last executing test programs: 3.569283265s ago: executing program 3 (id=945): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) sendmmsg$inet(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf889f1a6ed430aff1952b2498efc46cbaebc815cb2ea2ff01000067d49ffb192dad5fcac955fee31e59228679db51d72e0ba6bd6fa2545df05482e63a", 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a29e04f23dac714e90c70202e052be86141ead3c90a0e23650d6a5c10ba19943c89ab235f149ddaa2bf84d5e52bce3fbecc01eb03e0cd322dbc4b9c1bd3263a9d7bbc6de3e50842793e1ee7997649a6ab10775e6e50", 0x65}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x35c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x65, 0x3, "82bc53704ab4c13199ac5424884ba508fb42ac529181043c252e22b8b4da8b60b8b955b760d4c6f06634f5550e7e901177c406f802e08d30637d41f2d904604a7d2bb829412d5d4d381d5cfb5b044d4b81deb3b44ffced9979d600f9a8711fac05"}, @TIPC_NLA_NODE_ID={0x41, 0x3, "650b190fb9505102165dea3620d1b5f68f9349cee7a89f0baefa15e35e8fddc2480dc011adcb1ecc7a9fff5d0f64080a0c8998298870ab9e23426d1061"}, @TIPC_NLA_NODE_ID={0x45, 0x3, "c0b77ef5f912e156682c17da2b24eea11baf91b71d57172c534eed7f96b0c2227d22396a9aec6dbe4d57fdbfccdfc771f6f80f8b9c5fe40fa86984988c035f6f78"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9c3db97f6ba02f46568e1b445699c3b27057ee488b0c13520e"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2a73b8b4821f3e9256d41613bb521e6da4b1e138"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x35c}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.637715222s ago: executing program 3 (id=959): r0 = socket$inet(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cgroup.stat\x00', 0x5000000, 0x0) readv(r5, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x5000) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='check=strict,norock\x00\x00\x00\x00e,check=relaxed,check=relaxed,nojoliet,check=relaxed,block=0x0000000000000400,\x00'], 0x1, 0x52c, &(0x7f0000000580)="$eJzs3W9v00gewPGfS3tUOQmdjhNCVYGh3ElFKsFxICjikc+ZpAOOHdkOah+hiqaoIoUT5aRtn+zyhN2Vdl8ET/dF7DtC+xJ2ZTspLW1ioH+Cqu8ngpnYY89vUss/uY3HAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxPIatl2xxDdBd0WN5jWisP3x7WDrQwvk9oFiTL8iVvpPZmflar7o6r8+rr6S/rcg8/m7eZlNi1nZ/fuVfzy8PD013H5MwGdie2f3xVq/33s96UBO0bWLo9e1dGDi0LTdllYmDlW9VrPvLjdj1TS+jlfjRLeVF2k3CSO16N1WlXq9qnR5NewGrYbr6+HCB3cc266pR+WOdqM4DO4+KsfesvF9E7SyNunqtM2D9EB8bBKVaLet1MZmv1ctGkDaqPI5jZyiRo7tOJWK41Rq9+v3H9j29KEF9ifkUIvJH7SYrBM8ewPHMzXI/+KLkUC6siLqyJcnDYkklPaI9QPD/P+fu3psv/vz/zDLX/24ek6y/H89f3d9VP4fEcvZvbZlR3blhaxJX/rSk9cTj+hsXy3REoiRWEIx0hY3W6IGS5TUpSY1seWpLEtTYlHSFCO+aIllVWJJRGdHlCeRaHElkVAiUbIontwWJRWpS12qokRLWVYllK4E0pKGuNleNmQz+9yroqxRMe41qowcRml43PXEGTNa8j+O70TP38Bx/DnM/wAAAAAA4Nyyst++p9f/M3ItqzWNr+1JhwUAAAAAAE5Q9pf/+bSYSWvXxOL6HwAAAACA88bK7rGzRKQkN/LahljZ7VL8EgAAAAAAgHMi+/v/9bTI5kC5IdbedClc/wMAAAAAcE78VDjHfty5aP3+h0TRjPW2s/Jva8tN27lbF/LtLny6x6Q5Z10a7CQrankxPe3peWs2b7Q3CeaHQbFRFId1VAA/fEkAl6flF7mZt7m5npfrwzV5L6Wm8XXZC/2HFXHdS1OJXkn+/3LzO8mG/3PQvmTJxma/V372qr+exfI23cvbrcEEiofmURwTy5tsvoXsnosjRzyT3Ygx6LeU92vvH/9UvvnUF/T5ThbyNguDGW9LB8c/m/ZZKY8a/SCKyjFH/k5u5W1uLd7KiyOicIqicPZH8VWfxWdEUS2KonrMKABgUjYKspB1OPF/xVnu67K7fGF2fyeLeZvFuezEOj13xBndLjqj28fMbr8degbSqByb9vvrJ1n1fbrB+5H9xr5jpR/hhTdb/5Mr2zu7dza31p73nvdeOk61Zt+z7fuOzGTDGBTkHgDAEYqfsVPYwrpXcFX9z72vFJTlmbySvqzLUna3QfaNgyP3Wtr3NYSlgqvWUpYm8ye8LI25qvtbdpfDcL/O2LYHY6ie/g8CAIAztFCQhz8n/y8VXHcfzOXjr45L+57WBgAAToeOPlil5EcrikznaaVer7jJslZR6D1WkWm0tDJBoiNv2Q1aWnWiMAm90E8rT0xDxyrudjphlKhmGKlOGJuV7MnvavDo91i33SAxXtzxtRtr5YVB4nqJapjYU53uf30TL+so2zjuaM80jecmJgxUHHYjT5eVirXe19A0dJCYpkmrgepEpu1Gq+pJ6HfbWjV07EWmk4T5Dod9maAZRu1st+VJf9gAAHwjtnd2X6z1+73Xp1iZ9BgBAMBBZGkAAAAAAAAAAAAAAAAAAAAAAL59Z3H/H5VzXhlOBf2txEPlBCqFp47vT/3kBOBU/RUAAP//q6hPjA==") r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000740)={@random="dd27e3e89e63", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xef, 0x0, @val=0x80}}}}}}}, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x11, r5, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x18000, 0x0, 0x3, 0x0, &(0x7f0000000000)) creat(&(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x41) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2.293428381s ago: executing program 3 (id=965): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000), &(0x7f0000000300)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x5c}, {0x2}, {0x6}]}) r2 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/92], 0xb8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20020400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x10000) 2.092741357s ago: executing program 0 (id=971): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x300000000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 2.031061752s ago: executing program 0 (id=973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000207010200000000000000000200000a3c00078008a6014000000001080001400000000108000240"], 0x50}}, 0x0) 2.030692632s ago: executing program 1 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000006000000000000100000000000000014100000018001700000000000000006574683a69"], 0x34}}, 0x0) 2.027974282s ago: executing program 0 (id=976): io_uring_setup(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fffffffc00"/32, @ANYRES32=0x0, @ANYRES32], 0xb8}}, 0x0) 1.996250095s ago: executing program 0 (id=977): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffbe}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780), 0x3, 0x434, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xc001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000010000000180100002020702580000000002020207b1af8ff00000000bfa10000000000000701000900ffffffb702000005000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x92f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x80901) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3b6, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) unlinkat(r0, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_free_blocks\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r9}, 0x10) 1.995866325s ago: executing program 1 (id=978): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') writev(r1, &(0x7f0000000480)=[{&(0x7f0000000580)="1789a99126094f970bcbbca6b4ec62ac82a4366d159ce37a990106dfb2a011167db62be1642e88b9584ba24f4e46ca7e6757b12ac345895d2efd73055ecae1802ba9215b3388fe177341dccde02c1b5e381159d6ef704fb967652ed6175528c9be9bc8bdd076a69853edc400857675936decd7de8971cba7fb63a2bf72782ce1653858e210a0aceb822039a842ab76efb1496a817a01b1447b03431c1b58ecc4490a9afa38ce152100b8f87ba66d3409cd9ddf7d06cc755f9b49a6472288c22489b32a7c9353444f6fd07032a2eeaf97f208eb7c42", 0xd5}, {&(0x7f0000000740)="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", 0x170}, {&(0x7f0000000680)="0ec0668ecefe2008d36844e8cd6675067471a44bb4d24cea77e4bcd77ec2441681e81ad01fb7efc590b90015c3ecedcbed09048b2eb9f7c732f9cc76d0a5025bf82f995a000000", 0x47}], 0x3) socket$packet(0x11, 0x0, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007bdfd57ab6789d719471978fe521168af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x6}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = dup3(r7, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r9, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2, 0x2}}, 0x12) read$rfkill(r1, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000000)="4e4f15e0716bbf3f03fceb3844c93a15a8084d1c1f34424d0a0a89443646d7dca76be3c0cd196366084b9fe0d176d2ec62") r10 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x100}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={r11, 0x400}, 0x8) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) 1.686104381s ago: executing program 0 (id=980): ftruncate(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0xa, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_io_uring_setup(0x3570, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r6, 0x2dbe, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x0, 0x290, 0x0, 0x450, 0x1b0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r9, 0x0) bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) readv(r10, &(0x7f00000013c0)=[{0x0}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 1.415603403s ago: executing program 2 (id=988): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'none'}, 0xd) write$vga_arbiter(r1, &(0x7f00000001c0)=@other={'decodes', ' ', 'mem'}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010473ca7501003fc400925e4a44", @ANYRES32, @ANYBLOB="0d01140016000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700f205000000e72adf000002", @ANYRES32=r4], 0x48}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x5, 0x6ce, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000840], 0x0, &(0x7f0000000300), &(0x7f0000000f40)=ANY=[@ANYBLOB="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"]}, 0x7ad) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f64650000000006000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f81696e000015e45f2fb98871e0c404c0b818d54665c1a86206ee841514d302ee9a4f50f0e7e3ea6772f9e7a4976da4102468518d66a40c26778cf07cd3811f8698b305d09d3444a1e6e0df7e2bde26d07fb8ba65c4c7e6c882905abbcc4974828de2ae"], 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fstat(r2, 0x0) 1.411098574s ago: executing program 3 (id=989): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000940), 0x10}, 0x90) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, 0x0, 0xfdef) 1.302312382s ago: executing program 2 (id=990): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001000098c0b0000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.243927907s ago: executing program 0 (id=991): socket$inet6_sctp(0xa, 0x0, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000004000000000000400000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2, 0x7, 0xee, 0x9, 0xf, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_nat_t_type={0x1, 0x14, 0x7f}, @sadb_sa={0x2, 0x1, 0x4d5, 0x3, 0x7d, 0x67, 0x2, 0x80000001}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, {0x6, 0xff, 0x81, 0x9, 0x0, 0x3, 0x0, @in6=@mcast2, @in=@multicast2}}]}, 0x78}}, 0x805) (async) sendmsg$key(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2, 0x7, 0xee, 0x9, 0xf, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_nat_t_type={0x1, 0x14, 0x7f}, @sadb_sa={0x2, 0x1, 0x4d5, 0x3, 0x7d, 0x67, 0x2, 0x80000001}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, {0x6, 0xff, 0x81, 0x9, 0x0, 0x3, 0x0, @in6=@mcast2, @in=@multicast2}}]}, 0x78}}, 0x805) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f00000000c0), 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000940)={0x0, 0x5}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000009c0)={0x66, 0x1, 0x200, 0x100000, 0xffff, 0x705, 0x81, 0x5, r6}, &(0x7f0000000a00)=0x20) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet(0x2, 0x2, 0x1) (async) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @private}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="080027226da03f00", 0x8}], 0x1045}, 0x20044011) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x20c0, 0x180, 0x36}, 0x18) (async) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x20c0, 0x180, 0x36}, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="2c090000000000fb55d567", @ANYRESHEX=r12, @ANYBLOB=',\x00']) dup3(r8, r12, 0x0) (async) dup3(r8, r12, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/56, 0x38}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000780)=""/191, 0xbf}], 0x5) 1.155525844s ago: executing program 2 (id=994): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000500020002000000180001801400020073797a5f74756e00000000fc00000000050003"], 0x3c}}, 0x0) 1.119553537s ago: executing program 1 (id=996): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.045341943s ago: executing program 1 (id=997): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x11, "00207d2000000000201b14700c1e0ac74f000000001200000000000900000006"}) 1.044317803s ago: executing program 2 (id=998): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = syz_clone(0x1201000, &(0x7f00000001c0)="7b5d2a3ebe49df908d3030256fb8dace042ddcad8ae03272edae0439ceec2b7df1b125945712ed8f47b24a23b945f074995654b4997cd7492a22992a0e50714ba99735fe20a22b27296f4713a3bfd140bd2068ba0f00bef818028ebc34f0de06c856f3ff7586d56d", 0x68, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)="c4d7c107df80c61811b80740e846ca228017b7447d4a2698cb13a4a4a721c13c262113331af4cdfd6cf026e946eec3a18df2bed7b2e040bbb9b9f0e79818ef03099c70e5e59d82bfefaa4a283a1f4af6c462de4497d6caea6e4869d03458df707310e0c4ca82") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) (async) write$binfmt_script(r1, &(0x7f00000002c0), 0x1000a) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}}) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) (async) epoll_create1(0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r8, 0x277f826df11ec41b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) 1.040467994s ago: executing program 1 (id=999): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000), &(0x7f0000000300)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x5c}, {0x2}, {0x6}]}) r2 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/92], 0xb8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20020400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x10000) 913.912654ms ago: executing program 4 (id=1000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = semget(0x1, 0x1, 0x282) semop(r3, &(0x7f0000000000)=[{0x4, 0x8cd1}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000700)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={0x0, 0xd, &(0x7f00000001c0)={&(0x7f0000000300)={0x38, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x9}]}, 0x38}}, 0x0) 862.290928ms ago: executing program 2 (id=1001): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) syz_read_part_table(0x1069, &(0x7f0000000000)="$eJzsz8FNxDAQBdCPHRPSRU60QRGICpBoAwJCogVa4EALHClhC9jbNpGVI20N2cN7km15ZvSlCbu6TTKXZM1US5KP3zFJ6+d5G7jp1/fh2J+HJOsmqS0pOY3z59JalqH3v5L/92R9HfKyFfI41dYTptz171tS/+5LLslPP3vtDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX5BwAAP//qMYUtQ==") 812.286883ms ago: executing program 4 (id=1002): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) setsockopt(r0, 0x7fff, 0x400, &(0x7f0000000300)="4e9899aa4c565bbe984167deb78e66d8721c054432b5e5a8e84eaf6a5e1524b56f71d319dfe203ee7c38b89504326068ba90f6fa48a59e5523abc942ac9a4fb807e8553b053d1a831b7b16d0a8", 0x4d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60c880, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000200)=r3) r5 = io_uring_setup(0x1cba, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x806, 0x0) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000100000000000300000000000000", @ANYRES32=r7, @ANYBLOB="000000000000270008000d0000000000180005801400018010000600feffffff0000000000000000"], 0x40}}, 0x0) 486.88074ms ago: executing program 4 (id=1003): timer_create(0x8, 0x0, &(0x7f0000000280)) timer_delete(0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0xb15, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x705b, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x200}}], 0x18}, 0x404c041) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r9, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="ed3900000100"/16], 0x0, 0x200) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080004"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r12, 0x0, 0x34, 0x0, &(0x7f00000001c0)) 226.342501ms ago: executing program 3 (id=1004): accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) add_key$user(0x0, &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4}, 0x48) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000002680)={&(0x7f0000001140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000024c0)=[{0x0}], 0x1, &(0x7f0000002540)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x18, 0x3, [{0x1, 0x6, "0f988791"}, {0x1, 0x3, '_'}, {0x2, 0x9, "055a0fe3095252"}]}, @lsrr={0x83, 0x7, 0x9c, [@local]}, @rr={0x7, 0x3, 0xb4}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x0, 0x0, 0xe, [0x0]}, @noop, @ra={0x94, 0x4}]}}}], 0x60, 0xb000000}, 0x4000000) 219.162592ms ago: executing program 3 (id=1005): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000300)=0x80000001fe, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) mount$9p_fd(0x67000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 177.282075ms ago: executing program 1 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x203}], {0x14}}, 0x3c}}, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x9c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x80, 0xff13, 0x9, 0xffff8000, 