last executing test programs: 3.016918285s ago: executing program 3 (id=432): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.848285107s ago: executing program 3 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x2af, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.782334109s ago: executing program 3 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000001540)={[{@discard}, {@mblk_io_submit}, {@grpjquota}, {@quota}, {@nobarrier}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2.631303001s ago: executing program 3 (id=441): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.321278575s ago: executing program 3 (id=442): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x0, 0x3, 0x5a70, 0x3, 0x3}}) 2.252505886s ago: executing program 0 (id=444): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000010008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000500)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "22a836350c91f7ecf9684468c69002698680c4b90c47637ccc5153be82c8a704", "061219571c60c08f7358e70fc2a352a7", {"ccab104756eb9969e5c5ff78cf404010", "39d70a353ad1309fffda08f63a37ba61"}}}}}}}}, 0x0) 2.205620127s ago: executing program 0 (id=445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0) 2.173287098s ago: executing program 0 (id=447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x10}) 1.987429921s ago: executing program 3 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sched_switch\x00', r1, 0x0, 0xfffffff7fffffffe}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x490, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.983741491s ago: executing program 32 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sched_switch\x00', r1, 0x0, 0xfffffff7fffffffe}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x490, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.557630917s ago: executing program 1 (id=467): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.39388161s ago: executing program 1 (id=470): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="45e343f8c3e1", @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xfd}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0) 1.39328043s ago: executing program 2 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.3646995s ago: executing program 2 (id=472): io_setup(0x2278, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.278503651s ago: executing program 0 (id=474): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.263600292s ago: executing program 1 (id=475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.212934822s ago: executing program 1 (id=476): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 1.212475852s ago: executing program 2 (id=477): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.110727074s ago: executing program 1 (id=479): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.006419635s ago: executing program 2 (id=481): r0 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x2, 0xfffffffe, 0x3bd}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r0, r2, 0x0) 945.239006ms ago: executing program 1 (id=483): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 945.078566ms ago: executing program 2 (id=484): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x10}) 823.194378ms ago: executing program 4 (id=486): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 724.39774ms ago: executing program 4 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 653.156371ms ago: executing program 0 (id=488): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 597.808721ms ago: executing program 4 (id=489): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) close(r0) 584.830452ms ago: executing program 0 (id=490): r0 = gettid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r1, 0xa1) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 532.701002ms ago: executing program 4 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c09, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x0, 0x3b2}, 0x0, 0x0) 361.714555ms ago: executing program 4 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x591401, 0x0) 261.354676ms ago: executing program 4 (id=493): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) r0 = request_key(&(0x7f0000000180)='cifs.spnego\x00', 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "db355420dc6ff63a1df6a7499efb1aa60a4724dbe68f44cffd21f1d99d0377832535908e6baf3c814e10462410a1254ae89f806fd141a79934e6da0f5fa4c60e", 0x2a}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) 0s ago: executing program 2 (id=494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000940800000000170063"], 0x0, 0xc, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 26.378931][ T29] audit: type=1400 audit(1751516731.652:62): avc: denied { mounton } for pid=3276 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.380149][ T3276] cgroup: Unknown subsys name 'net' [ 26.401692][ T29] audit: type=1400 audit(1751516731.652:63): avc: denied { mount } for pid=3276 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.429122][ T29] audit: type=1400 audit(1751516731.692:64): avc: denied { unmount } for pid=3276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.564850][ T3276] cgroup: Unknown subsys name 'cpuset' [ 26.571138][ T3276] cgroup: Unknown subsys name 'rlimit' [ 26.684126][ T29] audit: type=1400 audit(1751516731.952:65): avc: denied { setattr } for pid=3276 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.707492][ T29] audit: type=1400 audit(1751516731.962:66): avc: denied { create } for pid=3276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.728071][ T29] audit: type=1400 audit(1751516731.962:67): avc: denied { write } for pid=3276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.742059][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.748486][ T29] audit: type=1400 audit(1751516731.962:68): avc: denied { read } for pid=3276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.777375][ T29] audit: type=1400 audit(1751516731.962:69): avc: denied { mounton } for pid=3276 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.797628][ T3276] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.802248][ T29] audit: type=1400 audit(1751516731.962:70): avc: denied { mount } for pid=3276 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.834571][ T29] audit: type=1400 audit(1751516732.042:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.894435][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.017804][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.024993][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.032214][ T3303] bridge_slave_0: entered allmulticast mode [ 28.039056][ T3303] bridge_slave_0: entered promiscuous mode [ 28.055677][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.068857][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.075979][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.083158][ T3303] bridge_slave_1: entered allmulticast mode [ 28.090014][ T3303] bridge_slave_1: entered promiscuous mode [ 28.096214][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.145058][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.159772][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.176356][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.211489][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.236063][ T3303] team0: Port device team_slave_0 added [ 28.256241][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.263339][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.270620][ T3314] bridge_slave_0: entered allmulticast mode [ 28.277201][ T3314] bridge_slave_0: entered promiscuous mode [ 28.283601][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.290722][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.297996][ T3304] bridge_slave_0: entered allmulticast mode [ 28.304435][ T3304] bridge_slave_0: entered promiscuous mode [ 28.311608][ T3303] team0: Port device team_slave_1 added [ 28.332058][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.339188][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.346362][ T3314] bridge_slave_1: entered allmulticast mode [ 28.352859][ T3314] bridge_slave_1: entered promiscuous mode [ 