last executing test programs: 34.264851386s ago: executing program 1 (id=58): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 34.144642328s ago: executing program 1 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'team0\x00'}}, 0x1e) close(r2) 34.118985119s ago: executing program 1 (id=68): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) 34.049411221s ago: executing program 1 (id=71): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 33.774036386s ago: executing program 1 (id=80): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 33.257333686s ago: executing program 1 (id=92): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 33.240252576s ago: executing program 32 (id=92): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 25.83677734s ago: executing program 2 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000280), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x81901) 25.83485865s ago: executing program 2 (id=255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={0x0, r1}, 0x18) 25.707591042s ago: executing program 2 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000010000000011"], 0x24}}, 0x0) 25.566489835s ago: executing program 2 (id=259): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 25.398314048s ago: executing program 2 (id=264): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() pipe2$9p(&(0x7f0000000300), 0x800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) 24.966370276s ago: executing program 0 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 24.844993249s ago: executing program 0 (id=275): socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x0, 0x2af, &(0x7f00000005c0)="$eJzs3E9rY1UUAPDzJmkmU5B0IQyK4BM3rsJ0xIW7KVJBDChKEMWFxcmg5NWBCRSSxXRmo19C8Rvo0q3oQtz4FUSQKrhxcCMiRPLnpZnMyx9b0sL099vkcN8995x30/a1tL0fPLPfvnm7c+vBg6OoVpMoJ3Ej/onYiktRitx3AQA8Pv7u9+PP/sh59wIAnA3PfwC4eIqf/+XZaW+OXg7PsjUAYE1O9PP/X3lwZV1tAQBr9Pa7772+02jsvpWm1Yj9zw6aB83ha/5ovxUfRxatuBa1+DeiPzGKX32tsXstHfhtK5r7h+P8w4Pm6K8Hd/L87ajFVlF+srudjjycvxGb4/yfN6MV16MWTxbXv16YX4kXnp+qX4/aRnwYtyOLmzHIPc6/u52mr7zRSKMcU/mXh/OGir/N8fsSAAAAAAAAAAAAAAAAAAAAAABOrJ5OFJ7fU6/Puz7K35l/PlD14fOBZs/nKcfTjxwzDAAAAAAAAAAAAAAAAAAAABdTp9tr72VZ686i4JMfv/o+YvGc7tFP995Zsk63107GdZcXnRdUV+t5afDEc79+XnRpcxjcT5bvT7KkRGm8xv9s7NtnZ0beLxWvc2l6JLm3QonqePeXt1GajFSiqPoPRx899WLn6kuPpuc1hiOTYKbE5VO9g5UourSx6EPrj1pE4YL3T9BGOtiOycjXgyC/69Pc15WV352pIL/rqc+v6TnHu3H1ixt739z95fdVV17blxwAAAAAAAAAAAAAAAAAAGCO4b+Rr+TTl9fdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcl063197LslYlur0vI8tad/KRRUESEcvmHAfnfY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfAAAA//9My3qn") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="018d008d008d"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 24.730381001s ago: executing program 0 (id=278): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.595114334s ago: executing program 0 (id=280): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TDeJTasbtXqhhUaKGPzIR1PSBgsqeOmV9QVikpbotrFNBFtyYUHsA2gfQLxsH8EL8U4QvClee6cUiiS5lshsZpNJsps2H+tU5/eDgXPmg3P+M7N7zp5z2AAqazAivoyI3oj4JCLq+f4k3+Ld9S07b3V5aTrbklhbu/hX0jy+srw0HYVrMsfyzFAakX6VxMttyl24cfPTqUZj9nqeH1m88tnIwo2bb81dmbo8e3n26vjo5OTo+PmJyYlDi/WPuP37hfvv17/55fRvP3384URW3+P5sWIch2UwBjfuyXbDh11YyZ4qpJNaiRVhT9KIOBIRtebnvx5HYvPh1eOHeqmVAwC6Ym3tnW15AOD/L9HmA0DFtH73rywvTbe2MsYhyvLwvfXJq5V8bnN1I/7axkxIz7b5rcM0GBH37pw7lW2x6zxk2qUaAABV82PW/znfrv+XxsnCeUcjoj9f23U8Ip6OiGcK68X2a3Bbfmf/J31wwCJ2lfX/LhTWtq0W4s8NHMlzWcwD0ZNcmmvMjubxD0VPX5Yf26WMkxdf/LvTsWL/717t3Kms/FZfMK/Hg1rf1mtmphanDhJz0cNbES/V2sWfbPR/k2bcHdx6dBlvX7v7QqdjW+K/0y7+7lr7LuK1ts9/c+Vesvv6xJHm+zDSeit2uv36q9c6lV92/Nnz7989/oGkuF5zYe9l/Hx27tdOxx4df/v3vzf5qJnuzfd9MbW4eH0sojf5YOf+M5vXtvKt87P4h063//yfiM078WxEPBcRz0c093d8odt4s/H9K/uPv7uy+Gf29Pz3nuj/+u79TuW3jX/LT93s+Z9tpobyPY/z/fe4Fdz/nQMAAID/jrQ5npukwxvpNB0eXh/nPRH9aWN+YfGNS/OfX51ZH/cdiJ60NdJVL4yHjuVjhK38mW358XwM5du+o8388PR8Y6bs4AGgoo51aP8zf/aVXTsAoGu6tbgdAHhyaf8BoHq0/wBQPdp/AKge7T8AVI/2HwAq5SD/61eFRBpPRDUkJP7lRNnfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fonAAD//2Wz014=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 24.530704535s ago: executing program 2 (id=281): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, &(0x7f0000000340)='./file0\x00') 24.530568245s ago: executing program 33 (id=281): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, &(0x7f0000000340)='./file0\x00') 24.425738657s ago: executing program 0 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r5 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x3, 0x10, 0x3}, {0x6e81, 0xc, 0x9, 0x5}, {0x8, 0xa4, 0x80, 0x6d44}, {0x6, 0x5, 0x7, 0x8}, {0x4, 0x76, 0x7, 0x9}]}) 10.179448773s ago: executing program 3 (id=568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdc00, {{@in6=@private0, @in=@multicast1, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 10.131941274s ago: executing program 3 (id=572): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 9.985719577s ago: executing program 3 (id=574): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x2, 0x0) 9.762682471s ago: executing program 3 (id=576): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 9.762590591s ago: executing program 35 (id=576): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 8.067892684s ago: executing program 4 (id=603): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8.067437534s ago: executing program 4 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 8.011097895s ago: executing program 4 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 7.945011046s ago: executing program 4 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x84000, 0x0) 7.885841578s ago: executing program 4 (id=609): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051) 7.680546181s ago: executing program 4 (id=611): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/92) fcntl$getown(0xffffffffffffffff, 0x9) 7.680418411s ago: executing program 36 (id=611): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/92) fcntl$getown(0xffffffffffffffff, 0x9) 1.493871541s ago: executing program 9 (id=804): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x3, 0x10, 0x3}, {0x6e81, 0xc, 0x9, 0x5}, {0x8, 0xa4, 0x80, 0x6d44}, {0x6, 0x5, 0x7, 0x8}, {0x4, 0x76, 0x7, 0x9}]}) 1.339251594s ago: executing program 8 (id=811): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3dc38396}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @random="8608119827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0x1, @private2, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0xfffc, @local}}}}}}, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/211, &(0x7f00000000c0)=0xd3) 1.263976906s ago: executing program 8 (id=813): epoll_create1(0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@sysvgroups}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r1, &(0x7f0000000480)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 1.147398578s ago: executing program 8 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 1.091057939s ago: executing program 8 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) 1.03545375s ago: executing program 8 (id=820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) 972.939901ms ago: executing program 5 (id=824): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x10, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 914.463143ms ago: executing program 7 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4ea4, 0x1, @mcast1, 0x4}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 813.755854ms ago: executing program 7 (id=826): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 809.814354ms ago: executing program 5 (id=827): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001180)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000001240)={0x0, 0x9}, 0x8) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 735.491636ms ago: executing program 7 (id=828): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 664.463598ms ago: executing program 8 (id=832): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 620.367808ms ago: executing program 6 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 619.871188ms ago: executing program 5 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 597.388809ms ago: executing program 9 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000000000900000054"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 590.006209ms ago: executing program 6 (id=836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcc4, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0xce) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 582.894329ms ago: executing program 5 (id=837): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 566.720419ms ago: executing program 9 (id=838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) 552.85897ms ago: executing program 6 (id=839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 541.4966ms ago: executing program 9 (id=840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) 515.49266ms ago: executing program 6 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x40}}, 0x10, 0x0}, 0x41) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0xb138e9a15534fe61, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfffeffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x48040) 509.020031ms ago: executing program 7 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 506.50538ms ago: executing program 5 (id=843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60002016}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 467.823651ms ago: executing program 6 (id=845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) 460.147311ms ago: executing program 5 (id=846): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x3, 0x10, 0x3}, {0x6e81, 0xc, 0x9, 0x5}, {0x8, 0xa4, 0x80, 0x6d44}, {0x6, 0x5, 0x7, 0x8}, {0x4, 0x76, 0x7, 0x9}]}) 435.615652ms ago: executing program 9 (id=847): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b703000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300), 0x1, 0x4f2, &(0x7f0000000600)="$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") 361.698043ms ago: executing program 7 (id=848): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4c002) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000001000000000c"], 0x24}}, 0x4004) 325.763184ms ago: executing program 9 (id=849): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='kmem_cache_free\x00', &(0x7f00000003c0)='\x05-\x00', &(0x7f0000000400)='+Z}@\x00', &(0x7f0000000440)='(({\'\x00', &(0x7f0000000480)='GPL\x00']}, &(0x7f00000007c0)={[&(0x7f0000000540)='}^-#*:/-#-#\x00', &(0x7f0000000580)='}\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='GPL\x00', &(0x7f0000000640)='GPL\x00', &(0x7f0000000680)='\x00', &(0x7f0000000700)='kmem_cache_free\x00', &(0x7f0000000740)='bpf\x00', &(0x7f0000000780)='bpf\x00']}, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = gettid() r5 = eventfd2(0x0, 0x0) write$eventfd(r5, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r5, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x1808, 0x10000, 0x0, 0x5, 0xb, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, r1, 0x2) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r6, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r7 = fsmount(r0, 0x0, 0x0) symlinkat(0x0, r7, &(0x7f0000000140)='./file0\x00') 316.663634ms ago: executing program 7 (id=850): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000360155380000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4000000000000}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000b80)={'#! ', './file0'}, 0xb) kernel console output (not intermixed with test programs): he MTU to 1560 would solve the problem. [ 26.876977][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.888191][ T3302] team0: Port device team_slave_0 added [ 26.894619][ T3302] team0: Port device team_slave_1 added [ 26.914123][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.923448][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.930403][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.956322][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.971163][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.978200][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.985584][ T3307] bridge_slave_0: entered allmulticast mode [ 26.992738][ T3307] bridge_slave_0: entered promiscuous mode [ 26.999426][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.006338][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.032228][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.043852][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.053208][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.060145][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.086095][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.105281][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.112427][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.119735][ T3307] bridge_slave_1: entered allmulticast mode [ 27.126110][ T3307] bridge_slave_1: entered promiscuous mode [ 27.144056][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.151042][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.177056][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.201938][ T3306] team0: Port device team_slave_0 added [ 27.207857][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.214875][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.240746][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.253981][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.268535][ T3306] team0: Port device team_slave_1 added [ 27.288486][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.299419][ T3301] hsr_slave_0: entered promiscuous mode [ 27.305386][ T3301] hsr_slave_1: entered promiscuous mode [ 27.323526][ T3304] hsr_slave_0: entered promiscuous mode [ 27.329523][ T3304] hsr_slave_1: entered promiscuous mode [ 27.335232][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 27.340992][ T3304] Cannot create hsr debugfs directory [ 27.360167][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.367122][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.393018][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.418363][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.425357][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.451248][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.468876][ T3302] hsr_slave_0: entered promiscuous mode [ 27.475198][ T3302] hsr_slave_1: entered promiscuous mode [ 27.481101][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 27.486892][ T3302] Cannot create hsr debugfs directory [ 27.492978][ T3307] team0: Port device team_slave_0 added [ 27.499539][ T3307] team0: Port device team_slave_1 added [ 27.531531][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.538585][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.564696][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.588040][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.595011][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.621128][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.645629][ T3306] hsr_slave_0: entered promiscuous mode [ 27.651513][ T3306] hsr_slave_1: entered promiscuous mode [ 27.657231][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 27.662955][ T3306] Cannot create hsr debugfs directory [ 27.722007][ T3307] hsr_slave_0: entered promiscuous mode [ 27.727988][ T3307] hsr_slave_1: entered promiscuous mode [ 27.733844][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 27.739574][ T3307] Cannot create hsr debugfs directory [ 27.854105][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.863544][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.876745][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.885415][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.908303][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.916983][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.933776][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.948286][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.976495][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.990008][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.998683][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.009373][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.016472][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.027134][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.035666][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.045204][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.059636][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.070306][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.083353][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.090516][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.108246][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.115314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.139479][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.158103][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.174414][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.182804][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.201772][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.234991][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.250199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.257243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.276813][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.283928][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.307921][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.319683][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.331405][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.346550][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.358881][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.366002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.376647][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.383708][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.408402][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.443890][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.454420][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.477140][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.490611][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.497728][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.511901][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.524419][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.531581][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.542135][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.549231][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.561334][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.580714][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.587775][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.623436][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.636880][ T3301] veth0_vlan: entered promiscuous mode [ 28.653680][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.671298][ T3301] veth1_vlan: entered promiscuous mode [ 28.719885][ T3301] veth0_macvtap: entered promiscuous mode [ 28.739761][ T3301] veth1_macvtap: entered promiscuous mode [ 28.763045][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.774523][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.795074][ T3449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.812710][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.821828][ T3449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.836904][ T3304] veth0_vlan: entered promiscuous mode [ 28.861727][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.864558][ T3302] veth0_vlan: entered promiscuous mode [ 28.886486][ T3304] veth1_vlan: entered promiscuous mode [ 28.893400][ T3449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.905089][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.914732][ T3302] veth1_vlan: entered promiscuous mode [ 28.929409][ T3449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.956530][ T3302] veth0_macvtap: entered promiscuous mode [ 28.971902][ T3302] veth1_macvtap: entered promiscuous mode [ 28.985373][ T3304] veth0_macvtap: entered promiscuous mode [ 28.999096][ T3304] veth1_macvtap: entered promiscuous mode [ 29.015391][ T3306] veth0_vlan: entered promiscuous mode [ 29.034725][ T3306] veth1_vlan: entered promiscuous mode [ 29.046181][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.057344][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.068853][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.087435][ T3331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.097923][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.116777][ T3306] veth0_macvtap: entered promiscuous mode [ 29.123581][ T3331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.133656][ T3306] veth1_macvtap: entered promiscuous mode [ 29.147856][ T3331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.163441][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.174216][ T3331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.187520][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.195438][ T3307] veth0_vlan: entered promiscuous mode [ 29.206489][ T3331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.221580][ T3331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.235178][ T3307] veth1_vlan: entered promiscuous mode [ 29.243572][ T3331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.286245][ T3331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.302973][ T3307] veth0_macvtap: entered promiscuous mode [ 29.313607][ T3307] veth1_macvtap: entered promiscuous mode [ 29.323593][ T3331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.355854][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.365371][ T3480] loop1: detected capacity change from 0 to 512 [ 29.391637][ T3331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.401967][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.416117][ T3482] loop4: detected capacity change from 0 to 1024 [ 29.420419][ T3331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.448047][ T3331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.457283][ T3482] ======================================================= [ 29.457283][ T3482] WARNING: The mand mount option has been deprecated and [ 29.457283][ T3482] and is ignored by this kernel. Remove the mand [ 29.457283][ T3482] option from the mount to silence this warning. [ 29.457283][ T3482] ======================================================= [ 29.509555][ T3331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.518690][ T3331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.528135][ T3480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.528435][ T3331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.550572][ T3331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.577310][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 29.579819][ T3480] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.631438][ T3482] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.651948][ T3497] loop2: detected capacity change from 0 to 8192 [ 29.652034][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 29.652045][ T29] audit: type=1400 audit(1758693310.825:114): avc: denied { create } for pid=3498 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.691445][ T3497] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.695045][ T3499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3499 comm=syz.3.4 [ 29.724892][ T29] audit: type=1400 audit(1758693310.845:115): avc: denied { add_name } for pid=3479 comm="syz.1.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.733638][ T3501] loop0: detected capacity change from 0 to 1024 [ 29.745117][ T29] audit: type=1400 audit(1758693310.845:116): avc: denied { create } for pid=3479 comm="syz.1.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.771249][ T29] audit: type=1400 audit(1758693310.855:117): avc: denied { write open } for pid=3479 comm="syz.1.2" path="/0/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.793804][ T29] audit: type=1400 audit(1758693310.865:118): avc: denied { read write } for pid=3479 comm="syz.1.2" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.816062][ T29] audit: type=1400 audit(1758693310.865:119): avc: denied { open } for pid=3479 comm="syz.1.2" path="/0/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.816568][ T3501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.838998][ T29] audit: type=1400 audit(1758693310.935:120): avc: denied { mount } for pid=3496 comm="syz.2.9" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.866902][ T29] audit: type=1400 audit(1758693310.945:121): avc: denied { ioctl } for pid=3479 comm="syz.1.2" path="/0/file1/file1" dev="loop1" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.868611][ T3482] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.5: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.894061][ T3499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.918540][ T29] audit: type=1400 audit(1758693311.085:122): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.933990][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.949378][ T3482] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 29.961751][ T3482] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.961751][ T3482] [ 29.996019][ T3501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 30.005679][ T29] audit: type=1400 audit(1758693311.135:123): avc: denied { write } for pid=3498 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.028728][ T3501] System zones: 0-1, 3-12 [ 30.042078][ T3501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.069597][ T3513] loop1: detected capacity change from 0 to 512 [ 30.094515][ T3513] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.11: iget: bad i_size value: 38620345925642 [ 30.107999][ T3513] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.11: couldn't read orphan inode 15 (err -117) [ 30.129543][ T3513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.144158][ T3519] loop2: detected capacity change from 0 to 2048 [ 30.160303][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.172436][ T3501] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10: bg 0: block 88: padding at end of block bitmap is not set [ 30.187953][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.305646][ T3519] Alternate GPT is invalid, using primary GPT. [ 30.312085][ T3519] loop2: p2 p3 p7 [ 30.325350][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 30.326497][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.381071][ T2992] Alternate GPT is invalid, using primary GPT. [ 30.387535][ T2992] loop2: p2 p3 p7 [ 30.387539][ T3499] syz.3.4 (3499) used greatest stack depth: 10960 bytes left [ 30.476421][ T3541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'. [ 30.532133][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 30.551264][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 30.562972][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 30.597080][ T3549] loop3: detected capacity change from 0 to 1024 [ 30.621858][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 30.630343][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 30.632845][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 30.641834][ T3549] EXT4-fs: Ignoring removed orlov option [ 30.713790][ T3547] +}[@ (3547) used greatest stack depth: 10176 bytes left [ 30.721611][ T3549] EXT4-fs: Ignoring removed nobh option [ 30.727187][ T3549] EXT4-fs: Ignoring removed bh option [ 30.741471][ T3549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.827657][ T3549] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.24: Allocating blocks 481-513 which overlap fs metadata [ 30.849185][ T3573] loop4: detected capacity change from 0 to 128 [ 30.886652][ T3575] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 30.903589][ T3549] EXT4-fs (loop3): pa ffff88810485d000: logic 352, phys. 465, len 3 [ 30.911679][ T3549] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 30.952887][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.984377][ T3579] vhci_hcd: invalid port number 96 [ 30.989688][ T3579] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 31.012687][ C0] hrtimer: interrupt took 27999 ns [ 31.095621][ T3595] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.41'. [ 31.149849][ T3597] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 