0xfffffffb}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x9c}}, 0x0) bind$packet(r1, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r1, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x7d7e, &(0x7f0000000b00)={0x0, 0x8c17, 0x671e415260812c25}) r6 = socket$kcm(0x21, 0x2, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r5, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 156.310347ms ago: executing program 4 (id=1007): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x6c}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0}, 0x90) 50.227436ms ago: executing program 4 (id=1008): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000340), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f00000002c0)=""/127, 0x7f) modify_ldt$read(0x0, &(0x7f00000003c0)=""/96, 0x60) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xe, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0xfe50, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private}}}]}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x154, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2200}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}]}, @NFT_MSG_DELTABLE={0xd4, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x19, 0x6, "d0e773aff140bc31c3271fceef624417ab86d714d5"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x2b, 0x6, "53100356148d47d6d636e93e5964126d587fec2ff974d14d184057fd29580407c4bb6e504cf889"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x53, 0x6, "e73025a629a5df94f80b40cc52dcf5fb9e426b606e3037052d084b5424f4fa94497030667cfb2e521ec42834344aafd1d9d5371695067684c0871ac8a0e326ef38f2b128e89f47913327e293585a5f"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x168}}, 0x0) 22.315928ms ago: executing program 2 (id=1009): socket$inet6(0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03dcb14f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 0s ago: executing program 4 (id=1010): bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008082, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000000ac0)="$eJzs3d9vW1cdAPDvvc0Pr+uWFvYAE9ACg4Kq2o27VdNetr6A0DQJMfGAeGhD4kYhdhxiZywhEtnfABJIPMGfwAMSD0h74oE3HpF4QEjbA1KBCNQigWR0r+0kSxziYcde489Hur0/zvX9fk/Te8/xceoTwMS6FhG7ETETEfcjYq5zPOks8Vp7yc57tLez+HhvZzGJVuvNvyV5eXbs6DWf7lyzEBHf+GrEd5LjcRtb26sL1Wplo7NfatbWS42t7ZsrtYXlynJlrVy+M3/n1su3XyoPra5Xa798+JWV17/5m19/+r3f7375B1lalzplveoxDO2qT+/HyUxFxOtnEWwMLnTWM2POg/9PGhEfi4jP5ff/XFzI/3UCAOdZqzUXrbnD+wDAeZfmY2BJWoyINO10AortMbzn4mJarTeaNx7UN9eW2mNll2M6fbBSrdy6MvvH7+UnTyfZ/nxelpfn++Uj+7cj4kpE/Hj2qXy/uFivLo2nywMAE+/pw+1/RPxzNk2Lxb5e2uNTPQDgiVEYdwIAwMhp/wFg8mj/AWDy9NH+dz7s3z3zXACA0fD+HwAmj/YfACaP9h8AJsrX33gjW1qPO99/vfTW1uZq/a2bS5XGarG2uVhcrG+sF5fr9eX8O3tqp12vWq+vz78Ym2+XmpVGs9TY2r5Xq2+uNe/l3+t9rzI9kloBAP/Llavv/iGJiN1XnsqXODSXg7Yazrd03AkAY3NhkPN1EOCJZrYvmFx9NeF5o/+7M88FGI+eX+Zd6Ln5QT/9EEH8nhF8pFz/ZP/j/+Z4hvPltPH/+++PKBFg5D7s+H/bq0PPAxg94/8wuVqt5Oic/zP7Rafp5xwA4CNngF/ha/1wWJ0QYKxOm8x7KJ//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDlzKSK+G0lazOcCT7M/02Ix4pmIuBzTyYOVauVWRDwbVyNiejbbnx930gDAgNK/JJ35v67PvXDpaOlM8q/ZfB0R3//Zmz95e6HZ3JjPjv99//hsd/qw8sHrBphXEAAYsrz9LnfWh97IP9rbWewuo8zn4d34T2cq4sXHezv50i6ZiuxgRCHvS1z8RxJTndcUIuL5iLgwhPi770TEJ3rVP8nHRi53Zj49HD86sZ8Zafz0A/HTvKy9zjpfHx9CLjBp3r0bEa91779rEdG9/9K4lq973/+F/Ak1uId32xfrPvsOnn/d+72QP2uOxs/u+Wv9xnjxt187drA11y57J+L5qV7xk/34yQnxX+gz/p8+9ZkfvXpCWevnEdejd/zDsUrN2nqpsbV9c6W2sFxZrqyVy3fm79x6+fZL5VI+Rl3qjlQf99dXbjx7Um5Z/S+eEL/Qs/4z+6/9Qp/1/8W/73/7swe7s0fjf+nzvX/+z/WM35a1iV/sM/7CxV+dOH13Fn/phPqf9vO/0Wf8997fXurzVABgBBpb26sL1WplY6CN7F3oMK5zbCNLsb+Tu93FwYL+OYaY/EzfyffemD6rv9Uz35ja7ysO98rfyq444uqkQ6/FQBuPRhVrfM8kYDQObvpxZwIAAAAAAAAAAAAAAJxkFP91adx1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pz6bwAAAP//tePH3A==") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x40010, r0, 0x80000000) kernel console output (not intermixed with test programs): mode [ 52.573541][ T5276] veth0_macvtap: entered promiscuous mode [ 52.596323][ T5276] veth1_macvtap: entered promiscuous mode [ 52.618089][ T29] audit: type=1400 audit(1720393367.495:402): avc: denied { create } for pid=5616 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 52.622248][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.648114][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.658470][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.669039][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.679025][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.689835][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.692662][ T5628] netlink: 68 bytes leftover after parsing attributes in process `syz.2.390'. [ 52.700234][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.700260][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.705175][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.713074][ T5626] loop2: detected capacity change from 0 to 512 [ 52.749077][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.759726][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.769818][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.780285][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.790373][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.800855][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.810720][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.821254][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.834127][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.850489][ T5276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.859382][ T5276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.868175][ T5276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.876980][ T5276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.886504][ T3071] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.982145][ T5662] loop2: detected capacity change from 0 to 128 [ 53.006589][ T5662] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.026096][ T5662] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.064008][ T5666] loop1: detected capacity change from 0 to 2048 [ 53.085686][ T29] audit: type=1400 audit(1720393367.960:403): avc: denied { write } for pid=5661 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.097498][ T5674] xt_hashlimit: max too large, truncated to 1048576 [ 53.104950][ T29] audit: type=1326 audit(1720393367.960:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.4.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02541cabd9 code=0x0 [ 53.138300][ T5666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.160880][ T5666] netlink: 'syz.1.332': attribute type 2 has an invalid length. [ 53.173435][ T29] audit: type=1400 audit(1720393368.020:405): avc: denied { ioctl } for pid=5661 comm="syz.2.394" path="socket:[8521]" dev="sockfs" ino=8521 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.199016][ T5682] loop3: detected capacity change from 0 to 512 [ 53.200360][ T3087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.212900][ T5685] block device autoloading is deprecated and will be removed. [ 53.233063][ T5666] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 53.245469][ T5666] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.245469][ T5666] [ 53.255189][ T5666] EXT4-fs (loop1): Total free blocks count 0 [ 53.261265][ T5666] EXT4-fs (loop1): Free/Dirty block details [ 53.267229][ T5666] EXT4-fs (loop1): free_blocks=0 [ 53.272267][ T5666] EXT4-fs (loop1): dirty_blocks=0 [ 53.277316][ T5666] EXT4-fs (loop1): Block reservation details [ 53.283472][ T5666] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 53.311984][ T5682] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 53.325507][ T5682] System zones: 0-2, 18-18, 34-35 [ 53.353331][ T5682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.400425][ T5682] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.492341][ T5276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.548223][ T29] audit: type=1400 audit(1720393368.434:406): avc: denied { setopt } for pid=5716 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.643774][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.654419][ T5737] loop1: detected capacity change from 0 to 512 [ 53.667142][ T5737] EXT4-fs: Invalid want_extra_isize 256 [ 53.709399][ T5748] netlink: 9 bytes leftover after parsing attributes in process `syz.3.405'. [ 53.720927][ T5748] gretap0: entered promiscuous mode [ 53.726452][ T5744] loop2: detected capacity change from 0 to 1024 [ 53.760038][ T5748] 0XD: renamed from gretap0 [ 53.779174][ T5748] 0XD: left promiscuous mode [ 53.784104][ T5748] 0XD: entered allmulticast mode [ 53.798867][ T5748] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 53.815871][ T3071] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 53.838103][ T5744] loop2: detected capacity change from 0 to 2048 [ 53.843705][ T3071] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.853660][ T3071] Buffer I/O error on dev loop2, logical block 0, async page read [ 53.856720][ T5756] __nla_validate_parse: 1 callbacks suppressed [ 53.856739][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'. [ 53.888202][ T29] audit: type=1326 audit(1720393368.777:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5747 comm="syz.3.405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1104e08bd9 code=0x0 [ 53.933489][ T5744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.955720][ T29] audit: type=1400 audit(1720393368.838:408): avc: denied { watch } for pid=5761 comm="syz.1.409" path="/4/file0" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.001001][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 54.023677][ T5772] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 54.025491][ T4935] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.052748][ T5772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.073368][ T5772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.074689][ T4935] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.092763][ T4935] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.092763][ T4935] [ 54.102612][ T4935] EXT4-fs (loop2): Total free blocks count 0 [ 54.108719][ T4935] EXT4-fs (loop2): Free/Dirty block details [ 54.114886][ T4935] EXT4-fs (loop2): free_blocks=2415919104 [ 54.120720][ T4935] EXT4-fs (loop2): dirty_blocks=16 [ 54.126095][ T4935] EXT4-fs (loop2): Block reservation details [ 54.132375][ T4935] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 54.140668][ T5772] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 54.141980][ T3087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.167840][ T5781] loop0: detected capacity change from 0 to 164 [ 54.189174][ T5781] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.198164][ T5781] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.207366][ T5781] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.216119][ T5781] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.229129][ T5781] vxlan0: entered promiscuous mode [ 54.232878][ T5786] loop4: detected capacity change from 0 to 128 [ 54.234496][ T5781] vxlan0: entered allmulticast mode [ 54.252739][ T5781] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.261736][ T5781] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.270731][ T5781] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.279746][ T5781] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.282794][ T5786] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.304732][ T29] audit: type=1400 audit(1720393369.201:409): avc: denied { listen } for pid=5783 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.329618][ T29] audit: type=1400 audit(1720393369.221:410): avc: denied { connect } for pid=5783 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.351886][ T5786] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.405313][ T5796] loop2: detected capacity change from 0 to 128 [ 54.429319][ T5796] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.432344][ T3083] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.450405][ T5796] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.493778][ T5799] loop1: detected capacity change from 0 to 2048 [ 54.513421][ T5799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.554153][ T5805] loop4: detected capacity change from 0 to 2048 [ 54.598862][ T5805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.633113][ T5276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.645619][ T3083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.682142][ T5821] netlink: 140 bytes leftover after parsing attributes in process `syz.1.427'. [ 54.701677][ T3087] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.758170][ T5830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.432'. [ 54.870701][ T5835] loop4: detected capacity change from 0 to 256 [ 54.904567][ T5835] netlink: 36 bytes leftover after parsing attributes in process `syz.4.434'. [ 54.982204][ T5828] raw_sendmsg: syz.2.430 forgot to set AF_INET. Fix it! [ 55.015901][ T5844] loop0: detected capacity change from 0 to 512 [ 55.047822][ T5844] EXT4-fs (loop0): too many log groups per flexible block group [ 55.055711][ T5844] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 55.072085][ T5844] EXT4-fs (loop0): mount failed [ 55.074810][ T5852] loop2: detected capacity change from 0 to 164 [ 55.083144][ T5854] netlink: 48 bytes leftover after parsing attributes in process `syz.1.441'. [ 55.103267][ T5852] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.112225][ T5852] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.120976][ T5852] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.129708][ T5852] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.139737][ T5852] vxlan0: entered promiscuous mode [ 55.144968][ T5852] vxlan0: entered allmulticast mode [ 55.210765][ T5852] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.219775][ T5852] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.228785][ T5852] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.237768][ T5852] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.356106][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 55.443496][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 55.550898][ T5891] loop3: detected capacity change from 0 to 128 [ 55.609450][ T5898] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 55.619820][ T5900] loop2: detected capacity change from 0 to 164 [ 55.640457][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 55.655797][ T5900] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.664642][ T5900] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.673433][ T5900] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.682190][ T5900] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.701984][ T5900] vxlan0: entered promiscuous mode [ 55.707163][ T5900] vxlan0: entered allmulticast mode [ 55.716565][ T5900] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.725736][ T5900] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.734712][ T5900] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.743684][ T5900] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.857442][ T5913] tipc: Enabling of bearer rejected, failed to enable media [ 55.915191][ T5922] loop2: detected capacity change from 0 to 512 [ 55.925759][ T5924] loop4: detected capacity change from 0 to 512 [ 55.935113][ T5926] bond0: entered promiscuous mode [ 55.940276][ T5926] bond_slave_0: entered promiscuous mode [ 55.946062][ T5926] bond_slave_1: entered promiscuous mode [ 55.951266][ T5924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.951866][ T5926] batadv_slave_0: entered promiscuous mode [ 55.960255][ T5924] EXT4-fs (loop4): blocks per group (8192) and clusters per group (4288) inconsistent [ 55.974216][ T5922] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.982168][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.990625][ T5922] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.469: casefold flag without casefold feature [ 56.004114][ T5926] batadv0: entered promiscuous mode [ 56.010262][ T5922] EXT4-fs (loop2): Remounting filesystem read-only [ 56.019051][ T5922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.043572][ T5922] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 56.057652][ T907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.072785][ T5922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.172396][ T5940] loop4: detected capacity change from 0 to 512 [ 56.190603][ T5942] vlan2: entered promiscuous mode [ 56.209707][ T5944] netlink: zone id is out of range [ 56.215019][ T5944] netlink: zone id is out of range [ 56.220324][ T5944] netlink: zone id is out of range [ 56.225482][ T5944] netlink: zone id is out of range [ 56.230974][ T5944] netlink: zone id is out of range [ 56.236156][ T5944] netlink: zone id is out of range [ 56.241296][ T5944] netlink: set zone limit has 8 unknown bytes [ 56.292645][ T5947] loop2: detected capacity change from 0 to 256 [ 56.307143][ T5949] loop1: detected capacity change from 0 to 512 [ 56.313819][ T5949] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.322897][ T5949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.331858][ T5949] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 56.345569][ T5949] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.370800][ T5949] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.385398][ T5949] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.480: Invalid block bitmap block 0 in block_group 0 [ 56.410371][ T5949] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.480: Invalid block bitmap block 0 in block_group 0 [ 56.442454][ T5952] syzkaller0: entered promiscuous mode [ 56.448190][ T5952] syzkaller0: entered allmulticast mode [ 56.461994][ T5949] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.480: Invalid block bitmap block 0 in block_group 0 [ 56.488918][ T5949] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.480: Failed to acquire dquot type 1 [ 56.539989][ T5949] EXT4-fs (loop1): 1 orphan inode deleted [ 56.551248][ T3963] EXT4-fs error (device loop1): ext4_release_dquot:6883: comm kworker/u8:16: Failed to release dquot type 1 [ 56.572986][ T5949] syz.1.480 (5949) used greatest stack depth: 9472 bytes left [ 56.600152][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 56.625091][ T5962] 8021q: adding VLAN 0 to HW filter on device team1 [ 56.641003][ T5962] bond0: (slave team1): Enslaving as an active interface with an up link [ 56.649519][ T5967] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 56.696032][ T5972] loop1: detected capacity change from 0 to 512 [ 56.711219][ T5974] gretap0: refused to change device tx_queue_len [ 56.722263][ T5976] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 56.780361][ T5972] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.787343][ T5983] loop2: detected capacity change from 0 to 512 [ 56.843869][ T5988] loop3: detected capacity change from 0 to 512 [ 56.851875][ T5988] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 4294967295)! [ 56.862750][ T5988] EXT4-fs (loop3): group descriptors corrupted! [ 56.892647][ T5990] loop0: detected capacity change from 0 to 512 [ 56.919596][ T5990] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 56.939027][ T5551] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 56.954351][ T5990] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 56.967125][ T5990] EXT4-fs (loop0): 1 truncate cleaned up [ 57.059690][ T6010] loop1: detected capacity change from 0 to 1024 [ 57.066537][ T6010] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 57.154453][ T5990] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 57.167667][ T6017] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 57.198279][ T6020] vhci_hcd: invalid port number 0 [ 57.215622][ T6021] vhci_hcd: invalid port number 0 [ 57.256461][ T6029] loop3: detected capacity change from 0 to 512 [ 57.289063][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 57.289077][ T29] audit: type=1400 audit(1720393372.215:436): avc: denied { ioctl } for pid=6019 comm="syz.4.505" path="/dev/mISDNtimer" dev="devtmpfs" ino=224 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.325121][ T6029] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.325746][ T29] audit: type=1400 audit(1720393372.215:437): avc: denied { append } for pid=6006 comm="syz.1.502" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.359011][ T6021] tunl0: entered promiscuous mode [ 57.365449][ T29] audit: type=1400 audit(1720393372.285:438): avc: denied { accept } for pid=6016 comm="syz.2.508" laddr=172.20.20.14 lport=34289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 57.388900][ T6021] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 57.489789][ T6042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 57.542928][ T6045] loop2: detected capacity change from 0 to 1024 [ 57.558852][ T6045] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 57.661073][ T6047] loop4: detected capacity change from 0 to 512 [ 57.675678][ T6047] EXT4-fs: Ignoring removed oldalloc option [ 57.695462][ T6047] EXT4-fs (loop4): invalid first ino: 6 [ 57.706812][ T6052] netlink: 'syz.2.518': attribute type 5 has an invalid length. [ 57.721187][ T6054] loop0: detected capacity change from 0 to 512 [ 57.759179][ T6054] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.777316][ T29] audit: type=1400 audit(1720393372.698:439): avc: denied { ioctl } for pid=6059 comm="syz.4.520" path="socket:[9789]" dev="sockfs" ino=9789 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.824300][ T6054] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.519: corrupted xattr block 32: invalid ea_ino [ 57.901864][ T6054] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 57.922281][ T29] audit: type=1400 audit(1720393372.728:440): avc: denied { create } for pid=6053 comm="syz.0.519" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.942359][ T29] audit: type=1400 audit(1720393372.738:441): avc: denied { setattr } for pid=6053 comm="syz.0.519" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.963983][ T6054] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.519: corrupted xattr block 32: invalid ea_ino [ 57.964806][ T6054] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 57.977254][ T29] audit: type=1400 audit(1720393372.738:442): avc: denied { remove_name } for pid=6053 comm="syz.0.519" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.008875][ T29] audit: type=1400 audit(1720393372.738:443): avc: denied { unlink } for pid=6053 comm="syz.0.519" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.030498][ T29] audit: type=1400 audit(1720393372.809:444): avc: denied { write } for pid=6065 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.047483][ T6067] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.519: corrupted xattr block 32: invalid ea_ino [ 58.050501][ T29] audit: type=1400 audit(1720393372.809:445): avc: denied { nlmsg_write } for pid=6065 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.085181][ T6054] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.519: corrupted xattr block 32: invalid ea_ino [ 58.098674][ T6054] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 58.115615][ T6067] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 58.140472][ T6054] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.519: corrupted xattr block 32: invalid ea_ino [ 58.200601][ T6054] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 58.209009][ T6078] loop3: detected capacity change from 0 to 512 [ 58.237525][ T6054] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.519: corrupted xattr block 32: invalid ea_ino [ 58.238595][ T6078] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.526: casefold flag without casefold feature [ 58.293228][ T6054] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 58.312061][ T6086] loop1: detected capacity change from 0 to 512 [ 58.350650][ T6078] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.526: couldn't read orphan inode 15 (err -117) [ 58.435975][ T6086] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.530: casefold flag without casefold feature [ 58.489973][ T6086] EXT4-fs (loop1): Remounting filesystem read-only [ 58.525126][ T6114] loop3: detected capacity change from 0 to 512 [ 58.561730][ T6086] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 58.585291][ T6114] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.710514][ T6135] random: crng reseeded on system resumption [ 58.738503][ T6140] loop0: detected capacity change from 0 to 512 [ 58.765344][ T6140] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.541: invalid block [ 58.797855][ T6140] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.541: invalid indirect mapped block 4294967295 (level 1) [ 58.819723][ T6143] __nla_validate_parse: 11 callbacks suppressed [ 58.819742][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 58.840492][ T6140] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.541: invalid indirect mapped block 4294967295 (level 1) [ 58.845230][ T6145] netlink: 'syz.4.542': attribute type 29 has an invalid length. [ 58.876442][ T6145] netlink: 'syz.4.542': attribute type 29 has an invalid length. [ 58.894261][ T6140] EXT4-fs (loop0): 2 truncates cleaned up [ 58.910515][ T6145] netlink: 'syz.4.542': attribute type 29 has an invalid length. [ 58.921884][ T6145] netlink: 'syz.4.542': attribute type 29 has an invalid length. [ 58.930498][ T6145] netlink: 'syz.4.542': attribute type 29 has an invalid length. [ 58.939113][ T6145] netlink: 'syz.4.542': attribute type 29 has an invalid length. [ 58.952118][ T6145] loop4: detected capacity change from 0 to 512 [ 58.973024][ T6145] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.996063][ T6145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.020645][ T6145] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 59.051629][ T6145] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.065719][ T6145] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.073465][ T6145] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.542: Invalid block bitmap block 0 in block_group 0 [ 59.110314][ T6145] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.542: Invalid block bitmap block 0 in block_group 0 [ 59.158421][ T35] net_ratelimit: 8 callbacks suppressed [ 59.158519][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.176218][ T6145] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.542: Invalid block bitmap block 0 in block_group 0 [ 59.194423][ T6145] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.542: Failed to acquire dquot type 1 [ 59.195649][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.213890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.224268][ T6145] EXT4-fs (loop4): 1 orphan inode deleted [ 59.230274][ T3599] EXT4-fs error (device loop4): ext4_release_dquot:6883: comm kworker/u8:10: Failed to release dquot type 1 [ 59.241919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.242008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.242074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.242180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.242273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.242393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.242471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.244124][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 59.270132][ T6177] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.405613][ T6197] loop1: detected capacity change from 0 to 256 [ 59.412438][ T6197] FAT-fs (loop1): Unrecognized mount option "uni_xl">0k~0ate=0" or missing value [ 59.417240][ T6198] loop3: detected capacity change from 0 to 512 [ 59.500744][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.564'. [ 59.500820][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.564'. [ 59.535912][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 59.641766][ T6228] loop1: detected capacity change from 0 to 512 [ 59.641818][ T6227] loop2: detected capacity change from 0 to 1024 [ 59.650791][ T6228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.666253][ T6228] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 59.670918][ T6231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.572'. [ 59.719725][ T6234] loop1: detected capacity change from 0 to 512 [ 59.735989][ T6234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 59.738039][ T6238] loop0: detected capacity change from 0 to 128 [ 59.748543][ T6234] System zones: 1-12 [ 59.756075][ T6234] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.759118][ T6239] loop4: detected capacity change from 0 to 128 [ 59.770063][ T6234] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.574: invalid indirect mapped block 1819239214 (level 1) [ 59.778361][ T6238] can: request_module (can-proto-0) failed. [ 59.790391][ T6234] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.574: bg 0: block 361: padding at end of block bitmap is not set [ 59.807108][ T6234] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 59.830494][ T6234] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.574: attempt to clear invalid blocks 33619980 len 1 [ 59.844836][ T6234] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.574: invalid indirect mapped block 1819239214 (level 0) [ 59.860857][ T6234] EXT4-fs (loop1): 1 truncate cleaned up [ 59.869331][ T6234] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.574: Directory hole found for htree index block [ 59.882742][ T6234] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.574: Directory hole found for htree index block [ 59.895981][ T6234] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz.1.574: Directory hole found for htree index block [ 60.062259][ T6275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57368 sclass=netlink_route_socket pid=6275 comm=syz.2.588 [ 60.089322][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 60.091122][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 60.129119][ T6283] netlink: 140 bytes leftover after parsing attributes in process `syz.2.591'. [ 60.141431][ T6285] netlink: 92 bytes leftover after parsing attributes in process `syz.0.590'. [ 60.197517][ T6291] loop0: detected capacity change from 0 to 512 [ 60.220213][ T6291] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.230394][ T6287] loop2: detected capacity change from 0 to 8192 [ 60.278385][ T6300] IPv6: Can't replace route, no match found [ 60.285643][ T3071] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 60.357654][ T6306] loop2: detected capacity change from 0 to 2048 [ 60.372355][ T6306] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.387690][ T6306] EXT4-fs: Ignoring removed orlov option [ 60.409359][ T6310] syzkaller0: entered promiscuous mode [ 60.414998][ T6310] syzkaller0: entered allmulticast mode [ 60.498673][ T6323] loop4: detected capacity change from 0 to 1024 [ 60.519064][ T6323] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.530098][ T6323] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.534003][ T6328] loop2: detected capacity change from 0 to 256 [ 60.545105][ T6323] jbd2_journal_init_inode: Cannot locate journal superblock [ 60.553300][ T6323] EXT4-fs (loop4): Could not load journal inode [ 60.596176][ T6327] loop7: detected capacity change from 0 to 16384 [ 60.632183][ T6323] loop4: detected capacity change from 0 to 1024 [ 60.638887][ T6323] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 60.692101][ T3071] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 60.865335][ T6348] loop3: detected capacity change from 0 to 2048 [ 60.875608][ T6348] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.882238][ T6348] EXT4-fs: Ignoring removed orlov option [ 61.248400][ T6363] loop3: detected capacity change from 0 to 1024 [ 61.282729][ T6366] loop1: detected capacity change from 0 to 2048 [ 61.356100][ T6372] loop1: detected capacity change from 0 to 512 [ 61.377877][ T6372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.423509][ T6376] loop4: detected capacity change from 0 to 2048 [ 61.430177][ T6376] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.437686][ T6372] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.455036][ T6376] EXT4-fs: Ignoring removed orlov option [ 61.495594][ T6372] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 61.517930][ T6392] loop0: detected capacity change from 0 to 512 [ 61.525442][ T6392] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 61.536204][ T6392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 61.552081][ T6392] System zones: 1-12 [ 61.556186][ T6392] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.562894][ T6392] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.629: Inode bitmap for bg 0 marked uninitialized [ 61.569070][ T6372] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 61.585412][ T6372] vhci_hcd: invalid port number 16 [ 61.590697][ T6372] vhci_hcd: invalid port number 16 [ 61.596018][ T6392] EXT4-fs error (device loop0): __ext4_remount:6503: comm syz.0.629: Abort forced by