28.359047][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.366182][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.373312][ T3304] bridge_slave_1: entered allmulticast mode [ 28.379884][ T3304] bridge_slave_1: entered promiscuous mode [ 28.406825][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.413804][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.439800][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.450916][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.457962][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.483978][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.526746][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.541880][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.552646][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.562027][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.569210][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.576415][ T3307] bridge_slave_0: entered allmulticast mode [ 28.582896][ T3307] bridge_slave_0: entered promiscuous mode [ 28.590359][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.599587][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.606705][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.613887][ T3307] bridge_slave_1: entered allmulticast mode [ 28.620401][ T3307] bridge_slave_1: entered promiscuous mode [ 28.626706][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.633787][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.640968][ T3310] bridge_slave_0: entered allmulticast mode [ 28.647540][ T3310] bridge_slave_0: entered promiscuous mode [ 28.654635][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.661831][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.669029][ T3310] bridge_slave_1: entered allmulticast mode [ 28.675477][ T3310] bridge_slave_1: entered promiscuous mode [ 28.717391][ T3303] hsr_slave_0: entered promiscuous mode [ 28.723315][ T3303] hsr_slave_1: entered promiscuous mode [ 28.735214][ T3314] team0: Port device team_slave_0 added [ 28.751511][ T3304] team0: Port device team_slave_0 added [ 28.758353][ T3304] team0: Port device team_slave_1 added [ 28.764651][ T3314] team0: Port device team_slave_1 added [ 28.776339][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.786960][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.807431][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.822531][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.842128][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.849153][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.875283][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.901540][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.908612][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.934581][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.945845][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.952813][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.978918][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.997449][ T3307] team0: Port device team_slave_0 added [ 29.005939][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.012914][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.038944][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.056673][ T3310] team0: Port device team_slave_0 added [ 29.064000][ T3310] team0: Port device team_slave_1 added [ 29.070504][ T3307] team0: Port device team_slave_1 added [ 29.104180][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.111225][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.137238][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.148908][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.156001][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.181948][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.199381][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.206494][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.232525][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.244228][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.251274][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.277252][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.302409][ T3304] hsr_slave_0: entered promiscuous mode [ 29.308595][ T3304] hsr_slave_1: entered promiscuous mode [ 29.314860][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.322430][ T3304] Cannot create hsr debugfs directory [ 29.358523][ T3314] hsr_slave_0: entered promiscuous mode [ 29.364706][ T3314] hsr_slave_1: entered promiscuous mode [ 29.370549][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.378236][ T3314] Cannot create hsr debugfs directory [ 29.417098][ T3310] hsr_slave_0: entered promiscuous mode [ 29.423280][ T3310] hsr_slave_1: entered promiscuous mode [ 29.429443][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.437105][ T3310] Cannot create hsr debugfs directory [ 29.444646][ T3307] hsr_slave_0: entered promiscuous mode [ 29.450624][ T3307] hsr_slave_1: entered promiscuous mode [ 29.456738][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.464354][ T3307] Cannot create hsr debugfs directory [ 29.568523][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.592655][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.620087][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.647594][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.685586][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.694754][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.704546][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.717366][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.746149][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.754887][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.769957][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.779402][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.807857][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.825214][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.841180][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.852341][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.878253][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.891194][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.900329][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.909319][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.918300][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.952548][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.966118][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.977510][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.984800][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.004637][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.016064][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.023177][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.041712][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.059336][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.066577][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.076369][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.083545][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.093921][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.107603][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.114854][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.135862][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.143160][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.158734][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.186356][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.199952][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.210470][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.258503][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.265724][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.275500][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.282648][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.297521][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.312900][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.333930][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.344390][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.378383][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.390249][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.414913][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.422022][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.452028][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.459177][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.470623][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.516455][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.554452][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.629934][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.648892][ T3310] veth0_vlan: entered promiscuous mode [ 30.671945][ T3310] veth1_vlan: entered promiscuous mode [ 30.685423][ T3303] veth0_vlan: entered promiscuous mode [ 30.701328][ T3303] veth1_vlan: entered promiscuous mode [ 30.732398][ T3304] veth0_vlan: entered promiscuous mode [ 30.762001][ T3304] veth1_vlan: entered promiscuous mode [ 30.772157][ T3307] veth0_vlan: entered promiscuous mode [ 30.778868][ T3303] veth0_macvtap: entered promiscuous mode [ 30.786332][ T3303] veth1_macvtap: entered promiscuous mode [ 30.793290][ T3310] veth0_macvtap: entered promiscuous mode [ 30.813830][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.821427][ T3310] veth1_macvtap: entered promiscuous mode [ 30.828935][ T3307] veth1_vlan: entered promiscuous mode [ 30.847134][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.857360][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.866394][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.875205][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.883917][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.900064][ T3314] veth0_vlan: entered promiscuous mode [ 30.908316][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.927519][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.935185][ T3304] veth0_macvtap: entered promiscuous mode [ 30.943799][ T3304] veth1_macvtap: entered promiscuous mode [ 30.954226][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.963041][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.971859][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.980634][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.991300][ T3314] veth1_vlan: entered promiscuous mode [ 31.015280][ T3307] veth0_macvtap: entered promiscuous mode [ 31.025500][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.041026][ T3314] veth0_macvtap: entered promiscuous mode [ 31.053072][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.055658][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.092101][ T3307] veth1_macvtap: entered promiscuous mode [ 31.112289][ T3314] veth1_macvtap: entered promiscuous mode [ 31.127001][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.140618][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.155656][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.164477][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.173240][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.182089][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.243228][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.255481][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.263936][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.272810][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.281622][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.290405][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.307697][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.316529][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.325369][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.334126][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.346443][ T3483] syz.4.7 uses obsolete (PF_INET,SOCK_PACKET) [ 31.372518][ T3485] netlink: 'syz.2.9': attribute type 13 has an invalid length. [ 31.388991][ T3485] gretap0: refused to change device tx_queue_len [ 31.396038][ T3485] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 31.439445][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 31.439462][ T29] audit: type=1400 audit(1751516736.712:104): avc: denied { create } for pid=3487 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.470701][ T29] audit: type=1400 audit(1751516736.712:105): avc: denied { ioctl } for pid=3487 comm="syz.1.2" path="socket:[4654]" dev="sockfs" ino=4654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.496296][ T29] audit: type=1400 audit(1751516736.712:106): avc: denied { setopt } for pid=3487 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.527305][ T3488] batadv_slave_1: entered promiscuous mode [ 31.536802][ T3487] batadv_slave_1: left promiscuous mode [ 31.575260][ T29] audit: type=1400 audit(1751516736.842:107): avc: denied { mounton } for pid=3493 comm="syz.2.10" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.717150][ T29] audit: type=1400 audit(1751516736.982:108): avc: denied { open } for pid=3502 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.736301][ T29] audit: type=1400 audit(1751516736.982:109): avc: denied { kernel } for pid=3502 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.792516][ T29] audit: type=1400 audit(1751516737.022:110): avc: denied { mounton } for pid=3508 comm="syz.0.15" path="/proc/4/cgroup" dev="proc" ino=4678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 31.815359][ T29] audit: type=1400 audit(1751516737.032:111): avc: denied { cpu } for pid=3502 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.835194][ T29] audit: type=1400 audit(1751516737.092:112): avc: denied { read write } for pid=3512 comm="syz.2.17" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.858669][ T29] audit: type=1400 audit(1751516737.092:113): avc: denied { open } for pid=3512 comm="syz.2.17" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.958539][ T3520] loop3: detected capacity change from 0 to 1024 [ 31.975244][ T3520] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 31.986392][ T3520] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 32.029310][ T3520] JBD2: no valid journal superblock found [ 32.035177][ T3520] EXT4-fs (loop3): Could not load journal inode [ 32.047838][ T3521] loop0: detected capacity change from 0 to 128 [ 32.060937][ T3521] ======================================================= [ 32.060937][ T3521] WARNING: The mand mount option has been deprecated and [ 32.060937][ T3521] and is ignored by this kernel. Remove the mand [ 32.060937][ T3521] option from the mount to silence this warning. [ 32.060937][ T3521] ======================================================= [ 32.109712][ T3520] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 32.134186][ T3523] SELinux: failed to load policy [ 32.286529][ T3539] netlink: 271 bytes leftover after parsing attributes in process `syz.4.27'. [ 32.299928][ T3540] netlink: 'syz.2.26': attribute type 3 has an invalid length. [ 32.311405][ T3542] netlink: 'syz.3.28': attribute type 3 has an invalid length. [ 32.369742][ T3536] syz.0.18: attempt to access beyond end of device [ 32.369742][ T3536] loop0: rw=0, sector=97, nr_sectors = 120 limit=128 [ 32.519405][ T51] kworker/u8:3: attempt to access beyond end of device [ 32.519405][ T51] loop0: rw=1, sector=217, nr_sectors = 824 limit=128 [ 32.534816][ T3555] tipc: Started in network mode [ 32.539750][ T3555] tipc: Node identity ac14140f, cluster identity 4711 [ 32.561533][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 32.576983][ T3555] tipc: New replicast peer: 255.255.255.255 [ 32.583194][ T3555] tipc: Enabled bearer , priority 10 [ 32.592144][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 32.752791][ T3573] loop2: detected capacity change from 0 to 7 [ 32.898559][ T3583] loop2: detected capacity change from 0 to 512 [ 32.960041][ T3587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.999271][ T3587] loop3: detected capacity change from 0 to 256 [ 33.037300][ T3583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.050386][ T3587] FAT-fs (loop3): bogus number of FAT sectors [ 33.056599][ T3587] FAT-fs (loop3): Can't find a valid FAT filesystem [ 33.118208][ T3583] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.243946][ T3583] EXT4-fs: Ignoring removed orlov option [ 33.265185][ T3583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.284693][ T3583] EXT4-fs (loop2): can't enable nombcache during remount [ 