last executing test programs: 4.053317871s ago: executing program 3 (id=922): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.971680213s ago: executing program 1 (id=923): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchownat(r1, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) 3.902061414s ago: executing program 1 (id=925): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.827039046s ago: executing program 1 (id=927): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.783906207s ago: executing program 1 (id=928): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000180)) 3.552701791s ago: executing program 1 (id=935): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x40, 0x4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.286878447s ago: executing program 3 (id=937): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) execveat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0) 3.10976691s ago: executing program 1 (id=940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x80, 0x1, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) shutdown(r0, 0x1) 3.10168548s ago: executing program 32 (id=940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x80, 0x1, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) shutdown(r0, 0x1) 2.413499553s ago: executing program 3 (id=956): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x5) rmdir(0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) 2.116753229s ago: executing program 3 (id=962): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) 2.05877754s ago: executing program 3 (id=964): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x9, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x24040880) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1.758153676s ago: executing program 3 (id=970): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0x0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 989.851181ms ago: executing program 4 (id=975): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @rand_addr=0x640100fe, 0x4e1f, 0x3, 'sed\x00', 0x2, 0x0, 0x33}, {@loopback, 0xce1c, 0x10000, 0x7, 0x80812f58, 0x7ff}}, 0x44) 969.516421ms ago: executing program 4 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x1, @ANYBLOB="ffffffff00"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 893.494393ms ago: executing program 4 (id=979): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 848.580354ms ago: executing program 4 (id=980): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file1\x00') readlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=""/93, 0x5d) 719.206316ms ago: executing program 4 (id=985): r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00"], 0x80}, 0x1, 0x7}, 0x0) 648.560307ms ago: executing program 4 (id=987): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) execveat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0) 648.010667ms ago: executing program 2 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff}) 619.632328ms ago: executing program 0 (id=988): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x20041000}, 0x48010) 556.605209ms ago: executing program 2 (id=989): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 514.4145ms ago: executing program 0 (id=990): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 410.050232ms ago: executing program 0 (id=991): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 301.403934ms ago: executing program 2 (id=992): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 273.371245ms ago: executing program 0 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r2, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/19, 0x13}], 0x1, 0x0, 0x1}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 221.058195ms ago: executing program 2 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 147.894267ms ago: executing program 5 (id=942): ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0x0, 0xee00) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) shmdt(r0) 121.571878ms ago: executing program 0 (id=995): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x40, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 97.016218ms ago: executing program 2 (id=997): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) 68.283978ms ago: executing program 5 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000640)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r3, 0x0, 0x0, 0x1}]) 11.729649ms ago: executing program 0 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200f2a7ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 0s ago: executing program 2 (id=1000): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 33.846862][ T29] audit: type=1400 audit(1758139054.060:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.848031][ T3293] cgroup: Unknown subsys name 'net' [ 33.869607][ T29] audit: type=1400 audit(1758139054.060:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.896999][ T29] audit: type=1400 audit(1758139054.090:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.011186][ T3293] cgroup: Unknown subsys name 'cpuset' [ 34.017571][ T3293] cgroup: Unknown subsys name 'rlimit' [ 34.109395][ T29] audit: type=1400 audit(1758139054.320:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.137805][ T29] audit: type=1400 audit(1758139054.320:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.158430][ T29] audit: type=1400 audit(1758139054.320:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.163650][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.179102][ T29] audit: type=1400 audit(1758139054.320:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.207955][ T29] audit: type=1400 audit(1758139054.320:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.219659][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.232805][ T29] audit: type=1400 audit(1758139054.320:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.232866][ T29] audit: type=1400 audit(1758139054.400:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.418462][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.485118][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.500562][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.538959][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.546090][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.553344][ T3303] bridge_slave_0: entered allmulticast mode [ 35.559830][ T3303] bridge_slave_0: entered promiscuous mode [ 35.566659][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.573826][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.581100][ T3303] bridge_slave_1: entered allmulticast mode [ 35.587706][ T3303] bridge_slave_1: entered promiscuous mode [ 35.619951][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.643702][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.672965][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.703253][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.724465][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.731628][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.738742][ T3311] bridge_slave_0: entered allmulticast mode [ 35.745458][ T3311] bridge_slave_0: entered promiscuous mode [ 35.755676][ T3303] team0: Port device team_slave_0 added [ 35.763819][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.770948][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.778039][ T3304] bridge_slave_0: entered allmulticast mode [ 35.784511][ T3304] bridge_slave_0: entered promiscuous mode [ 35.791091][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.798169][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.805325][ T3311] bridge_slave_1: entered allmulticast mode [ 35.811815][ T3311] bridge_slave_1: entered promiscuous mode [ 35.821833][ T3303] team0: Port device team_slave_1 added [ 35.830027][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.837089][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.844209][ T3304] bridge_slave_1: entered allmulticast mode [ 35.850748][ T3304] bridge_slave_1: entered promiscuous mode [ 