last executing test programs: 5.051468563s ago: executing program 4 (id=767): syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x50000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e7339ff6fd61cad54e51c81", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',msize=']) 5.029332486s ago: executing program 4 (id=768): perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x1101) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000640)={{0x1}, 'port0\x00', 0x84, 0x49, 0x0, 0x7, 0x1, 0x101, 0x10000, 0x0, 0xab56c138b8595f3b, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000005c0)={r5, 0x7, 0x10}, 0xc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0), 0x8) read(r2, &(0x7f00000000c0)=""/104, 0x68) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) sendto$inet6(r2, &(0x7f0000000380)="d38ebcdd0e826189be6b64280512fe1f178b3e4b7f5eeedafd688adcfe22f16d63b11c70ba0e4935123c704819df0b7f639a", 0x32, 0x24008001, &(0x7f0000000440)={0xa, 0x4e24, 0xc97e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x208200, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendto$inet6(r6, &(0x7f0000000480)="bff9e528568c7fa5554cdcba6a8109e6fb875c05caf5c2b6c8f48d766feb6febd20c5f4428e82070812b50b7e304d88586608b091797ca6fc41f258c363a47f62bc80f71dd1c4a36a110bff75945da86a84037d0713807767d3fa489bda888080417d6348b7871be745759a375e8dd0e1eec072f28c37b2f2ff128a602fe0992450a2c69db499bc9ec1f195a098f1109b0625e90e47ad59b66162933cb443f20066232b4925f7074b8bc4ff09b497e7331b7ef40605de9e18da1168f3d1a8d359abb1060", 0xc4, 0x0, &(0x7f0000000580)={0xa, 0x4e22, 0xffff, @mcast1, 0xfffffff8}, 0x1c) write(r7, &(0x7f0000000040)="240000001a005f0214f9f507000909000a000000000000000000000004001e0000000000", 0x24) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000340)={0x2002}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x12, @time={0x80000001}}) 4.939648364s ago: executing program 4 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = socket$inet6(0xa, 0x3, 0x6) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000002"], 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x22, {0x0, 0x1}, {0x4a, 0x3f03}, @cond=[{0x8001, 0x9, 0xf948, 0x5, 0x7}, {0x4, 0x0, 0x2, 0x3, 0xfffb, 0x401}]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="bd4eda35", 0x4, 0x15, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "ec69d337", "df02000000000ece"}, 0x28) setsockopt$SO_ATTACH_FILTER(r5, 0x29, 0x43, &(0x7f0000000040)={0x0, 0x0}, 0x10) ioctl$EVIOCGKEY(r4, 0x80404518, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.257786917s ago: executing program 4 (id=782): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000380), 0x8) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f00000000c0), 0xfffffc8f) splice(r0, 0x0, r2, 0x0, 0x1800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\t') 3.403259566s ago: executing program 4 (id=787): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f0000000500)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') socket$packet(0x11, 0x3, 0x300) socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a40)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x2, 0x6, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x720, 0x550, 0x0, 0x0, 0x358, 0x480, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@inet=@recent0={{0xf8}, {0x10001, 0xe, 0x4, 0x0, 'syz1\x00', 0x41}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@local, 0x35, 0x4, 0x7}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x2, 0x4, 0x0, 0x8, 0x7, 0x20, 0x20}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@loopback, 0x3a, 0x30, 0x1}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x6, 0x7, 0x1}}, @common=@mh={{0x28}, {"8dd4", 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3ea9, 0x5}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d2], 0x2, 0x2, 0x3}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x780) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$EVIOCSABS20(r8, 0x401845e0, &(0x7f0000000a00)={0x5, 0x80000000, 0x8, 0xa, 0x8, 0x5}) 3.321729253s ago: executing program 4 (id=788): r0 = eventfd(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r6, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) shutdown(r2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r0, &(0x7f00000001c0), 0x8) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) 2.794932612s ago: executing program 0 (id=793): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ldst={0x3, 0x1, 0x3, 0xa, 0x8, 0x18, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @jmp={0x5, 0x0, 0x143ff1479cf8bdbd, 0x3, 0xa, 0x0, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0xb2, 0x4}, 0x10, 0x2772c, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x4, 0x3, 0x4, 0xb}, {0x3, 0x3, 0x7, 0x5}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0xef, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000600), &(0x7f00000006c0), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000300000000000000835a793a5c97b41e000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000003640)=""/249, &(0x7f00000013c0)=0xf9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) sendmsg(r5, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000e40)="45281737b13e6f83bd1733d369a9ea58cd82f3aed78b0c7485723ce047e455ad28950bbbc2afedd29f984b701c4a0d5cc4f53a486bd2cc", 0x37}, {&(0x7f0000000f80)="2984b16cc203bd3c67efb7c72be9b13901e4894994e3383a11bbb77bfd35838116181c2e8e1fc679b0e1e40c0897d185d08adf5296baf24fd2dbb5c479d559f4a15a8a1c454b0f061b3a884b66f6a32553917e63fe72d94c2e7570826db6edc2c70df98f3892c5b1eb32fcd19eedc6b695ac36f565e78b58b463c701d69ccd90073771ffc5e720b569187ee82f2a2df32ecf42925405965823f5c5a1a30ded985e8fbd8829910c77fee0855760b52876432be5b9ff013686206a80813eae4820e2fdd0844b26b927003104d39a1505b09e77236e5cb94c7cd419507716bbae400d67806045c3a0936cfebdbbd388", 0xee}, {&(0x7f0000000e80)="82e87d73bffde3b492a71f57d7103fca3dfb0ecb4d56ade5e4181da9e9d4961699a1dff5742b8c3ba324ccee2f121a80cec63df66ac295e2da117fcf9b6b72be0395e71e4a24cad397c493d9546c8ded20fb37e4a7f82c53d68359395aa64e4e3226ce8be8410bb04bae0ca5af", 0x6d}, {&(0x7f0000001080)="1e36c0d3d109164acaa8a7b8061ddea0ec19bf40fea3e95f7a47584a6e9446da900ff3297e3e2d8fe0dfee16d6cbbaeb27058f8a22930643716049f02377b47eeb8742417f7669fc2e5cf81f1868dc098c42a3ea4a55462825ca5508413d71c37957fab42d9e674f5cec8ce2a0d8dd12a5e209ab50f5dc85901520a9ed0f7478216e6137bf0d2021d4362faafcd776003d06cc6639700d94749c7a13e88948466d36bbd493d1622cae7448157d2882c66e4435a292d2a79caa7489fb3737fa47a91720163a9c42c3ede29450ac4745ede978b195c3edb543b9651ef3540da75305e7eb9546e02f869646b26678ec", 0xee}, {&(0x7f0000001180)="6b0993a89d3274bfa94f", 0xa}, {&(0x7f00000011c0)="d0d2009fe8d14925a9fa6713daf556e958457868cba40b0b1ad20146a6dc3c8733f6bd1ba8df067753cb448650f01cf365d1b9e2a5ad1cce110944a558c46fcb6d1475434ada9a29", 0x48}, {&(0x7f0000001240)="bcc6409348cb46fc4f85b41acba5de6cb1caae0dda30ea031c7a36b0fc407824f76943cef7d31ef96fbde1408553cb175dc329b031df1483a4a7f0cb065ef50378444bd6e13d44bbb3c367cd183115e675da3d98953605bec6305d73b06eee19ccfc303b5ecc732c2635bd0b19f2ccac30b3f75e9e0a8097f38f5b5bb9d2d8a07e0e9e00e8d5726a1874da63b6715b1465f84fffed54ad6e4abd7536575ab3007539a791987b2a3b835baa922a94c12db59e8977b8b7f5fa183656ea5683168ddc533950645e6974df945d", 0xcb}, {&(0x7f0000001340)="4d1f34020a087069260cb55e3567a0eef5e381154148af45378ca439f303d04beb90d85fa45da9e186ccf0c64da54822e88c9edfb26abe1aa03a43cf331ca5d9faefd8627698f437ea7dbd2256be31167087146ad0cbeb7a1c03c2", 0x5b}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="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", 0x1000}], 0xa, &(0x7f00000024c0)=[{0x1010, 0x1, 0x4, "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"}, {0x98, 0x10b, 0x0, "1c13837795365152d65d8bb14255f0858bd8ba65d8023643910e6e3c4c7cc24f98949be5708c71dd02166429260da3199fa775da6698f994b6213d0a20234bad5ddcaa33e7cb6244b3cc2fb3fa503dc735acadc694553efd53f848c3955efa8b371ce978b70e6b3186febb15dedb6d3e19ac60528e78a7e9aa4719a4d82db1ae566dc960aabd"}, {0x70, 0x115, 0x1, "3caf3a51b5c1628c952738a8207d99cc6fcb64f829016ac82f79d04bdd35498eb0964f6f6e6f65fdb911f162e6a8d7c7b5bfe8c9017478a9b27558f566068e010411830f0f7700d7ad7a698e71c879ff68314684b0a32711a8eca0b521"}], 0x1118}, 0x20008816) eventfd(0x231c6b1) r6 = eventfd(0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r6, &(0x7f00000001c0), 0x8) accept$unix(r2, &(0x7f00000009c0)=@abs, &(0x7f00000001c0)=0x6e) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f2, &(0x7f0000000080)) 2.794002902s ago: executing program 1 (id=794): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x60f2, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40485404, &(0x7f0000000040)=0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x8008, 0xdad9, 0x0, 0xfffffffc, 0x0, 0x1}, 0x20) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x2) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x0, 0x30}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') lseek(r7, 0x0, 0x3) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000500", @ANYRES32, @ANYBLOB="00000200", @ANYRES32, @ANYBLOB="0800030001000000"], 0x48}}, 0x0) 2.749430126s ago: executing program 1 (id=796): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1808008, &(0x7f00000000c0)={[], [{@seclabel}]}, 0x6, 0x58f, &(0x7f0000000e80)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x80, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x73db}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180), 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4c5, &(0x7f0000000f00)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x4) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x29) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007200911fdabcf8b30771a54a07"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='rpm_return_int\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) 2.147571401s ago: executing program 1 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x3, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x8, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13146000000370", 0x7}], 0x7) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=r3], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000003d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000000740)=""/143) r6 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) read(r6, &(0x7f0000001900)=""/260, 0x104) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x24040045) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) 2.118150515s ago: executing program 1 (id=799): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xaf, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x99, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}, {0x0, 0xfffe, 0x85, 0x0, @gue={{0x1, 0x0, 0x0, 0xfd, 0x0, @void}, "3bb682a1200e1591d68bf9da1c120edd122d8c9d7125b1692e3144e3dc8f712a0292e407662d319c854edbd9697f9babc565d776aa688b9b36e5627efb2805b200080efad902371dfad01376c7e68a56b59ec5a33db59bedc4840799187ada539140441e06dad3fcbfeabf86102ea03324945d74fafdcc50db"}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unlink(&(0x7f0000000140)='./cgroup\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000301010100000000000000000addff001800028006000340000000000c00028005000100010000000c001980080002000c"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/239, 0xef}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/27, 0x1b}}], 0x2, 0x10162, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev={0xfe, 0x8}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @mcast1}}}}}}, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) bind$xdp(0xffffffffffffffff, 0x0, 0x0) 2.040566321s ago: executing program 1 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) 1.967983138s ago: executing program 0 (id=801): syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x50000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e7339ff6fd61cad54e51c81", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYBLOB=',msize=0']) 1.889020016s ago: executing program 3 (id=802): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x3, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x20}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_nat_t_port={0x1, 0x16}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x40}]}, 0x80}, 0x1, 0x7}, 0x0) 1.870731757s ago: executing program 0 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x282, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) 1.719104711s ago: executing program 3 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='erofs_destroy_inode\x00'}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) splice(r3, 0x0, r4, 0x0, 0x4ffe2, 0x0) inotify_init() perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.62768096s ago: executing program 3 (id=805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x8100000000000000}, 0x0) r5 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="5000000002000000c80100"], 0x410902) 1.403549701s ago: executing program 3 (id=807): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_freeze_timeout', 0x121400, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@sack_info={0x0, 0x10001, 0x6}, &(0x7f0000000640)=0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, 0x0) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 1.343605156s ago: executing program 2 (id=808): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='rpcgss_bad_seqno\x00', r0}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@nojournal_checksum}, {@acl}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dax_never}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$eJzs3U1rG0cfAPD/ynLenycOhEB7KIYcmpJGju2+pNBDeixtaKC9p8LemGA5CpYcYjfQ5NBceimhUEoDpR+g9x5Dv0Ch3yHQBkIJpj304rLyylFiyVIcxVai3w82mdldeXY0+x9mNBIbwNAaz/4pRLwSEd8kEYdbjhUjPzi+ft7qw+sz2ZbE2tqnfyWR5Pua5yf5/webmWLEr19FnCxsLre2vDJfrlTSxTw/UV+4MlFbXjl1aaE8l86ll6emp8+8PT313rvv9K2ub5z/5/tP7n545uvjq9/9fP/I7STOxqH8WGs9nsGN1sx4jOfvyWicfeLEyT4UNkiS3b4AtmUkj/PRyPqAwzGSRz3w8vsyItaAIZWIfxhSzXFAc27fp3nwC+PBB+sToM31L65/NhL7GnOjA6vJYzOjbL471ofyszJ++fPO7WyL/n0OAdDVjZsRcbpY3Nz/JXn/t32nezjnyTL0f7Bz7mbjnzfbjX8KG+OfaDP+Odgmdreje/wX7vehmI6y8d/7bce/G4tWYyN57n+NMd9ocvFSJc36tv9HxIkY3Zvlt1rPObN6b63TsdbxX7Zl5TfHgvl13C/uffw1s+V6+Vnq3OrBzYhX245/k432T9q0f/Z+nO+xjGPpndc6Hete/+dr7aeI19u2/6MVrWTr9cmJxv0w0bwrNvv71rHfOpW/2/XP2v/A1vUfS1rXa2tPX8aP+/5NOx3b7v2/J/mskd6T77tWrtcXJyP2JB9v3j/16LXNfPP8rP4njm/d/7W7//dHxOc91v/W0VsdTx2E9p99qvZ/+sS9j774oVP5vbX/W43UiXxPL/1frxf4LO8dAAAAAAAADJpCRByKpFDaSBcKpdL69zuOxoFCpVqrn7xYXbo8G43fyo7FaKG50n245fsQk/n3YZv5qSfy0xFxJCK+HdnfyJdmqpXZ3a48AAAAAAAAAAAAAAAAAAAADIiDHX7/n/ljZLevDnjutnjk9+87eR3Azuv6yP9+POkJGEhd4x94aYl/GF7iH4aX+IfhJf5heIl/GF7iH4aX+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+On/uXLatrT68PpPlZ68uL81Xr56aTWvzpYWlmdJMdfFKaa5anaukpZnqQre/V6lWr0xOxdK1iXpaq0/UllcuLFSXLtcvXFooz6UX0tEdqRUAAAAAAAAAAAAAAAAAAAC8WGrLK/PlSiVdlJDYVqI4GJch0efEVr1Gcec6KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIiP8CAAD//wTEOXk=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000380)=0x4000) dup2(r1, r2) 1.109564998s ago: executing program 2 (id=809): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x81}]}}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) unshare(0x68040200) r9 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, 0x0) ioctl$TIOCSETD(r9, 0x5423, 0x0) pipe(0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 887.686788ms ago: executing program 1 (id=810): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x4, &(0x7f0000000300)=[{0x7, 0x1, 0x9, 0x8}, {0x3, 0xf, 0x9, 0xf95d}, {0x2, 0x2a, 0x0, 0x9}, {0x3, 0x2, 0x2}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000fc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2e2caa", 0x0, 0x32, 0x0, @remote, @mcast2}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x8}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100766c616e000000003c00028006000100000000000600050081000000280003800c00010000008004000000000c00010000000000000000000c000100000001000700000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x7c}, 0x1, 0xba01}, 0x0) 823.326194ms ago: executing program 0 (id=811): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x6) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000000, 0x315}) close(r6) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0xeaa) fallocate(r4, 0x0, 0x400000000000000, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) 733.434713ms ago: executing program 2 (id=812): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x128, 0x148, 0x0, {0x308}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7ffd, 0xd4}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x40b63000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfffffffe}}]}]}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r4, @ANYRES32=r0, @ANYRES8, @ANYRES8, @ANYRES64=r4, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000435000/0x4000)=nil, 0x4000, 0x4, 0x20010, r3, 0x2df62000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x1, 0x0, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x40}}, 0x0) read(r5, &(0x7f0000000500)=""/235, 0xeb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r9 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x9e4}}]}, {0x0, [0x61, 0x30, 0x61, 0x41]}}, &(0x7f0000000400)=""/193, 0x36, 0xc1, 0x0, 0x4, 0xbd913b0d479070b4, @void, @value}, 0x28) 465.182717ms ago: executing program 3 (id=813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$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") fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$rds(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000400)=""/196, 0xc4}, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/183, 0xb7}], 0x1}}], 0x48}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe000bb00, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x0) writev(r8, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000180)={'lo\x00'}) 245.200968ms ago: executing program 0 (id=814): syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x50000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e7339ff6fd61cad54e51c81", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYBLOB]) 244.433358ms ago: executing program 2 (id=815): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x3, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x20}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_nat_t_port={0x1, 0x16}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x40}]}, 0x80}, 0x1, 0x7}, 0x0) 138.449617ms ago: executing program 2 (id=816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) 97.544271ms ago: executing program 3 (id=817): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)='H', 0x1}], 0x1) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r6, r7, 0x4, r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xffe, 0x31, &(0x7f0000000540)="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", &(0x7f0000000000)=""/49, 0x80000001, 0x0, 0x0, 0x53, &(0x7f0000000040), &(0x7f0000000080)="025bac4939eea5910ecdc2372413d2a0193d974e2d60585d55dd07a5e29aa5929c9f9ca868a9357d1d081f4ece7bfe4977e596603f368d98aba2223ccbe1b5d2df731c23ac9236052d8605679d0a94bcf592d8", 0x1, 0x0, 0x8c5}, 0x50) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'vcan0\x00'}}, 0x1e) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0), 0x213, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000500)={@link_local, @empty, @void, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}], @ipv4=@udp={{0x5, 0x4, 0x1, 0x1f, 0x1c, 0x65, 0x0, 0x9, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}, {0x4e24, 0x4e21, 0x8}}}}}}, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000000000000700000094040000441008970000000000000000000000000000000011000000000000000000000001"], 0x98}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x18, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) 35.656907ms ago: executing program 2 (id=818): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@nodelalloc}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000200000000000000000000000018110015", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=819): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) fallocate(r0, 0x0, 0x0, 0x10000) r1 = open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r2 = dup(r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1800000, 0x20010, r2, 0x1f5ff000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_io_uring_setup(0x1526, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x4c02, &(0x7f0000000140)) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x14) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) kernel console output (not intermixed with test programs): e_0: entered promiscuous mode [ 91.869426][ T5537] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.876631][ T5537] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.884968][ T5537] bridge_slave_1: entered allmulticast mode [ 91.891370][ T5537] bridge_slave_1: entered promiscuous mode [ 91.908017][ T3380] bridge_slave_1: left allmulticast mode [ 91.913660][ T3380] bridge_slave_1: left promiscuous mode [ 91.919451][ T3380] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.928287][ T3380] bridge_slave_0: left allmulticast mode [ 91.933921][ T3380] bridge_slave_0: left promiscuous mode [ 91.939615][ T3380] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.037680][ T3380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.048969][ T3380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.059485][ T3380] bond0 (unregistering): Released all slaves [ 92.076999][ T5537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.088234][ T5537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.108330][ T5537] team0: Port device team_slave_0 added [ 92.116302][ T5537] team0: Port device team_slave_1 added [ 92.132746][ T3380] tipc: Disabling bearer [ 92.137761][ T3380] tipc: Left network mode [ 92.142844][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.149887][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.175915][ T5537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.187244][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.194173][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.220207][ T5537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.251167][ T5537] hsr_slave_0: entered promiscuous mode [ 92.258289][ T5537] hsr_slave_1: entered promiscuous mode [ 92.264250][ T5537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.272012][ T5537] Cannot create hsr debugfs directory [ 92.286158][ T3380] hsr_slave_0: left promiscuous mode [ 92.291765][ T3380] hsr_slave_1: left promiscuous mode [ 92.298552][ T3380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.306057][ T3380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.313637][ T3380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.321048][ T3380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.330943][ T3380] veth1_macvtap: left promiscuous mode [ 92.336509][ T3380] veth0_macvtap: left promiscuous mode [ 92.354420][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 92.402657][ T3380] team0 (unregistering): Port device team_slave_1 removed [ 92.413839][ T3380] team0 (unregistering): Port device team_slave_0 removed [ 92.739896][ T5537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.748502][ T5537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.758132][ T5537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.777516][ T5537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.820915][ T5537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.833585][ T5537] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.844128][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.851225][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.870341][ T5537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.880701][ T5537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.894657][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.901712][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.960776][ T5537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.032801][ T5537] veth0_vlan: entered promiscuous mode [ 93.042399][ T5537] veth1_vlan: entered promiscuous mode [ 93.059206][ T5537] veth0_macvtap: entered promiscuous mode [ 93.068528][ T5537] veth1_macvtap: entered promiscuous mode [ 93.079289][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.090444][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.100447][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.110867][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.120723][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.131145][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.140949][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.151530][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.162871][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.171089][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.181535][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.191338][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.201889][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.211731][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.222224][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.232124][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.242748][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.253298][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.261820][ T5537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.270541][ T5537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.279275][ T5537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.288054][ T5537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.394354][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 93.427747][ T5572] loop4: detected capacity change from 0 to 512 [ 93.434160][ T5572] EXT4-fs: Ignoring removed oldalloc option [ 93.443128][ T5567] loop1: detected capacity change from 0 to 128 [ 93.450086][ T5572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.474747][ T5572] EXT4-fs (loop4): 1 truncate cleaned up [ 93.506879][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 93.515903][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 93.539543][ T5572] tc_dump_action: action bad kind [ 93.597627][ T5579] block device autoloading is deprecated and will be removed. [ 93.605269][ T5579] bio_check_eod: 19395 callbacks suppressed [ 93.605281][ T5579] syz.2.573: attempt to access beyond end of device [ 93.605281][ T5579] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 93.680141][ T5587] loop1: detected capacity change from 0 to 256 [ 93.690343][ T5587] msdos: Unknown parameter '00000000000000000000004' [ 93.721430][ T5600] loop4: detected capacity change from 0 to 164 [ 93.747376][ T5609] 9pnet_virtio: no channels available for device [ 93.795405][ T5600] syz.4.563: attempt to access beyond end of device [ 93.795405][ T5600] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 93.824367][ T5600] syz.4.563: attempt to access beyond end of device [ 93.824367][ T5600] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.843017][ T5600] syz.4.563: attempt to access beyond end of device [ 93.843017][ T5600] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.860282][ T5600] syz.4.563: attempt to access beyond end of device [ 93.860282][ T5600] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.891676][ T5590] syz.4.563: attempt to access beyond end of device [ 93.891676][ T5590] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.905403][ T5600] syz.4.563: attempt to access beyond end of device [ 93.905403][ T5600] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.918927][ T5590] syz.4.563: attempt to access beyond end of device [ 93.918927][ T5590] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.932360][ T5600] syz.4.563: attempt to access beyond end of device [ 93.932360][ T5600] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.945768][ T5590] syz.4.563: attempt to access beyond end of device [ 93.945768][ T5590] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 94.021610][ T5617] loop1: detected capacity change from 0 to 128 [ 94.028226][ T5617] vfat: Unknown parameter 'Jî˜q¨Á¾!¾› èñ»+jZq¬ê?