33.366652][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.476755][ T3618] loop0: detected capacity change from 0 to 512 [ 33.513408][ T3621] openvswitch: netlink: Message has 6 unknown bytes. [ 33.523952][ T3618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.574145][ T3399] tipc: Node number set to 2886997007 [ 33.579909][ T3618] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.721115][ T3618] syz.0.58 (3618) used greatest stack depth: 10816 bytes left [ 33.769160][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.073325][ T3657] netlink: 48 bytes leftover after parsing attributes in process `syz.3.72'. [ 34.192635][ T3666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.76'. [ 34.223195][ T3668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 34.317790][ T3679] ALSA: seq fatal error: cannot create timer (-22) [ 34.328919][ T3680] loop3: detected capacity change from 0 to 256 [ 34.338090][ T3680] vfat: Unknown parameter '18446744073709551615)՝"' [ 34.520467][ T3700] IPVS: stopping master sync thread 3701 ... [ 34.520480][ T3701] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 34.628116][ T3712] netlink: 'syz.1.96': attribute type 2 has an invalid length. [ 34.635779][ T3712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 34.647364][ T3712] Zero length message leads to an empty skb [ 34.826080][ T3733] loop1: detected capacity change from 0 to 2048 [ 34.847031][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.926862][ T3745] rdma_op ffff8881197efd80 conn xmit_rdma 0000000000000000 [ 34.936152][ T3733] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 34.951182][ T3733] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 34.963975][ T3733] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.963975][ T3733] [ 34.973867][ T3733] EXT4-fs (loop1): Total free blocks count 0 [ 34.979976][ T3733] EXT4-fs (loop1): Free/Dirty block details [ 34.985942][ T3733] EXT4-fs (loop1): free_blocks=4096 [ 34.991238][ T3733] EXT4-fs (loop1): dirty_blocks=512 [ 34.996546][ T3733] EXT4-fs (loop1): Block reservation details [ 35.002567][ T3733] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 35.032991][ T3754] syz.0.116 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.130834][ T3763] netlink: 'syz.0.120': attribute type 10 has an invalid length. [ 35.138853][ T3763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.120'. [ 35.139258][ T3733] syz.1.107 (3733) used greatest stack depth: 10168 bytes left [ 35.163871][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 35.181147][ T3763] team0: Port device geneve1 added [ 35.217384][ T3768] delete_channel: no stack [ 35.386774][ T3790] loop4: detected capacity change from 0 to 128 [ 35.397124][ T3790] EXT4-fs: Ignoring removed nobh option [ 35.417743][ T3790] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.437995][ T3790] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.452159][ T3795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.466032][ T3797] netlink: 96 bytes leftover after parsing attributes in process `syz.1.135'. [ 35.486014][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.519305][ T3795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.597905][ T3795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.668698][ T3795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.771463][ T3795] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.789536][ T3795] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.802748][ T3795] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.816028][ T3795] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.846619][ T3816] pim6reg: entered allmulticast mode [ 35.873671][ T3816] pim6reg: left allmulticast mode [ 36.302076][ T3858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 36.457096][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 36.457114][ T29] audit: type=1326 audit(1751516741.732:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588e6ee929 code=0x7ffc0000 [ 36.530078][ T29] audit: type=1400 audit(1751516741.802:314): avc: denied { mounton } for pid=3882 comm="syz.2.169" path="/proc/90/task" dev="proc" ino=5597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 36.603621][ T29] audit: type=1400 audit(1751516741.872:315): avc: denied { name_bind } for pid=3890 comm="syz.2.172" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.635121][ C1] hrtimer: interrupt took 33661 ns [ 37.009414][ T29] audit: type=1400 audit(1751516742.282:316): avc: denied { create } for pid=3921 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.044950][ T29] audit: type=1400 audit(1751516742.312:317): avc: denied { bind } for pid=3921 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.064327][ T29] audit: type=1400 audit(1751516742.322:318): avc: denied { setopt } for pid=3921 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.158950][ T29] audit: type=1400 audit(1751516742.432:319): avc: denied { read } for pid=3929 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.184167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 37.210625][ T29] audit: type=1400 audit(1751516742.482:320): avc: denied { write } for pid=3929 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.235871][ T3932] loop0: detected capacity change from 0 to 2048 [ 37.242824][ T3932] EXT4-fs: Ignoring removed bh option [ 37.260094][ T3932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.342374][ T3940] netem: change failed [ 37.426426][ T29] audit: type=1326 audit(1751516742.702:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7f2e929 code=0x7ffc0000 [ 37.449259][ T29] audit: type=1326 audit(1751516742.702:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3944 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d7f2e929 code=0x7ffc0000 [ 37.796420][ T3943] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.822379][ T3943] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 37.834983][ T3943] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.834983][ T3943] [ 37.844758][ T3943] EXT4-fs (loop0): Total free blocks count 0 [ 37.850761][ T3943] EXT4-fs (loop0): Free/Dirty block details [ 37.856711][ T3943] EXT4-fs (loop0): free_blocks=2415919104 [ 37.862468][ T3943] EXT4-fs (loop0): dirty_blocks=8224 [ 37.867817][ T3943] EXT4-fs (loop0): Block reservation details [ 37.873895][ T3943] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 37.899076][ T3943] syz.0.184 (3943) used greatest stack depth: 9880 bytes left [ 37.909367][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.297784][ T4001] netlink: 'syz.0.214': attribute type 21 has an invalid length. [ 38.515813][ T4020] netlink: 'syz.3.222': attribute type 13 has an invalid length. [ 38.537422][ T4020] gretap0: refused to change device tx_queue_len [ 38.543881][ T4020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 38.815415][ T4053] loop4: detected capacity change from 0 to 128 [ 39.106571][ T4074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.583745][ T4122] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 39.660644][ T4133] netlink: '+}[@': attribute type 3 has an invalid length. [ 39.736730][ T4146] syz_tun: entered promiscuous mode [ 39.761396][ T4146] batadv_slave_0: entered promiscuous mode [ 39.975627][ T4165] loop2: detected capacity change from 0 to 8192 [ 40.061676][ T4165] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 40.069637][ T4165] FAT-fs (loop2): Filesystem has been set read-only [ 40.111782][ T4182] ------------[ cut here ]------------ [ 40.117394][ T4182] Please remove unsupported % in format string [ 40.124782][ T4182] WARNING: CPU: 0 PID: 4182 at lib/vsprintf.c:2724 format_decode+0x55d/0x580 [ 40.133632][ T4182] Modules linked in: [ 40.137603][ T4182] CPU: 0 UID: 0 PID: 4182 Comm: syz.0.292 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 40.150007][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.160149][ T4182] RIP: 0010:format_decode+0x55d/0x580 [ 40.165844][ T4182] Code: 9e d3 86 e8 45 66 11 fc c6 05 e8 3f 73 01 01 90 4c 89 e7 e8 a5 64 11 fc 41 0f b6 34 24 48 c7 c7 15 bf 5c 86 e8 64 3e c1 fb 90 <0f> 0b 90 90 e9 ea fd ff ff e8 e5 63 f7 fb 4d 89 ef e9 89 fc ff ff [ 40.185544][ T4182] RSP: 0018:ffffc90001367a50 EFLAGS: 00010246 [ 40.191675][ T4182] RAX: 94b0a4a214503a00 RBX: 