user [ 61.597105][ T35] IPVS: starting estimator thread 0... [ 61.617680][ T6392] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 61.635757][ T6392] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz.0.629: dx entry: limit 0 != root limit 125 [ 61.647600][ T6392] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.629: Corrupt directory, running e2fsck is recommended [ 61.687820][ T6392] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 5: comm syz.0.629: path /54/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 61.700649][ T6399] IPVS: using max 2160 ests per chain, 108000 per kthread [ 61.796729][ T6422] FAULT_INJECTION: forcing a failure. [ 61.796729][ T6422] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.810053][ T6422] CPU: 0 PID: 6422 Comm: syz.1.638 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 61.820058][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 61.830128][ T6422] Call Trace: [ 61.833419][ T6422] [ 61.836352][ T6422] dump_stack_lvl+0xf2/0x150 [ 61.841024][ T6422] dump_stack+0x15/0x20 [ 61.845190][ T6422] should_fail_ex+0x229/0x230 [ 61.849984][ T6422] __should_fail_alloc_page+0xfd/0x110 [ 61.855450][ T6422] __alloc_pages_noprof+0x109/0x360 [ 61.860715][ T6422] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 61.866101][ T6422] shmem_get_folio_gfp+0x3e4/0xb70 [ 61.871319][ T6422] shmem_write_begin+0xa0/0x1c0 [ 61.876229][ T6422] generic_perform_write+0x1d5/0x410 [ 61.881532][ T6422] shmem_file_write_iter+0xc8/0xf0 [ 61.886746][ T6422] vfs_write+0x78f/0x900 [ 61.891000][ T6422] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 61.896916][ T6422] ksys_write+0xeb/0x1b0 [ 61.901170][ T6422] __x64_sys_write+0x42/0x50 [ 61.905848][ T6422] x64_sys_call+0x27ef/0x2d70 [ 61.910562][ T6422] do_syscall_64+0xc9/0x1c0 [ 61.915094][ T6422] ? clear_bhb_loop+0x55/0xb0 [ 61.919779][ T6422] ? clear_bhb_loop+0x55/0xb0 [ 61.924538][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.930494][ T6422] RIP: 0033:0x7fe1491a075f [ 61.934916][ T6422] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 61.954547][ T6422] RSP: 002b:00007fe148422e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 61.962965][ T6422] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fe1491a075f [ 61.970970][ T6422] RDX: 0000000000040000 RSI: 00007fe140003000 RDI: 0000000000000004 [ 61.978943][ T6422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000456 [ 61.986992][ T6422] R10: 00000000000003ba R11: 0000000000000293 R12: 0000000000000004 [ 61.994964][ T6422] R13: 00007fe148422f00 R14: 00007fe148422ec0 R15: 00007fe140003000 [ 62.002992][ T6422] [ 62.030150][ T6426] loop1: detected capacity change from 0 to 512 [ 62.046874][ T6430] loop4: detected capacity change from 0 to 512 [ 62.054516][ T6430] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 62.068475][ T6426] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.089491][ T6426] validate_nla: 6 callbacks suppressed [ 62.089505][ T6426] netlink: 'syz.1.640': attribute type 3 has an invalid length. [ 62.111994][ T6436] loop0: detected capacity change from 0 to 512 [ 62.115395][ T6430] netlink: 'syz.4.642': attribute type 15 has an invalid length. [ 62.128376][ T3071] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 62.145808][ T6436] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.644: casefold flag without casefold feature [ 62.163800][ T6436] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.644: couldn't read orphan inode 15 (err -117) [ 62.185977][ T6443] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 49105 - 0 [ 62.195129][ T6443] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 49105 - 0 [ 62.203981][ T6443] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 49105 - 0 [ 62.212835][ T6443] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 49105 - 0 [ 62.222874][ T6443] geneve2: entered promiscuous mode [ 62.223535][ T6442] vhci_hcd: invalid port number 72 [ 62.233282][ T6442] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 62.241806][ T6443] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 49105 - 0 [ 62.250937][ T6443] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 49105 - 0 [ 62.259968][ T6443] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 49105 - 0 [ 62.268967][ T6443] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 49105 - 0 [ 62.299036][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 62.299080][ T29] audit: type=1400 audit(1720393377.240:607): avc: denied { setopt } for pid=6440 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.331176][ T6446] loop0: detected capacity change from 0 to 1024 [ 62.384677][ T6454] loop2: detected capacity change from 0 to 512 [ 62.400972][ T29] audit: type=1400 audit(1720393377.340:608): avc: denied { name_bind } for pid=6458 comm="syz.3.651" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.417741][ T6461] loop4: detected capacity change from 0 to 512 [ 62.442152][ T3071] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 62.443003][ T6463] netlink: 'syz.3.654': attribute type 4 has an invalid length. [ 62.463832][ T29] audit: type=1400 audit(1720393377.401:609): avc: denied { ioctl } for pid=6464 comm="syz.2.653" path="socket:[11438]" dev="sockfs" ino=11438 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.479976][ T6461] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 62.488545][ T29] audit: type=1400 audit(1720393377.401:610): avc: denied { write } for pid=6464 comm="syz.2.653" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.499274][ T6461] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 62.532776][ T6461] EXT4-fs (loop4): group descriptors corrupted! [ 62.574331][ T29] audit: type=1400 audit(1720393377.512:611): avc: denied { bind } for pid=6468 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.583761][ T6467] loop3: detected capacity change from 0 to 2048 [ 62.593511][ T29] audit: type=1400 audit(1720393377.512:612): avc: denied { name_bind } for pid=6468 comm="syz.2.657" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 62.593543][ T29] audit: type=1400 audit(1720393377.512:613): avc: denied { node_bind } for pid=6468 comm="syz.2.657" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 62.613794][ T29] audit: type=1400 audit(1720393377.542:614): avc: denied { listen } for pid=6468 comm="syz.2.657" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.661771][ T29] audit: type=1400 audit(1720393377.542:615): avc: denied { connect } for pid=6468 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.681836][ T29] audit: type=1400 audit(1720393377.542:616): avc: denied { name_connect } for pid=6468 comm="syz.2.657" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 62.714411][ T6467] Alternate GPT is invalid, using primary GPT. [ 62.720896][ T6467] loop3: p1 p2 p3 [ 62.839605][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 62.839853][ T3071] udevd[3071]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.852849][ T5551] udevd[5551]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.883699][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 62.887915][ T3071] udevd[3071]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.897685][ T5551] udevd[5551]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 63.119102][ T6504] netlink: 'syz.2.666': attribute type 4 has an invalid length. [ 63.290276][ T6510] loop0: detected capacity change from 0 to 512 [ 63.305468][ T6513] loop4: detected capacity change from 0 to 256 [ 63.322118][ T6510] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 63.333005][ T6510] EXT4-fs (loop0): group descriptors corrupted! [ 63.401236][ T6520] netlink: 'syz.4.671': attribute type 11 has an invalid length. [ 63.415489][ T6522] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 63.447430][ T6525] loop2: detected capacity change from 0 to 4096 [ 63.456380][ T6525] EXT4-fs: Ignoring removed nobh option [ 63.462104][ T6525] EXT4-fs: Ignoring removed i_version option [ 63.495418][ T6525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6525 comm=syz.2.673 [ 63.508008][ T6525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6525 comm=syz.2.673 [ 63.525757][ T6534] loop0: detected capacity change from 0 to 256 [ 63.564870][ T6536] loop4: detected capacity change from 0 to 2048 [ 63.571650][ T6536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.578346][ T6536] EXT4-fs: Ignoring removed nobh option [ 63.658627][ T6553] tunl0: left promiscuous mode [ 63.684259][ T6555] batadv0: entered promiscuous mode [ 63.703442][ T6557] loop2: detected capacity change from 0 to 512 [ 63.712813][ T6557] EXT4-fs (loop2): 1 truncate cleaned up [ 63.729187][ T6557] EXT4-fs (loop2): Online resizing not supported with sparse_super2 [ 63.742034][ T35] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/2 [ 63.750654][ T35] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 63.765351][ T6566] loop3: detected capacity change from 0 to 512 [ 63.780499][ T6566] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.783577][ T6574] loop0: detected capacity change from 0 to 512 [ 63.793959][ T6566] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.689: corrupted inode contents [ 63.809595][ T6566] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.689: mark_inode_dirty error [ 63.821130][ T6566] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.689: corrupted inode contents [ 63.827133][ T6577] __nla_validate_parse: 18 callbacks suppressed [ 63.827152][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 63.838320][ T6566] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.689: mark_inode_dirty error [ 63.871634][ T6574] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.889939][ T6583] loop4: detected capacity change from 0 to 256 [ 63.902852][ T6587] netlink: 'syz.2.694': attribute type 11 has an invalid length. [ 63.910706][ T6587] netlink: 140 bytes leftover after parsing attributes in process `syz.2.694'. [ 63.944483][ T3083] FAT-fs (loop4): error, invalid access to FAT (entry 0x000004ff) [ 63.960133][ T6592] loop2: detected capacity change from 0 to 512 [ 63.975246][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'. [ 63.988887][ T6592] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.994940][ T6595] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.691: Failed to acquire dquot type 0 [ 64.063666][ T6602] loop2: detected capacity change from 0 to 2048 [ 64.070402][ T6602] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.076966][ T6602] EXT4-fs: Ignoring removed orlov option [ 64.113969][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.699'. [ 64.181461][ T6616] loop2: detected capacity change from 0 to 256 [ 64.213371][ T6618] loop3: detected capacity change from 0 to 2048 [ 64.220252][ T4935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.278380][ T6621] netlink: 144 bytes leftover after parsing attributes in process `syz.2.706'. [ 64.284117][ T6618] loop3: p1 < > p4 [ 64.295756][ T4935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.308274][ T6618] loop3: p4 size 8388608 extends beyond EOD, truncated [ 64.333431][ T35] net_ratelimit: 59 callbacks suppressed [ 64.333445][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.360137][ T6618] loop3: detected capacity change from 0 to 512 [ 64.374190][ T4935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.441381][ T4935] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 64.461568][ T4935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.482871][ T6634] FAULT_INJECTION: forcing a failure. [ 64.482871][ T6634] name failslab, interval 1, probability 0, space 0, times 1 [ 64.495652][ T6634] CPU: 1 PID: 6634 Comm: syz.2.710 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 64.505652][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 64.515814][ T6634] Call Trace: [ 64.519100][ T6634] [ 64.522071][ T6634] dump_stack_lvl+0xf2/0x150 [ 64.526686][ T6634] dump_stack+0x15/0x20 [ 64.530861][ T6634] should_fail_ex+0x229/0x230 [ 64.535564][ T6634] ? device_add+0x89/0x790 [ 64.540065][ T6634] __should_failslab+0x92/0xa0 [ 64.544868][ T6634] should_failslab+0x9/0x20 [ 64.549538][ T6634] kmalloc_trace_noprof+0x4b/0x2a0 [ 64.554700][ T6634] ? netdev_register_kobject+0x63/0x230 [ 64.560325][ T6634] device_add+0x89/0x790 [ 64.564609][ T6634] netdev_register_kobject+0x100/0x230 [ 64.570124][ T6634] register_netdevice+0x8b9/0xdd0 [ 64.575245][ T6634] geneve_configure+0x4e9/0x640 [ 64.580189][ T6634] geneve_newlink+0x84/0xe0 [ 64.584819][ T6634] ? __pfx_geneve_newlink+0x10/0x10 [ 64.590212][ T6634] rtnl_newlink+0xefd/0x1690 [ 64.594839][ T6634] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 64.601110][ T6634] ? _raw_spin_unlock+0x26/0x50 [ 64.606048][ T6634] ? __mutex_lock+0x221/0x8e0 [ 64.610848][ T6634] ? __pfx_rtnl_newlink+0x10/0x10 [ 64.615921][ T6634] rtnetlink_rcv_msg+0x85e/0x910 [ 64.620888][ T6634] ? memcg_list_lru_alloc+0xd2/0x740 [ 64.626231][ T6634] ? mod_objcg_state+0x2e2/0x4e0 [ 64.631244][ T6634] ? xas_load+0x3ae/0x3d0 [ 64.635631][ T6634] ? skb_release_data+0x583/0x5a0 [ 64.640771][ T6634] ? kmem_cache_free+0xd8/0x280 [ 64.645757][ T6634] ? nlmon_xmit+0x51/0x60 [ 64.650108][ T6634] ? __kfree_skb+0x102/0x150 [ 64.654793][ T6634] ? consume_skb+0x57/0x180 [ 64.659301][ T6634] ? nlmon_xmit+0x51/0x60 [ 64.663688][ T6634] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 64.669037][ T6634] ? __dev_queue_xmit+0xb21/0x1e50 [ 64.674161][ T6634] ? ref_tracker_free+0x3a5/0x410 [ 64.679317][ T6634] netlink_rcv_skb+0x12c/0x230 [ 64.684110][ T6634] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.689659][ T6634] rtnetlink_rcv+0x1c/0x30 [ 64.694150][ T6634] netlink_unicast+0x58d/0x660 [ 64.699011][ T6634] netlink_sendmsg+0x5ca/0x6e0 [ 64.703863][ T6634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.709174][ T6634] __sock_sendmsg+0x140/0x180 [ 64.713896][ T6634] ____sys_sendmsg+0x312/0x410 [ 64.718757][ T6634] __sys_sendmsg+0x1e9/0x280 [ 64.723372][ T6634] __x64_sys_sendmsg+0x46/0x50 [ 64.728219][ T6634] x64_sys_call+0xb25/0x2d70 [ 64.732824][ T6634] do_syscall_64+0xc9/0x1c0 [ 64.737339][ T6634] ? clear_bhb_loop+0x55/0xb0 [ 64.742111][ T6634] ? clear_bhb_loop+0x55/0xb0 [ 64.746823][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.752722][ T6634] RIP: 0033:0x7f6253691bd9 [ 64.757140][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.776755][ T6634] RSP: 002b:00007f6252913048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.785216][ T6634] RAX: ffffffffffffffda RBX: 00007f625381ff60 RCX: 00007f6253691bd9 [ 64.793217][ T6634] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 64.801269][ T6634] RBP: 00007f62529130a0 R08: 0000000000000000 R09: 0000000000000000 [ 64.809241][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.817326][ T6634] R13: 000000000000000b R14: 00007f625381ff60 R15: 00007fff0fb98fa8 [ 64.825347][ T6634] [ 64.830063][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.833470][ T6636] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 64.871854][ T6622] lo speed is unknown, defaulting to 1000 [ 64.900400][ T4935] bridge_slave_1: left allmulticast mode [ 64.906106][ T4935] bridge_slave_1: left promiscuous mode [ 64.911815][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.922397][ T4935] bridge_slave_0: left allmulticast mode [ 64.928106][ T4935] bridge_slave_0: left promiscuous mode [ 64.933931][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.024153][ T5276] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /53/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.100803][ T6646] loop0: detected capacity change from 0 to 512 [ 65.129959][ T6646] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.180101][ T4935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.186606][ T6646] loop0: detected capacity change from 512 to 64 [ 65.195618][ T6646] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: Out of memory [ 65.206365][ T4935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.216371][ T6646] EXT4-fs error (device loop0): ext4_setattr:5413: inode #18: comm syz.0.715: mark_inode_dirty error [ 65.227830][ T6646] EXT4-fs error (device loop0) in ext4_setattr:5474: Out of memory [ 65.238846][ T4935] bond0 (unregistering): Released all slaves [ 65.260402][ T4935] bond1 (unregistering): Released all slaves [ 65.279641][ T6643] netlink: 'syz.2.712': attribute type 4 has an invalid length. [ 65.356871][ T6656] loop2: detected capacity change from 0 to 512 [ 65.366193][ T907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.375029][ T6656] EXT4-fs (loop2): bad