35.905794][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.916015][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.928802][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.938157][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.945179][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.971155][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.981902][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.989131][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.996351][ T3310] bridge_slave_0: entered allmulticast mode [ 36.003016][ T3310] bridge_slave_0: entered promiscuous mode [ 36.010504][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.027133][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.034128][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.060082][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.070820][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.077901][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.085086][ T3310] bridge_slave_1: entered allmulticast mode [ 36.091377][ T3310] bridge_slave_1: entered promiscuous mode [ 36.115011][ T3311] team0: Port device team_slave_0 added [ 36.121826][ T3311] team0: Port device team_slave_1 added [ 36.142064][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.149185][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.156359][ T3309] bridge_slave_0: entered allmulticast mode [ 36.163057][ T3309] bridge_slave_0: entered promiscuous mode [ 36.182385][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.192294][ T3304] team0: Port device team_slave_0 added [ 36.198188][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.205439][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.212609][ T3309] bridge_slave_1: entered allmulticast mode [ 36.219046][ T3309] bridge_slave_1: entered promiscuous mode [ 36.237523][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.247316][ T3304] team0: Port device team_slave_1 added [ 36.267806][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.274867][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.300806][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.322641][ T3303] hsr_slave_0: entered promiscuous mode [ 36.328643][ T3303] hsr_slave_1: entered promiscuous mode [ 36.336120][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.351414][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.358360][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.384397][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.405905][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.415285][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.422268][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.448225][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.467777][ T3310] team0: Port device team_slave_0 added [ 36.483746][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.490760][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.516924][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.540184][ T3310] team0: Port device team_slave_1 added [ 36.554311][ T3309] team0: Port device team_slave_0 added [ 36.578097][ T3309] team0: Port device team_slave_1 added [ 36.608220][ T3304] hsr_slave_0: entered promiscuous mode [ 36.614350][ T3304] hsr_slave_1: entered promiscuous mode [ 36.620270][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.625995][ T3304] Cannot create hsr debugfs directory [ 36.634084][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.641142][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.667104][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.679875][ T3311] hsr_slave_0: entered promiscuous mode [ 36.685877][ T3311] hsr_slave_1: entered promiscuous mode [ 36.691833][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.697554][ T3311] Cannot create hsr debugfs directory [ 36.708204][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.715213][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.741219][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.757241][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.764261][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.790246][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.805642][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.812672][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.838599][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.884308][ T3310] hsr_slave_0: entered promiscuous mode [ 36.890537][ T3310] hsr_slave_1: entered promiscuous mode [ 36.896570][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.902338][ T3310] Cannot create hsr debugfs directory [ 36.948793][ T3309] hsr_slave_0: entered promiscuous mode [ 36.955000][ T3309] hsr_slave_1: entered promiscuous mode [ 36.960902][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.966633][ T3309] Cannot create hsr debugfs directory [ 37.085873][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.097508][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.108468][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.129086][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.164342][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.173343][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.190661][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.199842][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.222874][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.232996][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.242299][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.256900][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.298073][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.323556][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.332567][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.344262][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.353681][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.384874][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.396050][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.413983][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.423032][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.433238][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.440313][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.449397][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.456492][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.470606][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.481325][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.512737][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.523319][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.547545][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.554659][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.566059][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.583478][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.595200][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.602302][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.618673][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.635388][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.642554][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.653321][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.660430][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.681700][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.688820][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.699246][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.706383][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.747291][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.781150][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.805000][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.833305][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.869143][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.891449][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.898553][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.907765][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.914861][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.951331][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.978407][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.986603][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.022376][ T3303] veth0_vlan: entered promiscuous mode [ 38.044645][ T3303] veth1_vlan: entered promiscuous mode [ 38.101534][ T3304] veth0_vlan: entered promiscuous mode [ 38.118176][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.130823][ T3303] veth0_macvtap: entered promiscuous mode [ 38.142102][ T3304] veth1_vlan: entered promiscuous mode [ 38.157170][ T3303] veth1_macvtap: entered promiscuous mode [ 38.180381][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.203554][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.215395][ T3310] veth0_vlan: entered promiscuous mode [ 38.223438][ T3304] veth0_macvtap: entered promiscuous mode [ 38.233411][ T3304] veth1_macvtap: entered promiscuous mode [ 38.244465][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.259194][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.274450][ T3310] veth1_vlan: entered promiscuous mode [ 38.285355][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.298670][ T3309] veth0_vlan: entered promiscuous mode [ 38.321158][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.344944][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.354211][ T3309] veth1_vlan: entered promiscuous mode [ 38.368964][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.378692][ T3311] veth0_vlan: entered promiscuous mode [ 38.384610][ T3310] veth0_macvtap: entered promiscuous mode [ 38.396508][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.406493][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.417642][ T3310] veth1_macvtap: entered promiscuous mode [ 38.429011][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.438052][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.452896][ T3309] veth0_macvtap: entered promiscuous mode [ 38.467994][ T3311] veth1_vlan: entered promiscuous mode [ 38.468263][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.482144][ T3311] veth0_macvtap: entered promiscuous mode [ 38.497529][ T3309] veth1_macvtap: entered promiscuous mode [ 38.509139][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.517291][ T3311] veth1_macvtap: entered promiscuous mode [ 38.532248][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.565616][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.573811][ T3477] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.588694][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.598797][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.611812][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.616662][ T3476] loop1: detected capacity change from 0 to 512 [ 38.635677][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.649432][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.658254][ T3476] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2: missing EA_INODE flag [ 38.687771][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.707484][ T407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.726296][ T407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.731240][ T3476] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2: error while reading EA inode 11 err=-117 [ 38.749515][ T3476] EXT4-fs (loop1): 1 orphan inode deleted [ 38.756789][ T3476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.778342][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.789195][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814471][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.851067][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.861662][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.878430][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.908524][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.918844][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.938835][ C1] hrtimer: interrupt took 31011 ns [ 38.952402][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 38.952419][ T29] audit: type=1400 audit(1758139059.170:139): avc: denied { create } for pid=3494 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.004183][ T29] audit: type=1400 audit(1758139059.170:140): avc: denied { connect } for pid=3494 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.023736][ T29] audit: type=1400 audit(1758139059.170:141): avc: denied { ioctl } for pid=3494 comm="syz.4.5" path="socket:[3909]" dev="sockfs" ino=3909 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.048219][ T29] audit: type=1400 audit(1758139059.170:142): avc: denied { write } for pid=3494 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.076510][ T29] audit: type=1400 audit(1758139059.220:143): avc: denied { create } for pid=3493 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.095977][ T29] audit: type=1400 audit(1758139059.240:144): avc: denied { create } for pid=3493 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.115146][ T29] audit: type=1400 audit(1758139059.240:145): avc: denied { connect } for pid=3493 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.134386][ T29] audit: type=1400 audit(1758139059.240:146): avc: denied { ioctl } for pid=3493 comm="syz.1.8" path="socket:[3919]" dev="sockfs" ino=3919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.158734][ T29] audit: type=1400 audit(1758139059.240:147): avc: denied { write } for pid=3493 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.177819][ T29] audit: type=1400 audit(1758139059.280:148): avc: denied { write } for pid=3501 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.216586][ T3508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.250524][ T3508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.567822][ T3535] macvlan1: entered promiscuous mode [ 39.574358][ T3535] ipvlan0: entered promiscuous mode [ 39.580419][ T3535] ipvlan0: left promiscuous mode [ 39.585607][ T3535] macvlan1: left promiscuous mode [ 39.655675][ T3542] loop2: detected capacity change from 0 to 512 [ 39.663491][ T3542] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.676656][ T3542] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.688295][ T3542] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.29: invalid indirect mapped block 4294967295 (level 0) [ 39.703516][ T3542] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.29: invalid indirect mapped block 4294967295 (level 1) [ 39.727498][ T3542] EXT4-fs (loop2): 1 orphan inode deleted [ 39.733351][ T3542] EXT4-fs (loop2): 1 truncate cleaned up [ 39.741878][ T3542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.809976][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.890948][ T3560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.31'. [ 39.900176][ T3560] unsupported nlmsg_type 40 [ 40.280642][ T3578] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.39'. [ 40.307180][ T3580] loop2: detected capacity change from 0 to 1024 [ 40.315898][ T3580] ======================================================= [ 40.315898][ T3580] WARNING: The mand mount option has been deprecated and [ 40.315898][ T3580] and is ignored by this kernel. Remove the mand [ 40.315898][ T3580] option from the mount to silence this warning. [ 40.315898][ T3580] ======================================================= [ 40.363246][ T3580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.375453][ T3580] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.407786][ T3580] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.42: bg 0: block 393: padding at end of block bitmap is not set [ 40.425009][ T3580] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 40.437661][ T3580] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.437661][ T3580] [ 40.463436][ T3580] syz.2.42 (3580) used greatest stack depth: 10344 bytes left [ 40.479732][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.495722][ T3593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 40.745714][ T3606] loop2: detected capacity change from 0 to 1024 [ 40.754855][ T3606] EXT4-fs: Ignoring removed orlov