31.255619][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.263124][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.270726][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.296461][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.303995][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.311422][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.318923][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.326326][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.333766][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.341162][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.354423][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 31.379759][ T3604] fido_id[3604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.734415][ T3635] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 31.744680][ T3635] SELinux: failed to load policy [ 31.767347][ T3637] random: crng reseeded on system resumption [ 31.797261][ T3637] Restarting kernel threads ... [ 31.802991][ T3641] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 31.819299][ T3637] Done restarting kernel threads. [ 31.913205][ T3656] loop2: detected capacity change from 0 to 512 [ 31.928995][ T3656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.939654][ T3656] EXT4-fs (loop2): filesystem is read-only [ 31.946297][ T3656] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 31.975057][ T3656] EXT4-fs (loop2): filesystem is read-only [ 31.980963][ T3656] EXT4-fs (loop2): orphan cleanup on readonly fs [ 32.017029][ T3664] loop1: detected capacity change from 0 to 128 [ 32.026329][ T3661] pim6reg1: entered promiscuous mode [ 32.031766][ T3661] pim6reg1: entered allmulticast mode [ 32.048470][ T3670] loop0: detected capacity change from 0 to 512 [ 32.049441][ T3656] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.66: iget: bad i_size value: 648518346341360424 [ 32.069243][ T3656] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.66: couldn't read orphan inode 16 (err -117) [ 32.086372][ T3670] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.099575][ T3670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.099882][ T3656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 32.110487][ T3664] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.171217][ T3664] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.186360][ T3670] EXT4-fs (loop0): 1 truncate cleaned up [ 32.204195][ T3670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.218054][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.258615][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.287102][ T3682] loop3: detected capacity change from 0 to 2048 [ 32.301609][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.346645][ T3686] bridge0: entered promiscuous mode [ 32.352469][ T3686] macsec1: entered promiscuous mode [ 32.358862][ T3686] bridge0: port 3(macsec1) entered blocking state [ 32.365434][ T3686] bridge0: port 3(macsec1) entered disabled state [ 32.373616][ T3686] macsec1: entered allmulticast mode [ 32.378910][ T3686] bridge0: entered allmulticast mode [ 32.384607][ T3682] EXT4-fs (loop3): failed to initialize system zone (-117) [ 32.391992][ T3682] EXT4-fs (loop3): mount failed [ 32.412526][ T3686] macsec1: left allmulticast mode [ 32.417626][ T3686] bridge0: left allmulticast mode [ 32.425147][ T3686] bridge0: left promiscuous mode [ 32.471043][ T3693] loop3: detected capacity change from 0 to 512 [ 32.483289][ T3693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.496373][ T3693] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.511877][ T3693] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 32: comm syz.3.83: path /24/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 32.580470][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.593755][ T3701] netlink: 'syz.2.87': attribute type 10 has an invalid length. [ 32.602511][ T3701] ipvlan0: entered allmulticast mode [ 32.603926][ T3703] loop0: detected capacity change from 0 to 512 [ 32.607840][ T3701] veth0_vlan: entered allmulticast mode [ 32.622308][ T3701] team0: Device ipvlan0 failed to register rx_handler [ 32.664256][ T3703] EXT4-fs: Ignoring removed bh option [ 32.669908][ T3703] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.686939][ T3703] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 32.733157][ T3703] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 32.745029][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.745918][ T3703] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.784476][ T3703] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.88: Failed to acquire dquot type 1 [ 32.811472][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.842021][ T3703] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.88: Invalid block bitmap block 0 in block_group 0 [ 32.856971][ T3703] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.88: Invalid block bitmap block 0 in block_group 0 [ 32.874820][ T3703] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.88: Invalid block bitmap block 0 in block_group 0 [ 32.902626][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.913416][ T3703] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.88: Failed to acquire dquot type 1 [ 32.942899][ T3703] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.88: Failed to acquire dquot type 1 [ 32.957868][ T3703] EXT4-fs (loop0): 1 orphan inode deleted [ 32.983321][ T3703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.005918][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.027573][ T3703] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 33.052906][ T3703] syz.0.88 (3703) used greatest stack depth: 9072 bytes left [ 33.070613][ T3743] netlink: 76 bytes leftover after parsing attributes in process `syz.3.103'. [ 33.117198][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.129003][ T3748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 33.155921][ T41] bridge_slave_1: left allmulticast mode [ 33.161601][ T41] bridge_slave_1: left promiscuous mode [ 33.167280][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.219760][ T41] bridge_slave_0: left allmulticast mode [ 33.225448][ T41] bridge_slave_0: left promiscuous mode [ 33.231351][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.275521][ T3760] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.345672][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.356879][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.367379][ T41] bond0 (unregistering): Released all slaves [ 33.428374][ T41] hsr_slave_0: left promiscuous mode [ 33.439298][ T41] hsr_slave_1: left promiscuous mode [ 33.446706][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.454223][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.462093][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.469576][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.491177][ T41] veth1_macvtap: left promiscuous mode [ 33.496901][ T41] veth0_macvtap: left promiscuous mode [ 33.502762][ T41] veth1_vlan: left promiscuous mode [ 33.508170][ T41] veth0_vlan: left promiscuous mode [ 33.613546][ T41] team0 (unregistering): Port device team_slave_1 removed [ 33.626511][ T41] team0 (unregistering): Port device team_slave_0 removed [ 33.641417][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 33.725360][ T3716] chnl_net:caif_netlink_parms(): no params data found [ 33.742647][ T3810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 33.808627][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.815745][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.842198][ T3716] bridge_slave_0: entered allmulticast mode [ 33.850379][ T3716] bridge_slave_0: entered promiscuous mode [ 33.862739][ T3823] vlan2: entered allmulticast mode [ 33.878363][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.885535][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.893254][ T3716] bridge_slave_1: entered allmulticast mode [ 33.899771][ T3716] bridge_slave_1: entered promiscuous mode [ 33.927320][ T3716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.939997][ T3716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.988421][ T3716] team0: Port device team_slave_0 added [ 34.020173][ T3716] team0: Port device team_slave_1 added [ 34.079984][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.086962][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.113139][ T3716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.158368][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.165582][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.191625][ T3716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.211184][ T3869] loop3: detected capacity change from 0 to 128 [ 34.255388][ T3875] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.292402][ T3716] hsr_slave_0: entered promiscuous mode [ 34.298756][ T3716] hsr_slave_1: entered promiscuous mode [ 34.312116][ T3716] debugfs: 'hsr0' already exists in 'hsr' [ 34.317869][ T3716] Cannot create hsr debugfs directory [ 34.324684][ T3880] Zero length message leads to an empty skb [ 34.335716][ T3877] loop4: detected capacity change from 0 to 128 [ 34.414325][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.414325][ T3331] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 34.519368][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.519368][ T3331] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 34.533039][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.533039][ T3331] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 34.589397][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.589397][ T3331] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 34.602939][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.602939][ T3331] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 34.618184][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.618184][ T3331] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 34.632259][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.632259][ T3331] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 34.645901][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.645901][ T3331] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 34.749489][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.749489][ T3331] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 34.763071][ T3331] kworker/u8:6: attempt to access beyond end of device [ 34.763071][ T3331] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 34.926943][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 34.926958][ T29] audit: type=1326 audit(1758693316.095:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2245eec9 code=0x7ffc0000 [ 34.999207][ T29] audit: type=1326 audit(1758693316.125:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc2245eec9 code=0x7ffc0000 [ 35.022431][ T29] audit: type=1326 audit(1758693316.125:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2245eec9 code=0x7ffc0000 [ 35.025620][ T3913] loop0: detected capacity change from 0 to 128 [ 35.045689][ T29] audit: type=1326 audit(1758693316.125:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc2245eec9 code=0x7ffc0000 [ 35.045745][ T29] audit: type=1326 audit(1758693316.145:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 35.045779][ T29] audit: type=1326 audit(1758693316.145:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 35.045832][ T29] audit: type=1326 audit(1758693316.145:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 35.045860][ T29] audit: type=1400 audit(1758693316.145:382): avc: denied { name_bind } for pid=3906 comm="syz.3.144" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 35.127732][ T3716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.145251][ T29] audit: type=1326 audit(1758693316.145:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 35.145285][ T29] audit: type=1326 audit(1758693316.145:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 35.234718][ T3716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.276171][ T3716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.295880][ T3716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.665017][ T3716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.686020][ T3716] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.700563][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.707645][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.735435][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.742532][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.776544][ T3716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.787046][ T3716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.840423][ T3935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.878095][ T3935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.909393][ T3716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.066090][ T3716] veth0_vlan: entered promiscuous mode [ 36.083096][ T3716] veth1_vlan: entered promiscuous mode [ 36.114348][ T3716] veth0_macvtap: entered promiscuous mode [ 36.141929][ T3716] veth1_macvtap: entered promiscuous mode [ 36.174882][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.200942][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.232660][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.249831][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.263660][ T3972] loop4: detected capacity change from 0 to 512 [ 36.269077][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.283141][ T3975] loop3: detected capacity change from 0 to 128 [ 36.293855][ T3972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.312447][ T3331] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.341619][ T3972] EXT4-fs (loop4): 1 truncate cleaned up [ 36.347767][ T3972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.386393][ T3972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.468664][ T3988] loop4: detected capacity change from 0 to 512 [ 36.484570][ T3985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.159'. [ 36.521678][ T3988] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.554047][ T3988] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.160: bad orphan inode 13 [ 36.567211][ T3988] ext4_test_bit(bit=12, block=18) = 1 [ 36.572771][ T3988] is_bad_inode(inode)=0 [ 36.576929][ T3988] NEXT_ORPHAN(inode)=2130706432 [ 36.581790][ T3988] max_ino=32 [ 36.584987][ T3988] i_nlink=1 [ 36.588676][ T3988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.703213][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.721323][ T3997] loop0: detected capacity change from 0 to 1024 [ 36.748470][ T3997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.780948][ T3997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.830498][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.850263][ T4007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.857501][ T4007] IPv6: NLM_F_CREATE should be set when creating new route [ 36.864714][ T4007] IPv6: NLM_F_CREATE should be set when creating new route [ 36.872458][ T4007] ------------[ cut here ]------------ [ 36.877916][ T4007] WARNING: CPU: 0 PID: 4007 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xc41/0xcb0 [ 36.888105][ T4007] Modules linked in: [ 36.892039][ T4007] CPU: 0 UID: 0 PID: 4007 Comm: syz.4.168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.901798][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 36.911890][ T4007] RIP: 0010:nsim_fib_event_nb+0xc41/0xcb0 [ 36.917617][ T4007] Code: a1 12 fe be 01 00 00 00 4c 8b 74 24 18 49 8d 7e 2c e8 03 74 a8 fe 4c 8b 2c 24 48 8b 6c 24 10 e9 93 f6 ff ff e8 60 a1 12 fe 90 <0f> 0b 90 e9 5a fc ff ff e8 52 a1 12 fe e9 a5 f9 ff ff e8 48 a1 12 [ 36.937409][ T4007] RSP: 0018:ffffc900014cf618 EFLAGS: 00010287 [ 36.943516][ T4007] RAX: ffffffff834557f0 RBX: 0000000000000001 RCX: 0000000000080000 [ 36.951529][ T4007] RDX: ffffc900055de000 RSI: 0000000000002727 RDI: 0000000000002728 [ 36.959519][ T4007] RBP: 0000000000000001 R08: 0001c900014cf733 R09: 0000000000000000 [ 36.967548][ T4007] R10: ffff88811a2c1e60 R11: 0000000000000002 R12: ffffc900014cf718 [ 36.975769][ T4007] R13: ffff888119c08c00 R14: ffffc900014cf730 R15: 0000000000000002 [ 36.983761][ T4007] FS: 00007f0774f376c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 36.992805][ T4007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.999428][ T4007] CR2: 0000200000002000 CR3: 000000012f88e000 CR4: 00000000003506f0 [ 37.007403][ T4007] Call Trace: [ 37.010796][ T4007] [ 37.013725][ T4007] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 37.019262][ T4007] atomic_notifier_call_chain+0x73/0x1c0 [ 37.024923][ T4007] call_fib_notifiers+0x65/0xa0 [ 37.029870][ T4007] call_fib6_notifiers+0x30/0x40 [ 37.034864][ T4007] call_fib6_multipath_entry_notifiers+0x94/0xc0 [ 37.041378][ T4007] inet6_rtm_newroute+0xaf1/0x1020 [ 37.046508][ T4007] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 37.052103][ T4007] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 37.057066][ T4007] netlink_rcv_skb+0x120/0x220 [ 37.061955][ T4007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 37.067454][ T4007] rtnetlink_rcv+0x1c/0x30 [ 37.072000][ T4007] netlink_unicast+0x5c0/0x690 [ 37.076831][ T4007] netlink_sendmsg+0x58b/0x6b0 [ 37.081632][ T4007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.086933][ T4007] __sock_sendmsg+0x145/0x180 [ 37.091658][ T4007] ____sys_sendmsg+0x31e/0x4e0 [ 37.096482][ T4007] ___sys_sendmsg+0x17b/0x1d0 [ 37.101243][ T4007] __x64_sys_sendmsg+0xd4/0x160 [ 37.106180][ T4007] x64_sys_call+0x191e/0x2ff0 [ 37.110952][ T4007] do_syscall_64+0xd2/0x200 [ 37.115512][ T4007] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.121660][ T4007] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.127434][ T4007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.133357][ T4007] RIP: 0033:0x7f07764ceec9 [ 37.137764][ T4007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.157426][ T4007] RSP: 002b:00007f0774f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.165950][ T4007] RAX: ffffffffffffffda RBX: 00007f0776725fa0 RCX: 00007f07764ceec9 [ 37.173957][ T4007] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 37.181997][ T4007] RBP: 00007f0776551f91 R08: 0000000000000000 R09: 0000000000000000 [ 37.183433][ T4009] loop0: detected capacity change from 0 to 512 [ 37.190023][ T4007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.190037][ T4007] R13: 00007f0776726038 R14: 00007f0776725fa0 R15: 00007ffd09319938 [ 37.190077][ T4007] [ 37.190084][ T4007] ---[ end trace 0000000000000000 ]--- [ 37.215305][ T4009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.263045][ T4016] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 37.263045][ T4016] program syz.5.170 not setting count and/or reply_len properly [ 37.263555][ T4015] loop3: detected capacity change from 0 to 512 [ 37.299584][ T4009] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 37.321201][ T4015] EXT4-fs: Ignoring removed bh option [ 37.339909][ T4021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.342980][ T4015] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.359258][ T4021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.371048][ T4009] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.388824][ T4015] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 37.405142][ T4015] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.413534][ T4009] EXT4-fs (loop0): 1 truncate cleaned up [ 37.419580][ T4009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.432260][ T4015] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.438936][ T4015] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.169: Failed to acquire dquot type 1 [ 37.452001][ T4015] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.169: Invalid block bitmap block 0 in block_group 0 [ 37.466828][ T4015] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.169: Invalid block bitmap block 0 in block_group 0 [ 37.482601][ T4015] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.169: Invalid block bitmap block 0 in block_group 0 [ 37.497650][ T4015] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.169: Failed to acquire dquot type 1 [ 37.510294][ T4015] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.169: Failed to acquire dquot type 1 [ 37.521847][ T4015] EXT4-fs (loop3): 1 orphan inode deleted [ 37.528099][ T4015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.578238][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.631211][ T4015] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.678340][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.716688][ T4034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 37.756063][ T4034] netem: change failed [ 38.007524][ T4054] Driver unsupported XDP return value 0 on prog (id 139) dev N/A, expect packet loss! [ 38.044157][ T4057] pim6reg: entered allmulticast mode [ 38.055978][ T4057] pim6reg: left allmulticast mode [ 38.124283][ T4063] loop3: detected capacity change from 0 to 2048 [ 38.166613][ T4069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4069 comm=syz.5.194 [ 38.209947][ T3295] loop3: p1 < > p4 [ 38.214729][ T3295] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.332443][ T4063] loop3: p1 < > p4 [ 38.347465][ T4063] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.422668][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 38.424610][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.450474][ T4086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 38.548100][ T4099] loop0: detected capacity change from 0 to 1024 [ 38.568912][ T4100] loop5: detected capacity change from 0 to 2048 [ 38.577614][ T4099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.605895][ T4100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.633325][ T4099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 38.651587][ T4099] System zones: 0-1, 3-12 [ 38.656920][ T4099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.691196][ T3716] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 38.706645][ T4099] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.206: bg 0: block 88: padding at end of block bitmap is not set [ 38.725271][ T3716] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 38.765891][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.775676][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.836836][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 38.992664][ T4131] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 39.783458][ T4169] SELinux: failed to load policy [ 39.812757][ T4173] process 'syz.0.237' launched './file1' with NULL argv: empty string added [ 39.929622][ T3372] hid_parser_main: 18 callbacks suppressed [ 39.929637][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 39.942988][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 39.950781][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 39.958163][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 39.965616][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 39.973063][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 39.978544][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 39.978609][ T29] audit: type=1400 audit(1758693321.145:551): avc: denied { write } for pid=4188 comm="syz.5.244" path="socket:[7453]" dev="sockfs" ino=7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.980465][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 40.016971][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 40.024382][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 40.031893][ T3372] hid-generic 0000:0080:0002.0002: unknown main item tag 0x0 [ 40.040729][ T3372] hid-generic 0000:0080:0002.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 40.068533][ T4196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.248'. [ 40.157529][ T29] audit: type=1326 audit(1758693321.325:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.193451][ T29] audit: type=1326 audit(1758693321.335:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.216819][ T29] audit: type=1326 audit(1758693321.335:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.240145][ T29] audit: type=1326 audit(1758693321.335:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.263369][ T29] audit: type=1326 audit(1758693321.335:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.286740][ T29] audit: type=1326 audit(1758693321.335:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.310189][ T29] audit: type=1326 audit(1758693321.335:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.334276][ T29] audit: type=1326 audit(1758693321.335:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.357411][ T29] audit: type=1326 audit(1758693321.355:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee3c8eec9 code=0x7ffc0000 [ 40.388663][ T4215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.257'. [ 40.426825][ T4218] loop4: detected capacity change from 0 to 1024 [ 40.432866][ T4220] loop2: detected capacity change from 0 to 1024 [ 40.448814][ T4220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.456567][ T4218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.485675][ T4220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.502357][ T4218] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.260: Allocating blocks 449-513 which overlap fs metadata [ 40.530388][ T4228] EXT4-fs (loop4): pa ffff88810485d000: logic 48, phys. 177, len 21 [ 40.538418][ T4228] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 40.569836][ T4220] loop2: detected capacity change from 1024 to 64 [ 40.609809][ T4235] loop0: detected capacity change from 0 to 512 [ 40.628881][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 40.662142][ T4235] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.676708][ T4237] loop3: detected capacity change from 0 to 512 [ 40.685943][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 40.705891][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 40.706050][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.721165][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 40.743842][ T4235] EXT4-fs (loop0): 1 truncate cleaned up [ 40.750194][ T4237] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.765380][ T4235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.780021][ T4237] EXT4-fs (loop3): mount failed [ 40.792924][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 40.840661][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.865876][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 40.885436][ T4245] loop0: detected capacity change from 0 to 128 [ 40.899106][ T4247] netlink: 68 bytes leftover after parsing attributes in process `syz.3.268'. [ 40.918575][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 40.945630][ T4245] bio_check_eod: 101 callbacks suppressed [ 40.945645][ T4245] syz.0.267: attempt to access beyond end of device [ 40.945645][ T4245] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 40.948911][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 41.023397][ T31] kworker/u8:1: attempt to access beyond end of device [ 41.023397][ T31] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 41.044324][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 41.075582][ T3301] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 41.185273][ T4261] loop0: detected capacity change from 0 to 256 [ 41.218872][ T4261] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 41.274180][ T4266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 41.312416][ T41] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.321194][ T4266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 41.322090][ T41] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.345732][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.358771][ T3449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.371456][ T41] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.379111][ T4226] kmmpd-loop2: attempt to access beyond end of device [ 41.379111][ T4226] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 41.380281][ T41] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.393780][ T4226] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 41.431261][ T4271] loop0: detected capacity change from 0 to 512 [ 41.444766][ T3449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.460106][ T4271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.520991][ T3449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.594039][ T3306] EXT4-fs error (device loop0): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 41.640222][ T3306] EXT4-fs error (device loop0): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 41.752263][ T3449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.766191][ T4292] loop4: detected capacity change from 0 to 512 [ 41.796333][ T4292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.814484][ T4292] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.909603][ T3449] bridge_slave_1: left allmulticast mode [ 41.915250][ T3449] bridge_slave_1: left promiscuous mode [ 41.920977][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.934998][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.945224][ T3449] bridge_slave_0: left allmulticast mode [ 41.950988][ T3449] bridge_slave_0: left promiscuous mode [ 41.956659][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.079567][ T4310] loop3: detected capacity change from 0 to 128 [ 42.123328][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.140740][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.176592][ T3449] bond0 (unregistering): Released all slaves [ 42.241869][ T3449] hsr_slave_0: left promiscuous mode [ 42.310463][ T3449] hsr_slave_1: left promiscuous mode [ 42.320955][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.328441][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.345448][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.353237][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.384429][ T3449] veth1_macvtap: left promiscuous mode [ 42.394082][ T3449] veth0_macvtap: left promiscuous mode [ 42.409082][ T3449] veth1_vlan: left promiscuous mode [ 42.414324][ T3449] veth0_vlan: left promiscuous mode [ 42.616254][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 42.641602][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 42.778295][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 42.885585][ T4330] netlink: 'syz.4.295': attribute type 10 has an invalid length. [ 42.898885][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.906055][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.913308][ T4280] bridge_slave_0: entered allmulticast mode [ 42.919712][ T4280] bridge_slave_0: entered promiscuous mode [ 42.927415][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.934505][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.936396][ T4331] netlink: 'syz.4.295': attribute type 10 has an invalid length. [ 42.941707][ T4280] bridge_slave_1: entered allmulticast mode [ 42.949329][ T4331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.295'. [ 42.955716][ T4280] bridge_slave_1: entered promiscuous mode [ 42.994734][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.002750][ T4330] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 43.016690][ T4331] batadv0: entered promiscuous mode [ 43.021945][ T4331] batadv0: entered allmulticast mode [ 43.028949][ T4331] bond0: (slave batadv0): Releasing backup interface [ 43.042947][ T4331] bridge0: port 3(batadv0) entered blocking state [ 43.049426][ T4331] bridge0: port 3(batadv0) entered disabled state [ 43.066618][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.088739][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.128058][ T4280] team0: Port device team_slave_0 added [ 43.147660][ T4280] team0: Port device team_slave_1 added [ 43.237895][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.244892][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.270898][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.289182][ T41] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 43.298483][ T41] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 43.319503][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 43.341045][ T3449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.351360][ T3449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.366650][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.373632][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.399612][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.438805][ T3449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.449110][ T3449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.490804][ T4280] hsr_slave_0: entered promiscuous mode [ 43.496824][ T4280] hsr_slave_1: entered promiscuous mode [ 43.504897][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.512014][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.519267][ T4308] bridge_slave_0: entered allmulticast mode [ 43.525677][ T4308] bridge_slave_0: entered promiscuous mode [ 43.538877][ T3449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.549200][ T3449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.560390][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.567428][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.574650][ T4308] bridge_slave_1: entered allmulticast mode [ 43.581151][ T4308] bridge_slave_1: entered promiscuous mode [ 43.615267][ T3449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.625594][ T3449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.664965][ T4344] loop4: detected capacity change from 0 to 1024 [ 43.673177][ T4344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.696763][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.718537][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.763448][ T4344] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 43.772976][ T4344] System zones: 0-1, 3-12 [ 43.777989][ T3449] bridge_slave_1: left allmulticast mode [ 43.783673][ T3449] bridge_slave_1: left promiscuous mode [ 43.789942][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.800173][ T4344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.813762][ T3449] bridge_slave_0: left allmulticast mode [ 43.819525][ T3449] bridge_slave_0: left promiscuous mode [ 43.825165][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.849196][ T4344] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.298: bg 0: block 88: padding at end of block bitmap is not set [ 43.876428][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.942302][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.952172][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.961602][ T3449] bond0 (unregistering): Released all slaves [ 43.987696][ T4308] team0: Port device team_slave_0 added [ 44.001485][ T4308] team0: Port device team_slave_1 added [ 44.011611][ T4280] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 44.037543][ T4280] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 44.046468][ T4280] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 44.062190][ T3449] hsr_slave_0: left promiscuous mode [ 44.067778][ T3449] hsr_slave_1: left promiscuous mode [ 44.073444][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.080891][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.088578][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.095986][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.106210][ T3449] veth1_macvtap: left promiscuous mode [ 44.111773][ T3449] veth0_macvtap: left promiscuous mode [ 44.117636][ T3449] veth1_vlan: left promiscuous mode [ 44.123088][ T3449] veth0_vlan: left promiscuous mode [ 44.204639][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 44.217140][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 44.250348][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.257297][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.283390][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.296010][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.303023][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.328968][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.343121][ T4280] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 44.374680][ T4308] hsr_slave_0: entered promiscuous mode [ 44.384552][ T4308] hsr_slave_1: entered promiscuous mode [ 44.390957][ T4308] debugfs: 'hsr0' already exists in 'hsr' [ 44.396691][ T4308] Cannot create hsr debugfs directory [ 44.466009][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.493658][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.524266][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.531438][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.532393][ T4378] loop4: detected capacity change from 0 to 128 [ 44.552242][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.559337][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.594088][ T4380] loop3: detected capacity change from 0 to 1024 [ 44.606143][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.616580][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.618988][ T4380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.669398][ T4380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 44.676563][ T4308] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 44.680591][ T4380] System zones: 0-1, 3-12 [ 44.690385][ T4380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.729357][ T4308] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 44.734993][ T4380] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.311: bg 0: block 88: padding at end of block bitmap is not set [ 44.767819][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.796211][ T4308] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 44.837593][ T4308] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 44.848731][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.895102][ T4393] loop4: detected capacity change from 0 to 128 [ 44.976514][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.994333][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.010488][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.017566][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.062095][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.069241][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.089204][ T4413] loop3: detected capacity change from 0 to 8192 [ 45.130289][ T4413] loop3: p1 p2 [ 45.142832][ T4413] loop3: p1 start 16777216 is beyond EOD, truncated [ 45.149538][ T4413] loop3: p2 size 515840 extends beyond EOD, truncated [ 45.242083][ T4280] veth0_vlan: entered promiscuous mode [ 45.256106][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.268555][ T4280] veth1_vlan: entered promiscuous mode [ 45.282621][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 45.282713][ T29] audit: type=1400 audit(1758693326.455:921): avc: denied { append } for pid=4430 comm="syz.5.317" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.332881][ T4280] veth0_macvtap: entered promiscuous mode [ 45.344465][ T4280] veth1_macvtap: entered promiscuous mode [ 45.358411][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.372058][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.381979][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.419612][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.455680][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.516392][ T3449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.585045][ T4457] loop6: detected capacity change from 0 to 512 [ 45.596773][ T4457] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 45.614795][ T4457] EXT4-fs (loop6): 1 truncate cleaned up [ 45.621192][ T4457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.638201][ T4308] veth0_vlan: entered promiscuous mode [ 45.645284][ T29] audit: type=1400 audit(1758693326.815:922): avc: denied { rename } for pid=4456 comm="syz.6.322" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.656342][ T4308] veth1_vlan: entered promiscuous mode [ 45.687311][ T4308] veth0_macvtap: entered promiscuous mode [ 45.693537][ T4280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.705053][ T4308] veth1_macvtap: entered promiscuous mode [ 45.720357][ T29] audit: type=1400 audit(1758693326.895:923): avc: denied { ioctl } for pid=4463 comm="syz.5.325" path="socket:[9157]" dev="sockfs" ino=9157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.760315][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.769152][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.778284][ T29] audit: type=1400 audit(1758693326.945:924): avc: denied { mount } for pid=4467 comm="syz.4.334" name="/" dev="ramfs" ino=8103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.831919][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.841496][ T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.848538][ T29] audit: type=1326 audit(1758693326.985:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.3.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 45.871429][ T4473] loop3: detected capacity change from 0 to 128 [ 45.873662][ T29] audit: type=1326 audit(1758693326.985:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.3.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 45.885995][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.903369][ T29] audit: type=1326 audit(1758693326.985:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.3.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 45.935171][ T29] audit: type=1326 audit(1758693326.985:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.3.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 45.958610][ T29] audit: type=1326 audit(1758693326.985:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.3.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 45.981923][ T29] audit: type=1326 audit(1758693326.985:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.3.