block size 8192 [ 65.417426][ T4935] hsr_slave_0: left promiscuous mode [ 65.423630][ T4935] hsr_slave_1: left promiscuous mode [ 65.435831][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.443263][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.465861][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.473298][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.511661][ T4935] veth1_macvtap: left promiscuous mode [ 65.517218][ T4935] veth0_macvtap: left promiscuous mode [ 65.522824][ T4935] veth1_vlan: left promiscuous mode [ 65.528099][ T4935] veth0_vlan: left promiscuous mode [ 65.726304][ T4935] team0 (unregistering): Port device team_slave_1 removed [ 65.747014][ T4935] team0 (unregistering): Port device team_slave_0 removed [ 65.842240][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.850497][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.860098][ T3164] lo speed is unknown, defaulting to 1000 [ 65.866517][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 65.891831][ T6651] loop3: detected capacity change from 0 to 65536 [ 65.933309][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 66.002808][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.009931][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.030677][ T6622] bridge_slave_0: entered allmulticast mode [ 66.043590][ T6622] bridge_slave_0: entered promiscuous mode [ 66.063364][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.070506][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.088146][ T6622] bridge_slave_1: entered allmulticast mode [ 66.100795][ T6622] bridge_slave_1: entered promiscuous mode [ 66.115450][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.722'. [ 66.177614][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.198756][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.250855][ T6622] team0: Port device team_slave_0 added [ 66.257666][ T6622] team0: Port device team_slave_1 added [ 66.276654][ T6689] bond2 (unregistering): Released all slaves [ 66.338458][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.345620][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.371633][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.385402][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.392452][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.418891][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.430096][ T3164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.442674][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'. [ 66.463057][ T6663] chnl_net:caif_netlink_parms(): no params data found [ 66.482210][ T4935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.547646][ T6707] loop3: detected capacity change from 0 to 2048 [ 66.569630][ T6622] hsr_slave_0: entered promiscuous mode [ 66.581011][ T6622] hsr_slave_1: entered promiscuous mode [ 66.601654][ T6622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.610367][ T6622] Cannot create hsr debugfs directory [ 66.623821][ T4935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.659789][ T6718] loop3: detected capacity change from 0 to 2048 [ 66.689447][ T6720] loop2: detected capacity change from 0 to 256 [ 66.695966][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.703161][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.713853][ T6720] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.724958][ T6663] bridge_slave_0: entered allmulticast mode [ 66.740440][ T6663] bridge_slave_0: entered promiscuous mode [ 66.756745][ T4935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.767781][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.774840][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.782131][ T6663] bridge_slave_1: entered allmulticast mode [ 66.788736][ T6663] bridge_slave_1: entered promiscuous mode [ 66.811344][ T4935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.851574][ T6663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.871600][ T6663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.892673][ T6729] netlink: 104 bytes leftover after parsing attributes in process `syz.3.736'. [ 66.915667][ T6731] loop3: detected capacity change from 0 to 512 [ 66.931584][ T6663] team0: Port device team_slave_0 added [ 66.938389][ T6663] team0: Port device team_slave_1 added [ 66.939884][ T6731] EXT4-fs mount: 67 callbacks suppressed [ 66.939943][ T6731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 66.964550][ T6731] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.986718][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.993869][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.019802][ T6663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.048567][ T4935] bridge_slave_1: left allmulticast mode [ 67.054274][ T4935] bridge_slave_1: left promiscuous mode [ 67.059981][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.076220][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 67.089179][ T4935] bridge_slave_0: left allmulticast mode [ 67.094976][ T4935] bridge_slave_0: left promiscuous mode [ 67.100676][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.124976][ T3163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.234252][ T4935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.246085][ T4935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.255794][ T6738] 9pnet_fd: Insufficient options for proto=fd [ 67.263485][ T4935] bond0 (unregistering): (slave team1): Releasing backup interface [ 67.275091][ T4935] bond0 (unregistering): Released all slaves [ 67.284363][ T4935] bond1 (unregistering): Released all slaves [ 67.296094][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.303138][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.329157][ T6663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.361552][ T6663] hsr_slave_0: entered promiscuous mode [ 67.368324][ T6663] hsr_slave_1: entered promiscuous mode [ 67.374537][ T6663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.382258][ T6663] Cannot create hsr debugfs directory [ 67.407491][ T4935] hsr_slave_0: left promiscuous mode [ 67.416178][ T4935] hsr_slave_1: left promiscuous mode [ 67.421772][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.421812][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.422286][ T4935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.422308][ T4935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.430662][ T907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.431068][ T4935] veth1_macvtap: left promiscuous mode [ 67.466347][ T4935] veth0_macvtap: left promiscuous mode [ 67.466407][ T4935] veth1_vlan: left promiscuous mode [ 67.477229][ T4935] veth0_vlan: left promiscuous mode [ 67.531223][ T6742] xt_bpf: check failed: parse error [ 67.721190][ T4935] team0 (unregistering): Port device team_slave_1 removed [ 67.732096][ T4935] team0 (unregistering): Port device team_slave_0 removed [ 67.794016][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 67.794033][ T29] audit: type=1400 audit(1720393382.771:731): avc: denied { bind } for pid=6761 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.819466][ T29] audit: type=1400 audit(1720393382.771:732): avc: denied { connect } for pid=6761 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.844519][ T6622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.848738][ T6764] tipc: Failed to remove unknown binding: 66,1,1/0:2735893432/2735893434 [ 67.879599][ T6622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.887151][ T6764] tipc: Failed to remove unknown binding: 66,1,1/0:2735893432/2735893434 [ 67.903728][ T6622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.941101][ T6622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.998259][ T6773] bond0: entered promiscuous mode [ 68.003460][ T6773] bond_slave_0: entered promiscuous mode [ 68.009356][ T6773] bond_slave_1: entered promiscuous mode [ 68.015060][ T6773] syz_tun: entered promiscuous mode [ 68.024357][ T6773] dummy0: entered promiscuous mode [ 68.030440][ T6773] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 68.039213][ T6773] Cannot create hsr debugfs directory [ 68.117580][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.130533][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.140288][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.147369][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.170222][ T6777] loop3: detected capacity change from 0 to 128 [ 68.174377][ T6622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.186969][ T6622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.199815][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.206920][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.237418][ T29] audit: type=1400 audit(1720393383.224:733): avc: denied { listen } for pid=6776 comm="syz.3.752" lport=35388 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.239998][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.752'. [ 68.284927][ T29] audit: type=1400 audit(1720393383.224:734): avc: denied { accept } for pid=6776 comm="syz.3.752" lport=35388 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.307789][ T29] audit: type=1400 audit(1720393383.224:735): avc: denied { getopt } for pid=6776 comm="syz.3.752" lport=35388 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 68.358834][ T6663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.376155][ T6782] loop3: detected capacity change from 0 to 512 [ 68.378439][ T6663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.382767][ T6782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.389360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.404727][ T6782] EXT4-fs (loop3): blocks per group (8192) and clusters per group (4352) inconsistent [ 68.413491][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.422697][ T6663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.445589][ T6663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.462999][ T3163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.499178][ T6663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.522345][ T6663] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.543073][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.550262][ T907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.567543][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.574716][ T907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.595997][ T6663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.717665][ T6663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.733369][ T29] audit: type=1400 audit(1720393383.718:736): avc: denied { create } for pid=6809 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.767014][ T6622] veth0_vlan: entered promiscuous mode [ 68.791717][ T6622] veth1_vlan: entered promiscuous mode [ 68.837185][ T6622] veth0_macvtap: entered promiscuous mode [ 68.853383][ T6622] veth1_macvtap: entered promiscuous mode [ 68.881280][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.891886][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.901949][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.912638][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.925990][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.926845][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 68.938932][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.952860][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.962705][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.973142][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.983100][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.993566][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.005587][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.025124][ T6622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.033928][ T6622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042741][ T6622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051812][ T6622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.070017][ T6836] loop3: detected capacity change from 0 to 136 [ 69.088339][ T29] audit: type=1400 audit(1720393384.060:737): avc: denied { mount } for pid=6835 comm="syz.3.766" name="/" dev="loop3" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.123471][ T6663] veth0_vlan: entered promiscuous mode [ 69.132772][ T6836] ISOFS: unable to read i-node block [ 69.151211][ T6663] veth1_vlan: entered promiscuous mode [ 69.164104][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.766'. [ 69.174314][ T29] audit: type=1400 audit(1720393384.161:738): avc: denied { mounton } for pid=6622 comm="syz-executor" path="/root/syzkaller.BgFcnH/syz-tmp" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.200411][ T6663] veth0_macvtap: entered promiscuous mode [ 69.213433][ T29] audit: type=1400 audit(1720393384.191:739): avc: denied { mount } for pid=6622 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.226498][ T6663] veth1_macvtap: entered promiscuous mode [ 69.235339][ T29] audit: type=1400 audit(1720393384.191:740): avc: denied { mounton } for pid=6622 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.254481][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.274437][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.284310][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.294785][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.304619][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.315049][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.330952][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.342790][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.353437][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.363279][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.373728][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.383557][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.394088][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.403912][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.414419][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.429848][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.440340][ T6663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.449106][ T6663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.457971][ T6663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.466889][ T6663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.496609][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.547469][ T6848] loop2: detected capacity change from 0 to 128 [ 69.554385][ T6848] FAT-fs (loop2): bogus logical sector size 0 [ 69.560545][ T6848] FAT-fs (loop2): Can't find a valid FAT filesystem [ 69.591385][ T6852] netlink: 'syz.3.771': attribute type 3 has an invalid length. [ 69.599141][ T6852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.771'. [ 69.672811][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 69.705248][ T6859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.772'. [ 69.719958][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 69.754072][ T6860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.800939][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.777'. [ 69.836249][ T6872] loop3: detected capacity change from 0 to 512 [ 69.855114][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 69.885053][ T6872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.906010][ T6876] loop0: detected capacity change from 0 to 128 [ 69.923442][ T6876] FAT-fs (loop0): invalid media value (0x00) [ 69.923854][ T6872] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.929497][ T6876] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 69.949288][ T6876] FAT-fs (loop0): Can't find a valid FAT filesystem [ 69.979197][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.770'. [ 70.014876][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.781'. [ 70.023877][ T6882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.062441][ T6885] loop2: detected capacity change from 0 to 164 [ 70.074673][ T6885] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.083566][ T6885] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.092682][ T6885] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.101494][ T6885] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.116689][ T6885] vxlan0: entered promiscuous mode [ 70.121981][ T6885] vxlan0: entered allmulticast mode [ 70.138124][ T6876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=6876 comm=syz.0.780 [ 70.151369][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.165927][ T6885] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.174969][ T6885] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.183948][ T6885] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.192889][ T6885] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.204680][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.260095][ T6890] vlan2: entered allmulticast mode [ 70.266002][ T6890] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 70.279983][ T6890] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 70.339851][ T6896] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 70.411503][ T6910] loop2: detected capacity change from 0 to 256 [ 70.434033][ T6911] loop4: detected capacity change from 0 to 1024 [ 70.445606][ T6911] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.456661][ T6911] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.481168][ T6909] loop3: detected capacity change from 0 to 256 [ 70.484159][ T6911] jbd2_journal_init_inode: Cannot locate journal superblock [ 70.494927][ T6911] EXT4-fs (loop4): Could not load journal inode [ 70.535816][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.546236][ T6917] loop0: detected capacity change from 0 to 164 [ 70.547349][ T6911] loop4: detected capacity change from 0 to 1024 [ 70.559706][ T6911] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 70.588933][ T6917] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.597787][ T6917] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.606549][ T6917] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.615339][ T6917] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.659735][ T6917] vxlan0: entered promiscuous mode [ 70.664930][ T6917] vxlan0: entered allmulticast mode [ 70.693164][ T6917] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.702149][ T6917] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.711305][ T6917] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.720217][ T6917] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.330975][ T6938] loop0: detected capacity change from 0 to 512 [ 71.347141][ T6940] x_tables: unsorted underflow at hook 4 [ 71.376905][ T6938] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.803: invalid block [ 71.398679][ T6938] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.803: invalid indirect mapped block 4294967295 (level 1) [ 71.433047][ T6954] loop3: detected capacity change from 0 to 164 [ 71.448329][ T6938] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.803: invalid indirect mapped block 4294967295 (level 1) [ 71.481318][ T6954] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.490155][ T6954] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.498946][ T6954] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.507727][ T6954] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.521560][ T6954] vxlan0: entered promiscuous mode [ 71.526790][ T6954] vxlan0: entered allmulticast mode [ 71.527167][ T6938] EXT4-fs (loop0): 2 truncates cleaned up [ 71.539763][ T6938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.556588][ T6954] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.565763][ T6954] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.574733][ T6954] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.583689][ T6954] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.594170][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.604426][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.707633][ T6965] loop4: detected capacity change from 0 to 1764 [ 71.717720][ T6961] ip6gretap0: entered promiscuous mode [ 71.753232][ T6961] macvtap1: entered promiscuous mode [ 71.758918][ T6961] macvtap1: entered allmulticast mode [ 71.764659][ T6961] ip6gretap0: entered allmulticast mode [ 71.801264][ T6976] loop0: detected capacity change from 0 to 1024 [ 71.898243][ T6976] loop0: detected capacity change from 0 to 2048 [ 71.925476][ T6976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.962996][ T6992] vlan2: entered allmulticast mode [ 71.968208][ T6992] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 71.986105][ T6990] sctp: [Deprecated]: syz.4.822 (pid 6990) Use of int in maxseg socket option. [ 71.986105][ T6990] Use struct sctp_assoc_value instead [ 72.010261][ T6992] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 72.020943][ T4938] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.066089][ T4938] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.078487][ T4938] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.078487][ T4938] [ 72.088163][ T4938] EXT4-fs (loop0): Total free blocks count 0 [ 72.094317][ T4938] EXT4-fs (loop0): Free/Dirty block details [ 72.100253][ T4938] EXT4-fs (loop0): free_blocks=2415919104 [ 72.106001][ T4938] EXT4-fs (loop0): dirty_blocks=16 [ 72.111150][ T4938] EXT4-fs (loop0): Block reservation details [ 72.117268][ T4938] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 72.125239][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.156394][ T6997] loop2: detected capacity change from 0 to 164 [ 72.168952][ T6997] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.177950][ T6997] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.186660][ T6997] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.195437][ T6997] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.224364][ T6997] vxlan0: entered promiscuous mode [ 72.229606][ T6997] vxlan0: entered allmulticast mode [ 72.237815][ T6997] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.246842][ T6997] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.255811][ T6997] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.264769][ T6997] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.394537][ T7017] loop2: detected capacity change from 0 to 128 [ 72.404078][ T7018] 9p: Unknown Cache mode or invalid value fsche [ 72.432722][ T7017] can: request_module (can-proto-0) failed. [ 72.469695][ T7025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59928 sclass=netlink_route_socket pid=7025 comm=syz.4.834 [ 72.518949][ T7027] xt_hashlimit: invalid interval [ 72.552260][ T7031] tunl0: entered promiscuous mode [ 72.560325][ T7033] dccp_invalid_packet: pskb_may_pull failed [ 72.573119][ T7031] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 72.598156][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.830059][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 72.830078][ T29] audit: type=1400 audit(1720393387.846:761): avc: denied { unlink } for pid=3080 comm="syz-executor" name="file0" dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.024633][ T7056] netlink: 'syz.2.845': attribute type 1 has an invalid length. [ 73.131341][ T29] audit: type=1400 audit(1720393388.148:762): avc: denied { read write } for pid=7060 comm="syz.0.848" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.160963][ T7061] netlink: 'syz.0.848': attribute type 34 has an invalid length. [ 73.168904][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.205726][ T29] audit: type=1400 audit(1720393388.178:763): avc: denied { open } for pid=7060 comm="syz.0.848" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.258555][ T7068] openvswitch: netlink: Multiple metadata blocks provided [ 73.314229][ T29] audit: type=1326 audit(1720393388.329:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.4.854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa21bce1bd9 code=0x0 [ 73.378848][ T7088] netlink: 'syz.0.856': attribute type 6 has an invalid length. [ 73.485805][ T7102] vlan2: entered allmulticast mode [ 73.491043][ T7102] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 73.507550][ T7102] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 73.629526][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.790417][ T7138] loop0: detected capacity change from 0 to 1024 [ 73.810656][ T7138] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.827629][ T7138] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.863: iget: special inode unallocated [ 73.850015][ T29] audit: type=1400 audit(1720393388.872:765): avc: denied { create } for pid=7147 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.881377][ T7138] EXT4-fs (loop0): get root inode failed [ 73.887220][ T7138] EXT4-fs (loop0): mount failed [ 73.905342][ T7148] loop2: detected capacity change from 0 to 4096 [ 73.918695][ T7148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.951502][ T29] audit: type=1400 audit(1720393388.973:766): avc: denied { mac_admin } for pid=7156 comm="syz.0.866" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.973649][ T7157] SELinux: Context & O ˼b6mz߲}+d.XKONF~gW*E].s^+![3sA,^8YpOge.U(ɾȽvS is not valid (left unmapped). [ 73.992502][ T7157] SELinux: Context gS is not valid (left unmapped). [ 74.008485][ T7157] SELinux: Context f hDfutqKLw~DŐ is not valid (left unmapped). [ 74.025645][ T29] audit: type=1326 audit(1720393389.044:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.0.866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f290daedbd9 code=0x0 [ 74.073678][ T29] audit: type=1400 audit(1720393389.094:768): avc: denied { create } for pid=7156 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.113711][ T29] audit: type=1400 audit(1720393389.104:769): avc: denied { connect } for pid=7156 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.133151][ T29] audit: type=1400 audit(1720393389.104:770): avc: denied { getopt } for pid=7156 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.203961][ T7175] netlink: 'syz.4.867': attribute type 8 has an invalid length. [ 74.331883][ T7221] __nla_validate_parse: 11 callbacks suppressed [ 74.331904][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.870'. [ 74.401163][ T3087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.423306][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.870'. [ 74.497884][ T7241] syz_tun: entered promiscuous mode [ 74.541201][ T7241] bond_slave_1: entered promiscuous mode [ 74.561965][ T7241] bond_slave_1: left promiscuous mode [ 74.574939][ T7241] syz_tun: left promiscuous mode [ 74.628026][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 74.647761][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 74.663572][ T907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.677808][ T7272] netlink: 'syz.3.878': attribute type 4 has an invalid length. [ 74.807202][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.882'. [ 74.846884][ T7298] netlink: 48 bytes leftover after parsing attributes in process `syz.3.884'. [ 74.910190][ T7306] netlink: 68 bytes leftover after parsing attributes in process `syz.3.885'. [ 74.919295][ T7306] netlink: 48 bytes leftover after parsing attributes in process `syz.3.885'. [ 74.948514][ T7310] vlan2: entered allmulticast mode [ 74.953842][ T7310] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 74.989487][ T7310] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 75.009975][ T7319] tipc: Enabling of bearer rejected, failed to enable media [ 75.106611][ T7324] loop3: detected capacity change from 0 to 2048 [ 75.150838][ T7324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.199344][ T7355] loop0: detected capacity change from 0 to 512 [ 75.215526][ T7324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.889: bg 0: block 234: padding at end of block bitmap is not set [ 75.237554][ T7355] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz.0.893: iget: special inode unallocated [ 75.242675][ T7324] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 117 [ 75.262048][ T7324] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.262048][ T7324] [ 75.265337][ T7355] EXT4-fs (loop0): get root inode failed [ 75.277483][ T7355] EXT4-fs (loop0): mount failed [ 75.300775][ T3093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.314049][ T5276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.340132][ T7323] chnl_net:caif_netlink_parms(): no params data found [ 75.356872][ T3093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.371026][ T7374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7374 comm=syz.0.894 [ 75.385115][ T7374] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 75.401118][ T7374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.423414][ T7374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.439096][ T7374] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 75.456823][ T7374] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 75.488312][ T3093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.554242][ T7393] openvswitch: netlink: Port -16769364 exceeds max allowable 65535 [ 75.578479][ T7396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.606444][ T3093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.685405][ T7407] batadv0: entered promiscuous mode [ 75.736872][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.798407][ T7455] netlink: 'syz.4.902': attribute type 29 has an invalid length. [ 75.815300][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.822617][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.830899][ T7323] bridge_slave_0: entered allmulticast mode [ 75.838936][ T7323] bridge_slave_0: entered promiscuous mode [ 75.849118][ T7455] netlink: 'syz.4.902': attribute type 29 has an invalid length. [ 75.857512][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.864761][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.871379][ T7462] loop0: detected capacity change from 0 to 1024 [ 75.878487][ T7323] bridge_slave_1: entered allmulticast mode [ 75.880157][ T7462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.892362][ T7323] bridge_slave_1: entered promiscuous mode [ 75.899457][ T7462] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.924668][ T7468] loop3: detected capacity change from 0 to 164 [ 75.929062][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.946701][ T7468] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.947789][ T7462] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003] [ 75.955499][ T7468] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.972470][ T7468] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.977511][ T7462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.981230][ T7468] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.003132][ T7468] vxlan0: entered promiscuous mode [ 76.008281][ T7468] vxlan0: entered allmulticast mode [ 76.017616][ T7468] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.026580][ T7468] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.035543][ T7468] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.044531][ T7468] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.070565][ T3093] bridge_slave_1: left allmulticast mode [ 76.076380][ T3093] bridge_slave_1: left promiscuous mode [ 76.082064][ T3093] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.102688][ T3093] bridge_slave_0: left allmulticast mode [ 76.108385][ T3093] bridge_slave_0: left promiscuous mode [ 76.114334][ T3093] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.533666][ T3093] bond0 (unregistering): left promiscuous mode [ 76.540017][ T3093] bond_slave_0: left promiscuous mode [ 76.545615][ T3093] bond_slave_1: left promiscuous mode [ 76.551150][ T3093] batadv_slave_0: left promiscuous mode [ 76.557708][ T3093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.568298][ T3093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.579680][ T3093] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 76.590847][ T3093] bond0 (unregistering): Released all slaves [ 76.600222][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.627298][ T7323] team0: Port device team_slave_0 added [ 76.634442][ T7323] team0: Port device team_slave_1 added [ 76.654780][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.661824][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.687938][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.705306][ T3093] batadv0: left promiscuous mode [ 76.714400][ T3093] hsr_slave_0: left promiscuous mode [ 76.720201][ T3093] hsr_slave_1: left promiscuous mode [ 76.728184][ T3093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.735618][ T3093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.750127][ T3093] veth1_macvtap: left promiscuous mode [ 76.755665][ T3093] veth0_macvtap: left promiscuous mode [ 76.761381][ T3093] veth1_vlan: left promiscuous mode [ 76.766745][ T3093] veth0_vlan: left promiscuous mode [ 76.829192][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.901424][ T3093] team0 (unregistering): Port