0000000000000400 RCX: 0000000000080000 [ 40.199760][ T4182] RDX: ffffc9000212b000 RSI: 000000000000142f RDI: 0000000000001430 [ 40.207813][ T4182] RBP: ffffffff85c4c9d0 R08: 0001c900013678cf R09: 0000000000000000 [ 40.215890][ T4182] R10: 00000000ffffffff R11: 0000000000000002 R12: ffffc90001367ba4 [ 40.223905][ T4182] R13: 0000000000000000 R14: ffffc90001367ac8 R15: 0000000000000000 [ 40.231975][ T4182] FS: 00007f6b8ca276c0(0000) GS:ffff8882aee30000(0000) knlGS:0000000000000000 [ 40.241114][ T4182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.247769][ T4182] CR2: 0000001b32417ff8 CR3: 00000001223e2000 CR4: 00000000003506f0 [ 40.255915][ T4182] Call Trace: [ 40.259215][ T4182] [ 40.262188][ T4182] bstr_printf+0xb3/0x6e0 [ 40.266658][ T4182] ? bpf_test_run+0x1d1/0x490 [ 40.271396][ T4182] bpf_trace_printk+0xb7/0x1c0 [ 40.276302][ T4182] ? bpf_test_run+0x1d1/0x490 [ 40.281071][ T4182] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 40.286644][ T4182] bpf_test_run+0x1e0/0x490 [ 40.291253][ T4182] ? bpf_test_run+0xf6/0x490 [ 40.295912][ T4182] bpf_prog_test_run_skb+0x834/0xbd0 [ 40.301296][ T4182] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 40.307223][ T4182] bpf_prog_test_run+0x22a/0x390 [ 40.312242][ T4182] __sys_bpf+0x3dc/0x790 [ 40.316644][ T4182] __x64_sys_bpf+0x41/0x50 [ 40.321170][ T4182] x64_sys_call+0x2478/0x2fb0 [ 40.325977][ T4182] do_syscall_64+0xd2/0x200 [ 40.330518][ T4182] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.336778][ T4182] ? clear_bhb_loop+0x40/0x90 [ 40.341547][ T4182] ? clear_bhb_loop+0x40/0x90 [ 40.346313][ T4182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.352244][ T4182] RIP: 0033:0x7f6b8e3be929 [ 40.356743][ T4182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.376450][ T4182] RSP: 002b:00007f6b8ca27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.384929][ T4182] RAX: ffffffffffffffda RBX: 00007f6b8e5e5fa0 RCX: 00007f6b8e3be929 [ 40.392940][ T4182] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 40.401060][ T4182] RBP: 00007f6b8e440b39 R08: 0000000000000000 R09: 0000000000000000 [ 40.409082][ T4182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.417099][ T4182] R13: 0000000000000000 R14: 00007f6b8e5e5fa0 R15: 00007fff616d1038 [ 40.425172][ T4182] [ 40.428289][ T4182] ---[ end trace 0000000000000000 ]--- [ 40.526997][ T4198] batadv_slave_1: entered promiscuous mode [ 40.536361][ T4197] batadv_slave_1: left promiscuous mode [ 40.592804][ T4206] loop4: detected capacity change from 0 to 512 [ 40.609219][ T4206] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.650660][ T4206] EXT4-fs (loop4): 1 orphan inode deleted [ 40.656952][ T4206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.669698][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 40.679559][ T4213] loop1: detected capacity change from 0 to 512 [ 40.682257][ T4206] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.699335][ T4213] EXT4-fs: Ignoring removed oldalloc option [ 40.708355][ T4213] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.713494][ T4206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.733422][ T4213] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 40.755095][ T4218] loop0: detected capacity change from 0 to 512 [ 40.755149][ T4213] EXT4-fs (loop1): 1 truncate cleaned up [ 40.761881][ T4218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.770798][ T4213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.797138][ T4218] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.830737][ T4218] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 40.841494][ T4218] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 40.851950][ T4218] EXT4-fs (loop0): 1 truncate cleaned up [ 40.858828][ T4218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.902036][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.018071][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.120766][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.128543][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.145093][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.152570][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.160092][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.167584][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.175064][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.182505][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.190034][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.197548][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.205013][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.212449][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.223549][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.231160][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.238685][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.246159][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.253688][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.261205][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.268662][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.276183][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.283653][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.291114][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.298595][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.306045][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.313752][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.321239][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.328915][ T3470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.352491][ T3470] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 41.400766][ T4257] process 'syz.2.322' launched '/dev/fd/3' with NULL argv: empty string added [ 41.441849][ T4253] fido_id[4253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.561635][ T4271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 41.582729][ T4271] IPVS: Error joining to the multicast group [ 41.594424][ T4277] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 41.643972][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 41.643989][ T29] audit: type=1400 audit(1751516746.912:463): avc: denied { bind } for pid=4279 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.682590][ T29] audit: type=1400 audit(1751516746.942:464): avc: denied { write } for pid=4279 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.703124][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 41.712048][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 41.721062][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 41.730016][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 41.749430][ T4277] bond1: (slave geneve2): making interface the new active one [ 41.757563][ T4277] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 41.761801][ T4287] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 41.776864][ T4283] netlink: 'syz.3.334': attribute type 3 has an invalid length. [ 41.807281][ T29] audit: type=1326 audit(1751516747.082:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588e6ee929 code=0x7ffc0000 [ 41.836301][ T29] audit: type=1326 audit(1751516747.102:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f588e6ee929 code=0x7ffc0000 [ 41.859606][ T29] audit: type=1326 audit(1751516747.102:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588e6ee929 code=0x7ffc0000 [ 41.883016][ T29] audit: type=1326 audit(1751516747.102:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588e6ee929 code=0x7ffc0000 [ 42.043755][ T29] audit: type=1400 audit(1751517003.319:469): avc: denied { ioctl } for pid=4312 comm="syz.1.349" path="socket:[6053]" dev="sockfs" ino=6053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.099842][ T4317] netlink: 'syz.3.352': attribute type 10 has an invalid length. [ 42.107795][ T4317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.352'. [ 42.114105][ T29] audit: type=1400 audit(1751517003.369:470): avc: denied { write } for pid=4310 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 42.137315][ T4317] dummy0: entered promiscuous mode [ 42.143167][ T4317] bridge0: port 3(dummy0) entered blocking state [ 42.149786][ T4317] bridge0: port 3(dummy0) entered disabled state [ 42.158002][ T4317] dummy0: entered allmulticast mode [ 