112: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.111931][ T7166] bridge_slave_1: left allmulticast mode [ 273.127865][ T7166] bridge_slave_1: left promiscuous mode [ 273.138698][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.148210][T16396] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.4112: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.166326][ T7166] bridge_slave_0: left allmulticast mode [ 273.172580][ T7166] bridge_slave_0: left promiscuous mode [ 273.182482][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.243403][T15807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.353210][ T7166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.389955][ T7166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.401756][ T7166] bond0 (unregistering): Released all slaves [ 273.548875][ T7166] hsr_slave_0: left promiscuous mode [ 273.566165][ T7166] hsr_slave_1: left promiscuous mode [ 273.574968][ T7166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.583783][ T7166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.599340][ T7166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.607051][ T7166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.621831][ T7166] veth1_macvtap: left promiscuous mode [ 273.627696][ T7166] veth0_macvtap: left promiscuous mode [ 273.633595][ T7166] veth1_vlan: left promiscuous mode [ 273.639119][ T7166] veth0_vlan: left promiscuous mode [ 273.768826][ T7166] team0 (unregistering): Port device team_slave_1 removed [ 273.792017][ T7166] team0 (unregistering): Port device team_slave_0 removed [ 273.873821][T16407] chnl_net:caif_netlink_parms(): no params data found [ 273.912375][T16407] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.919575][T16407] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.926895][T16407] bridge_slave_0: entered allmulticast mode [ 273.933746][T16407] bridge_slave_0: entered promiscuous mode [ 273.940999][T16407] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.948270][T16407] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.955571][T16407] bridge_slave_1: entered allmulticast mode [ 273.962436][T16407] bridge_slave_1: entered promiscuous mode [ 273.980309][T16407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.991019][T16407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.010630][T16407] team0: Port device team_slave_0 added [ 274.017313][T16407] team0: Port device team_slave_1 added [ 274.034102][T16407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.041129][T16407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.067954][T16407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.079598][T16407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.086649][T16407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.112807][T16407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.140849][T16407] hsr_slave_0: entered promiscuous mode [ 274.147012][T16407] hsr_slave_1: entered promiscuous mode [ 274.153000][T16407] debugfs: 'hsr0' already exists in 'hsr' [ 274.158787][T16407] Cannot create hsr debugfs directory [ 274.530335][T16333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.541419][T16407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 274.584502][T16407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 274.609802][T16440] team0: Device gtp1 is of different type [ 274.651687][T16447] netlink: 'syz.9.4129': attribute type 13 has an invalid length. [ 274.667569][T16407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 274.675857][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 274.687333][T16407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 274.727597][T16450] team1: entered promiscuous mode [ 274.733165][T16450] team1: entered allmulticast mode [ 274.739055][T16450] 8021q: adding VLAN 0 to HW filter on device team1 [ 274.788303][T16454] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 274.807387][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 274.816689][T16469] netlink: 'syz.4.4120': attribute type 5 has an invalid length. [ 274.829694][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4120'. [ 274.867914][T16469] geneve2: entered promiscuous mode [ 274.877722][T16469] geneve2: entered allmulticast mode [ 274.885871][ T2374] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 37341 - 0 [ 274.919969][ T2374] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 37341 - 0 [ 274.939684][ T2374] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 37341 - 0 [ 274.957080][T16477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.983934][ T2374] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 37341 - 0 [ 275.025473][T16477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.070231][ T2374] bridge_slave_1: left allmulticast mode [ 275.082859][ T2374] bridge_slave_1: left promiscuous mode [ 275.102743][ T2374] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.143770][ T2374] bridge_slave_0: left allmulticast mode [ 275.157759][ T2374] bridge_slave_0: left promiscuous mode [ 275.182151][ T2374] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.190736][T16503] netlink: 'syz.4.4134': attribute type 13 has an invalid length. [ 275.228739][ T2374] bond1 (unregistering): (slave gretap0): Releasing active interface [ 275.302009][ T2374] bond1 (unregistering): Released all slaves [ 275.310654][ T2374] bond0 (unregistering): Released all slaves [ 275.320170][T16477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.387139][T16511] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 275.412027][T16407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.435419][T16477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.473285][T16407] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.507531][ T2374] hsr_slave_0: left promiscuous mode [ 275.526254][ T2374] hsr_slave_1: left promiscuous mode [ 275.541858][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.550030][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.557513][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4136'. [ 