device team_slave_1 removed [ 76.926675][ T3093] team0 (unregistering): Port device team_slave_0 removed [ 76.998415][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.005409][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.031653][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.190285][ T7548] loop2: detected capacity change from 0 to 164 [ 77.201078][ T7323] hsr_slave_0: entered promiscuous mode [ 77.210893][ T7323] hsr_slave_1: entered promiscuous mode [ 77.219971][ T7548] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.228834][ T7548] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.237788][ T7548] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.246552][ T7548] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.268340][ T7548] vxlan0: entered promiscuous mode [ 77.273569][ T7548] vxlan0: entered allmulticast mode [ 77.291008][ T7548] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.300020][ T7548] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.308966][ T7548] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.317993][ T7548] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.479163][ T7586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.923'. [ 77.488230][ T7586] tipc: Started in network mode [ 77.493103][ T7586] tipc: Node identity 6, cluster identity 4711 [ 77.499287][ T7586] tipc: Node number set to 6 [ 77.794775][ T7640] loop4: detected capacity change from 0 to 512 [ 77.809129][ T7640] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.927: casefold flag without casefold feature [ 77.814598][ T7323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.828663][ T7640] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.927: couldn't read orphan inode 15 (err -117) [ 77.843753][ T7640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.858474][ T7323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.876981][ T7323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.900757][ T7323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.928640][ T6622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.955730][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 77.955748][ T29] audit: type=1401 audit(2000000000.830:779): op=setxattr invalid_context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q: adding VLAN 0 to HW filter on device bond0 [ 78.078705][ T7658] FAULT_INJECTION: forcing a failure. [ 78.078705][ T7658] name failslab, interval 1, probability 0, space 0, times 0 [ 78.091416][ T7658] CPU: 0 PID: 7658 Comm: syz.0.931 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 78.101501][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 78.111587][ T7658] Call Trace: [ 78.114883][ T7658] [ 78.117815][ T7658] dump_stack_lvl+0xf2/0x150 [ 78.122467][ T7658] dump_stack+0x15/0x20 [ 78.126673][ T7658] should_fail_ex+0x229/0x230 [ 78.131365][ T7658] ? kstrdup_const+0x3e/0x50 [ 78.135966][ T7658] __should_failslab+0x92/0xa0 [ 78.140741][ T7658] should_failslab+0x9/0x20 [ 78.145270][ T7658] kmalloc_node_track_caller_noprof+0xa6/0x380 [ 78.151504][ T7658] ? pcpu_block_update+0xae/0x3b0 [ 78.156575][ T7658] kstrdup+0x3a/0x80 [ 78.160475][ T7658] kstrdup_const+0x3e/0x50 [ 78.164979][ T7658] __kernfs_new_node+0x41/0x380 [ 78.169914][ T7658] ? make_kgid+0x115/0x310 [ 78.174339][ T7658] ? net_ns_get_ownership+0xae/0xd0 [ 78.179621][ T7658] ? __pfx_net_get_ownership+0x10/0x10 [ 78.185122][ T7658] kernfs_create_dir_ns+0xc8/0x1b0 [ 78.190265][ T7658] sysfs_create_dir_ns+0xd7/0x1e0 [ 78.195321][ T7658] kobject_add_internal+0x49e/0x7a0 [ 78.200554][ T7658] kobject_add+0xdc/0x160 [ 78.204980][ T7658] ? kobject_get+0x99/0xd0 [ 78.209479][ T7658] ? device_add+0x2fa/0x790 [ 78.214035][ T7658] device_add+0x309/0x790 [ 78.218418][ T7658] netdev_register_kobject+0x100/0x230 [ 78.224345][ T7658] register_netdevice+0x8b9/0xdd0 [ 78.229394][ T7658] geneve_configure+0x4e9/0x640 [ 78.234258][ T7658] geneve_newlink+0x84/0xe0 [ 78.238831][ T7658] ? __pfx_geneve_newlink+0x10/0x10 [ 78.244038][ T7658] rtnl_newlink+0xefd/0x1690 [ 78.248665][ T7658] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 78.254911][ T7658] ? _raw_spin_unlock+0x26/0x50 [ 78.259773][ T7658] ? __mutex_lock+0x221/0x8e0 [ 78.264459][ T7658] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.269489][ T7658] rtnetlink_rcv_msg+0x85e/0x910 [ 78.274505][ T7658] ? memcg_list_lru_alloc+0xd2/0x740 [ 78.279803][ T7658] ? mod_objcg_state+0x2e2/0x4e0 [ 78.284819][ T7658] ? strlen+0x19/0x30 [ 78.288992][ T7658] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 78.294479][ T7658] ? kmem_cache_free+0xd8/0x280 [ 78.299353][ T7658] ? nlmon_xmit+0x51/0x60 [ 78.303756][ T7658] ? __kfree_skb+0x102/0x150 [ 78.308473][ T7658] ? consume_skb+0x57/0x180 [ 78.313001][ T7658] ? nlmon_xmit+0x51/0x60 [ 78.317342][ T7658] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 78.322627][ T7658] ? __dev_queue_xmit+0xb21/0x1e50 [ 78.327743][ T7658] ? ref_tracker_free+0x3a5/0x410 [ 78.332778][ T7658] netlink_rcv_skb+0x12c/0x230 [ 78.337571][ T7658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.343118][ T7658] rtnetlink_rcv+0x1c/0x30 [ 78.347537][ T7658] netlink_unicast+0x58d/0x660 [ 78.352306][ T7658] netlink_sendmsg+0x5ca/0x6e0 [ 78.357098][ T7658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.362474][ T7658] __sock_sendmsg+0x140/0x180 [ 78.367217][ T7658] ____sys_sendmsg+0x312/0x410 [ 78.372036][ T7658] __sys_sendmsg+0x1e9/0x280 [ 78.376659][ T7658] __x64_sys_sendmsg+0x46/0x50 [ 78.381438][ T7658] x64_sys_call+0xb25/0x2d70 [ 78.386043][ T7658] do_syscall_64+0xc9/0x1c0 [ 78.390611][ T7658] ? clear_bhb_loop+0x55/0xb0 [ 78.395387][ T7658] ? clear_bhb_loop+0x55/0xb0 [ 78.400076][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.406048][ T7658] RIP: 0033:0x7f290daedbd9 [ 78.410470][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.430197][ T7658] RSP: 002b:00007f290cd6f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.438617][ T7658] RAX: ffffffffffffffda RBX: 00007f290dc7bf60 RCX: 00007f290daedbd9 [ 78.446590][ T7658] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 78.454562][ T7658] RBP: 00007f290cd6f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.462533][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.470505][ T7658] R13: 000000000000000b R14: 00007f290dc7bf60 R15: 00007ffe0d163418 [ 78.478513][ T7658] [ 78.481829][ T7658] kobject: kobject_add_internal failed for geneve2 (error: -12 parent: net) [ 78.528796][ T7672] loop3: detected capacity change from 0 to 512 [ 78.546718][ T7664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.563967][ T7672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.567790][ T7673] loop0: detected capacity change from 0 to 164 [ 78.584855][ T7323] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.587880][ T7672] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.628965][ T7672] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 78.637981][ T7677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.937'. [ 78.645881][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.660392][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.673073][ T7673] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.681879][ T7673] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.690747][ T7673] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.699536][ T7673] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.708725][ T7673] vxlan0: entered promiscuous mode [ 78.713890][ T7673] vxlan0: entered allmulticast mode [ 78.735272][ T7673] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.744221][ T7673] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.753238][ T7673] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.762320][ T7673] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.898507][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.911351][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.918489][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.951656][ T7323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.962123][ T7323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.992678][ T29] audit: type=1400 audit(2000000001.870:780): avc: denied { create } for pid=7684 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 79.068110][ T7691] loop3: detected capacity change from 0 to 512 [ 79.090009][ T7695] loop0: detected capacity change from 0 to 512 [ 79.100074][ T7691] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.941: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 256(4), depth 0(0) [ 79.130044][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.137045][ T7691] EXT4-fs error (device loop3): ext4_quota_enable:7037: comm syz.3.941: Bad quota inode: 4, type: 1 [ 79.159477][ T7691] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.178147][ T7691] EXT4-fs (loop3): mount failed [ 79.188021][ T29] audit: type=1326 audit(2000000002.060:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.4.944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa21bce1bd9 code=0x0 [ 79.212024][ T7695] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1280). [ 79.224076][ T7695] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 79.239256][ T7695] EXT4-fs (loop0): mount failed [ 79.307237][ T29] audit: type=1400 audit(2000000002.190:782): avc: denied { ioctl } for pid=7694 comm="syz.0.943" path="socket:[15843]" dev="sockfs" ino=15843 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.313524][ T7323] veth0_vlan: entered promiscuous mode [ 79.356640][ T7714] vlan2: entered allmulticast mode [ 79.361864][ T7714] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 79.374177][ T7714] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 79.406235][ T7323] veth1_vlan: entered promiscuous mode [ 79.424659][ T7323] veth0_macvtap: entered promiscuous mode [ 79.434269][ T7323] veth1_macvtap: entered promiscuous mode [ 79.449478][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.459985][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.469882][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.480339][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.490248][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.500795][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.510734][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.521228][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.538799][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.553159][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.563742][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.573577][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.584034][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.593993][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.604432][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.614404][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.624849][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.643345][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.655228][ T7720] loop0: detected capacity change from 0 to 512 [ 79.663802][ T7323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.664438][ T7722] loop2: detected capacity change from 0 to 164 [ 79.672580][ T7323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.687702][ T7323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.696599][ T7323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.713445][ T7722] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.722204][ T7722] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.724269][ T7720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.731168][ T7722] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.746785][ T7720] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.752320][ T7722] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.773206][ T7722] vxlan0: entered promiscuous mode [ 79.778557][ T7722] vxlan0: entered allmulticast mode [ 79.786766][ T7722] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.795999][ T7722] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.804912][ T7722] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.813995][ T7722] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.853906][ T7720] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.944961][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.993607][ T7732] loop0: detected capacity change from 0 to 128 [ 80.002485][ T7732] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.023522][ T7732] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.035992][ T7739] __nla_validate_parse: 1 callbacks suppressed [ 80.036011][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'. [ 80.039878][ T7740] loop4: detected capacity change from 0 to 512 [ 80.061324][ T7740] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 80.071444][ T7740] bio_check_eod: 3 callbacks suppressed [ 80.071460][ T7740] syz.4.954: attempt to access beyond end of device [ 80.071460][ T7740] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 80.088064][ T7741] loop1: detected capacity change from 0 to 2048 [ 80.099019][ T7740] EXT4-fs (loop4): couldn't read superblock of external journal [ 80.113439][ T6663] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.125034][ T7741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.191792][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.217712][ T7763] loop3: detected capacity change from 0 to 164 [ 80.218002][ T7765] loop0: detected capacity change from 0 to 512 [ 80.232332][ T7765] EXT4-fs (loop0): unsupported inode size: 0 [ 80.237725][ T7763] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.238422][ T7765] EXT4-fs (loop0): blocksize: 1024 [ 80.247084][ T7763] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.261023][ T7763] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.269891][ T7763] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.290611][ T7771] loop1: detected capacity change from 0 to 512 [ 80.300333][ T7763] vxlan0: entered promiscuous mode [ 80.305593][ T7763] vxlan0: entered allmulticast mode [ 80.313149][ T7763] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.322223][ T7763] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.323249][ T29] audit: type=1400 audit(2000000003.190:783): avc: denied { tracepoint } for pid=7762 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.331260][ T7763] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.359812][ T7763] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.377894][ T7778] loop4: detected capacity change from 0 to 128 [ 80.386400][ T7778] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.386646][ T7778] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.392325][ T7771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.392386][ T7771] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.419438][ T6622] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.483567][ T7771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.545306][ T29] audit: type=1400 audit(2000000003.420:784): avc: denied { read } for pid=7796 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.585043][ T7798] program syz.0.