¯gçŸB2ºÏèPR­þ' [ 94.069701][ T5623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.567'. [ 94.096054][ T5623] loop0: detected capacity change from 0 to 128 [ 94.102617][ T5623] vfat: Unknown parameter '' [ 94.434374][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 94.606965][ T5632] loop2: detected capacity change from 0 to 512 [ 94.640961][ T5634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.570'. [ 94.664989][ T5632] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 94.682841][ T5632] EXT4-fs (loop2): 1 truncate cleaned up [ 94.744033][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 94.744045][ T29] audit: type=1326 audit(2000000310.074:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 94.786264][ T29] audit: type=1326 audit(2000000310.124:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 94.809665][ T29] audit: type=1326 audit(2000000310.124:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 94.832953][ T29] audit: type=1326 audit(2000000310.124:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 94.914482][ T29] audit: type=1326 audit(2000000310.194:7468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 94.937811][ T29] audit: type=1326 audit(2000000310.194:7469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 94.961148][ T29] audit: type=1326 audit(2000000310.194:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 94.984522][ T29] audit: type=1326 audit(2000000310.194:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 95.007915][ T29] audit: type=1326 audit(2000000310.194:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 95.031256][ T29] audit: type=1326 audit(2000000310.194:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd26e71dff9 code=0x7ffc0000 [ 95.100850][ T5638] loop4: detected capacity change from 0 to 512 [ 95.116716][ T5632] EXT4-fs unmount: 14 callbacks suppressed [ 95.116751][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.173269][ T5638] syzkaller0: entered allmulticast mode [ 95.205200][ T5638] syzkaller0 (unregistering): left allmulticast mode [ 95.226456][ T5640] loop2: detected capacity change from 0 to 2048 [ 95.265470][ T5641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.571'. [ 95.284726][ T5640] loop2: p1 < > p4 [ 95.288996][ T5640] loop2: p4 size 8388608 extends beyond EOD, truncated [ 95.359892][ T5643] 9pnet: Could not find request transport: xen [ 95.393623][ T5646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'. [ 95.416132][ T5646] pimreg: entered allmulticast mode [ 95.431948][ T5646] pimreg: left allmulticast mode [ 95.436805][ T5643] loop4: detected capacity change from 0 to 2048 [ 95.474692][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 95.486497][ T5643] Alternate GPT is invalid, using primary GPT. [ 95.492804][ T5643] loop4: p1 p2 p3 [ 95.540153][ T5652] syz.2.572[5652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.540247][ T5652] syz.2.572[5652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.565675][ T5656] loop4: detected capacity change from 0 to 512 [ 95.584512][ T5652] syz.2.572[5652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.596156][ T5656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.671457][ T5656] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.686328][ T5656] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.577: Failed to acquire dquot type 0 [ 95.749808][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.824885][ T5662] binfmt_misc: register: failed to install interpreter file ./file/file0 [ 96.507872][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 96.552401][ T5671] loop1: detected capacity change from 0 to 1024 [ 96.560897][ T5671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.598252][ T5671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.640094][ T5671] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.579: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 96.679734][ T5671] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.579: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 97.496093][ T5681] syz.2.581[5681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.496199][ T5681] syz.2.581[5681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.503556][ T5683] 9pnet_virtio: no channels available for device [ 97.508899][ T5681] syz.2.581[5681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.538875][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.550171][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 97.580891][ T5681] loop2: detected capacity change from 0 to 2048 [ 97.588094][ T5685] 9pnet_virtio: no channels available for device [ 97.630262][ T5681] Alternate GPT is invalid, using primary GPT. [ 97.631412][ T5688] loop1: detected capacity change from 0 to 512 [ 97.636545][ T5681] loop2: p1 p2 p3 [ 97.819171][ T5706] loop4: detected capacity change from 0 to 2048 [ 97.841337][ T5706] Alternate GPT is invalid, using primary GPT. [ 97.847668][ T5706] loop4: p1 p2 p3 [ 97.900697][ T5714] loop2: detected capacity change from 0 to 512 [ 97.929192][ T5714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.940726][ T5700] chnl_net:caif_netlink_parms(): no params data found [ 97.948613][ T5714] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.969394][ T5714] Process accounting resumed [ 97.975468][ T5714] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 98.009290][ T3380] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.022429][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.029648][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.036981][ T5700] bridge_slave_0: entered allmulticast mode [ 98.044056][ T5700] bridge_slave_0: entered promiscuous mode [ 98.057280][ T3380] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.068538][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.075651][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.082933][ T5700] bridge_slave_1: entered allmulticast mode [ 98.090030][ T5700] bridge_slave_1: entered promiscuous mode [ 98.124443][ T3380] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.138000][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.142864][ T3994] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /80/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 98.150195][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.274112][ T3380] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.293719][ T5700] team0: Port device team_slave_0 added [ 98.302040][ T5700] team0: Port device team_slave_1 added [ 98.478253][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.485265][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.511292][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.636617][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.643617][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.669661][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.691665][ T3380] bridge_slave_1: left allmulticast mode [ 98.697398][ T3380] bridge_slave_1: left promiscuous mode [ 98.702205][ T5731] loop1: detected capacity change from 0 to 1024 [ 98.703065][ T3380] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.717342][ T5733] 9pnet_virtio: no channels available for device [ 98.727399][ T5731] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.737081][ T3380] bridge_slave_0: left allmulticast mode [ 98.742788][ T3380] bridge_slave_0: left promiscuous mode [ 98.748513][ T3380] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.833887][ T5731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.852867][ T3380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.865556][ T3380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.876864][ T5731] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.596: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 98.894793][ T3380] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 98.910792][ T3380] bond0 (unregistering): Released all slaves [ 98.918424][ T5731] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.596: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 98.961806][ T5700] hsr_slave_0: entered promiscuous mode [ 98.978353][ T5700] hsr_slave_1: entered promiscuous mode [ 98.988390][ T5700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.996029][ T5700] Cannot create hsr debugfs directory [ 99.001452][ T3380] tipc: Disabling bearer [ 99.006663][ T3380] tipc: Disabling bearer [ 99.011619][ T3380] tipc: Left network mode [ 99.020745][ T3380] IPVS: stopping master sync thread 4591 ... [ 99.077904][ T5742] loop4: detected capacity change from 0 to 512 [ 99.084993][ T5742] EXT4-fs: quotafile must be on filesystem root [ 99.102246][ T5742] loop4: detected capacity change from 0 to 2048 [ 99.109319][ T3380] hsr_slave_0: left promiscuous mode [ 99.110368][ T5742] EXT4-fs error (device loop4): __ext4_fill_super:5458: inode #2: comm syz.4.599: casefold flag without casefold feature [ 99.127665][ T5742] EXT4-fs (loop4): get root inode failed [ 99.133399][ T5742] EXT4-fs (loop4): mount failed [ 99.138444][ T3380] hsr_slave_1: left promiscuous mode [ 99.144393][ T3380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.151870][ T3380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.159576][ T3380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.167028][ T3380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.176312][ T3380] veth1_macvtap: left promiscuous mode [ 99.181880][ T3380] veth0_macvtap: left promiscuous mode [ 99.187454][ T3380] veth1_vlan: left promiscuous mode [ 99.445809][ T3380] team0 (unregistering): Port device team_slave_1 removed [ 99.461188][ T3380] team0 (unregistering): Port device team_slave_0 removed [ 99.677553][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.718992][ T5753] loop0: detected capacity change from 0 to 512 [ 99.728509][ T5751] loop1: detected capacity change from 0 to 512 [ 99.735040][ T5753] EXT4-fs: Ignoring removed orlov option [ 99.740670][ T5753] EXT4-fs: Invalid want_extra_isize 3 [ 99.747856][ T5751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.761598][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 99.761608][ T29] audit: type=1404 audit(2000000315.129:7617): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 99.765558][ T5751] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 99.797247][ T5751] EXT4-fs (loop1): 1 truncate cleaned up [ 99.797537][ T29] audit: type=1404 audit(2000000315.169:7618): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 99.803320][ T5751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.821384][ T5753] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 99.841145][ T29] audit: type=1400 audit(2000000315.189:7619): avc: denied { create } for pid=5752 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.844020][ T5751] tmpfs: Bad value for 'mpol' [ 99.861531][ T29] audit: type=1400 audit(2000000315.189:7620): avc: denied { relabelfrom } for pid=5752 comm="syz.0.602" name="NETLINK" dev="sockfs" ino=13506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.890289][ T29] audit: type=1400 audit(2000000315.189:7621): avc: denied { mac_admin } for pid=5752 comm="syz.0.602" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.911239][ T29] audit: type=1400 audit(2000000315.199:7622): avc: denied { mount } for pid=5750 comm="syz.1.601" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.933008][ T29] audit: type=1400 audit(2000000315.199:7623): avc: denied { read write } for pid=5750 comm="syz.1.601" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.956938][ T29] audit: type=1400 audit(2000000315.199:7624): avc: denied { open } for pid=5750 comm="syz.1.601" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.980775][ T29] audit: type=1400 audit(2000000315.199:7625): avc: denied { prog_load } for pid=5750 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.999715][ T29] audit: type=1400 audit(2000000315.199:7626): avc: denied { bpf } for pid=5750 comm="syz.1.601" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.103996][ T5758] 9pnet: Could not find request transport: xen [ 100.104170][ T3269] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz-executor: path /125/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.136375][ T3269] EXT4-fs error (device loop1): empty_inline_dir:1850: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.157932][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 100.173343][ T3269] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz-executor: path /125/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.247840][ T3269] EXT4-fs error (device loop1): empty_inline_dir:1850: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.280691][ T5758] loop4: detected capacity change from 0 to 2048 [ 100.287166][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 100.301945][ T3269] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz-executor: path /125/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.401175][ T5758] Alternate GPT is invalid, using primary GPT. [ 100.407534][ T5758] loop4: p1 p2 p3 [ 100.434814][ T3380] IPVS: stop unused estimator thread 0... [ 100.536268][ T5700] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.551089][ T3269] EXT4-fs error (device loop1): empty_inline_dir:1850: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.692316][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 100.692556][ T5700] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.717436][ T5700] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.724850][ T3269] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz-executor: path /125/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.752815][ T3269] EXT4-fs error (device loop1): empty_inline_dir:1850: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.774191][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 100.790280][ T3269] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz-executor: path /125/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.819702][ T5700] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.907159][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.915095][ T3269] EXT4-fs error (device loop1): empty_inline_dir:1850: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 100.995701][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.013000][ T5700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.023422][ T5700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.037947][ T3380] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.045004][ T3380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.054287][ T3380] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.061317][ T3380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.098389][ T5770] 9pnet_virtio: no channels available for device [ 101.121663][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 101.132633][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 101.174123][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 101.189145][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 101.206301][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 101.221533][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 101.237540][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 101.252688][ T3269] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 101.305406][ T5773] syz.0.608[5773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.305463][ T5773] syz.0.608[5773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.320977][ T5773] syz.0.608[5773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.398242][ T5777] loop4: detected capacity change from 0 to 512 [ 101.438131][ T5777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.505362][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.603596][ T3977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.613694][ T5777] EXT4-fs (loop4): 1 truncate cleaned up [ 101.619961][ T5777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.656614][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.686595][ T5700] veth0_vlan: entered promiscuous mode [ 101.696288][ T5700] veth1_vlan: entered promiscuous mode [ 101.711303][ T5700] veth0_macvtap: entered promiscuous mode [ 101.718390][ T5700] veth1_macvtap: entered promiscuous mode [ 101.729702][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.740227][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.750030][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.760524][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.770341][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.780771][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.790559][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.800992][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.812680][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.820816][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.831335][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.841183][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.851592][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.861494][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.871945][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.881748][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.892170][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.905643][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.918060][ T5700] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.926785][ T5700] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.935581][ T5700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.944288][ T5700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.015962][ T5790] syz.3.585[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.016090][ T5790] syz.3.585[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.034578][ T5792] loop0: detected capacity change from 0 to 1024 [ 102.053121][ T5790] syz.3.585[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.054256][ T5792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.077701][ T5792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.612396][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 102.645669][ T5795] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.611: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 102.664939][ T5794] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.725596][ T5792] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.611: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 102.957079][ T55] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.002136][ T55] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.051464][ T55] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.079380][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.102938][ T55] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.127224][ T5809] loop0: detected capacity change from 0 to 1024 [ 103.141206][ T5809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.166302][ T55] bridge_slave_1: left allmulticast mode [ 103.172021][ T55] bridge_slave_1: left promiscuous mode [ 103.177681][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.185360][ T55] bridge_slave_0: left allmulticast mode [ 103.191068][ T55] bridge_slave_0: left promiscuous mode [ 103.196683][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.300332][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.311668][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.321767][ T55] bond0 (unregistering): Released all slaves [ 103.354260][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.364022][ T55] tipc: Disabling bearer [ 103.373816][ T55] tipc: Disabling bearer [ 103.379441][ T55] tipc: Disabling bearer [ 103.384644][ T55] tipc: Left network mode [ 103.440104][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 103.459663][ T55] IPVS: stopping master sync thread 4541 ... [ 103.471649][ T55] hsr_slave_0: left promiscuous mode [ 103.477529][ T55] hsr_slave_1: left promiscuous mode [ 103.483236][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.490660][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.499134][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.506600][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.516231][ T55] veth1_macvtap: left promiscuous mode [ 103.521796][ T55] veth0_macvtap: left promiscuous mode [ 103.527362][ T55] veth1_vlan: left promiscuous mode [ 103.532617][ T55] veth0_vlan: left promiscuous mode [ 103.610918][ T5827] 9pnet_virtio: no channels available for device [ 103.687802][ T5823] loop0: detected capacity change from 0 to 1024 [ 103.720348][ T5823] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.856477][ T5823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.321617][ T55] team0 (unregistering): Port device team_slave_1 removed [ 104.335550][ T55] team0 (unregistering): Port device team_slave_0 removed [ 104.522852][ T5840] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.625: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 104.589802][ T5823] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.625: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 104.648035][ T5843] loop3: detected capacity change from 0 to 1024 [ 104.659967][ T5843] EXT4-fs: Ignoring removed orlov option [ 104.665618][ T5843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.680759][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.687815][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.695112][ T5804] bridge_slave_0: entered allmulticast mode [ 104.701666][ T5804] bridge_slave_0: entered promiscuous mode [ 104.708525][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.715572][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.722781][ T5804] bridge_slave_1: entered allmulticast mode [ 104.729277][ T5804] bridge_slave_1: entered promiscuous mode [ 104.750033][ T5843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.766666][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.780143][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 104.780157][ T29] audit: type=1400 audit(2000000320.185:7761): avc: denied { setattr } for pid=5842 comm="syz.3.619" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.809468][ T29] audit: type=1400 audit(2000000320.195:7762): avc: denied { open } for pid=5842 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.828656][ T29] audit: type=1400 audit(2000000320.195:7763): avc: denied { kernel } for pid=5842 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.858151][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.878403][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.886942][ T29] audit: type=1400 audit(2000000320.255:7764): avc: denied { cpu } for pid=5842 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.906457][ T29] audit: type=1400 audit(2000000320.255:7765): avc: denied { write } for pid=5842 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.925932][ T29] audit: type=1400 audit(2000000320.285:7766): avc: denied { unlink } for pid=5700 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 104.968954][ T5804] team0: Port device team_slave_0 added [ 104.975621][ T5804] team0: Port device team_slave_1 added [ 105.003901][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.010923][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.036952][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.052047][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.059257][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.085343][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.118059][ T5804] hsr_slave_0: entered promiscuous mode [ 105.124113][ T5804] hsr_slave_1: entered promiscuous mode [ 105.130542][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.138328][ T5804] Cannot create hsr debugfs directory [ 105.196393][ T29] audit: type=1400 audit(2000000320.587:7767): avc: denied { connect } for pid=5853 comm="syz.0.622" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.216800][ T29] audit: type=1326 audit(2000000320.587:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e43dff9 code=0x7ffc0000 [ 105.240151][ T29] audit: type=1326 audit(2000000320.587:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9d0e43dff9 code=0x7ffc0000 [ 105.263447][ T29] audit: type=1326 audit(2000000320.587:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e43dff9 code=0x7ffc0000 [ 105.312077][ T55] IPVS: stop unused estimator thread 0... [ 105.479185][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.489204][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.498935][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.509596][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.529118][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.536217][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.574605][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.586622][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.649294][ T3380] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.668489][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.675575][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.692462][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.699518][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.770199][ T5804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.780544][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.863885][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.095021][ T5804] veth0_vlan: entered promiscuous mode [ 106.106291][ T5804] veth1_vlan: entered promiscuous mode [ 106.126052][ T5804] veth0_macvtap: entered promiscuous mode [ 106.146199][ T5804] veth1_macvtap: entered promiscuous mode [ 106.156471][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.167042][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.176846][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.187345][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.197233][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.207840][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.217660][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.228151][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.240483][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.250823][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.261257][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.271057][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.281503][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.291391][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.301799][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.311742][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.322185][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.334147][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.344219][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.352986][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.361752][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.370523][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.447750][ T5874] tun0: tun_chr_ioctl cmd 1074025677 [ 106.453096][ T5874] tun0: linktype set to 512 [ 106.474840][ T5874] hub 8-0:1.0: USB hub found [ 106.482826][ T5874] hub 8-0:1.0: 8 ports detected [ 106.490250][ T5872] infiniband syz1: set down [ 106.494754][ T5872] infiniband syz1: added ipvlan1 [ 106.510429][ T5872] RDS/IB: syz1: added [ 106.514542][ T5872] smc: adding ib device syz1 with port count 1 [ 106.521635][ T5872] smc: ib device syz1 port 1 has pnetid [ 106.964286][ T5888] 9pnet_virtio: no channels available for device [ 107.014685][ T5889] loop0: detected capacity change from 0 to 164 [ 107.074822][ T5889] bio_check_eod: 20515 callbacks suppressed [ 107.074835][ T5889] syz.0.626: attempt to access beyond end of device [ 107.074835][ T5889] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 107.123111][ T5889] syz.0.626: attempt to access beyond end of device [ 107.123111][ T5889] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.162542][ T5889] syz.0.626: attempt to access beyond end of device [ 107.162542][ T5889] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.202332][ T5892] syz.0.626: attempt to access beyond end of device [ 107.202332][ T5892] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.235153][ T5889] syz.0.626: attempt to access beyond end of device [ 107.235153][ T5889] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.248577][ T5892] syz.0.626: attempt to access beyond end of device [ 107.248577][ T5892] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.262410][ T5889] syz.0.626: attempt to access beyond end of device [ 107.262410][ T5889] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.291235][ T5892] syz.0.626: attempt to access beyond end of device [ 107.291235][ T5892] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.304925][ T5889] syz.0.626: attempt to access beyond end of device [ 107.304925][ T5889] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.329742][ T5889] syz.0.626: attempt to access beyond end of device [ 107.329742][ T5889] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.349003][ T5894] loop4: detected capacity change from 0 to 1024 [ 107.355712][ T5894] EXT4-fs: Ignoring removed oldalloc option [ 107.370934][ T5894] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 107.553470][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.660208][ T5900] loop4: detected capacity change from 0 to 512 [ 107.693987][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.705509][ T5900] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 107.739171][ T5900] System zones: 0-2, 18-18, 34-34 [ 107.780580][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.792289][ T5900] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.633: bg 0: block 248: padding at end of block bitmap is not set [ 107.806990][ T5900] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.633: Failed to acquire dquot type 1 [ 107.827879][ T5900] EXT4-fs (loop4): 1 truncate cleaned up [ 107.833847][ T5900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.857134][ T5900] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.883698][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.963565][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.060143][ T5919] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 108.067660][ T5919] EXT4-fs warning (device sda1): ext4_resize_fs:2040: can't shrink FS - resize aborted [ 108.094918][ T28] bridge_slave_1: left allmulticast mode [ 108.100648][ T28] bridge_slave_1: left promiscuous mode [ 108.106357][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.117026][ T28] bridge_slave_0: left allmulticast mode [ 108.122694][ T28] bridge_slave_0: left promiscuous mode [ 108.128420][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.229428][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.240235][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.251026][ T28] bond0 (unregistering): Released all slaves [ 108.272853][ T5905] chnl_net:caif_netlink_parms(): no params data found [ 108.312970][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.361256][ T28] hsr_slave_0: left promiscuous mode [ 108.369023][ T5934] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0605:0000:0023 with DS=0x32 [ 108.382762][ T28] hsr_slave_1: left promiscuous mode [ 108.390036][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.397532][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.406131][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.413515][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.427709][ T3994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.437161][ T28] veth1_macvtap: left promiscuous mode [ 108.442643][ T28] veth0_macvtap: left promiscuous mode [ 108.448132][ T28] veth1_vlan: left promiscuous mode [ 108.453442][ T28] veth0_vlan: left promiscuous mode [ 108.554238][ T28] team0 (unregistering): Port device team_slave_1 removed [ 108.564666][ T28] team0 (unregistering): Port device team_slave_0 removed [ 108.641467][ T5943] hub 6-0:1.0: USB hub found [ 108.646266][ T5943] hub 6-0:1.0: 8 ports detected [ 