275.571261][ T2374] batman_adv: batadv0: Removing interface: dummy0 [ 275.654322][ T2374] team0 (unregistering): Port device team_slave_1 removed [ 275.682754][ T2374] team0 (unregistering): Port device team_slave_0 removed [ 275.746788][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.753935][ T1680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.772119][ T7166] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.783923][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.791144][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.809824][ T1680] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.827693][ T1680] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.868514][ T1680] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.963900][T16407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.078837][T16407] veth0_vlan: entered promiscuous mode [ 276.087302][T16407] veth1_vlan: entered promiscuous mode [ 276.103461][T16407] veth0_macvtap: entered promiscuous mode [ 276.111340][T16407] veth1_macvtap: entered promiscuous mode [ 276.122320][T16407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.134450][T16407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.144216][ T7162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.155142][ T7162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.164651][ T7162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.173836][ T7162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.260385][T16578] netlink: 'syz.4.4152': attribute type 1 has an invalid length. [ 276.285227][T16578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.564549][T16608] loop1: detected capacity change from 0 to 128 [ 276.603018][T16608] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.667386][T16608] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 276.678041][T16615] __nla_validate_parse: 1 callbacks suppressed [ 276.680339][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4156'. [ 276.748371][T16608] loop1: detected capacity change from 128 to 64 [ 276.762093][T16608] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Out of memory [ 276.775294][T16608] EXT4-fs error (device loop1): __ext4_unlink:3268: inode #2: comm syz.1.4155: mark_inode_dirty error [ 276.820644][T15561] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Out of memory [ 276.827012][T16618] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.832496][T15561] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 276.890282][T16618] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.951517][T16618] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.041779][T16618] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.100504][T15561] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.112567][ T7156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.146932][ T2374] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.164736][ T7143] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.189924][ T7156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.214187][ T7143] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.224305][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 277.224317][ T28] audit: type=1326 audit(2000000152.370:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.4.4164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9786dabf79 code=0x0 [ 277.247683][ T7143] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.284728][ T7156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.371322][ T7156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.408988][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4168'. [ 277.419187][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 277.433832][ T1680] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.443535][ T1680] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.461550][ T1680] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.483373][ T1680] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.555861][ T7156] bridge_slave_1: left allmulticast mode [ 277.561863][ T7156] bridge_slave_1: left promiscuous mode [ 277.567885][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.576450][ T7156] bridge_slave_0: left allmulticast mode [ 277.584011][ T7156] bridge_slave_0: left promiscuous mode [ 277.595680][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.770980][T16656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4172'. [ 277.830582][ T7156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.841254][T16657] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4172'. [ 277.851216][ T7156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.862070][ T7156] bond0 (unregistering): Released all slaves [ 277.970961][ T7156] hsr_slave_0: left promiscuous mode [ 277.978648][ T7156] hsr_slave_1: left promiscuous mode [ 277.987072][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.998182][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.008586][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.016072][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.032277][ T28] audit: type=1400 audit(2000000153.180:2161): avc: denied { getopt } for pid=16665 comm="syz.3.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 278.052501][ T7156] veth1_macvtap: left promiscuous mode [ 278.058927][ T7156] veth1_vlan: left promiscuous mode [ 278.064263][ T7156] veth0_vlan: left promiscuous mode [ 278.276077][ T7156] team0 (unregistering): Port device team_slave_1 removed [ 278.281048][ T28] audit: type=1326 audit(2000000153.420:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16682 comm="syz.9.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 278.307258][ T7156] team0 (unregistering): Port device team_slave_0 removed [ 278.326539][ T28] audit: type=1326 audit(2000000153.460:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16682 comm="syz.9.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 278.350561][ T28] audit: type=1326 audit(2000000153.460:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16682 comm="syz.9.