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.602334][ T7323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.606024][ T7798] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 80.621532][ T7801] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 0, id = 0 [ 80.634366][ T29] audit: type=1326 audit(2000000003.510:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.3.965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1104e08bd9 code=0x0 [ 80.659618][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 80.668667][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.964'. [ 80.685738][ T29] audit: type=1326 audit(2000000003.560:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f290daedbd9 code=0x0 [ 80.732208][ T29] audit: type=1400 audit(2000000003.610:787): avc: denied { ioctl } for pid=7811 comm="syz.1.969" path="socket:[15191]" dev="sockfs" ino=15191 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.777081][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 80.810502][ T7831] netlink: 56 bytes leftover after parsing attributes in process `syz.0.973'. [ 80.828425][ T7835] tipc: Enabling of bearer rejected, failed to enable media [ 80.891710][ T7848] loop0: detected capacity change from 0 to 512 [ 80.904315][ T7848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.932977][ T7848] EXT4-fs (loop0): 1 truncate cleaned up [ 80.939393][ T7848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.967077][ T7848] loop0: detected capacity change from 512 to 96 [ 80.976640][ T7848] syz.0.977: attempt to access beyond end of device [ 80.976640][ T7848] loop0: rw=34817, sector=510, nr_sectors = 2 limit=96 [ 81.141894][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.155482][ T7902] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 81.163042][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.163178][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 81.183519][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.217175][ T7902] program syz.2.979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.226759][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.246244][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.260183][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.274469][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.288793][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.302821][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.316592][ T6663] EXT4-fs warning (device loop0): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 81.460451][ T7929] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 81.476098][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 81.503785][ T7929] team2: Mode "roundroin" not found [ 81.580158][ T7943] vlan2: entered allmulticast mode [ 81.585483][ T7943] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 81.596718][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.606711][ T7943] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 81.647870][ T4421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.736433][ T4421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.812095][ T4421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.844422][ T7978] netlink: 64 bytes leftover after parsing attributes in process `syz.4.995'. [ 81.885652][ T4421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.015878][ T4421] bridge_slave_1: left allmulticast mode [ 82.021581][ T4421] bridge_slave_1: left promiscuous mode [ 82.027332][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.036514][ T4421] bridge_slave_0: left allmulticast mode [ 82.042210][ T4421] bridge_slave_0: left promiscuous mode [ 82.047998][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.217822][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.224579][ T8017] loop2: detected capacity change from 0 to 8192 [ 82.253821][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.274968][ T4421] bond0 (unregistering): Released all slaves [ 82.281424][ T8017] loop2: p1 < > p4 [ 82.285334][ T8017] loop2: partition table partially beyond EOD, truncated [ 82.296495][ T4421] bond1 (unregistering): Released all slaves [ 82.314075][ T8010] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.1001'. [ 82.316336][ T8017] loop2: p1 start 295168 is beyond EOD, truncated [ 82.329823][ T8013] netlink: 'syz.4.1002': attribute type 5 has an invalid length. [ 82.408240][ T4421] IPVS: stopping backup sync thread 7801 ... [ 82.432202][ T4421] hsr_slave_0: left promiscuous mode [ 82.444619][ T4421] hsr_slave_1: left promiscuous mode [ 82.457904][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.465409][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.586279][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.593763][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.614741][ T4421] veth1_macvtap: left promiscuous mode [ 82.620308][ T4421] veth0_macvtap: left promiscuous mode [ 82.625912][ T4421] veth1_vlan: left promiscuous mode [ 82.631179][ T4421] veth0_vlan: left promiscuous mode [ 82.799078][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 82.819476][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1008'. [ 82.819825][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 82.917718][ T8099] loop4: detected capacity change from 0 to 512 [ 82.950018][ T8099] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.972266][ T7966] chnl_net:caif_netlink_parms(): no params data found [ 83.003787][ T8099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.108137][ T8099] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1010: corrupted inode contents [ 83.121296][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.128526][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.137335][ T7966] bridge_slave_0: entered allmulticast mode [ 83.137385][ T8099] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.1010: mark_inode_dirty error [ 83.137541][ T8099] ================================================================== [ 83.143352][ T8099] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 83.143394][ T8099] [ 83.143401][ T8099] write to 0xffffffff883d24ec of 1 bytes by task 7966 on cpu 0: [ 83.143420][ T8099] vsnprintf+0xdd8/0xe30 [ 83.143443][ T8099] pointer+0x8a1/0xd20 [ 83.143463][ T8099] vsnprintf+0x861/0xe30 [ 83.143482][ T8099] vscnprintf+0x42/0x90 [ 83.143502][ T8099] printk_sprint+0x30/0x2d0 [ 83.143523][ T8099] vprintk_store+0x570/0x810 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 83.143545][ T8099] vprintk_emit+0x10c/0x5e0 [ 83.143567][ T8099] vprintk_default+0x26/0x30 [ 83.143590][ T8099] vprintk+0x75/0x80 [ 83.143616][ T8099] _printk+0x7a/0xa0 [ 83.143656][ T8099] __netdev_printk+0x2d1/0x3e0 [ 83.143676][ T8099] netdev_info+0x99/0xc0 [ 83.143705][ T8099] __dev_set_allmulti+0x15b/0x240 [ 83.143737][ T8099] dev_set_allmulti+0x1f/0x30 [ 83.143767][ T8099] br_add_if+0x267/0xa50 [ 83.143794][ T8099] br_add_slave+0x2c/0x40 [ 83.143814][ T8099] do_setlink+0x968/0x2490 [ 83.143839][ T8099] rtnl_newlink+0x11a1/0x1690 [ 83.143860][ T8099] rtnetlink_rcv_msg+0x85e/0x910 [ 83.143884][ T8099] netlink_rcv_skb+0x12c/0x230 [ 83.143913][ T8099] rtnetlink_rcv+0x1c/0x30 [ 83.143935][ T8099] netlink_unicast+0x58d/0x660 [ 83.143959][ T8099] netlink_sendmsg+0x5ca/0x6e0 [ 83.143993][ T8099] __sock_sendmsg+0x140/0x180 [ 83.144027][ T8099] __sys_sendto+0x1e5/0x260 [ 83.144049][ T8099] __x64_sys_sendto+0x78/0x90 [ 83.144068][ T8099] x64_sys_call+0x16d7/0x2d70 [ 83.144094][ T8099] do_syscall_64+0xc9/0x1c0 [ 83.144119][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.144139][ T7966] bridge_slave_0: entered promiscuous mode [ 83.144147][ T8099] [ 83.144155][ T8099] read to 0xffffffff883d24e8 of 8 bytes by task 8099 on cpu 1: [ 83.144175][ T8099] data_push_tail+0x102/0x430 [ 83.144202][ T8099] data_alloc+0xbe/0x2c0 [ 83.144241][ T8099] prb_reserve+0x85e/0xb60 [ 83.144264][ T8099] vprintk_store+0x53f/0x810 [ 83.144283][ T8099] vprintk_emit+0x10c/0x5e0 [ 83.144303][ T8099] vprintk_default+0x26/0x30 [ 83.144323][ T8099] vprintk+0x75/0x80 [ 83.144364][ T8099] _printk+0x7a/0xa0 [ 83.144398][ T8099] __ext4_error_inode+0x2da/0x400 [ 83.144434][ T8099] __ext4_mark_inode_dirty+0xbe/0x440 [ 83.144467][ T8099] ext4_dirty_inode+0x91/0xb0 [ 83.144504][ T8099] __mark_inode_dirty+0x16d/0x7e0 [ 83.144529][ T8099] ext4_mb_new_blocks+0x103e/0x2020 [ 83.144555][ T8099] ext4_ext_map_blocks+0x10a1/0x33b0 [ 83.144579][ T8099] ext4_map_blocks+0x72a/0xf50 [ 83.144604][ T8099] ext4_getblk+0x112/0x500 [ 83.144629][ T8099] ext4_bread+0x2c/0x110 [ 83.144666][ T8099] ext4_add_entry+0x10dd/0x1ec0 [ 83.144690][ T8099] ext4_add_nondir+0x50/0x1a0 [ 83.144712][ T8099] ext4_create+0x20f/0x2f0 [ 83.144732][ T8099] path_openat+0xdbc/0x1fa0 [ 83.144755][ T8099] do_filp_open+0xf7/0x200 [ 83.144775][ T8099] do_sys_openat2+0xab/0x120 [ 83.144793][ T8099] __x64_sys_openat+0xf3/0x120 [ 83.144811][ T8099] x64_sys_call+0x1057/0x2d70 [ 83.144840][ T8099] do_syscall_64+0xc9/0x1c0 [ 83.144871][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.144894][ T8099] [ 83.144898][ T8099] value changed: 0x00000000ffffe27a -> 0x000000000a656465 [ 83.144915][ T8099] [ 83.144921][ T8099] Reported by Kernel Concurrency Sanitizer on: [ 83.144931][ T8099] CPU: 1 PID: 8099 Comm: syz.4.1010 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 83.144956][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.144972][ T8099] ================================================================== [ 83.145726][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.224255][ T8099] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.1010: corrupted inode contents [ 83.229112][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.233454][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 83.233473][ T29] audit: type=1400 audit(2000000006.100:806): avc: denied { write } for pid=3069 comm="syz-executor" path="pipe:[532]" dev="pipefs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 83.310791][ T8099] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1010: mark_inode_dirty error [ 83.315503][ T7966] bridge_slave_1: entered allmulticast mode [ 83.324972][ T8099] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.336730][ T7966] bridge_slave_1: entered promiscuous mode [ 83.345268][ T29] audit: type=1400 audit(2000000006.130:807): avc: denied { recv } for pid=3 comm="pool_workqueue_" saddr=10.128.0.163 src=42616 daddr=10.128.0.150 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 83.660038][ T8084] bond0: (slave syz_tun): Releasing backup interface [ 83.669147][ T8084] syz_tun (unregistering): left promiscuous mode [ 83.891354][ T4421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.958223][ T4421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.038385][ T4421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.075090][ T8099] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.086730][ T8099] syz.4.1010 (8099) used greatest stack depth: 8888 bytes left [ 84.095514][ T4421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.147456][ T4421] bridge_slave_1: left allmulticast mode [ 84.153154][ T4421] bridge_slave_1: left promiscuous mode [ 84.158872][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.166712][ T4421] bridge_slave_0: left allmulticast mode [ 84.172353][ T4421] bridge_slave_0: left promiscuous mode [ 84.177990][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.186566][ T4421] bridge_slave_1: left allmulticast mode [ 84.192281][ T4421] bridge_slave_1: left promiscuous mode [ 84.198091][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.206019][ T4421] bridge_slave_0: left allmulticast mode [ 84.211716][ T4421] bridge_slave_0: left promiscuous mode [ 84.217447][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.376739][ T4421] bond0 (unregistering): Released all slaves [ 84.385639][ T4421] bond0 (unregistering): left promiscuous mode [ 84.391819][ T4421] bond_slave_0: left promiscuous mode [ 84.397247][ T4421] bond_slave_1: left promiscuous mode [ 84.403517][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.414323][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.425402][ T4421] bond0 (unregistering): Released all slaves [ 84.433805][ T4421] bond1 (unregistering): Released all slaves [ 84.442561][ T4421] bond2 (unregistering): Released all slaves [ 84.596611][ T4421] dummy0: left promiscuous mode [ 84.603093][ T4421] hsr_slave_0: left promiscuous mode [ 84.608706][ T4421] hsr_slave_1: left promiscuous mode [ 84.614401][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.621835][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.629501][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.637008][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.646626][ T4421] veth1_macvtap: left promiscuous mode [ 84.652122][ T4421] veth0_macvtap: left promiscuous mode [ 84.657729][ T4421] veth1_vlan: left promiscuous mode [ 84.662942][ T4421] veth0_vlan: left promiscuous mode [ 84.765755][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 84.776959][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 85.380759][ T4421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.448118][ T4421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.498762][ T4421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.578505][ T4421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.661123][ T4421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.689029][ T4421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.747834][ T4421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.798317][ T4421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.880376][ T4421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.938644][ T4421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.988224][ T4421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.038154][ T4421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.098812][ T4421] bridge_slave_1: left allmulticast mode [ 86.104487][ T4421] bridge_slave_1: left promiscuous mode [ 86.110133][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.118258][ T4421] bridge_slave_0: left allmulticast mode [ 86.123975][ T4421] bridge_slave_0: left promiscuous mode [ 86.129744][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.137845][ T4421] bridge_slave_1: left allmulticast mode [ 86.143502][ T4421] bridge_slave_1: left promiscuous mode [ 86.149211][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.156943][ T4421] bridge_slave_0: left allmulticast mode [ 86.162605][ T4421] bridge_slave_0: left promiscuous mode [ 86.168410][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.178948][ T4421] bridge_slave_1: left allmulticast mode [ 86.184590][ T4421] bridge_slave_1: left promiscuous mode [ 86.190397][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.198522][ T4421] bridge_slave_0: left allmulticast mode [ 86.204161][ T4421] bridge_slave_0: left promiscuous mode [ 86.209865][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.307358][ T4421] ip6gretap0 (unregistering): left allmulticast mode [ 86.717496][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.727566][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.737584][ T4421] bond0 (unregistering): Released all slaves [ 86.746947][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.757430][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.767533][ T4421] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 86.777384][ T4421] bond0 (unregistering): Released all slaves [ 86.786776][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.796885][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.807588][ T4421] bond0 (unregistering): Released all slaves [ 86.858392][ T4421] tipc: Left network mode [ 86.948280][ T4421] hsr_slave_0: left promiscuous mode [ 86.953961][ T4421] hsr_slave_1: left promiscuous mode [ 86.959816][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.967282][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.974780][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.982374][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.991238][ T4421] hsr_slave_0: left promiscuous mode [ 86.996930][ T4421] hsr_slave_1: left promiscuous mode [ 87.002512][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.009953][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.017775][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.025225][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.034504][ T4421] hsr_slave_0: left promiscuous mode [ 87.040145][ T4421] hsr_slave_1: left promiscuous mode [ 87.045942][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.053334][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.060996][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.068410][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.079785][ T4421] veth1_macvtap: left promiscuous mode [ 87.085348][ T4421] veth0_macvtap: left promiscuous mode [ 87.090883][ T4421] veth1_vlan: left promiscuous mode [ 87.096162][ T4421] veth0_vlan: left promiscuous mode [ 87.101893][ T4421] veth1_macvtap: left promiscuous mode [ 87.107457][ T4421] veth0_macvtap: left promiscuous mode [ 87.113015][ T4421] veth1_vlan: left promiscuous mode [ 87.118264][ T4421] veth0_vlan: left promiscuous mode [ 87.124107][ T4421] veth1_macvtap: left promiscuous mode [ 87.129781][ T4421] veth0_macvtap: left promiscuous mode [ 87.135342][ T4421] veth1_vlan: left promiscuous mode [ 87.140597][ T4421] veth0_vlan: left promiscuous mode [ 87.304967][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 87.315547][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 87.380752][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 87.390798][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 87.452753][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 87.462938][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 88.186274][ T4421] IPVS: stop unused estimator thread 0...