option [ 40.773299][ T3606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.901558][ T3611] netlink: 'syz.1.54': attribute type 27 has an invalid length. [ 40.934889][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.942176][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.988755][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.999270][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.072795][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.144169][ T3613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.162343][ T3613] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.175994][ T3613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.194380][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.211534][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.238542][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.269365][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.295684][ T3625] loop2: detected capacity change from 0 to 764 [ 41.305329][ T3627] syz.1.60 uses obsolete (PF_INET,SOCK_PACKET) [ 41.471454][ T3637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3637 comm=syz.3.62 [ 41.517248][ T3639] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 41.572412][ T3643] uprobe: syz.4.65:3643 failed to unregister, leaking uprobe [ 41.636712][ T3645] loop1: detected capacity change from 0 to 4096 [ 41.663847][ T3645] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.688133][ T3645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.727338][ T3657] pim6reg1: entered promiscuous mode [ 41.732846][ T3657] pim6reg1: entered allmulticast mode [ 41.757232][ T3645] capability: warning: `syz.1.66' uses deprecated v2 capabilities in a way that may be insecure [ 41.836361][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.923199][ T3667] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.245877][ T3704] loop2: detected capacity change from 0 to 512 [ 42.257294][ T3704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.272658][ T3704] EXT4-fs (loop2): 1 truncate cleaned up [ 42.278855][ T3704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.315006][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.393286][ T3713] loop2: detected capacity change from 0 to 164 [ 42.415813][ T3713] Unable to read rock-ridge attributes [ 42.426141][ T3715] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 42.437962][ T3713] Unable to read rock-ridge attributes [ 42.438090][ T3715] team0: Port device dummy0 added [ 42.446306][ T3713] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 42.457514][ T3715] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 42.466847][ T3715] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.479585][ T3715] team0: Failed to send options change via netlink (err -105) [ 42.487534][ T3715] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.498665][ T3715] team0: Port device dummy0 removed [ 42.538519][ T3715] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.573414][ T3715] syz.0.95 (3715) used greatest stack depth: 9872 bytes left [ 42.596520][ T3719] loop2: detected capacity change from 0 to 512 [ 42.623929][ T3719] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.2.96: corrupted xattr block 95: invalid header [ 42.639383][ T3719] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 42.654230][ T3719] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.96: bg 0: block 7: invalid block bitmap [ 42.666889][ T3719] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 42.687490][ T3719] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #11: comm syz.2.96: corrupted xattr block 95: invalid header [ 42.701254][ T3719] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 42.712101][ T3719] EXT4-fs (loop2): 1 orphan inode deleted [ 42.718720][ T3719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.027379][ T3758] loop0: detected capacity change from 0 to 512 [ 43.034592][ T3758] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 43.051481][ T3758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 43.059771][ T3758] System zones: 1-12 [ 43.065774][ T3758] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.113: corrupted in-inode xattr: e_value size too large [ 43.081522][ T3758] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.113: couldn't read orphan inode 15 (err -117) [ 43.100994][ T3758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.126028][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.199901][ T3767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'. [ 43.383862][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.583809][ T3795] bridge: RTM_NEWNEIGH with invalid ether address [ 43.815012][ T3807] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.847696][ T3807] wireguard0: entered promiscuous mode [ 43.853294][ T3807] wireguard0: entered allmulticast mode [ 44.063361][ T3831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.145'. [ 44.092503][ T3835] netlink: 'syz.3.146': attribute type 10 has an invalid length. [ 44.100560][ T3835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.146'. [ 44.124617][ T3835] team0: Port device geneve1 added [ 44.159965][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 44.166231][ T29] audit: type=1400 audit(1758139064.370:372): avc: denied { create } for pid=3839 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.190332][ T3838] Driver unsupported XDP return value 0 on prog (id 137) dev N/A, expect packet loss! [ 44.232318][ T29] audit: type=1400 audit(1758139064.400:373): avc: denied { write } for pid=3839 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.281087][ T29] audit: type=1400 audit(1758139064.480:374): avc: denied { mounton } for pid=3847 comm="syz.4.153" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 44.304824][ T29] audit: type=1400 audit(1758139064.490:375): avc: denied { write } for pid=3847 comm="syz.4.153" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.408837][ T3858] vlan2: entered allmulticast mode [ 44.419696][ T3848] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.153' sets config #0 [ 44.439682][ T3858] dummy0: entered allmulticast mode [ 44.447246][ T3859] netlink: 'syz.2.155': attribute type 21 has an invalid length. [ 44.457361][ T3859] netlink: 156 bytes leftover after parsing attributes in process `syz.2.155'. [ 44.466564][ T3859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 44.469959][ T29] audit: type=1326 audit(1758139064.560:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 44.498975][ T29] audit: type=1326 audit(1758139064.560:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 44.522313][ T29] audit: type=1326 audit(1758139064.560:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 44.545643][ T29] audit: type=1326 audit(1758139064.560:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 44.568922][ T29] audit: type=1326 audit(1758139064.560:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 44.631941][ T3858] Zero length message leads to an empty skb [ 44.667727][ T3871] netlink: 'syz.2.163': attribute type 21 has an invalid length. [ 44.690790][ T3871] netlink: 132 bytes leftover after parsing attributes in process `syz.2.163'. [ 44.699777][ T3871] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 44.780279][ T29] audit: type=1400 audit(1758139064.860:381): avc: denied { ioctl } for pid=3865 comm="+}[@" path="socket:[5718]" dev="sockfs" ino=5718 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.862991][ T3882] process 'syz.0.168' launched './file0' with NULL argv: empty string added [ 44.953462][ T3884] loop0: detected capacity change from 0 to 1024 [ 44.971120][ T3884] EXT4-fs: Ignoring removed orlov option [ 44.995982][ T3880] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.022940][ T3884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.047344][ T3884] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.065813][ T3888] loop1: detected capacity change from 0 to 128 [ 45.109887][ T3884] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.169: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.162366][ T3884] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.169: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 45.198777][ T3888] syz.1.170: attempt to access beyond end of device [ 45.198777][ T3888] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 45.249477][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.272965][ T3880] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.469607][ T3880] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.689200][ T3880] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.750795][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.758033][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.823893][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.834790][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.899521][ T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.966460][ T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.012553][ T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.026578][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.048089][ T3920] veth0_to_team: entered promiscuous mode [ 46.060422][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.126551][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.143687][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.171847][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.195921][ T3930] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 46.238314][ T3930] bond1: entered promiscuous mode [ 46.303213][ T3938] loop4: detected capacity change from 0 to 512 [ 46.305781][ T3930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.330386][ T3930] netlink: 3 bytes leftover after parsing attributes in process `syz.2.185'. [ 46.371176][ T3938] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.390546][ T3936] netlink: 3 bytes leftover after parsing attributes in process `syz.2.185'. [ 46.402360][ T3930] batadv1: entered promiscuous mode [ 46.406349][ T3943] loop3: detected capacity change from 0 to 764 [ 46.407606][ T3930] batadv1: entered allmulticast mode [ 46.439229][ T3938] EXT4-fs (loop4): 1 truncate cleaned up [ 46.439837][ T3930] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 46.453420][ T3930] bond1: (slave batadv1): making interface the new active one [ 46.462123][ T3930] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 46.522026][ T3936] batadv2: entered promiscuous mode [ 46.524589][ T3938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.527310][ T3936] batadv2: entered allmulticast mode [ 46.583077][ T3936] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 46.613932][ T3936] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 46.673897][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.701302][ T3964] uprobe: syz.2.197:3964 failed to unregister, leaking uprobe [ 46.735573][ T3965] veth0_to_team: entered promiscuous mode [ 46.801353][ T3973] wireguard0: entered promiscuous mode [ 46.806879][ T3973] wireguard0: entered allmulticast mode [ 47.007156][ T3991] loop3: detected capacity change from 0 to 512 [ 47.044027][ T3991] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.083887][ T3991] EXT4-fs (loop3): 1 truncate cleaned up [ 47.109940][ T3991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.164497][ T4002] uprobe: syz.1.211:4002 failed to unregister, leaking uprobe [ 47.267508][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.322373][ T4007] loop1: detected capacity change from 0 to 512 [ 47.339153][ T4007] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.354953][ T4007] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.213: bad orphan inode 13 [ 47.394456][ T4007] ext4_test_bit(bit=12, block=18) = 1 [ 47.399934][ T4007] is_bad_inode(inode)=0 [ 47.404166][ T4007] NEXT_ORPHAN(inode)=2130706432 [ 47.409044][ T4007] max_ino=32 [ 47.412331][ T4007] i_nlink=1 [ 47.435248][ T4007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.477391][ T4007] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 47.512274][ T4007] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.213: bg 0: block 248: padding at end of block bitmap is not set [ 47.533106][ T4007] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.213: Failed to acquire dquot type 1 [ 47.561660][ T4007] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.612971][ T4007] syz.1.213 (4007) used greatest stack depth: 9248 bytes left [ 47.623664][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.835023][ T4024] wireguard0: entered promiscuous mode [ 47.840659][ T4024] wireguard0: entered allmulticast mode [ 47.933590][ T4035] loop1: detected capacity change from 0 to 2048 [ 47.978543][ T4035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.997932][ T4035] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.082534][ T4046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4046 comm=syz.3.226 [ 48.097693][ T4044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'. [ 48.112835][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.242873][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 48.250872][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 48.258887][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 48.269000][ T36] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 48.379474][ T4059] fido_id[4059]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.577312][ T4073] loop0: detected capacity change from 0 to 512 [ 48.639457][ T4073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.701765][ T4073] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.867844][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.219962][ T4092] wireguard0: entered promiscuous mode [ 49.225672][ T4092] wireguard0: entered allmulticast mode [ 49.309126][ T4087] loop0: detected capacity change from 0 to 8192 [ 49.380869][ T4087] loop0: p1 p2 < > p3 p4 < p5 > [ 49.385876][ T4087] loop0: partition table partially beyond EOD, truncated [ 49.413252][ T4087] loop0: p1 size 100663296 extends beyond EOD, truncated [ 49.421895][ T4087] loop0: p2 start 591104 is beyond EOD, truncated [ 49.428388][ T4087] loop0: p3 start 33572980 is beyond EOD, truncated [ 49.436158][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 49.445050][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 49.457681][ T4087] loop0: p5 size 100663296 extends beyond EOD, truncated [ 49.719003][ T4118] loop0: detected capacity change from 0 to 128 [ 49.729389][ T4118] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.743794][ T4118] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.758870][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 49.758884][ T29] audit: type=1400 audit(1758139069.970:447): avc: denied { append } for pid=4115 comm="syz.0.246" path="/60/mnt/cpuset.memory_pressure_enabled" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.801544][ T29] audit: type=1400 audit(1758139070.020:448): avc: denied { ioctl } for pid=4115 comm="syz.0.246" path="/60/mnt/cpuset.memory_pressure_enabled" dev="loop0" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.929471][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.135434][ T29] audit: type=1400 audit(1758139070.310:449): avc: denied { name_bind } for pid=4138 comm="syz.2.258" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 50.156589][ T29] audit: type=1400 audit(1758139070.330:450): avc: denied { write } for pid=4136 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.404658][ T4176] 9pnet: p9_errstr2errno: server reported unknown error [ 50.587588][ T4190] loop2: detected capacity change from 0 to 512 [ 50.696215][ T4198] loop4: detected capacity change from 0 to 1024 [ 50.823209][ T4190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.855642][ T4190] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.921690][ T4206] loop1: detected capacity change from 0 to 128 [ 50.940138][ T4206] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.975378][ T4206] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.984732][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.018776][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.045043][ T4207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.100103][ T29] audit: type=1400 audit(1758139071.090:451): avc: denied { create } for pid=4183 comm="syz.2.270" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.120125][ T29] audit: type=1400 audit(1758139071.090:452): avc: denied { write open } for pid=4183 comm="syz.2.270" path="/59/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.143144][ T29] audit: type=1326 audit(1758139071.130:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 51.166477][ T29] audit: type=1326 audit(1758139071.130:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 51.189792][ T29] audit: type=1326 audit(1758139071.130:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 51.213130][ T29] audit: type=1326 audit(1758139071.130:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 51.237893][ T4198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.318721][ T4198] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.274: Allocating blocks 449-513 which overlap fs metadata [ 51.351740][ T4222] 9pnet: p9_errstr2errno: server reported unknown error [ 51.377846][ T4198] SELinux: Context @ is not valid (left unmapped). [ 51.409338][ T4198] EXT4-fs (loop4): pa ffff888105b32070: logic 48, phys. 177, len 21 [ 51.417431][ T4198] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 51.488352][ T4238] loop3: detected capacity change from 0 to 128 [ 51.554186][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.609547][ T4238] syz.3.289: attempt to access beyond end of device [ 51.609547][ T4238] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 51.869767][ T4263] netlink: zone id is out of range [ 51.881668][ T4263] netlink: zone id is out of range [ 51.886906][ T4263] netlink: zone id is out of range [ 51.892136][ T4263] netlink: zone id is out of range [ 51.917883][ T4263] netlink: zone id is out of range [ 51.927905][ T4263] netlink: zone id is out of range [ 51.939971][ T4263] netlink: zone id is out of range [ 51.955383][ T4263] netlink: zone id is out of range [ 51.961214][ T4261] loop3: detected capacity change from 0 to 8192 [ 51.965622][ T4263] netlink: zone id is out of range [ 51.980232][ T4263] netlink: zone id is out of range [ 52.048350][ T4272] loop4: detected capacity change from 0 to 1024 [ 52.055611][ T4272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.080471][ T4272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.094799][ T4272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.277872][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.324400][ T4275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.306'. [ 52.335069][ T4275] netem: change failed [ 52.403642][ T4281] loop3: detected capacity change from 0 to 1024 [ 52.431390][ T4281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.498647][ T4281] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.318: Allocating blocks 449-513 which overlap fs metadata [ 52.560760][ T4281] EXT4-fs (loop3): pa ffff888107674070: logic 48, phys. 177, len 21 [ 52.568806][ T4281] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 52.595865][ T4297] loop2: detected capacity change from 0 to 128 [ 52.622165][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.719441][ T4292] syz.2.312: attempt to access beyond end of device [ 52.719441][ T4292] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 52.857908][ T4307] loop1: detected capacity change from 0 to 8192 [ 52.878258][ T4309] netlink: 5 bytes leftover after parsing attributes in process `syz.2.320'. [ 52.888711][ T4309] 0ªX¹¦D: renamed from gretap0 [ 52.914350][ T4313] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 52.936146][ T4309] 0ªX¹¦D: entered allmulticast mode [ 52.956059][ T4313] bond1: entered promiscuous mode [ 52.965685][ T4313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.980823][ T4313] netlink: 3 bytes leftover after parsing attributes in process `syz.0.322'. [ 53.012940][ T4313] batadv1: entered promiscuous mode [ 53.018257][ T4313] batadv1: entered allmulticast mode [ 53.026536][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 53.039441][ T4313] bond1: (slave batadv1): making interface the new active one [ 53.040396][ T4322] netlink: 3 bytes leftover after parsing attributes in process `syz.0.322'. [ 53.057427][ T4313] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 53.081622][ T4322] batadv2: entered promiscuous mode [ 53.086885][ T4322] batadv2: entered allmulticast mode [ 53.098031][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 53.126798][ T4322] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 53.311851][ T4342] loop1: detected capacity change from 0 to 512 [ 53.324139][ T4342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.338502][ T4342] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.445829][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.496944][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 53.687530][ T4367] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 53.720934][ T4367] bond1: entered promiscuous mode [ 53.727560][ T4367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.744631][ T4369] netlink: 3 bytes leftover after parsing attributes in process `syz.1.341'. [ 53.749683][ T4365] loop0: detected capacity change from 0 to 8192 [ 53.802655][ T4367] netlink: 3 bytes leftover after parsing attributes in process `syz.1.341'. [ 53.858348][ T4369] batadv1: entered promiscuous mode [ 53.863697][ T4369] batadv1: entered allmulticast mode [ 53.931112][ T4369] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 53.939564][ T4369] bond1: (slave batadv1): making interface the new active one [ 53.956102][ T4369] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 54.059197][ T4367] batadv2: entered promiscuous mode [ 54.064491][ T4367] batadv2: entered allmulticast mode [ 54.080420][ T4367] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 54.094511][ T4374] loop4: detected capacity change from 0 to 1024 [ 54.111658][ T4367] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 54.130416][ T4374] EXT4-fs: Ignoring removed orlov option [ 54.157120][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.213113][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 54.263234][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.373538][ T4393] netem: change failed [ 54.489891][ T4408] __nla_validate_parse: 1 callbacks suppressed [ 54.489910][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 54.507984][ T4408] IPVS: Error joining to the multicast group [ 54.526245][ T4402] loop4: detected capacity change from 0 to 8192 [ 55.120170][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 55.120186][ T29] audit: type=1326 audit(1758139075.330:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 55.149666][ T29] audit: type=1326 audit(1758139075.330:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbdcc3dd417 code=0x7ffc0000 [ 55.172931][ T29] audit: type=1326 audit(1758139075.330:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 55.248193][ T4417] loop4: detected capacity change from 0 to 128 [ 55.269193][ T4413] loop3: detected capacity change from 0 to 512 [ 55.346757][ T4413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.400777][ T4413] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.543134][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.591085][ T4414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.630601][ T4424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 55.860597][ T29] audit: type=1400 audit(1758139076.070:620): avc: denied { append } for pid=4430 comm="syz.1.365" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.884165][ T29] audit: type=1400 audit(1758139076.070:621): avc: denied { open } for pid=4430 comm="syz.1.365" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.914315][ T4414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.009772][ T4414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.057281][ T29] audit: type=1400 audit(1758139076.270:622): avc: denied { connect } for pid=4438 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.133064][ T4414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.221026][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.276721][ T29] audit: type=1400 audit(1758139076.490:623): avc: denied { read } for pid=4445 comm="syz.4.373" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.302043][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.316307][ T4442] loop3: detected capacity change from 0 to 8192 [ 56.317428][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.347519][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.361208][ T29] audit: type=1400 audit(1758139076.490:624): avc: denied { open } for pid=4445 comm="syz.4.373" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.384357][ T29] audit: type=1400 audit(1758139076.490:625): avc: denied { ioctl } for pid=4445 comm="syz.4.373" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.408843][ T29] audit: type=1400 audit(1758139076.560:626): avc: denied { write } for pid=4445 comm="syz.4.373" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.443096][ T4449] loop0: detected capacity change from 0 to 2048 [ 56.497459][ T3498] Alternate GPT is invalid, using primary GPT. [ 56.503907][ T3498] loop0: p1 p2 p3 [ 56.526623][ T4449] Alternate GPT is invalid, using primary GPT. [ 56.532954][ T4449] loop0: p1 p2 p3 [ 56.675195][ T4463] netlink: 3 bytes leftover after parsing attributes in process `syz.3.380'. [ 56.713424][ T4463] batadv1: entered promiscuous mode [ 56.718699][ T4463] batadv1: entered allmulticast mode [ 57.193024][ T4500] loop3: detected capacity change from 0 to 128 [ 57.239762][ T4500] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.295397][ T4500] syz.3.396: attempt to access beyond end of device [ 57.295397][ T4500] loop3: rw=0, sector=97, nr_sectors = 944 limit=128 [ 57.327785][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.466213][ T4514] loop1: detected capacity change from 0 to 128 [ 57.522833][ T4519] loop1: detected capacity change from 0 to 1024 [ 57.537134][ T4519] EXT4-fs: Ignoring removed bh option [ 57.580322][ T4519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.676073][ T4519] bond1: left promiscuous mode [ 57.707416][ T4519] batadv1: left promiscuous mode [ 57.712446][ T4519] batadv1: left allmulticast mode [ 57.735260][ T4519] batadv2: left promiscuous mode [ 57.740272][ T4519] batadv2: left allmulticast mode [ 57.800188][ T4544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.409'. [ 57.827024][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.888480][ T4548] netlink: 'syz.1.410': attribute type 30 has an invalid length. [ 58.269456][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 58.381955][ T4576] netlink: 14 bytes leftover after parsing attributes in process `syz.2.423'. [ 58.397425][ T4576] hsr_slave_0: left promiscuous mode [ 58.406894][ T4576] hsr_slave_1: left promiscuous mode [ 58.597272][ T4594] loop3: detected capacity change from 0 to 1024 [ 58.604734][ T4594] EXT4-fs: Ignoring removed bh option [ 58.621753][ T4594] EXT4-fs: inline encryption not supported [ 58.629676][ T4594] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.646760][ T4596] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 58.661743][ T4596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.672817][ T4594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 58.686364][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 58.691117][ T4594] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.431: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.713187][ T4596] bond2 (unregistering): Released all slaves [ 58.727790][ T4594] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.431: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.742405][ T4594] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.431: Failed to acquire dquot type 0 [ 58.753955][ T4594] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 58.763576][ T4594] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.431: mark_inode_dirty error [ 58.775075][ T4594] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 58.785380][ T4594] EXT4-fs (loop3): 1 orphan inode deleted [ 58.791614][ T4594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.804271][ T51] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.830566][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 58.914747][ T4607] bridge_slave_1: left allmulticast mode [ 58.920640][ T4607] bridge_slave_1: left promiscuous mode [ 58.926425][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.934581][ T4607] bridge_slave_0: left allmulticast mode [ 58.940276][ T4607] bridge_slave_0: left promiscuous mode [ 58.946049][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.954505][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.967428][ T3303] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.980666][ T3303] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 58.991157][ T3303] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 59.056140][ T4609] ip6gre1: entered allmulticast mode [ 59.302494][ T4635] loop2: detected capacity change from 0 to 512 [ 59.334476][ T4635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.334558][ T4635] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.366659][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 59.375672][ T4635] netlink: 196 bytes leftover after parsing attributes in process `syz.2.449'. [ 59.385185][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 59.441349][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.452488][ T4647] team0: No ports can be present during mode change [ 60.065674][ T4684] __nla_validate_parse: 2 callbacks suppressed [ 60.065690][ T4684] netlink: 272 bytes leftover after parsing attributes in process `syz.1.468'. [ 60.111421][ T4690] pimreg: entered allmulticast mode [ 60.118358][ T4690] pimreg: left allmulticast mode [ 60.138333][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 60.138373][ T29] audit: type=1326 audit(1758139080.350:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.168870][ T29] audit: type=1326 audit(1758139080.350:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.227661][ T29] audit: type=1326 audit(1758139080.440:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.251203][ T29] audit: type=1326 audit(1758139080.440:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.283025][ T29] audit: type=1326 audit(1758139080.470:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.306437][ T29] audit: type=1326 audit(1758139080.470:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.321601][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.474'. [ 60.330079][ T29] audit: type=1326 audit(1758139080.470:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.362043][ T29] audit: type=1326 audit(1758139080.470:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.385408][ T29] audit: type=1326 audit(1758139080.470:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.408734][ T29] audit: type=1326 audit(1758139080.470:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe222eceba9 code=0x7ffc0000 [ 60.408842][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.478673][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.499601][ T4698] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.596356][ T4714] netlink: 96 bytes leftover after parsing attributes in process `syz.2.481'. [ 60.605555][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.622982][ T4712] loop1: detected capacity change from 0 to 1024 [ 60.640370][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 60.683853][ T4712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.708977][ T4712] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.480: Allocating blocks 385-513 which overlap fs metadata [ 60.727815][ T4712] EXT4-fs (loop1): pa ffff888107674000: logic 16, phys. 129, len 24 [ 60.735904][ T4712] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 60.775391][ T4724] loop2: detected capacity change from 0 to 256 [ 60.864737][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.988957][ T4740] loop1: detected capacity change from 0 to 164 [ 61.005657][ T4740] syz.1.493: attempt to access