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 278.374825][ T28] audit: type=1326 audit(2000000153.460:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16682 comm="syz.9.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 278.436895][ T28] audit: type=1326 audit(2000000153.460:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16682 comm="syz.9.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 278.478852][ T28] audit: type=1326 audit(2000000153.470:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16682 comm="syz.9.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 278.544528][ T28] audit: type=1326 audit(2000000153.470:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16682 comm="syz.9.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 278.631759][T16679] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.643137][T16679] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37341 - 0 [ 278.723458][T16679] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.734625][T16679] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37341 - 0 [ 278.763019][T16626] chnl_net:caif_netlink_parms(): no params data found [ 278.857561][T16679] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.875846][T16679] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37341 - 0 [ 278.919417][T16626] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.928568][T16626] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.938016][T16626] bridge_slave_0: entered allmulticast mode [ 278.948961][T16626] bridge_slave_0: entered promiscuous mode [ 278.956305][T16626] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.963613][T16626] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.970882][T16626] bridge_slave_1: entered allmulticast mode [ 278.977741][T16626] bridge_slave_1: entered promiscuous mode [ 278.999437][T16679] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.034022][T16679] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37341 - 0 [ 279.049738][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.074477][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.109878][ T7156] IPVS: stop unused estimator thread 0... [ 279.149585][ T2374] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 37341 - 0 [ 279.162365][ T2374] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.179121][T16626] team0: Port device team_slave_0 added [ 279.192601][T16714] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4182'. [ 279.205838][ T2374] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 37341 - 0 [ 279.214907][ T2374] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.225842][T16626] team0: Port device team_slave_1 added [ 279.233270][T16714] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4182'. [ 279.245924][ T2374] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 37341 - 0 [ 279.254649][ T2374] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.281046][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.300316][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.327162][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.343928][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.372792][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.402603][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.441411][ T7156] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 37341 - 0 [ 279.452943][ T7156] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.471648][T16725] gretap1: entered promiscuous mode [ 279.596823][T16626] hsr_slave_0: entered promiscuous mode [ 279.603468][T16626] hsr_slave_1: entered promiscuous mode [ 279.626782][T16737] loop0: detected capacity change from 0 to 2048 [ 279.658656][T16626] debugfs: 'hsr0' already exists in 'hsr' [ 279.664624][T16626] Cannot create hsr debugfs directory [ 279.670267][T16737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.795425][T16737] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.919471][T16407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.086272][T16767] netlink: 'syz.3.4196': attribute type 2 has an invalid length. [ 280.356982][T16626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.380670][T16626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.392088][ T28] audit: type=1326 audit(2000000155.540:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.9.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a661abf79 code=0x7ffc0000 [ 280.428339][T16626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.454680][T16626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.536952][T16626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.557903][T16829] lo: Caught tx_queue_len zero misconfig [ 280.576141][T16626] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.596828][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.604680][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.655535][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.662756][ T7162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.685714][T16626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.709052][T16626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.819255][T16626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.191468][T16626] veth0_vlan: entered promiscuous mode [ 281.219913][T16626] veth1_vlan: entered promiscuous mode [ 281.270566][T16626] veth0_macvtap: entered promiscuous mode [ 281.288527][T16626] veth1_macvtap: entered promiscuous mode [ 281.332479][T16626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.362723][T16626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.386868][ T7162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.428514][ T7162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.482599][T16908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.540740][ T7162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.555357][ T7162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.568859][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4218'. [ 281.611187][T16908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.632669][T16923] geneve3: entered promiscuous mode [ 281.731871][T16908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.799335][T16908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.876545][ T7184] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.911202][ T7184] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.937472][ T7184] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.973429][ T1680] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.158515][ T3414] kernel read not supported for file 32/task/33/wchan (pid: 3414 comm: kworker/0:6) [ 282.168419][T12646] kernel write not supported for file /vcs (pid: 12646 comm: kworker/0:9) [ 282.211717][T16991] loop9: detected capacity change from 0 to 2048 [ 282.235519][T16991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.302039][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4231'. [ 282.318933][T12240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.347047][ T2993] ================================================================== [ 282.355229][ T2993] BUG: KCSAN: data-race in set_nlink / set_nlink [ 282.361794][ T2993] [ 282.364149][ T2993] read to 0xffff888107d7bac0 of 4 bytes by task 3289 on cpu 1: [ 282.371726][ T2993] set_nlink+0x29/0xb0 [ 282.375853][ T2993] kernfs_iop_permission+0x1e2/0x220 [ 282.381208][ T2993] inode_permission+0x31f/0x3b0 [ 282.386121][ T2993] link_path_walk+0x779/0xe30 [ 282.390841][ T2993] path_openat+0x1c6/0x2050 [ 282.395390][ T2993] do_file_open+0x16c/0x290 [ 282.399934][ T2993] do_sys_openat2+0x94/0x130 [ 282.404651][ T2993] __x64_sys_openat+0xf2/0x120 [ 282.409541][ T2993] x64_sys_call+0x1e39/0x3020 [ 282.414248][ T2993] do_syscall_64+0x12c/0x370 [ 282.418873][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.424880][ T2993] [ 282.427221][ T2993] write to 0xffff888107d7bac0 of 4 bytes by task 2993 on cpu 0: [ 282.434873][ T2993] set_nlink+0x99/0xb0 [ 282.438976][ T2993] kernfs_iop_permission+0x1e2/0x220 [ 282.444303][ T2993] inode_permission+0x31f/0x3b0 [ 282.449197][ T2993] link_path_walk+0x779/0xe30 [ 282.453899][ T2993] path_lookupat+0x8c/0x500 [ 282.458427][ T2993] filename_lookup+0x190/0x390 [ 282.463217][ T2993] vfs_statx+0x96/0x170 [ 282.467427][ T2993] vfs_fstatat+0x118/0x170 [ 282.472056][ T2993] __se_sys_newfstatat+0x55/0x3e0 [ 282.477117][ T2993] __x64_sys_newfstatat+0x55/0x70 [ 282.482177][ T2993] x64_sys_call+0x2c64/0x3020 [ 282.486899][ T2993] do_syscall_64+0x12c/0x370 [ 282.491516][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.497554][ T2993] [ 282.499894][ T2993] value changed: 0x00000009 -> 0x00000008 [ 282.505667][ T2993] [ 282.508017][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 282.514206][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 282.524656][ T2993] Tainted: [W]=WARN [ 282.528995][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 282.539085][ T2993] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 282.563784][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 282.563802][ T28] audit: type=1400 audit(2000000157.700:2178): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[1546]" dev="pipefs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 283.121186][ T7172] smc: removing ib device syz1 [ 283.235786][ T2374] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.254126][ T2374] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.318709][ T2374] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.332789][ T2374] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.409284][ T2374] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.419200][ T2374] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.489648][ T2374] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.499971][ T2374] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.609340][ T2374] bridge_slave_1: left allmulticast mode [ 283.615397][ T2374] bridge_slave_1: left promiscuous mode [ 283.621329][ T2374] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.629131][ T2374] bridge_slave_0: left allmulticast mode [ 283.634792][ T2374] bridge_slave_0: left promiscuous mode [ 283.640665][ T2374] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.674904][ T2374] gretap0 (unregistering): left promiscuous mode [ 283.691335][ T2374] bond3 (unregistering): (slave geneve3): Releasing active interface [ 283.820044][ T2374] bond0 (unregistering): left promiscuous mode [ 283.826266][ T2374] bond_slave_0: left promiscuous mode [ 283.831874][ T2374] bond_slave_1: left promiscuous mode [ 283.837352][ T2374] vlan2: left promiscuous mode [ 283.844180][ T2374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.853713][ T2374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.863180][ T2374] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 283.871651][ T2374] bond0 (unregistering): Released all slaves [ 283.879382][ T2374] bond1 (unregistering): Released all slaves [ 283.887834][ T2374] bond2 (unregistering): Released all slaves [ 283.896411][ T2374] bond3 (unregistering): Released all slaves [ 283.904807][ T2374] bond4 (unregistering): Released all slaves [ 283.956882][ T2374] hsr_slave_0: left promiscuous mode [ 283.962821][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.970805][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.013020][ T2374] team0 (unregistering): Port device team_slave_1 removed [ 284.023525][ T2374] team0 (unregistering): Port device team_slave_0 removed [ 284.322466][ T2374] IPVS: stop unused estimator thread 0... [ 284.381220][ T2374] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 37341 - 0 [ 284.391315][ T2374] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 284.440060][ T2374] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 37341 - 0 [ 284.451326][ T2374] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 284.499917][ T2374] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 37341 - 0 [ 284.509959][ T2374] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 284.560869][ T2374] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 37341 - 0 [ 284.570900][ T2374] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 284.638746][ T2374] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.719633][ T2374] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.789569][ T2374] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.869342][ T2374] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.953193][ T2374] bridge_slave_1: left allmulticast mode [ 284.959352][ T2374] bridge_slave_1: left promiscuous mode [ 284.965141][ T2374] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.973536][ T2374] bridge_slave_0: left allmulticast mode [ 284.979463][ T2374] bridge_slave_0: left promiscuous mode [ 284.985250][ T2374] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.993978][ T2374] bridge_slave_1: left allmulticast mode [ 285.000791][ T2374] bridge_slave_1: left promiscuous mode [ 285.006617][ T2374] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.015818][ T2374] bridge_slave_0: left allmulticast mode [ 285.021646][ T2374] bridge_slave_0: left promiscuous mode [ 285.027535][ T2374] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.170172][ T2374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.180229][ T2374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.189901][ T2374] bond0 (unregistering): Released all slaves [ 285.198152][ T2374] bond1 (unregistering): Released all slaves [ 285.253705][ T2374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.263333][ T2374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.272702][ T2374] bond0 (unregistering): Released all slaves [ 285.280423][ T2374] bond1 (unregistering): Released all slaves [ 285.340321][ T2374] hsr_slave_0: left promiscuous mode [ 285.346154][ T2374] hsr_slave_1: left promiscuous mode [ 285.352063][ T2374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.359788][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.367466][ T2374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.376103][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.385413][ T2374] hsr_slave_0: left promiscuous mode [ 285.392881][ T2374] hsr_slave_1: left promiscuous mode [ 285.398852][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.406400][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.417986][ T2374] veth1_macvtap: left promiscuous mode [ 285.424309][ T2374] veth0_macvtap: left promiscuous mode [ 285.430052][ T2374] veth1_vlan: left promiscuous mode [ 285.435379][ T2374] veth0_vlan: left promiscuous mode [ 285.514857][ T2374] team0 (unregistering): Port device team_slave_1 removed [ 285.525321][ T2374] team0 (unregistering): Port device team_slave_0 removed [ 285.585621][ T2374] team0 (unregistering): Port device team_slave_1 removed [ 285.595910][ T2374] team0 (unregistering): Port device team_slave_0 removed [ 286.066651][ T2374] IPVS: stop unused estimator thread 0... [ 286.143084][ T2374] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.200004][ T2374] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.259814][ T2374] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.310252][ T2374] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.381323][ T2374] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.419065][ T2374] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.482310][ T2374] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.534637][ T2374] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.606108][ T2374] bridge_slave_1: left allmulticast mode [ 286.618012][ T2374] bridge_slave_1: left promiscuous mode [ 286.624480][ T2374] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.633452][ T2374] bridge_slave_0: left allmulticast mode [ 286.639275][ T2374] bridge_slave_0: left promiscuous mode [ 286.644971][ T2374] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.653769][ T2374] bridge_slave_1: left allmulticast mode [ 286.660766][ T2374] bridge_slave_1: left promiscuous mode [ 286.666550][ T2374] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.674615][ T2374] bridge_slave_0: left allmulticast mode [ 286.680487][ T2374] bridge_slave_0: left promiscuous mode [ 286.686326][ T2374] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.820968][ T2374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.831117][ T2374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.840732][ T2374] bond0 (unregistering): Released all slaves [ 286.881149][ T2374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.891389][ T2374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.901137][ T2374] bond0 (unregistering): Released all slaves [ 286.934486][ T2374] hsr_slave_0: left promiscuous mode [ 286.941259][ T2374] hsr_slave_1: left promiscuous mode [ 286.947016][ T2374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.954735][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.962725][ T2374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.970531][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.982056][ T2374] hsr_slave_0: left promiscuous mode [ 286.987793][ T2374] hsr_slave_1: left promiscuous mode [ 286.995020][ T2374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.003779][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.011645][ T2374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.020467][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.035235][ T2374] veth1_macvtap: left promiscuous mode [ 287.040831][ T2374] veth0_macvtap: left promiscuous mode [ 287.046635][ T2374] veth1_vlan: left promiscuous mode [ 287.052331][ T2374] veth0_vlan: left promiscuous mode [ 287.058461][ T2374] veth1_macvtap: left promiscuous mode [ 287.063987][ T2374] veth0_macvtap: left promiscuous mode [ 287.069737][ T2374] veth1_vlan: left promiscuous mode [ 287.075026][ T2374] veth0_vlan: left promiscuous mode [ 287.190576][ T2374] team0 (unregistering): Port device team_slave_1 removed [ 287.200571][ T2374] team0 (unregistering): Port device team_slave_0 removed [ 287.262691][ T2374] team0 (unregistering): Port device team_slave_1 removed [ 287.272575][ T2374] team0 (unregistering): Port device team_slave_0 removed