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 46.016155][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.063911][ T4478] 9pnet_fd: Insufficient options for proto=fd [ 46.202209][ T4493] loop4: detected capacity change from 0 to 512 [ 46.209534][ T4493] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 47.012161][ T4623] loop4: detected capacity change from 0 to 128 [ 47.063884][ T4621] SELinux: ebitmap: truncated map [ 47.083005][ T4621] SELinux: failed to load policy [ 47.083431][ T4635] tipc: Started in network mode [ 47.083446][ T4635] tipc: Node identity fffeffff, cluster identity 4711 [ 47.083457][ T4635] tipc: Node number set to 4294901759 [ 47.115357][ T4637] netlink: 96 bytes leftover after parsing attributes in process `syz.3.364'. [ 47.235605][ T4650] netlink: 16 bytes leftover after parsing attributes in process `syz.6.368'. [ 47.653897][ T4664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.374'. [ 47.875980][ T4683] netlink: 'syz.6.383': attribute type 1 has an invalid length. [ 47.883799][ T4683] netlink: 'syz.6.383': attribute type 2 has an invalid length. [ 47.901766][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.383'. [ 47.970255][ T4701] futex_wake_op: syz.5.390 tries to shift op by -1; fix this program [ 48.013338][ T4709] loop3: detected capacity change from 0 to 512 [ 48.020016][ T4709] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.027687][ T4709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.037988][ T4702] loop4: detected capacity change from 0 to 128 [ 48.092088][ T4709] EXT4-fs (loop3): 1 truncate cleaned up [ 48.116446][ T4709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.351446][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.914689][ T4769] netlink: 36 bytes leftover after parsing attributes in process `syz.4.418'. [ 48.954562][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 48.968921][ T4773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.420'. [ 49.032316][ T4779] loop4: detected capacity change from 0 to 128 [ 49.054866][ T4784] loop6: detected capacity change from 0 to 1024 [ 49.061941][ T4784] EXT4-fs: Ignoring removed orlov option [ 49.080560][ T4784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.154677][ T4791] loop7: detected capacity change from 0 to 128 [ 49.172346][ T4280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.183882][ T4791] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.208721][ T4791] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.409081][ T1084] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.760766][ T4822] netlink: 20 bytes leftover after parsing attributes in process `syz.6.438'. [ 49.913275][ T4827] capability: warning: `syz.6.440' uses deprecated v2 capabilities in a way that may be insecure [ 49.962793][ T4832] loop6: detected capacity change from 0 to 512 [ 49.971074][ T4832] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 49.986642][ T4829] loop4: detected capacity change from 0 to 128 [ 50.006906][ T4832] EXT4-fs (loop6): 1 truncate cleaned up [ 50.013096][ T4832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.176719][ T4280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.276444][ T4845] sd 0:0:1:0: device reset [ 50.296017][ T29] kauditd_printk_skb: 1145 callbacks suppressed [ 50.296031][ T29] audit: type=1326 audit(1758693331.465:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e4e185d67 code=0x7ffc0000 [ 50.325605][ T29] audit: type=1326 audit(1758693331.465:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e4e12af79 code=0x7ffc0000 [ 50.348845][ T29] audit: type=1326 audit(1758693331.465:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 50.380351][ T29] audit: type=1326 audit(1758693331.545:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e4e185d67 code=0x7ffc0000 [ 50.403703][ T29] audit: type=1326 audit(1758693331.545:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e4e12af79 code=0x7ffc0000 [ 50.426933][ T29] audit: type=1326 audit(1758693331.545:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 50.450248][ T29] audit: type=1326 audit(1758693331.545:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e4e185d67 code=0x7ffc0000 [ 50.473549][ T29] audit: type=1326 audit(1758693331.545:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e4e12af79 code=0x7ffc0000 [ 50.496855][ T29] audit: type=1326 audit(1758693331.545:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e4e18eec9 code=0x7ffc0000 [ 50.533958][ T29] audit: type=1326 audit(1758693331.595:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e4e185d67 code=0x7ffc0000 [ 50.622239][ T4851] mmap: syz.6.449 (4851) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.016718][ T4877] 9p: Unknown uid 00000000004294967295 [ 51.091675][ T4885] loop4: detected capacity change from 0 to 256 [ 51.140739][ T4885] binfmt_misc: register: failed to install interpreter file ./file0 [ 51.160323][ T4889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.468'. [ 51.257668][ T4898] loop7: detected capacity change from 0 to 128 [ 51.356766][ T4906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 51.645713][ T4917] loop3: detected capacity change from 0 to 128 [ 51.654426][ T4923] loop6: detected capacity change from 0 to 1024 [ 51.691788][ T4923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.704171][ T4923] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.715588][ T4923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.786369][ T4928] netlink: 7 bytes leftover after parsing attributes in process `syz.6.482'. [ 51.797553][ T4928] netlink: 76 bytes leftover after parsing attributes in process `syz.6.482'. [ 52.304165][ T4951] random: crng reseeded on system resumption [ 52.341995][ T4955] loop4: detected capacity change from 0 to 512 [ 52.422377][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 52.622450][ T4986] netlink: 'syz.3.508': attribute type 3 has an invalid length. [ 52.708284][ T4992] loop3: detected capacity change from 0 to 2048 [ 52.761913][ T4992] Alternate GPT is invalid, using primary GPT. [ 52.768230][ T4992] loop3: p2 p3 p7 [ 52.825094][ T4994] loop3: detected capacity change from 0 to 128 [ 53.133034][ T5014] loop4: detected capacity change from 0 to 2048 [ 53.158881][ T5014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.310083][ T5014] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.469346][ T5014] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 378 with error 28 [ 53.481916][ T5014] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.481916][ T5014] [ 53.491618][ T5014] EXT4-fs (loop4): Total free blocks count 0 [ 53.497645][ T5014] EXT4-fs (loop4): Free/Dirty block details [ 53.503546][ T5014] EXT4-fs (loop4): free_blocks=2415919104 [ 53.509266][ T5014] EXT4-fs (loop4): dirty_blocks=384 [ 53.514637][ T5014] EXT4-fs (loop4): Block reservation details [ 53.520656][ T5014] EXT4-fs (loop4): i_reserved_data_blocks=24 [ 53.659378][ T1084] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 53.818383][ T5038] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 54.015768][ T5050] loop4: detected capacity change from 0 to 512 [ 54.037728][ T5050] EXT4-fs: Ignoring removed nobh option [ 54.055491][ T5054] sg_read: process 61 (syz.7.535) changed security contexts after opening file descriptor, this is not allowed. [ 54.076469][ T5050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.534: corrupted inode contents [ 54.221052][ T5050] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.534: mark_inode_dirty error [ 54.238586][ T5050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.534: corrupted inode contents [ 54.260203][ T5050] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.534: mark_inode_dirty error [ 54.297196][ T5050] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.534: Failed to acquire dquot type 0 [ 54.318585][ T5050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.534: corrupted inode contents [ 54.352674][ T5050] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.534: mark_inode_dirty error [ 54.369628][ T5050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.534: corrupted inode contents [ 54.408602][ T5050] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.534: mark_inode_dirty error [ 54.424513][ T5050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.534: corrupted inode contents [ 54.438080][ T5050] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 54.448141][ T5050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.534: corrupted inode contents [ 54.461617][ T5050] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.534: mark_inode_dirty error [ 54.473285][ T5050] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 54.484235][ T5050] EXT4-fs (loop4): 1 truncate cleaned up [ 54.490591][ T5050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.505366][ T5050] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.551193][ T5050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.684745][ T5083] vlan2: entered allmulticast mode [ 54.710753][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.548'. [ 54.835980][ T5097] loop3: detected capacity change from 0 to 128 [ 54.935635][ T5108] random: crng reseeded on system resumption [ 54.978899][ T5108] Restarting kernel threads ... [ 55.006968][ T5108] Done restarting kernel threads. [ 55.538151][ T29] kauditd_printk_skb: 769 callbacks suppressed [ 55.538241][ T29] audit: type=1326 audit(1758693336.705:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.614044][ T29] audit: type=1326 audit(1758693336.705:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.637431][ T29] audit: type=1326 audit(1758693336.705:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.660921][ T29] audit: type=1326 audit(1758693336.705:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.684630][ T29] audit: type=1326 audit(1758693336.715:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.708053][ T29] audit: type=1326 audit(1758693336.715:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.731554][ T29] audit: type=1326 audit(1758693336.715:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.755048][ T29] audit: type=1326 audit(1758693336.715:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.778495][ T29] audit: type=1326 audit(1758693336.715:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.801797][ T29] audit: type=1326 audit(1758693336.715:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.4.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f07764ceec9 code=0x7ffc0000 [ 55.870467][ T5139] loop6: detected capacity change from 0 to 512 [ 55.877013][ T5139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.890414][ T5143] loop3: detected capacity change from 0 to 128 [ 55.897743][ T5139] EXT4-fs (loop6): filesystem is read-only [ 55.915059][ T5139] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 55.916352][ T5143] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.942878][ T5143] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.978727][ T5139] EXT4-fs (loop6): filesystem is read-only [ 55.984841][ T5139] EXT4-fs (loop6): orphan cleanup on readonly fs [ 55.999415][ T5139] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #16: comm syz.6.571: iget: bad i_size value: 648518346341360424 [ 56.017429][ T5147] loop7: detected capacity change from 0 to 128 [ 56.043642][ T5139] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.571: couldn't read orphan inode 16 (err -117) [ 56.058335][ T4809] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.084275][ T5139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.131370][ T4280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.632370][ T5156] chnl_net:caif_netlink_parms(): no params data found [ 56.764675][ T5175] loop4: detected capacity change from 0 to 128 [ 56.813697][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.820782][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.830964][ T5156] bridge_slave_0: entered allmulticast mode [ 56.837407][ T5156] bridge_slave_0: entered promiscuous mode [ 56.845992][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.853732][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.864625][ T5156] bridge_slave_1: entered allmulticast mode [ 56.871070][ T5156] bridge_slave_1: entered promiscuous mode [ 56.942600][ T5156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.965752][ T5156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.027134][ T5156] team0: Port device team_slave_0 added [ 57.047261][ T5156] team0: Port device team_slave_1 added [ 57.137562][ T5156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.144808][ T5156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.170736][ T5156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.250724][ T5156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.257729][ T5156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.283706][ T5156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.333588][ T5156] hsr_slave_0: entered promiscuous mode [ 57.363712][ T5156] hsr_slave_1: entered promiscuous mode [ 57.416111][ T5203] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.425557][ T5203] FAT-fs (loop15): unable to read boot sector [ 57.460926][ T5156] debugfs: 'hsr0' already exists in 'hsr' [ 57.466691][ T5156] Cannot create hsr debugfs directory [ 57.679790][ T5156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 57.707450][ T5156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 57.721505][ T5156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 57.732040][ T5156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 57.809341][ T5156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.870796][ T5156] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.929745][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.936920][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.979105][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.986248][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.046424][ T5156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.236682][ T5156] veth0_vlan: entered promiscuous mode [ 58.253002][ T5156] veth1_vlan: entered promiscuous mode [ 58.268150][ T5156] veth0_macvtap: entered promiscuous mode [ 58.276930][ T5156] veth1_macvtap: entered promiscuous mode [ 58.307795][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.342569][ T5156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.369898][ T5156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.382350][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.408544][ T4552] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.427642][ T4552] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.440322][ T4552] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.451505][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.473900][ T4575] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.495237][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.571493][ T12] bridge0: port 3(batadv0) entered disabled state [ 58.583959][ T5291] syz.6.616 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.599307][ T12] bridge_slave_1: left allmulticast mode [ 58.604989][ T12] bridge_slave_1: left promiscuous mode [ 58.610646][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.633250][ T12] bridge_slave_0: left promiscuous mode [ 58.638896][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.641370][ T5294] loop6: detected capacity change from 0 to 512 [ 58.676563][ T5294] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 58.706912][ T5294] EXT4-fs (loop6): 1 truncate cleaned up [ 58.722819][ T5294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.801565][ T4280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.813201][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.832090][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.853526][ T12] bond0 (unregistering): Released all slaves [ 58.930341][ T12] hsr_slave_0: left promiscuous mode [ 58.938916][ T12] hsr_slave_1: left promiscuous mode [ 58.945609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.953062][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.963343][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.970820][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.988953][ T12] veth1_macvtap: left promiscuous mode [ 59.000899][ T12] veth0_macvtap: left promiscuous mode [ 59.006443][ T12] veth1_vlan: left promiscuous mode [ 59.013229][ T12] veth0_vlan: left promiscuous mode [ 59.024672][ T5313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.625'. [ 59.098516][ T12] team0 (unregistering): Port device team_slave_1 removed [ 59.111980][ T12] team0 (unregistering): Port device team_slave_0 removed [ 59.135577][ T5326] netlink: 3 bytes leftover after parsing attributes in process `syz.6.631'. [ 59.174438][ T5315] vlan2: entered allmulticast mode [ 59.195718][ T5326] batadv1: entered promiscuous mode [ 59.201123][ T5326] batadv1: entered allmulticast mode [ 59.224448][ T5332] loop8: detected capacity change from 0 to 164 [ 59.272153][ T5275] chnl_net:caif_netlink_parms(): no params data found [ 59.293036][ T5332] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.312518][ T5332] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.337494][ T5332] Symlink component flag not implemented [ 59.343309][ T5332] Symlink component flag not implemented [ 59.350003][ T5332] Symlink component flag not implemented (7) [ 59.356126][ T5332] Symlink component flag not implemented (116) [ 59.363479][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.370559][ T5275] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.378278][ T5275] bridge_slave_0: entered allmulticast mode [ 59.386675][ T5275] bridge_slave_0: entered promiscuous mode [ 59.393728][ T5348] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.401123][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.408166][ T5275] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.416066][ T5275] bridge_slave_1: entered allmulticast mode [ 59.423206][ T5348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 59.432184][ T5351] netlink: 'syz.7.641': attribute type 1 has an invalid length. [ 59.438060][ T5275] bridge_slave_1: entered promiscuous mode [ 59.463666][ T5275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.476833][ T5275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.511614][ T5275] team0: Port device team_slave_0 added [ 59.528566][ T5275] team0: Port device team_slave_1 added [ 59.556228][ T5275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.563331][ T5275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.589278][ T5275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.602175][ T5275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.609157][ T5275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.635202][ T5275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.658523][ T5371] loop7: detected capacity change from 0 to 1024 [ 59.676046][ T5371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.680234][ T5377] netlink: 28 bytes leftover after parsing attributes in process `syz.8.651'. [ 59.705025][ T5275] hsr_slave_0: entered promiscuous mode [ 59.713099][ T5371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.729046][ T5275] hsr_slave_1: entered promiscuous mode [ 59.748503][ T5275] debugfs: 'hsr0' already exists in 'hsr' [ 59.754417][ T5275] Cannot create hsr debugfs directory [ 59.774375][ T4308] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.863385][ T5275] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 59.886169][ T5275] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 59.908027][ T5394] loop5: detected capacity change from 0 to 128 [ 59.920542][ T5275] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 59.931862][ T5275] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 59.958592][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.965700][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.972999][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.980078][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.045892][ T5419] loop7: detected capacity change from 0 to 512 [ 60.068357][ T5419] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.666: casefold flag without casefold feature [ 60.090716][ T5275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.092294][ T5419] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.666: couldn't read orphan inode 15 (err -117) [ 60.103252][ T5275] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.117333][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.126076][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.150140][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.155091][ T5419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.157196][ T4596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.181723][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.188777][ T4596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.237543][ T4308] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.302307][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.311132][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.340800][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.363244][ T5437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.673'. [ 60.374744][ T5437] netem: change failed [ 60.409824][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.418627][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.436714][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.481856][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.490744][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.517932][ T5449] vlan2: entered allmulticast mode [ 60.525631][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.671'. [ 60.570632][ T5275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.665565][ T29] kauditd_printk_skb: 870 callbacks suppressed [ 60.665580][ T29] audit: type=1107 audit(1758693341.835:3733): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 60.709209][ T29] audit: type=1326 audit(1758693341.875:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.714646][ T5466] loop6: detected capacity change from 0 to 512 [ 60.732558][ T29] audit: type=1326 audit(1758693341.875:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.739444][ T29] audit: type=1326 audit(1758693341.885:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.785493][ T29] audit: type=1326 audit(1758693341.885:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.808859][ T29] audit: type=1326 audit(1758693341.885:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.835406][ T29] audit: type=1326 audit(1758693341.955:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.837048][ T5466] EXT4-fs (loop6): orphan cleanup on readonly fs [ 60.884092][ T29] audit: type=1326 audit(1758693342.035:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.907467][ T29] audit: type=1326 audit(1758693342.055:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.910083][ T5466] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.679: bad orphan inode 13 [ 60.930891][ T29] audit: type=1326 audit(1758693342.055:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.7.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 60.955298][ T5466] ext4_test_bit(bit=12, block=18) = 1 [ 60.969408][ T5466] is_bad_inode(inode)=0 [ 60.973558][ T5466] NEXT_ORPHAN(inode)=2130706432 [ 60.978481][ T5466] max_ino=32 [ 60.981718][ T5466] i_nlink=1 [ 60.998794][ T5466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.033224][ T5275] veth0_vlan: entered promiscuous mode [ 61.041751][ T5275] veth1_vlan: entered promiscuous mode [ 61.060892][ T5275] veth0_macvtap: entered promiscuous mode [ 61.071906][ T5275] veth1_macvtap: entered promiscuous mode [ 61.092054][ T5275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.114033][ T5275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.137553][ T4280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.150627][ T4575] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.186901][ T4575] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.222082][ T4575] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.248116][ T4575] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.266220][ T5517] loop6: detected capacity change from 0 to 128 [ 61.267628][ T5510] netdevsim netdevsim7: Direct firmware load for ..€ failed with error -2 [ 61.274572][ T5515] loop5: detected capacity change from 0 to 512 [ 61.288464][ T5515] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.305879][ T5516] vlan2: entered allmulticast mode [ 61.330287][ T5515] EXT4-fs (loop5): 1 truncate cleaned up [ 61.336340][ T5515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.351173][ T5515] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.392488][ T5527] pim6reg: entered allmulticast mode [ 61.410533][ T5527] pim6reg: left allmulticast mode [ 61.433419][ T5534] netlink: 'syz.9.703': attribute type 10 has an invalid length. [ 61.449490][ T5534] ipvlan0: entered allmulticast mode [ 61.454815][ T5534] veth0_vlan: entered allmulticast mode [ 61.463209][ T5534] team0: Device ipvlan0 failed to register rx_handler [ 61.513370][ T5538] loop9: detected capacity change from 0 to 1024 [ 61.520311][ T5538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.532543][ T5538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.696449][ T5275] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.712655][ T3378] kernel read not supported for file /vcsu1 (pid: 3378 comm: kworker/1:3) [ 61.724950][ T5545] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 61.766160][ T5548] bridge_slave_0: left promiscuous mode [ 61.772592][ T5548] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.815136][ T5548] bridge_slave_1: left allmulticast mode [ 61.820890][ T5548] bridge_slave_1: left promiscuous mode [ 61.826711][ T5548] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.841713][ T5548] bond0: (slave bond_slave_0): Releasing backup interface [ 61.854953][ T5559] loop5: detected capacity change from 0 to 512 [ 61.861481][ T5557] loop9: detected capacity change from 0 to 512 [ 61.868427][ T5557] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 61.880791][ T5548] bond0: (slave bond_slave_1): Releasing backup interface [ 61.881182][ T5557] EXT4-fs (loop9): 1 truncate cleaned up [ 61.894634][ T5557] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.907944][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.911979][ T5548] team0: Port device team_slave_0 removed [ 61.923730][ T5559] EXT4-fs (loop5): too many log groups per flexible block group [ 61.931631][ T5559] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 61.940821][ T5548] team0: Port device team_slave_1 removed [ 61.943603][ T5559] EXT4-fs (loop5): mount failed [ 61.954810][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.962671][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.972499][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.979937][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.003916][ T5553] netdevsim netdevsim8: Direct firmware load for ..€ failed with error -2 [ 62.121868][ T3378] hid_parser_main: 34 callbacks suppressed [ 62.121885][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.135334][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.142775][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.150401][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.157841][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.165410][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.172861][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.180272][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.187787][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.195202][ T3378] hid-generic 0000:0080:0002.0003: unknown main item tag 0x0 [ 62.210580][ T5583] loop8: detected capacity change from 0 to 1024 [ 62.219443][ T3378] hid-generic 0000:0080:0002.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 62.221526][ T5583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.251756][ T5583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.294646][ T5156] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.313779][ T5600] loop8: detected capacity change from 0 to 512 [ 62.321033][ T5600] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 62.340306][ T5600] EXT4-fs (loop8): 1 truncate cleaned up [ 62.346368][ T5600] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.363032][ T5600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.394441][ T5605] loop6: detected capacity change from 0 to 128 [ 62.927585][ T5632] loop5: detected capacity change from 0 to 1024 [ 62.938984][ T5632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.984936][ T5632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.338487][ T5688] loop6: detected capacity change from 0 to 1024 [ 63.372165][ T5688] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.403858][ T5700] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 63.441528][ T5698] loop7: detected capacity change from 0 to 128 [ 63.471133][ T5709] loop9: detected capacity change from 0 to 512 [ 63.489147][ T5700] bridge_slave_0: left promiscuous mode [ 63.494883][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.505131][ T5700] bridge_slave_1: left allmulticast mode [ 63.510364][ T5709] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.510897][ T5700] bridge_slave_1: left promiscuous mode [ 63.526931][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.547258][ T5700] bond0: (slave bond_slave_0): Releasing backup interface [ 63.570642][ T5700] bond0: (slave bond_slave_1): Releasing backup interface [ 63.595663][ T5700] team0: Port device team_slave_0 removed [ 63.613741][ T5700] team0: Port device team_slave_1 removed [ 63.621283][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.628739][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.638024][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.645440][ T5700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.931344][ T5737] loop8: detected capacity change from 0 to 512 [ 63.952016][ T5737] EXT4-fs (loop8): too many log groups per flexible block group [ 63.959984][ T5737] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 63.974847][ T5737] EXT4-fs (loop8): mount failed [ 63.980780][ T10] kernel read not supported for file /vcsu1 (pid: 10 comm: kworker/0:1) [ 64.084989][ T5750] netlink: 'syz.9.789': attribute type 10 has an invalid length. [ 64.100969][ T5751] loop8: detected capacity change from 0 to 1024 [ 64.116287][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.133846][ T5750] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 64.167858][ T5751] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.790: Allocating blocks 449-513 which overlap fs metadata [ 64.183273][ T5750] netlink: 'syz.9.789': attribute type 10 has an invalid length. [ 64.192522][ T5750] batadv0: entered promiscuous mode [ 64.197752][ T5750] batadv0: entered allmulticast mode [ 64.205875][ T5750] bond0: (slave batadv0): Releasing backup interface [ 64.219350][ T5750] bridge0: port 3(batadv0) entered blocking state [ 64.219619][ T5751] EXT4-fs (loop8): pa ffff88810485d8c0: logic 48, phys. 177, len 21 [ 64.225878][ T5750] bridge0: port 3(batadv0) entered disabled state [ 64.233869][ T5751] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 64.334336][ T5767] loop9: detected capacity change from 0 to 128 [ 64.419879][ T4575] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 64.429220][ T4575] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 64.456561][ T5785] loop7: detected capacity change from 0 to 1024 [ 64.483058][ T5785] EXT4-fs: Ignoring removed orlov option [ 64.488962][ T5785] EXT4-fs: Ignoring removed nobh option [ 64.494597][ T5785] EXT4-fs: Ignoring removed bh option [ 64.501635][ T3476] kernel read not supported for file /vcsu1 (pid: 3476 comm: kworker/1:8) [ 64.549910][ T5785] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.801: Allocating blocks 481-513 which overlap fs metadata [ 64.588951][ T5794] loop9: detected capacity change from 0 to 128 [ 64.590138][ T5785] EXT4-fs (loop7): pa ffff88810485d850: logic 352, phys. 465, len 3 [ 64.603258][ T5785] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 64.613771][ T5807] loop5: detected capacity change from 0 to 1024 [ 64.674716][ T5807] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.808: Allocating blocks 449-513 which overlap fs metadata [ 64.711255][ T5821] loop7: detected capacity change from 0 to 128 [ 64.753889][ T5821] syz.7.812: attempt to access beyond end of device [ 64.753889][ T5821] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 64.773522][ T5823] loop8: detected capacity change from 0 to 512 [ 64.785878][ T5807] EXT4-fs (loop5): pa ffff88810485d850: logic 48, phys. 177, len 21 [ 64.793928][ T5807] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 64.805252][ T5823] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 64.826901][ T5823] EXT4-fs (loop8): 1 truncate cleaned up [ 64.841733][ T4596] kworker/u8:48: attempt to access beyond end of device [ 64.841733][ T4596] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 64.897900][ T5830] netlink: 'syz.5.816': attribute type 6 has an invalid length. [ 64.938966][ T5832] 9pnet_fd: Insufficient options for proto=fd [ 65.219335][ T5855] loop5: detected capacity change from 0 to 1024 [ 65.226344][ T5855] EXT4-fs: Ignoring removed orlov option [ 65.245046][ T5855] EXT4-fs: Ignoring removed nobh option [ 65.250856][ T5855] EXT4-fs: Ignoring removed bh option [ 65.293330][ T5855] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.827: Allocating blocks 481-513 which overlap fs metadata [ 65.325382][ T5855] EXT4-fs (loop5): pa ffff88810485d850: logic 352, phys. 465, len 3 [ 65.333531][ T5855] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 65.441640][ T5874] loop5: detected capacity change from 0 to 512 [ 65.451702][ T5874] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.467304][ T5874] EXT4-fs (loop5): 1 truncate cleaned up [ 65.507632][ T5883] tipc: Started in network mode [ 65.512641][ T5883] tipc: Node identity fffeffff, cluster identity 4711 [ 65.519457][ T5883] tipc: Node number set to 4294901759 [ 65.588665][ T5893] loop9: detected capacity change from 0 to 512 [ 65.624859][ T5893] EXT4-fs (loop9): too many log groups per flexible block group [ 65.632874][ T5893] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 65.640784][ T5893] EXT4-fs (loop9): mount failed [ 65.646178][ T5891] loop5: detected capacity change from 0 to 128 [ 65.666534][ T5900] __nla_validate_parse: 11 callbacks suppressed [ 65.666547][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.7.848'. [ 65.704226][ T29] kauditd_printk_skb: 838 callbacks suppressed [ 65.704241][ T29] audit: type=1326 audit(1758693346.875:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.734465][ T29] audit: type=1326 audit(1758693346.875:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.761383][ T29] audit: type=1326 audit(1758693346.875:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.784968][ T29] audit: type=1326 audit(1758693346.875:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.808431][ T29] audit: type=1326 audit(1758693346.875:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.831946][ T29] audit: type=1326 audit(1758693346.875:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.855534][ T29] audit: type=1326 audit(1758693346.875:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.879116][ T29] audit: type=1326 audit(1758693346.875:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.902585][ T29] audit: type=1326 audit(1758693346.875:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.9.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f493ab9eec9 code=0x7ffc0000 [ 65.926132][ T29] audit: type=1326 audit(1758693346.875:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5901 comm="syz.7.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063404eec9 code=0x7ffc0000 [ 66.300757][ T5891] ================================================================== [ 66.308859][ T5891] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 66.316740][ T5891] [ 66.319046][ T5891] write to 0xffff88811a419714 of 4 bytes by task 5906 on cpu 1: [ 66.326649][ T5891] xas_set_mark+0x12b/0x140 [ 66.331142][ T5891] __folio_start_writeback+0x1dd/0x440 [ 66.336605][ T5891] __block_write_full_folio+0x53a/0x8f0 [ 66.342128][ T5891] block_write_full_folio+0x2c2/0x2e0 [ 66.347479][ T5891] mpage_writepages+0x6cf/0x1250 [ 66.352416][ T5891] fat_writepages+0x24/0x30 [ 66.356912][ T5891] do_writepages+0x1c3/0x310 [ 66.361498][ T5891] file_write_and_wait_range+0x156/0x2c0 [ 66.367127][ T5891] __generic_file_fsync+0x46/0x140 [ 66.372231][ T5891] fat_file_fsync+0x49/0x100 [ 66.376817][ T5891] vfs_fsync_range+0x10a/0x130 [ 66.381572][ T5891] generic_file_write_iter+0x1b8/0x2f0 [ 66.387025][ T5891] iter_file_splice_write+0x666/0xa60 [ 66.392383][ T5891] direct_splice_actor+0x156/0x2a0 [ 66.397487][ T5891] splice_direct_to_actor+0x312/0x680 [ 66.402847][ T5891] do_splice_direct+0xda/0x150 [ 66.407594][ T5891] do_sendfile+0x380/0x650 [ 66.412009][ T5891] __x64_sys_sendfile64+0x105/0x150 [ 66.417198][ T5891] x64_sys_call+0x2bb0/0x2ff0 [ 66.421863][ T5891] do_syscall_64+0xd2/0x200 [ 66.426364][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.432244][ T5891] [ 66.434555][ T5891] read to 0xffff88811a419714 of 4 bytes by task 5891 on cpu 0: [ 66.442078][ T5891] __writeback_single_inode+0x1f9/0x7c0 [ 66.447624][ T5891] writeback_single_inode+0x167/0x3e0 [ 66.452985][ T5891] sync_inode_metadata+0x5b/0x90 [ 66.457914][ T5891] __generic_file_fsync+0xf8/0x140 [ 66.463010][ T5891] fat_file_fsync+0x49/0x100 [ 66.467587][ T5891] vfs_fsync_range+0x10a/0x130 [ 66.472338][ T5891] generic_file_write_iter+0x1b8/0x2f0 [ 66.477784][ T5891] iter_file_splice_write+0x666/0xa60 [ 66.483140][ T5891] direct_splice_actor+0x156/0x2a0 [ 66.488245][ T5891] splice_direct_to_actor+0x312/0x680 [ 66.493604][ T5891] do_splice_direct+0xda/0x150 [ 66.498352][ T5891] do_sendfile+0x380/0x650 [ 66.502763][ T5891] __x64_sys_sendfile64+0x105/0x150 [ 66.507954][ T5891] x64_sys_call+0x2bb0/0x2ff0 [ 66.512620][ T5891] do_syscall_64+0xd2/0x200 [ 66.517117][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.522996][ T5891] [ 66.525300][ T5891] value changed: 0x0a000021 -> 0x04000021 [ 66.530995][ T5891] [ 66.533303][ T5891] Reported by Kernel Concurrency Sanitizer on: [ 66.539438][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 66.550188][ T5891] Tainted: [W]=WARN [ 66.553981][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.564104][ T5891] ================================================================== [ 66.763046][ T4552] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.873207][ T4552] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.941038][ T4552] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.012325][ T4552] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.170392][ T4552] bond0 (unregistering): Released all slaves [ 67.213426][ T4552] hsr_slave_0: left promiscuous mode [ 67.218988][ T4552] hsr_slave_1: left promiscuous mode [ 67.226683][ T4552] veth1_macvtap: left promiscuous mode [ 67.234143][ T4552] veth0_macvtap: left promiscuous mode [ 67.239710][ T4552] veth1_vlan: left promiscuous mode [ 67.244955][ T4552] veth0_vlan: left promiscuous mode [ 67.612568][ T4552] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.661857][ T4552] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.715600][ T4552] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.751254][ T4552] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.832122][ T4552] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.901544][ T4552] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.961571][ T4552] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.021194][ T4552] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.102175][ T4552] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.161625][ T4552] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.211287][ T4552] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.281414][ T4552] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.331393][ T4552] bridge0: port 3(batadv0) entered disabled state [ 68.338368][ T4552] bridge_slave_1: left allmulticast mode [ 68.344028][ T4552] bridge_slave_1: left promiscuous mode [ 68.349690][ T4552] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.357376][ T4552] bridge_slave_0: left allmulticast mode [ 68.363159][ T4552] bridge_slave_0: left promiscuous mode [ 68.368768][ T4552] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.377395][ T4552] bridge_slave_1: left allmulticast mode [ 68.383164][ T4552] bridge_slave_1: left promiscuous mode [ 68.388793][ T4552] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.396454][ T4552] bridge_slave_0: left promiscuous mode [ 68.402111][ T4552] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.512022][ T4552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.521698][ T4552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.531051][ T4552] bond0 (unregistering): Released all slaves [ 68.610581][ T4552] bond0 (unregistering): Released all slaves [ 68.662025][ T4552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.672226][ T4552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.681826][ T4552] bond0 (unregistering): Released all slaves [ 68.722459][ T4552] tipc: Left network mode [ 68.731107][ T4552] hsr_slave_0: left promiscuous mode [ 68.736722][ T4552] hsr_slave_1: left promiscuous mode [ 68.742429][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.750038][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.757715][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.765134][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.774074][ T4552] hsr_slave_0: left promiscuous mode [ 68.780201][ T4552] hsr_slave_1: left promiscuous mode [ 68.787151][ T4552] hsr_slave_0: left promiscuous mode [ 68.792660][ T4552] hsr_slave_1: left promiscuous mode [ 68.798205][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.805712][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.813139][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.820517][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.834744][ T4552] veth1_macvtap: left promiscuous mode [ 68.840246][ T4552] veth0_macvtap: left promiscuous mode [ 68.845712][ T4552] veth1_vlan: left promiscuous mode [ 68.850978][ T4552] veth0_vlan: left promiscuous mode [ 68.856615][ T4552] veth1_macvtap: left promiscuous mode [ 68.862116][ T4552] veth0_macvtap: left promiscuous mode [ 68.867606][ T4552] veth1_vlan: left promiscuous mode [ 68.873066][ T4552] veth0_vlan: left promiscuous mode [ 68.879732][ T4552] veth1_macvtap: left promiscuous mode [ 68.885176][ T4552] veth0_macvtap: left promiscuous mode [ 68.891159][ T4552] veth1_vlan: left promiscuous mode [ 68.896354][ T4552] veth0_vlan: left promiscuous mode [ 69.000200][ T4552] team0 (unregistering): Port device team_slave_1 removed [ 69.011093][ T4552] team0 (unregistering): Port device team_slave_0 removed [ 69.096357][ T4552] team0 (unregistering): Port device team_slave_1 removed [ 69.105279][ T4552] team0 (unregistering): Port device team_slave_0 removed [ 69.801791][ T4552] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.851221][ T4552] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.911603][ T4552] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.991542][ T4552] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.061353][ T4552] bridge_slave_1: left allmulticast mode [ 70.066983][ T4552] bridge_slave_1: left promiscuous mode [ 70.072644][ T4552] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.080450][ T4552] bridge_slave_0: left allmulticast mode [ 70.086115][ T4552] bridge_slave_0: left promiscuous mode [ 70.091978][ T4552] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.152666][ T4552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.162480][ T4552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.171757][ T4552] bond0 (unregistering): Released all slaves [ 70.242307][ T4552] hsr_slave_0: left promiscuous mode [ 70.247880][ T4552] hsr_slave_1: left promiscuous mode [ 70.253406][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.260833][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.268248][ T4552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.275639][ T4552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.285083][ T4552] veth1_macvtap: left promiscuous mode [ 70.290581][ T4552] veth0_macvtap: left promiscuous mode [ 70.296142][ T4552] veth1_vlan: left promiscuous mode [ 70.301540][ T4552] veth0_vlan: left promiscuous mode [ 70.355754][ T4552] team0 (unregistering): Port device team_slave_1 removed [ 70.364689][ T4552] team0 (unregistering): Port device team_slave_0 removed [ 70.394015][ T3476] infiniband syz1: ib_query_port failed (-19)