108.741578][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.748648][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.757193][ T5905] bridge_slave_0: entered allmulticast mode [ 108.764571][ T5905] bridge_slave_0: entered promiscuous mode [ 108.834103][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.841238][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.853368][ T5905] bridge_slave_1: entered allmulticast mode [ 108.860153][ T5905] bridge_slave_1: entered promiscuous mode [ 108.918859][ T5949] 9pnet_virtio: no channels available for device [ 108.955473][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.036213][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.099392][ T5905] team0: Port device team_slave_0 added [ 109.105547][ T5957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.105931][ T5905] team0: Port device team_slave_1 added [ 109.125865][ T5957] loop0: detected capacity change from 0 to 512 [ 109.137057][ T5956] netlink: 6 bytes leftover after parsing attributes in process `syz.4.645'. [ 109.146865][ T5957] EXT4-fs (loop0): too many log groups per flexible block group [ 109.154557][ T5957] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 109.161591][ T5957] EXT4-fs (loop0): mount failed [ 109.172892][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.179926][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.205871][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.217074][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.224075][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.249988][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.316141][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 109.318930][ T5975] loop0: detected capacity change from 0 to 1024 [ 109.329839][ T5975] EXT4-fs: inline encryption not supported [ 109.335886][ T5975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.342852][ T5975] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 109.356678][ T5974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.374004][ T5905] hsr_slave_0: entered promiscuous mode [ 109.383216][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.650'. [ 109.393385][ T5977] netlink: 76 bytes leftover after parsing attributes in process `syz.1.650'. [ 109.402594][ T5905] hsr_slave_1: entered promiscuous mode [ 109.409943][ T5905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.417771][ T5905] Cannot create hsr debugfs directory [ 109.418587][ T5975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.447964][ T5975] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 109.499355][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.513585][ T28] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.534754][ T5988] loop0: detected capacity change from 0 to 512 [ 109.542042][ T5988] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.563390][ T5988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.651: bg 0: block 64: padding at end of block bitmap is not set [ 109.573431][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.584502][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.587841][ T5988] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.651: Failed to acquire dquot type 0 [ 109.602843][ T5925] bridge_slave_0: entered allmulticast mode [ 109.604186][ T5988] EXT4-fs (loop0): 1 truncate cleaned up [ 109.614980][ T5988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.615272][ T5925] bridge_slave_0: entered promiscuous mode [ 109.639775][ T5988] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.651: Failed to acquire dquot type 0 [ 109.652287][ T28] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.652448][ T5988] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.675395][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.682497][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.689802][ T5925] bridge_slave_1: entered allmulticast mode [ 109.696331][ T5925] bridge_slave_1: entered promiscuous mode [ 109.703459][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.725928][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.736469][ T28] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.748044][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.767396][ T5925] team0: Port device team_slave_0 added [ 109.773820][ T5925] team0: Port device team_slave_1 added [ 109.777033][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 109.777045][ T29] audit: type=1400 audit(2000000325.197:8104): avc: denied { create } for pid=5994 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.807699][ T29] audit: type=1400 audit(2000000325.217:8105): avc: denied { write } for pid=5994 comm="syz.0.654" path="socket:[15336]" dev="sockfs" ino=15336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.831899][ T29] audit: type=1400 audit(2000000325.217:8106): avc: denied { nlmsg_read } for pid=5994 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.859695][ T28] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.870613][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.877589][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.903590][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.911341][ T29] audit: type=1400 audit(2000000325.338:8107): avc: denied { create } for pid=5998 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.914942][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.940999][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.966894][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.978877][ T29] audit: type=1400 audit(2000000325.419:8108): avc: denied { setopt } for pid=5998 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.998817][ T29] audit: type=1326 audit(2000000325.419:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e43dff9 code=0x7ffc0000 [ 110.024323][ T29] audit: type=1326 audit(2000000325.419:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d0e43dff9 code=0x7ffc0000 [ 110.047760][ T29] audit: type=1326 audit(2000000325.419:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e43dff9 code=0x7ffc0000 [ 110.071055][ T29] audit: type=1326 audit(2000000325.419:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d0e43dff9 code=0x7ffc0000 [ 110.094584][ T29] audit: type=1326 audit(2000000325.419:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e43dff9 code=0x7ffc0000 [ 110.096357][ T6000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.655'. [ 110.136690][ T5925] hsr_slave_0: entered promiscuous mode [ 110.143860][ T5925] hsr_slave_1: entered promiscuous mode [ 110.149805][ T5925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.157390][ T5925] Cannot create hsr debugfs directory [ 110.180187][ T6004] loop0: detected capacity change from 0 to 512 [ 110.187173][ T6004] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 110.198724][ T28] bridge_slave_1: left allmulticast mode [ 110.200857][ T6004] EXT4-fs (loop0): 1 truncate cleaned up [ 110.204397][ T28] bridge_slave_1: left promiscuous mode [ 110.210467][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.215644][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.235460][ T28] bridge_slave_0: left allmulticast mode [ 110.241117][ T28] bridge_slave_0: left promiscuous mode [ 110.246834][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.333338][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.343408][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.353311][ T28] bond0 (unregistering): Released all slaves [ 110.376520][ T6004] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.393106][ T28] tipc: Disabling bearer [ 110.398454][ T28] tipc: Disabling bearer [ 110.399013][ T6008] loop0: detected capacity change from 0 to 164 [ 110.403751][ T28] tipc: Left network mode [ 110.412155][ T6008] Unable to read rock-ridge attributes [ 110.419330][ T5905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.431336][ T28] IPVS: stopping master sync thread 5138 ... [ 110.439889][ T5974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.451254][ T5905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.459497][ T5905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.472920][ T5905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.495964][ T6010] loop4: detected capacity change from 0 to 128 [ 110.505638][ T5974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.517244][ T28] hsr_slave_0: left promiscuous mode [ 110.522902][ T28] hsr_slave_1: left promiscuous mode [ 110.528460][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.535865][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.543258][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.550767][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.559641][ T28] veth1_macvtap: left promiscuous mode [ 110.565183][ T28] veth0_macvtap: left promiscuous mode [ 110.616750][ T28] team0 (unregistering): Port device team_slave_1 removed [ 110.626198][ T28] team0 (unregistering): Port device team_slave_0 removed [ 110.664719][ T5974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.693361][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.704839][ T5905] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.713886][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.720940][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.737796][ T3380] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.744913][ T3380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.759602][ T5974] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.772391][ T5974] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.785119][ T5974] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.786668][ T6010] loop4: detected capacity change from 0 to 512 [ 110.796966][ T5974] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.815718][ T6010] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.823791][ T6010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.841010][ T6018] loop1: detected capacity change from 0 to 1024 [ 110.849549][ T6010] EXT4-fs (loop4): 1 truncate cleaned up [ 110.855882][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.856421][ T6010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.884608][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.903271][ T6010] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 110.960863][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.984510][ T6029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6029 comm=syz.4.660 [ 111.000846][ T5905] veth0_vlan: entered promiscuous mode [ 111.011003][ T5905] veth1_vlan: entered promiscuous mode [ 111.026513][ T5925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.041551][ T5905] veth0_macvtap: entered promiscuous mode [ 111.052855][ T5925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.063842][ T5905] veth1_macvtap: entered promiscuous mode [ 111.072030][ T5925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.177511][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.187996][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.197859][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.208308][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.218205][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.228624][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.243815][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.251218][ T5925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.321461][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.331957][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.341778][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.352301][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.362139][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.372865][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.383784][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.398026][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.661'. [ 111.413229][ T5905] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.421992][ T5905] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.430704][ T5905] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.439397][ T5905] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.451362][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.465334][ T6034] loop4: detected capacity change from 0 to 1024 [ 111.471968][ T6034] EXT4-fs: Ignoring removed orlov option [ 111.476380][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.477729][ T6034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.494340][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.501478][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.505705][ T6034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.521060][ T5925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.531570][ T5925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.549283][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.556366][ T3359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.621538][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.632494][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.662419][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.665'. [ 111.688535][ T6044] loop0: detected capacity change from 0 to 512 [ 111.696438][ T6044] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 111.714775][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.749251][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 111.774819][ T6063] xt_hashlimit: max too large, truncated to 1048576 [ 111.797530][ T6055] hsr_slave_1 (unregistering): left promiscuous mode [ 111.874999][ T5925] veth0_vlan: entered promiscuous mode [ 111.885262][ T5925] veth1_vlan: entered promiscuous mode [ 111.900000][ T5925] veth0_macvtap: entered promiscuous mode [ 111.909761][ T5925] veth1_macvtap: entered promiscuous mode [ 111.917536][ T6065] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 112.022114][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.032786][ T6065] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.171920][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.182469][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.192354][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.202763][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.212573][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.223121][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.232933][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.243407][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.268025][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.276316][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.286756][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.296587][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.297452][ T6073] loop4: detected capacity change from 0 to 1024 [ 112.306998][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.307011][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.333572][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.343502][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.345721][ T6075] loop1: detected capacity change from 0 to 1024 [ 112.353962][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.357597][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.382778][ T6075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.384096][ T5925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.396390][ T6075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.400351][ T5925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.421488][ T5925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.430284][ T5925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.436749][ T6073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.459131][ T6075] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.671: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 112.479532][ T6075] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.671: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 112.537135][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.743827][ T6090] loop2: detected capacity change from 0 to 512 [ 112.759714][ T6087] tipc: Started in network mode [ 112.764645][ T6087] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 112.780629][ T6087] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 112.789106][ T6087] tipc: Enabled bearer , priority 10 [ 112.815288][ T6090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.832286][ T6090] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.858902][ T6096] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 112.911363][ T6098] netlink: 'syz.0.676': attribute type 27 has an invalid length. [ 112.926837][ T6090] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 113.008104][ T6115] Process accounting resumed [ 113.014025][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.050099][ T6117] loop4: detected capacity change from 0 to 512 [ 113.082646][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.089839][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.115866][ T6117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.154970][ T6115] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 113.176877][ T6117] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.246622][ T5925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.256346][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.268799][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.416421][ T6098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.455637][ T6098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.540806][ T6098] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.549727][ T6098] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.558612][ T6098] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.567610][ T6098] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.607623][ T6132] netlink: 9 bytes leftover after parsing attributes in process `syz.1.681'. [ 113.621265][ T6132] gretap0: entered promiscuous mode [ 114.014518][ T6146] loop1: detected capacity change from 0 to 512 [ 114.036672][ T6146] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 114.154580][ T6110] tipc: Node number set to 1 [ 114.319681][ T6155] loop1: detected capacity change from 0 to 128 [ 114.348080][ T6155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.687'. [ 114.611965][ T6167] veth0_vlan: left promiscuous mode [ 114.627431][ T6167] veth0_vlan: entered promiscuous mode [ 114.640453][ T6166] loop4: detected capacity change from 0 to 512 [ 114.671382][ T6166] netlink: 'syz.4.690': attribute type 10 has an invalid length. [ 114.742233][ T6173] 9pnet_virtio: no channels available for device [ 114.806446][ T29] kauditd_printk_skb: 696 callbacks suppressed [ 114.806478][ T29] audit: type=1326 audit(2000000330.268:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 114.844590][ T6180] loop2: detected capacity change from 0 to 164 [ 114.849805][ T29] audit: type=1326 audit(2000000330.308:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 114.874192][ T29] audit: type=1326 audit(2000000330.308:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 114.897581][ T29] audit: type=1326 audit(2000000330.308:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 114.921085][ T29] audit: type=1326 audit(2000000330.308:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 114.944526][ T29] audit: type=1326 audit(2000000330.308:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 114.967831][ T29] audit: type=1326 audit(2000000330.308:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 114.991152][ T29] audit: type=1326 audit(2000000330.308:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 114.993773][ T6181] netlink: 'syz.0.695': attribute type 10 has an invalid length. [ 115.014432][ T29] audit: type=1326 audit(2000000330.308:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 115.032293][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.045449][ T29] audit: type=1326 audit(2000000330.308:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a97fdff9 code=0x7ffc0000 [ 115.054676][ T6181] bond0: (slave team0): Enslaving as an active interface with an up link [ 115.097163][ T6182] netlink: 'syz.0.695': attribute type 10 has an invalid length. [ 115.110314][ T6182] bond0: (slave team0): Releasing backup interface [ 115.137296][ T6182] bridge0: port 3(team0) entered blocking state [ 115.143606][ T6182] bridge0: port 3(team0) entered disabled state [ 115.154376][ T6182] team0: entered allmulticast mode [ 115.159577][ T6182] team_slave_0: entered allmulticast mode [ 115.165337][ T6182] team_slave_1: entered allmulticast mode [ 115.172944][ T6182] team0: entered promiscuous mode [ 115.178012][ T6182] team_slave_0: entered promiscuous mode [ 115.184070][ T6182] team_slave_1: entered promiscuous mode [ 115.193639][ T6186] tipc: New replicast peer: 100.1.1.1 [ 115.199056][ T6186] tipc: Enabled bearer , priority 10 [ 115.208444][ T6194] loop3: detected capacity change from 0 to 512 [ 115.215949][ T6194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.233352][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 115.248726][ T6192] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 115.269079][ T6194] EXT4-fs (loop3): 1 truncate cleaned up [ 115.296755][ T6194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.340398][ T6201] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.701'. [ 115.371587][ T6196] loop0: detected capacity change from 0 to 2048 [ 115.403253][ T5905] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.416607][ T6205] loop1: detected capacity change from 0 to 512 [ 115.425978][ T6205] EXT4-fs: Ignoring removed bh option [ 115.432298][ T6205] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.443798][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.458018][ T6205] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.701: bad orphan inode 17 [ 115.469164][ T6205] EXT4-fs (loop1): Remounting filesystem read-only [ 115.475683][ T6205] ext4_test_bit(bit=16, block=4) = 1 [ 115.481005][ T6205] is_bad_inode(inode)=0 [ 115.485142][ T6205] NEXT_ORPHAN(inode)=1048336 [ 115.489863][ T6205] max_ino=32 [ 115.493054][ T6205] i_nlink=0 [ 115.496400][ T6205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.509120][ T6205] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 115.516894][ T6196] loop0: detected capacity change from 2048 to 11 [ 115.524032][ T6205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.536001][ T6196] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory [ 115.545848][ T6196] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #18: comm syz.0.700: mark_inode_dirty error [ 115.651283][ T6196] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory [ 115.712570][ T6196] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #18: comm syz.0.700: mark_inode_dirty error [ 115.780974][ T6196] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 115.799081][ T6216] 9pnet_virtio: no channels available for device [ 115.810043][ T6214] loop2: detected capacity change from 0 to 2048 [ 115.825072][ T6214] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.844220][ T6196] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 115.897140][ T6196] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 115.908967][ T6221] loop1: detected capacity change from 0 to 512 [ 115.913071][ T6196] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 115.931713][ T6221] ext4: Unknown parameter 'func' [ 115.934358][ T6214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.952327][ T6196] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory [ 115.973609][ T6196] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #18: comm syz.0.700: mark_inode_dirty error [ 115.986159][ T6196] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory [ 115.995445][ T6196] EXT4-fs error (device loop0): ext4_ext_truncate:4457: inode #18: comm syz.0.700: mark_inode_dirty error [ 116.007328][ T6196] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory [ 116.016640][ T6196] EXT4-fs error (device loop0): ext4_truncate:4208: inode #18: comm syz.0.700: mark_inode_dirty error [ 116.048458][ T5537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.060589][ T6204] bio_check_eod: 8472 callbacks suppressed [ 116.060600][ T6204] kmmpd-loop0: attempt to access beyond end of device [ 116.060600][ T6204] loop0: rw=14337, sector=256, nr_sectors = 4 limit=11 [ 116.079941][ T6204] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 116.105460][ T6221] loop1: detected capacity change from 0 to 1024 [ 116.118480][ T6221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.132009][ T6221] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.179117][ T6214] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.704: bg 0: block 234: padding at end of block bitmap is not set [ 116.228540][ T6224] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 116.235703][ T6214] EXT4-fs (loop2): Remounting filesystem read-only [ 116.253635][ T6224] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 116.262828][ T6224] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 116.363491][ T6232] loop4: detected capacity change from 0 to 2048 [ 116.371382][ T6232] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 116.385180][ T6234] loop3: detected capacity change from 0 to 1024 [ 116.402129][ T3380] team0: left allmulticast mode [ 116.407050][ T3380] team_slave_0: left allmulticast mode [ 116.412562][ T3380] team_slave_1: left allmulticast mode [ 116.418039][ T3380] team0: left promiscuous mode [ 116.420954][ T6234] EXT4-fs: Ignoring removed oldalloc option [ 116.422789][ T3380] team_slave_0: left promiscuous mode [ 116.434088][ T3380] team_slave_1: left promiscuous mode [ 116.439555][ T3380] bridge0: port 3(team0) entered disabled state [ 116.454144][ T3380] bridge_slave_1: left allmulticast mode [ 116.460006][ T3380] bridge_slave_1: left promiscuous mode [ 116.465695][ T3380] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.474440][ T3380] bridge_slave_0: left allmulticast mode [ 116.474546][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.480100][ T3380] bridge_slave_0: left promiscuous mode [ 116.497761][ T3380] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.524900][ T5925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.552598][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.709'. [ 116.583035][ T5905] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.612633][ T6241] loop4: detected capacity change from 0 to 8192 [ 116.619395][ T6241] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000006' [ 116.676567][ T6247] loop3: detected capacity change from 0 to 512 [ 116.703387][ T6247] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.711264][ T6247] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.712: bg 0: block 248: padding at end of block bitmap is not set [ 116.731072][ T6247] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.712: Failed to acquire dquot type 1 [ 116.743850][ T3380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.762211][ T6247] EXT4-fs (loop3): 1 truncate cleaned up [ 116.768244][ T3380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.768287][ T6247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.804075][ T3380] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 116.804687][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.822296][ T3380] bond0 (unregistering): Released all slaves [ 116.832851][ T6245] netlink: 160 bytes leftover after parsing attributes in process `syz.3.712'. [ 116.866411][ T6252] loop1: detected capacity change from 0 to 512 [ 116.888173][ T5905] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.900804][ T6256] Illegal XDP return value 74195200 on prog (id 708) dev syz_tun, expect packet loss! [ 116.919610][ T3380] tipc: Disabling bearer [ 116.924958][ T3380] tipc: Left network mode [ 116.974051][ T3380] hsr_slave_0: left promiscuous mode [ 116.979697][ T6262] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 116.991970][ T6262] vhci_hcd: invalid port number 116 [ 116.997186][ T6262] vhci_hcd: default hub control req: 6a71 v6f75 i0074 l8765 [ 117.004787][ T3380] hsr_slave_1: left promiscuous mode [ 117.018247][ T3380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.026041][ T3380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.033937][ T3380] veth0_vlan: left promiscuous mode [ 117.039430][ T6267] 9pnet_virtio: no channels available for device [ 117.076387][ T152] smc: removing ib device syz1 [ 117.169130][ T3380] team0 (unregistering): Port device team_slave_1 removed [ 117.185420][ T3380] team0 (unregistering): Port device team_slave_0 removed [ 117.208841][ T6277] loop4: detected capacity change from 0 to 1024 [ 117.226125][ T6277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.415888][ T6235] chnl_net:caif_netlink_parms(): no params data found [ 117.479017][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.486178][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.508071][ T6235] bridge_slave_0: entered allmulticast mode [ 117.522613][ T6235] bridge_slave_0: entered promiscuous mode [ 117.537983][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.545058][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.567582][ T6235] bridge_slave_1: entered allmulticast mode [ 117.581367][ T6235] bridge_slave_1: entered promiscuous mode [ 117.600549][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 117.609481][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 117.647630][ T6235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.674626][ T6235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.733804][ T6235] team0: Port device team_slave_0 added [ 117.746687][ T6235] team0: Port device team_slave_1 added [ 117.783402][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.790353][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.790375][ T6235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.799553][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.833929][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.859933][ T6235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.940135][ T6235] hsr_slave_0: entered promiscuous mode [ 117.948567][ T6290] loop3: detected capacity change from 0 to 128 [ 117.948713][ T6235] hsr_slave_1: entered promiscuous mode [ 117.955333][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.000350][ T6292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.723'. [ 118.016423][ T6292] SELinux: policydb version -570608695 does not match my version range 15-33 [ 118.025534][ T6292] SELinux: failed to load policy [ 118.104982][ T6299] loop3: detected capacity change from 0 to 128 [ 118.122690][ T6299] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.143859][ T6299] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.269761][ T6297] loop4: detected capacity change from 0 to 512 [ 118.284110][ T6297] EXT4-fs: test_dummy_encryption option not supported [ 118.337062][ T6235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.341362][ T6315] loop4: detected capacity change from 0 to 764 [ 118.350720][ T6315] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 118.356536][ T6235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.390290][ T6235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.422753][ T6235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.425033][ T6319] 9pnet_virtio: no channels available for device [ 118.445990][ T5905] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.518254][ T6235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.541901][ T6235] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.550333][ T6326] loop3: detected capacity change from 0 to 8192 [ 118.552499][ T3380] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.563837][ T3380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.564099][ T6326] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.583230][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.590365][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.652012][ T6235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.724939][ T6235] veth0_vlan: entered promiscuous mode [ 118.734674][ T6235] veth1_vlan: entered promiscuous mode [ 118.750489][ T6235] veth0_macvtap: entered promiscuous mode [ 118.758692][ T6235] veth1_macvtap: entered promiscuous mode [ 118.769135][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.779652][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.789466][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.799987][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.809812][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.820273][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.830133][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.840654][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.851570][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.861952][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.872468][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.882449][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.892874][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.902689][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.913164][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.923082][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.933563][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.944750][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.955979][ T6235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.964711][ T6235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.973434][ T6235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.982143][ T6235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.032593][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.041531][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.056036][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.065188][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.078637][ T6343] loop0: detected capacity change from 0 to 512 [ 119.086519][ T6343] EXT4-fs (loop0): Invalid default hash set in the superblock [ 119.097733][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 119.340605][ T6349] syz.1.734[6349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.340720][ T6349] syz.1.734[6349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.352061][ T6349] syz.1.734[6349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.382519][ T6349] loop1: detected capacity change from 0 to 1024 [ 119.401584][ T6349] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 119.412638][ T6349] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 119.425805][ T6349] JBD2: no valid journal superblock found [ 119.431554][ T6349] EXT4-fs (loop1): Could not load journal inode [ 119.456380][ T6348] loop2: detected capacity change from 0 to 1024 [ 119.500545][ T6348] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.591090][ T6348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.655755][ T5925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.702514][ T6360] xt_TCPMSS: Only works on TCP SYN packets [ 119.774563][ T6351] loop4: detected capacity change from 0 to 164 [ 119.783220][ T6369] bridge0: port 3(bond0) entered blocking state [ 119.789557][ T6369] bridge0: port 3(bond0) entered disabled state [ 119.796057][ T6369] bond0: entered allmulticast mode [ 119.801395][ T6369] bond_slave_0: entered allmulticast mode [ 119.807296][ T6369] bond_slave_1: entered allmulticast mode [ 119.808904][ T6371] 9pnet_virtio: no channels available for device [ 119.815316][ T6369] bond0: entered promiscuous mode [ 119.824572][ T6369] bond_slave_0: entered promiscuous mode [ 119.830440][ T6369] bond_slave_1: entered promiscuous mode [ 119.840202][ T6369] bridge0: port 3(bond0) entered blocking state [ 119.846488][ T6369] bridge0: port 3(bond0) entered forwarding state [ 119.853305][ T29] kauditd_printk_skb: 768 callbacks suppressed [ 119.853316][ T29] audit: type=1400 audit(2000000335.346:9586): avc: denied { mount } for pid=6368 comm="syz.2.741" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 119.887974][ T6376] loop4: detected capacity change from 0 to 512 [ 119.894990][ T6376] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.912903][ T29] audit: type=1400 audit(2000000335.406:9587): avc: denied { unmount } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 119.933227][ T6376] EXT4-fs (loop4): 1 truncate cleaned up [ 119.940148][ T6376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.045522][ T29] audit: type=1400 audit(2000000335.547:9588): avc: denied { bind } for pid=6374 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.065230][ T29] audit: type=1400 audit(2000000335.547:9589): avc: denied { node_bind } for pid=6374 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 120.276144][ T29] audit: type=1326 audit(2000000335.768:9590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 120.299609][ T29] audit: type=1326 audit(2000000335.768:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 120.350365][ T29] audit: type=1326 audit(2000000335.818:9592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 120.373780][ T29] audit: type=1326 audit(2000000335.818:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 120.397081][ T29] audit: type=1326 audit(2000000335.818:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 120.420392][ T29] audit: type=1326 audit(2000000335.818:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 120.468477][ T6390] loop4: detected capacity change from 0 to 256 [ 120.512342][ T6390] FAT-fs (loop4): Directory bread(block 64) failed [ 120.527197][ T6390] FAT-fs (loop4): Directory bread(block 65) failed [ 120.538474][ T6390] FAT-fs (loop4): Directory bread(block 66) failed [ 120.546210][ T6390] FAT-fs (loop4): Directory bread(block 67) failed [ 120.553895][ T6390] FAT-fs (loop4): Directory bread(block 68) failed [ 120.558671][ T6392] netlink: 'syz.0.748': attribute type 27 has an invalid length. [ 120.560913][ T6390] FAT-fs (loop4): Directory bread(block 69) failed [ 120.577178][ T6390] FAT-fs (loop4): Directory bread(block 70) failed [ 120.584325][ T6390] FAT-fs (loop4): Directory bread(block 71) failed [ 120.591018][ T6390] FAT-fs (loop4): Directory bread(block 72) failed [ 120.599741][ T6390] FAT-fs (loop4): Directory bread(block 73) failed [ 120.626887][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 120.652001][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.659172][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.041180][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.052828][ T6401] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 121.053000][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.110087][ T6392] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.118972][ T6392] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.127973][ T6392] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.137004][ T6392] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.180461][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.188666][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.198320][ T6394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.216334][ T6395] netlink: 'syz.3.747': attribute type 4 has an invalid length. [ 121.224304][ T6395] netlink: 152 bytes leftover after parsing attributes in process `syz.3.747'. [ 121.276150][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.276150][ T3283] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 121.291900][ T6414] 9pnet_virtio: no channels available for device [ 121.294704][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.294704][ T3283] loop4: rw=1, sector=1864, nr_sectors = 3256 limit=256 [ 121.363841][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.363841][ T3283] loop4: rw=1, sector=5120, nr_sectors = 3104 limit=256 [ 121.373960][ T6420] syzkaller0: entered allmulticast mode [ 121.381320][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.381320][ T3283] loop4: rw=1, sector=8224, nr_sectors = 2144 limit=256 [ 121.400327][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.400327][ T3283] loop4: rw=1, sector=10368, nr_sectors = 2048 limit=256 [ 121.401889][ T6420] syzkaller0 (unregistering): left allmulticast mode [ 121.403787][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.403787][ T3283] loop4: rw=1, sector=12416, nr_sectors = 2560 limit=256 [ 121.405530][ T6429] syz.3.758[6429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.405648][ T6429] syz.3.758[6429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.405743][ T6429] syz.3.758[6429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.409171][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.409171][ T3283] loop4: rw=1, sector=14976, nr_sectors = 4232 limit=256 [ 121.415143][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.415143][ T3283] loop4: rw=1, sector=19208, nr_sectors = 3800 limit=256 [ 121.419597][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.419597][ T3283] loop4: rw=1, sector=23008, nr_sectors = 2048 limit=256 [ 121.425639][ T3283] kworker/u8:6: attempt to access beyond end of device [ 121.425639][ T3283] loop4: rw=1, sector=25056, nr_sectors = 5008 limit=256 [ 121.592162][ T6441] loop1: detected capacity change from 0 to 256 [ 121.599586][ T6443] loop4: detected capacity change from 0 to 512 [ 121.608793][ T6443] EXT4-fs (loop4): filesystem is read-only [ 121.716166][ T6443] loop4: detected capacity change from 0 to 1024 [ 121.727689][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 121.749872][ T6443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 121.758248][ T6443] System zones: 0-1, 3-12 [ 122.219890][ T6459] netlink: 276 bytes leftover after parsing attributes in process `syz.4.764'. [ 122.231649][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 122.240533][ T6461] Cannot find set identified by id 0 to match [ 122.256556][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 122.274075][ T6464] 9pnet_virtio: no channels available for device [ 122.277014][ T6465] loop3: detected capacity change from 0 to 128 [ 122.292105][ T6461] hsr_slave_1 (unregistering): left promiscuous mode [ 122.319117][ T6467] netlink: 'syz.4.768': attribute type 30 has an invalid length. [ 122.365470][ T6475] loop1: detected capacity change from 0 to 128 [ 122.372494][ T6475] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 122.471692][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 122.483793][ T6487] syz.3.772[6487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.483921][ T6487] syz.3.772[6487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.498807][ T6487] syz.3.772[6487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.636536][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 122.663260][ T6501] team0 (unregistering): Port device team_slave_0 removed [ 122.673565][ T6501] team0 (unregistering): Port device team_slave_1 removed [ 122.830434][ T6510] loop2: detected capacity change from 0 to 1024 [ 122.857891][ T6510] EXT4-fs: Ignoring removed orlov option [ 122.863671][ T6510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.877820][ T6512] 9pnet_virtio: no channels available for device [ 122.946458][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 122.968424][ T6516] hsr_slave_1 (unregistering): left promiscuous mode [ 123.049961][ T6521] loop2: detected capacity change from 0 to 512 [ 123.061327][ T6521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.072787][ T6521] EXT4-fs (loop2): 1 truncate cleaned up [ 123.083807][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.092560][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.101917][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.110532][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.119609][ T6521] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.158192][ T6527] loop3: detected capacity change from 0 to 2048 [ 123.256156][ T3380] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 123.273293][ T6532] loop1: detected capacity change from 0 to 512 [ 123.283543][ T6527] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.298425][ T6527] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 123.310286][ T6532] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 123.310791][ T6527] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.310791][ T6527] [ 123.318642][ T6532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 123.328246][ T6527] EXT4-fs (loop3): Total free blocks count 0 [ 123.338695][ T6532] System zones: 0-1 [ 123.342221][ T6527] EXT4-fs (loop3): Free/Dirty block details [ 123.342235][ T6527] EXT4-fs (loop3): free_blocks=2415919104 [ 123.346014][ T6532] , 15-15 [ 123.351897][ T6527] EXT4-fs (loop3): dirty_blocks=32 [ 123.351909][ T6527] EXT4-fs (loop3): Block reservation details [ 123.351919][ T6527] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 123.377584][ T6532] , 18-18, 34-34 [ 123.453988][ T6532] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.460460][ T6532] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 123.475026][ T6532] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 123.482241][ T6532] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.783: bad orphan inode 16 [ 123.505114][ T6536] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 27 with error 28 [ 123.517453][ T6536] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.517453][ T6536] [ 123.528973][ T6532] ext4_test_bit(bit=15, block=18) = 1 [ 123.534376][ T6532] is_bad_inode(inode)=0 [ 123.538620][ T6532] NEXT_ORPHAN(inode)=0 [ 123.542747][ T6532] max_ino=32 [ 123.545930][ T6532] i_nlink=2 [ 123.673122][ T6532] EXT4-fs (loop1): shut down requested (1) [ 123.708419][ T6532] xt_hashlimit: size too large, truncated to 1048576 [ 123.842002][ T6550] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 123.963989][ T6553] veth0: entered allmulticast mode [ 123.970190][ T6552] veth0: left allmulticast mode [ 124.006213][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.788'. [ 124.133511][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.153432][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.433517][ T6564] 9pnet_virtio: no channels available for device [ 124.470231][ T6566] loop1: detected capacity change from 0 to 512 [ 124.483731][ T6566] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.548028][ T6574] netlink: 'syz.1.794': attribute type 5 has an invalid length. [ 124.577461][ T6580] loop1: detected capacity change from 0 to 512 [ 124.588568][ T6580] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 124.600482][ T6580] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 124.607057][ T6580] EXT4-fs (loop1): mount failed [ 124.626926][ T6580] loop1: detected capacity change from 0 to 512 [ 124.642753][ T6580] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.126893][ T5804] EXT4-fs unmount: 14 callbacks suppressed [ 125.126908][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.153597][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 125.153611][ T29] audit: type=1400 audit(2000000340.673:10001): avc: denied { read } for pid=6594 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 125.251435][ T29] audit: type=1400 audit(2000000340.774:10002): avc: denied { read } for pid=6596 comm="syz.1.799" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.374868][ T29] audit: type=1326 audit(2000000340.894:10003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 125.418869][ T29] audit: type=1326 audit(2000000340.924:10004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 125.442509][ T29] audit: type=1326 audit(2000000340.924:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 125.466029][ T29] audit: type=1326 audit(2000000340.924:10006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 125.489528][ T29] audit: type=1326 audit(2000000340.924:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 125.513060][ T29] audit: type=1326 audit(2000000340.924:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 125.537275][ T29] audit: type=1326 audit(2000000340.924:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 125.561392][ T29] audit: type=1326 audit(2000000340.924:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84941edff9 code=0x7ffc0000 [ 125.773435][ T6623] loop2: detected capacity change from 0 to 2048 [ 125.808301][ T6623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.820673][ T6623] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.847814][ T6623] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 125.922515][ T5925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.038052][ T6635] loop2: detected capacity change from 0 to 1024 [ 126.046081][ T6635] EXT4-fs: dax option not supported [ 126.234736][ T6640] syzkaller0: entered allmulticast mode [ 126.362171][ T6644] syzkaller0 (unregistering): left allmulticast mode [ 126.488426][ T6656] loop0: detected capacity change from 0 to 1024 [ 126.495695][ T6656] EXT4-fs: Ignoring removed oldalloc option [ 126.509374][ T6656] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 126.550924][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.654550][ T6664] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.691775][ T6656] loop0: detected capacity change from 1024 to 64 [ 126.701150][ T6665] bio_check_eod: 2 callbacks suppressed [ 126.701243][ T6665] syz.0.811: attempt to access beyond end of device [ 126.701243][ T6665] loop0: rw=2049, sector=224, nr_sectors = 2 limit=64 [ 126.720062][ T6665] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 112) [ 126.733254][ T6665] syz.0.811: attempt to access beyond end of device [ 126.733254][ T6665] loop0: rw=2049, sector=230, nr_sectors = 2 limit=64 [ 126.746548][ T6665] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 115) [ 126.767177][ T6665] Buffer I/O error on device loop0, logical block 115 [ 126.768353][ T6663] loop2: detected capacity change from 0 to 8192 [ 126.773969][ T6665] Buffer I/O error on device loop0, logical block 112 [ 126.780510][ T6663] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000007' [ 126.872464][ T6667] loop3: detected capacity change from 0 to 1024 [ 126.886620][ T6663] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.898189][ T6667] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.993187][ T6667] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.813: Invalid block bitmap block 0 in block_group 0 [ 127.009826][ T6667] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.813: Failed to acquire dquot type 0 [ 127.018685][ T6235] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 127.022253][ T6667] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.813: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.038051][ T6235] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 127.050228][ T6667] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.813: Invalid inode bitmap blk 0 in block_group 0 [ 127.062861][ T6235] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 127.074174][ T152] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:5: Failed to release dquot type 0 [ 127.087161][ T6667] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 127.098507][ T6235] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 127.107484][ T6667] EXT4-fs (loop3): 1 orphan inode deleted [ 127.120385][ T6235] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 127.129768][ T6667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.138980][ T6235] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 127.166174][ T6235] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 127.174029][ T6667] netlink: 'syz.3.813': attribute type 4 has an invalid length. [ 127.180002][ T6235] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 127.221036][ T5905] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.246655][ T6678] loop2: detected capacity change from 0 to 1024 [ 127.253829][ T6678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.260553][ T6235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.274322][ T6678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.289796][ T6659] kmmpd-loop0: attempt to access beyond end of device [ 127.289796][ T6659] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 127.303368][ T6659] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 127.322869][ T6678] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.818: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 127.354088][ T6678] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.818: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 127.510944][ T11] bridge_slave_1: left allmulticast mode [ 127.516625][ T11] bridge_slave_1: left promiscuous mode [ 127.522274][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.530159][ T11] bridge_slave_0: left allmulticast mode [ 127.535805][ T11] bridge_slave_0: left promiscuous mode [ 127.541520][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.619486][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.629382][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.639182][ T11] bond0 (unregistering): Released all slaves [ 127.705714][ T11] hsr_slave_0: left promiscuous mode [ 127.711369][ T11] hsr_slave_1: left promiscuous mode [ 127.717534][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.725114][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.769652][ T11] team0 (unregistering): Port device team_slave_1 removed [ 127.780214][ T11] team0 (unregistering): Port device team_slave_0 removed [ 127.955604][ T6678] ================================================================== [ 127.963692][ T6678] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 127.970987][ T6678] [ 127.973304][ T6678] read to 0xffff888104cbc618 of 4 bytes by task 6682 on cpu 0: [ 127.980842][ T6678] atime_needs_update+0x261/0x3e0 [ 127.985866][ T6678] touch_atime+0x4a/0x350 [ 127.990188][ T6678] filemap_splice_read+0x8a5/0x910 [ 127.995307][ T6678] ext4_file_splice_read+0x8f/0xb0 [ 128.000420][ T6678] splice_direct_to_actor+0x269/0x670 [ 128.005792][ T6678] do_splice_direct+0xd7/0x150 [ 128.010552][ T6678] do_sendfile+0x39b/0x970 [ 128.014971][ T6678] __x64_sys_sendfile64+0x110/0x150 [ 128.020174][ T6678] x64_sys_call+0xed5/0x2d60 [ 128.024774][ T6678] do_syscall_64+0xc9/0x1c0 [ 128.029285][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.035188][ T6678] [ 128.037508][ T6678] write to 0xffff888104cbc618 of 4 bytes by task 6678 on cpu 1: [ 128.045137][ T6678] touch_atime+0x1f3/0x350 [ 128.049552][ T6678] filemap_splice_read+0x8a5/0x910 [ 128.054671][ T6678] ext4_file_splice_read+0x8f/0xb0 [ 128.059793][ T6678] splice_direct_to_actor+0x269/0x670 [ 128.065169][ T6678] do_splice_direct+0xd7/0x150 [ 128.069936][ T6678] do_sendfile+0x39b/0x970 [ 128.074358][ T6678] __x64_sys_sendfile64+0x110/0x150 [ 128.079560][ T6678] x64_sys_call+0xed5/0x2d60 [ 128.084162][ T6678] do_syscall_64+0xc9/0x1c0 [ 128.088670][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.094581][ T6678] [ 128.096900][ T6678] value changed: 0x1d0a6b29 -> 0x1da3ba08 [ 128.102616][ T6678] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 128.104938][ T6678] Reported by Kernel Concurrency Sanitizer on: [ 128.111079][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.2.818 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 128.121670][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.131713][ T6678] ================================================================== [ 128.152428][ T5925] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.437235][ T11] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.514700][ T11] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.565584][ T11] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.613859][ T11] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.684559][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.724568][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.774334][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.843939][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.891804][ T11] bridge_slave_1: left allmulticast mode [ 128.897424][ T11] bridge_slave_1: left promiscuous mode [ 128.903107][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.910522][ T11] bridge_slave_0: left allmulticast mode [ 128.916156][ T11] bridge_slave_0: left promiscuous mode [ 128.921811][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.929841][ T11] bond0: left allmulticast mode [ 128.934760][ T11] bond_slave_0: left allmulticast mode [ 128.940194][ T11] bond_slave_1: left allmulticast mode [ 128.945806][ T11] bond0: left promiscuous mode [ 128.950555][ T11] bond_slave_0: left promiscuous mode [ 128.955997][ T11] bond_slave_1: left promiscuous mode [ 128.961681][ T11] bridge0: port 3(bond0) entered disabled state [ 128.968358][ T11] bridge_slave_1: left allmulticast mode [ 128.974018][ T11] bridge_slave_1: left promiscuous mode [ 128.979653][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.987249][ T11] bridge_slave_0: left allmulticast mode [ 128.992967][ T11] bridge_slave_0: left promiscuous mode [ 128.998614][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.261153][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.271144][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.280915][ T11] bond0 (unregistering): Released all slaves [ 129.289877][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.299558][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.309538][ T11] bond0 (unregistering): Released all slaves [ 129.391063][ T11] hsr_slave_0: left promiscuous mode [ 129.396583][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.403953][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.411338][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.418760][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.427397][ T11] hsr_slave_0: left promiscuous mode [ 129.432992][ T11] hsr_slave_1: left promiscuous mode [ 129.438693][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.446049][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.453456][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.460847][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.470831][ T11] veth1_macvtap: left promiscuous mode [ 129.476291][ T11] veth0_macvtap: left promiscuous mode [ 129.481765][ T11] veth1_vlan: left promiscuous mode [ 129.487061][ T11] veth0_vlan: left promiscuous mode [ 129.492731][ T11] veth1_macvtap: left promiscuous mode [ 129.498286][ T11] veth0_macvtap: left promiscuous mode [ 129.503803][ T11] veth1_vlan: left promiscuous mode [ 129.509107][ T11] veth0_vlan: left promiscuous mode [ 129.608799][ T11] team0 (unregistering): Port device team_slave_1 removed [ 129.618220][ T11] team0 (unregistering): Port device team_slave_0 removed [ 130.228534][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.287104][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.336519][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.406257][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.464151][ T11] bridge_slave_1: left allmulticast mode [ 130.469849][ T11] bridge_slave_1: left promiscuous mode [ 130.475510][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.483354][ T11] bridge_slave_0: left allmulticast mode [ 130.489023][ T11] bridge_slave_0: left promiscuous mode [ 130.494605][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.566094][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.575923][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.585672][ T11] bond0 (unregistering): Released all slaves [ 130.645538][ T11] hsr_slave_0: left promiscuous mode [ 130.651156][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.658536][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.665905][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.673284][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.681545][ T11] veth1_macvtap: left promiscuous mode [ 130.687085][ T11] veth0_macvtap: left promiscuous mode [ 130.692543][ T11] veth1_vlan: left promiscuous mode [ 130.697745][ T11] veth0_vlan: left promiscuous mode [ 130.756514][ T11] team0 (unregistering): Port device team_slave_1 removed [ 130.766072][ T11] team0 (unregistering): Port device team_slave_0 removed