42.170386][ T4317] bridge0: port 3(dummy0) entered blocking state [ 42.176932][ T4317] bridge0: port 3(dummy0) entered forwarding state [ 42.185572][ T4320] loop0: detected capacity change from 0 to 8192 [ 42.196327][ T4320] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.226095][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 42.253709][ T29] audit: type=1400 audit(1751517003.529:471): avc: denied { firmware_load } for pid=4318 comm="syz.0.353" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 42.325091][ T4331] loop3: detected capacity change from 0 to 128 [ 42.334491][ T4331] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 42.350266][ T4331] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 42.357910][ T4331] FAT-fs (loop3): Filesystem has been set read-only [ 42.365370][ T4331] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 42.403011][ T29] audit: type=1400 audit(1751517003.679:472): avc: denied { sqpoll } for pid=4335 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.888297][ T4386] batadv_slave_1: entered promiscuous mode [ 42.895305][ T4386] batadv_slave_1: left promiscuous mode [ 42.920194][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a02e00: rx timeout, send abort [ 43.163692][ T4409] netem: change failed [ 43.311801][ T4421] netlink: 'syz.0.398': attribute type 6 has an invalid length. [ 43.319562][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a0a7e00: rx timeout, send abort [ 43.327956][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a0a7e00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 43.342751][ T4421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.398'. [ 43.405342][ T4427] loop2: detected capacity change from 0 to 1024 [ 43.428489][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a02e00: abort rx timeout. Force session deactivation [ 43.436949][ T4427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.469412][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.535370][ T4439] loop0: detected capacity change from 0 to 512 [ 43.542578][ T4439] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 43.551383][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 43.557016][ T4439] EXT4-fs (loop0): invalid journal inode [ 43.566195][ T4439] EXT4-fs (loop0): can't get journal size [ 43.572697][ T4439] EXT4-fs (loop0): 1 truncate cleaned up [ 43.578870][ T4439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.679508][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.699446][ T4443] sd 0:0:1:0: device reset [ 43.881336][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 43.890388][ T4459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 43.899386][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 43.912703][ T4459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 43.921683][ T4459] netlink: 'syz.1.413': attribute type 6 has an invalid length. [ 44.062190][ T4477] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 44.071327][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.078593][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.095065][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.102225][ T4477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.109578][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.116690][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.126794][ T4477] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 44.150468][ T4479] loop1: detected capacity change from 0 to 8192 [ 44.156933][ T2929] ------------[ cut here ]------------ [ 44.156945][ T2929] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 44.157778][ T2929] WARNING: CPU: 0 PID: 2929 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1f0/0x200 [ 44.180438][ T2929] Modules linked in: [ 44.184520][ T2929] CPU: 0 UID: 0 PID: 2929 Comm: kworker/u8:7 Tainted: G W 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 44.198758][ T2929] Tainted: [W]=WARN [ 44.202595][ T2929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.212799][ T2929] Workqueue: bond0 bond_mii_monitor [ 44.218393][ T2929] RIP: 0010:__linkwatch_sync_dev+0x1f0/0x200 [ 44.224498][ T2929] Code: e8 9b d3 86 e8 21 7f 22 fd c6 05 e2 55 84 02 01 90 48 c7 c7 58 9f 5b 86 48 c7 c6 5d cb 46 86 ba 48 00 00 00 e8 41 57 d2 fc 90 <0f> 0b 90 90 e9 d6 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 [ 44.244364][ T2929] RSP: 0018:ffffc90003177b70 EFLAGS: 00010246 [ 44.250535][ T2929] RAX: eb5aab4dad3a2d00 RBX: ffff888118f34000 RCX: ffff888103f62080 [ 44.258574][ T2929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 44.259411][ T4479] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.266612][ T2929] RBP: 0000000000000000 R08: 0001ffff86848a7f R09: 0000000000000000 [ 44.266632][ T2929] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000000 [ 44.293446][ T2929] R13: ffffffff859288c0 R14: ffffffff859288c0 R15: 0000000000000000 [ 44.301623][ T2929] FS: 0000000000000000(0000) GS:ffff8882aee30000(0000) knlGS:0000000000000000 [ 44.310633][ T2929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.317282][ T2929] CR2: 0000001b3271bff8 CR3: 000000010472a000 CR4: 00000000003506f0 [ 44.325386][ T2929] Call Trace: [ 44.328886][ T2929] [ 44.331850][ T2929] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 44.337633][ T2929] ethtool_op_get_link+0x15/0x50 [ 44.342612][ T2929] bond_check_dev_link+0x292/0x430 [ 44.347890][ T2929] bond_mii_monitor+0x2da/0x1770 [ 44.352889][ T2929] ? try_to_wake_up+0x3df/0x630 [ 44.358062][ T2929] process_scheduled_works+0x4cb/0x9d0 [ 44.363853][ T2929] worker_thread+0x582/0x770 [ 44.368555][ T2929] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 44.374519][ T2929] ? schedule+0x5f/0xd0 [ 44.378028][ T4492] ALSA: seq fatal error: cannot create timer (-22) [ 44.378770][ T2929] kthread+0x489/0x510 [ 44.389449][ T2929] ? __pfx_worker_thread+0x10/0x10 [ 44.394668][ T2929] ? __pfx_kthread+0x10/0x10 [ 44.399308][ T2929] ret_from_fork+0xda/0x150 [ 44.403864][ T2929] ? __pfx_kthread+0x10/0x10 [ 44.408539][ T2929] ret_from_fork_asm+0x1a/0x30 [ 44.413428][ T2929] [ 44.416500][ T2929] ---[ end trace 0000000000000000 ]--- [ 44.416873][ T4493] loop2: detected capacity change from 0 to 2048 [ 44.440876][ T4493] EXT4-fs: Ignoring removed bh option [ 44.468562][ T4495] loop0: detected capacity change from 0 to 128 [ 44.483387][ T4495] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 44.498461][ T4493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.531638][ T4505] loop1: detected capacity change from 0 to 128 [ 44.601617][ T4495] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 44.609313][ T4495] FAT-fs (loop0): Filesystem has been set read-only [ 44.624147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.673510][ T4495] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 44.710999][ T4519] loop3: detected capacity change from 0 to 512 [ 44.727491][ T4519] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.739377][ T4519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.782185][ T4519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.799687][ T4519] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.818140][ T4519] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 44.848876][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.929712][ T4510] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.944967][ T4510] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 44.956677][ T4525] loop3: detected capacity change from 0 to 512 [ 44.957560][ T4510] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.957560][ T4510] [ 44.973498][ T4510] EXT4-fs (loop2): Total free blocks count 0 [ 44.979543][ T4510] EXT4-fs (loop2): Free/Dirty block details [ 44.985558][ T4510] EXT4-fs (loop2): free_blocks=2415919104 [ 44.991320][ T4510] EXT4-fs (loop2): dirty_blocks=8224 [ 44.993649][ T4525] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.996644][ T4510] EXT4-fs (loop2): Block reservation details [ 44.996661][ T4510] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 45.017397][ T4525] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.441: bg 0: block 248: padding at end of block bitmap is not set [ 45.032250][ T4525] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.441: Failed to acquire dquot type 1 [ 45.044616][ T4525] EXT4-fs (loop3): 1 truncate cleaned up [ 45.050913][ T4525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.072196][ T4525] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 45.083966][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.106347][ T4525] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.441: Failed to acquire dquot type 1 [ 45.118638][ T4525] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 45.148414][ T4525] syz.3.441 (4525) used greatest stack depth: 9496 bytes left [ 45.158747][ T3314] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 45.171311][ T3314] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 45.200785][ T4531] netlink: 'syz.2.453': attribute type 10 has an invalid length. [ 45.211258][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.218527][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.235749][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.242937][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.250316][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.257522][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.269104][ T4531] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.440165][ T4552] loop2: detected capacity change from 0 to 512 [ 45.447787][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.448288][ T4552] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.465548][ T4552] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.455: bg 0: block 248: padding at end of block bitmap is not set [ 45.480498][ T4552] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.455: Failed to acquire dquot type 1 [ 45.494001][ T4552] EXT4-fs (loop2): 1 truncate cleaned up [ 45.500782][ T4552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.524599][ T4552] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 45.537259][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.558585][ T4552] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.455: Failed to acquire dquot type 1 [ 45.601841][ T4552] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 45.618974][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.639835][ T4552] syz.2.455 (4552) used greatest stack depth: 9304 bytes left [ 45.642728][ T4563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.459'. [ 45.681952][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.693309][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.799472][ T37] dummy0: left allmulticast mode [ 45.820479][ T37] bridge0: port 3(dummy0) entered disabled state [ 45.833976][ T37] bridge_slave_1: left allmulticast mode [ 45.839745][ T37] bridge_slave_1: left promiscuous mode [ 45.845489][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.857239][ T37] bridge_slave_0: left allmulticast mode [ 45.862965][ T37] bridge_slave_0: left promiscuous mode [ 45.868741][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.900778][ T4587] ALSA: seq fatal error: cannot create timer (-22) [ 45.998245][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.015571][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.025724][ T37] bond0 (unregistering): Released all slaves [ 46.035830][ T4596] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 46.035865][ T4590] IPVS: stopping master sync thread 4596 ... [ 46.103424][ T37] hsr_slave_0: left promiscuous mode [ 46.134799][ T37] hsr_slave_1: left promiscuous mode [ 46.149393][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.156978][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.182464][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.189980][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.222971][ T37] veth1_macvtap: left promiscuous mode [ 46.238990][ T37] veth0_macvtap: left promiscuous mode [ 46.269447][ T37] veth1_vlan: left promiscuous mode [ 46.287274][ T37] veth0_vlan: left promiscuous mode [ 46.426564][ T37] team0 (unregistering): Port device team_slave_1 removed [ 46.437824][ T37] team0 (unregistering): Port device team_slave_0 removed [ 46.579403][ T4647] loop1: detected capacity change from 0 to 2048 [ 46.603340][ T4647] EXT4-fs: Ignoring removed bh option [ 46.628985][ T4647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.667180][ T4560] chnl_net:caif_netlink_parms(): no params data found [ 46.740280][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.747505][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.764211][ T4560] bridge_slave_0: entered allmulticast mode [ 46.770733][ T4560] bridge_slave_0: entered promiscuous mode [ 46.777903][ T4560] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.785092][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.792481][ T4560] bridge_slave_1: entered allmulticast mode [ 46.799068][ T4560] bridge_slave_1: entered promiscuous mode [ 46.828824][ T4560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.896728][ T4560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.956454][ T4560] team0: Port device team_slave_0 added [ 46.969014][ T4560] team0: Port device team_slave_1 added [ 46.991708][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 46.991726][ T29] audit: type=1400 audit(1751517008.269:570): avc: denied { listen } for pid=4681 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.021727][ T4560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.028799][ T4560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.054788][ T4560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.074348][ T29] audit: type=1400 audit(1751517008.269:571): avc: denied { accept } for pid=4681 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.139186][ T4688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 47.235516][ T29] audit: type=1400 audit(1751517008.519:572): avc: denied { write } for pid=4691 comm="syz.4.493" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.258957][ T4560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.266084][ T4560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.292106][ T4560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.338766][ T4670] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.356535][ T4670] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 47.369290][ T4670] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.369290][ T4670] [ 47.379031][ T4670] EXT4-fs (loop1): Total free blocks count 0 [ 47.385090][ T4670] EXT4-fs (loop1): Free/Dirty block details [ 47.391081][ T4670] EXT4-fs (loop1): free_blocks=2415919104 [ 47.396879][ T4670] EXT4-fs (loop1): dirty_blocks=8224 [ 47.402209][ T4670] EXT4-fs (loop1): Block reservation details [ 47.408341][ T4670] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 47.426768][ T4560] hsr_slave_0: entered promiscuous mode [ 47.433164][ T4560] hsr_slave_1: entered promiscuous mode [ 47.440282][ T4560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.455196][ T4560] Cannot create hsr debugfs directory [ 47.511982][ T2996] ================================================================== [ 47.520131][ T2996] BUG: KCSAN: data-race in dont_mount / step_into [ 47.526604][ T2996] [ 47.528956][ T2996] read-write to 0xffff8881069dc0c0 of 4 bytes by task 3561 on cpu 1: [ 47.537051][ T2996] dont_mount+0x2a/0x40 [ 47.541245][ T2996] vfs_unlink+0x28f/0x420 [ 47.545609][ T2996] do_unlinkat+0x28e/0x4c0 [ 47.550065][ T2996] __x64_sys_unlink+0x2e/0x40 [ 47.554772][ T2996] x64_sys_call+0x22a6/0x2fb0 [ 47.559480][ T2996] do_syscall_64+0xd2/0x200 [ 47.563998][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.569936][ T2996] [ 47.572276][ T2996] read to 0xffff8881069dc0c0 of 4 bytes by task 2996 on cpu 0: [ 47.579834][ T2996] step_into+0x12f/0x820 [ 47.584100][ T2996] walk_component+0x162/0x220 [ 47.588800][ T2996] path_lookupat+0xfe/0x2a0 [ 47.593327][ T2996] filename_lookup+0x147/0x340 [ 47.598114][ T2996] do_readlinkat+0x7d/0x320 [ 47.602647][ T2996] __x64_sys_readlink+0x47/0x60 [ 47.607698][ T2996] x64_sys_call+0x2cf3/0x2fb0 [ 47.612398][ T2996] do_syscall_64+0xd2/0x200 [ 47.616924][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.622837][ T2996] [ 47.625170][ T2996] value changed: 0x00300008 -> 0x00004008 [ 47.630900][ T2996] [ 47.633270][ T2996] Reported by Kernel Concurrency Sanitizer on: [ 47.639438][ T2996] CPU: 0 UID: 0 PID: 2996 Comm: udevd Tainted: G W 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 47.653006][ T2996] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 47.656817][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.666894][ T2996] ================================================================== [ 47.699017][ T29] audit: type=1400 audit(1751517008.979:573): avc: denied { write } for pid=3276 comm="syz-executor" path="pipe:[722]" dev="pipefs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 47.815828][ T288] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.929807][ T3303] syz_tun (unregistering): left promiscuous mode [ 48.232785][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.276912][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.365263][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.423774][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.517877][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.555707][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.605538][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.655960][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.741125][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.751587][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 48.817826][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.828247][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 48.878037][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.888489][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 48.947063][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.957539][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 49.043994][ T37] bridge_slave_1: left allmulticast mode [ 49.049793][ T37] bridge_slave_1: left promiscuous mode [ 49.055617][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.063708][ T37] bridge_slave_0: left allmulticast mode [ 49.069494][ T37] bridge_slave_0: left promiscuous mode [ 49.075264][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.083551][ T37] bridge_slave_1: left allmulticast mode [ 49.089382][ T37] bridge_slave_1: left promiscuous mode [ 49.095107][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.102831][ T37] bridge_slave_0: left allmulticast mode [ 49.108649][ T37] bridge_slave_0: left promiscuous mode [ 49.114402][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.122839][ T37] bridge_slave_1: left allmulticast mode [ 49.128565][ T37] bridge_slave_1: left promiscuous mode [ 49.134298][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.141925][ T37] bridge_slave_0: left allmulticast mode [ 49.147684][ T37] bridge_slave_0: left promiscuous mode [ 49.153390][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.161630][ T37] bridge_slave_1: left allmulticast mode [ 49.167370][ T37] bridge_slave_1: left promiscuous mode [ 49.173207][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.180984][ T37] bridge_slave_0: left allmulticast mode [ 49.186700][ T37] bridge_slave_0: left promiscuous mode [ 49.192415][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.307065][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.316743][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.326034][ T37] bond0 (unregistering): Released all slaves [ 49.348510][ T37] team0: Port device geneve1 removed [ 49.357331][ T37] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 49.406449][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.416341][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.426147][ T37] bond0 (unregistering): Released all slaves [ 49.448332][ T37] bond1 (unregistering): (slave geneve2): Releasing active interface [ 49.460859][ T37] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 49.515933][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.525753][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.535557][ T37] bond0 (unregistering): Released all slaves [ 49.544406][ T37] bond1 (unregistering): Released all slaves [ 49.616264][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.625915][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.635491][ T37] bond0 (unregistering): Released all slaves [ 49.693122][ T37] hsr_slave_0: left promiscuous mode [ 49.699175][ T37] hsr_slave_1: left promiscuous mode [ 49.706409][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.713932][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.721810][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.729344][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.740060][ T37] hsr_slave_0: left promiscuous mode [ 49.746168][ T37] hsr_slave_1: left promiscuous mode [ 49.751881][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.759369][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.768242][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.775745][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.786547][ T37] hsr_slave_0: left promiscuous mode [ 49.792523][ T37] hsr_slave_1: left promiscuous mode [ 49.799199][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.806656][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.814637][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.822095][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.830059][ T37] hsr_slave_0: left promiscuous mode [ 49.835890][ T37] hsr_slave_1: left promiscuous mode [ 49.841447][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.849037][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.864551][ T37] veth1_macvtap: left promiscuous mode [ 49.870140][ T37] veth0_macvtap: left promiscuous mode [ 49.875683][ T37] veth1_vlan: left promiscuous mode [ 49.880922][ T37] veth0_vlan: left promiscuous mode [ 49.886790][ T37] veth1_macvtap: left promiscuous mode [ 49.892301][ T37] veth0_macvtap: left promiscuous mode [ 49.897907][ T37] veth1_vlan: left promiscuous mode [ 49.903139][ T37] veth0_vlan: left promiscuous mode [ 49.909713][ T37] veth1_macvtap: left promiscuous mode [ 49.915283][ T37] veth0_macvtap: left promiscuous mode [ 49.920873][ T37] veth1_vlan: left promiscuous mode [ 49.926228][ T37] veth0_vlan: left promiscuous mode [ 50.049720][ T37] team0 (unregistering): Port device team_slave_1 removed [ 50.059927][ T37] team0 (unregistering): Port device team_slave_0 removed [ 50.112264][ T37] team0 (unregistering): Port device team_slave_1 removed [ 50.121932][ T37] team0 (unregistering): Port device team_slave_0 removed [ 50.176193][ T37] team0 (unregistering): Port device team_slave_1 removed [ 50.186047][ T37] team0 (unregistering): Port device team_slave_0 removed [ 50.227973][ T37] team0 (unregistering): Port device team_slave_1 removed [ 50.237549][ T37] team0 (unregistering): Port device team_slave_0 removed [ 50.987805][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.026985][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.077073][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.116868][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.181894][ T37] bridge_slave_1: left allmulticast mode [ 51.187740][ T37] bridge_slave_1: left promiscuous mode [ 51.193422][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.202763][ T37] bridge_slave_0: left allmulticast mode [ 51.208537][ T37] bridge_slave_0: left promiscuous mode [ 51.214284][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.306222][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.316275][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.326063][ T37] bond0 (unregistering): Released all slaves [ 51.355508][ T37] tipc: Disabling bearer [ 51.360782][ T37] tipc: Left network mode [ 51.366065][ T37] batadv_slave_0: left promiscuous mode [ 51.374510][ T37] hsr_slave_0: left promiscuous mode [ 51.380396][ T37] hsr_slave_1: left promiscuous mode [ 51.386331][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.393750][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.402296][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.409763][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.420595][ T37] veth1_macvtap: left promiscuous mode [ 51.426174][ T37] veth0_macvtap: left promiscuous mode [ 51.431759][ T37] veth1_vlan: left promiscuous mode [ 51.437626][ T37] veth0_vlan: left promiscuous mode [ 51.506742][ T37] team0 (unregistering): Port device team_slave_1 removed [ 51.516609][ T37] team0 (unregistering): Port device team_slave_0 removed