beyond end of device [ 61.005657][ T4740] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 61.019840][ T4740] syz.1.493: attempt to access beyond end of device [ 61.019840][ T4740] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 61.178704][ T4753] net_ratelimit: 2 callbacks suppressed [ 61.178790][ T4753] netlink: zone id is out of range [ 61.193277][ T4753] netlink: zone id is out of range [ 61.198685][ T4753] netlink: zone id is out of range [ 61.203896][ T4753] netlink: zone id is out of range [ 61.209548][ T4753] netlink: zone id is out of range [ 61.218095][ T4753] netlink: zone id is out of range [ 61.223727][ T4753] netlink: zone id is out of range [ 61.235345][ T4753] netlink: zone id is out of range [ 61.240694][ T4753] netlink: zone id is out of range [ 61.246107][ T4753] netlink: zone id is out of range [ 61.298841][ T4759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.421977][ T4765] tipc: Started in network mode [ 61.427047][ T4765] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 61.434415][ T4765] tipc: Enabled bearer , priority 0 [ 61.606989][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 61.692018][ T4779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'. [ 62.003905][ T4698] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.014365][ T4698] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.097389][ T4803] loop4: detected capacity change from 0 to 512 [ 62.106878][ T4698] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.117285][ T4698] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.128109][ T4803] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.141678][ T4803] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.522: iget: bad extended attribute block 1 [ 62.155917][ T4803] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.522: couldn't read orphan inode 15 (err -117) [ 62.169863][ T4803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 62.197949][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.214200][ T4698] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.224587][ T4698] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.328521][ T51] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.336847][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.374188][ T51] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.382566][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.403245][ T51] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.411613][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.423289][ T51] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.431622][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.550049][ T4537] tipc: Node number set to 11578026 [ 62.569565][ T4827] tipc: Enabled bearer , priority 0 [ 62.591607][ T4827] tipc: Disabling bearer [ 62.773458][ T4850] netlink: 44 bytes leftover after parsing attributes in process `syz.3.543'. [ 62.879356][ T4861] loop0: detected capacity change from 0 to 1024 [ 62.933919][ T4861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.949700][ T4861] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 62.971232][ T4857] syzkaller0: entered promiscuous mode [ 62.976817][ T4857] syzkaller0: entered allmulticast mode [ 63.019308][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.223047][ T4893] netlink: 'syz.4.559': attribute type 4 has an invalid length. [ 63.644942][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 63.764157][ T4948] syzkaller0: refused to change device tx_queue_len [ 63.877794][ T4962] netlink: 256 bytes leftover after parsing attributes in process `syz.0.567'. [ 64.055245][ T4985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4985 comm=syz.2.571 [ 64.072868][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 64.246563][ T5023] netlink: 'syz.4.576': attribute type 13 has an invalid length. [ 64.340808][ T5023] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.348090][ T5023] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.478406][ T5023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.513054][ T5023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.597650][ T407] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.606249][ T407] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.617513][ T407] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.626045][ T407] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.144368][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 65.144388][ T29] audit: type=1326 audit(1758139085.360:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d86595b67 code=0x7ffc0000 [ 65.202754][ T29] audit: type=1326 audit(1758139085.360:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d8653ada9 code=0x7ffc0000 [ 65.225659][ T29] audit: type=1326 audit(1758139085.360:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3d8659eba9 code=0x7ffc0000 [ 65.248655][ T29] audit: type=1326 audit(1758139085.370:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d86595b67 code=0x7ffc0000 [ 65.271643][ T29] audit: type=1326 audit(1758139085.370:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d8653ada9 code=0x7ffc0000 [ 65.294603][ T29] audit: type=1326 audit(1758139085.370:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3d8659eba9 code=0x7ffc0000 [ 65.317633][ T29] audit: type=1326 audit(1758139085.390:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d86595b67 code=0x7ffc0000 [ 65.340475][ T29] audit: type=1326 audit(1758139085.390:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d8653ada9 code=0x7ffc0000 [ 65.363348][ T29] audit: type=1326 audit(1758139085.390:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3d8659eba9 code=0x7ffc0000 [ 65.386268][ T29] audit: type=1326 audit(1758139085.400:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d86595b67 code=0x7ffc0000 [ 65.468143][ T5095] __nla_validate_parse: 1 callbacks suppressed [ 65.468166][ T5095] netlink: 7 bytes leftover after parsing attributes in process `syz.2.606'. [ 65.498541][ T5095] netlink: 7 bytes leftover after parsing attributes in process `syz.2.606'. [ 65.608315][ T5104] loop2: detected capacity change from 0 to 2048 [ 65.650740][ T3296] loop2: p1 < > p4 [ 65.655383][ T3296] loop2: p4 size 8388608 extends beyond EOD, truncated [ 65.667897][ T5104] loop2: p1 < > p4 [ 65.672334][ T5104] loop2: p4 size 8388608 extends beyond EOD, truncated [ 65.735228][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 65.746722][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 65.766974][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 65.767093][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 65.880967][ T5117] pim6reg1: entered promiscuous mode [ 65.886316][ T5117] pim6reg1: entered allmulticast mode [ 66.132954][ T5136] tipc: Failed to remove unknown binding: 66,1,1/0:649213895/649213897 [ 66.150277][ T5136] tipc: Failed to remove unknown binding: 66,1,1/0:649213895/649213897 [ 66.357649][ T5173] netlink: 'syz.4.634': attribute type 5 has an invalid length. [ 66.372147][ T5174] netlink: 3 bytes leftover after parsing attributes in process `syz.2.635'. [ 66.389883][ T5174] batadv3: entered promiscuous mode [ 66.395189][ T5174] batadv3: entered allmulticast mode [ 66.507621][ T5198] loop0: detected capacity change from 0 to 128 [ 66.518020][ T5198] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.590171][ T5198] syz.0.640: attempt to access beyond end of device [ 66.590171][ T5198] loop0: rw=0, sector=97, nr_sectors = 944 limit=128 [ 66.628836][ T3422] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 66.920031][ T5260] loop3: detected capacity change from 0 to 512 [ 66.949631][ T5260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.982514][ T5260] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.027030][ T5260] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.651: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 67.097613][ T5260] EXT4-fs (loop3): Remounting filesystem read-only [ 67.107158][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 67.167953][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.206504][ T5308] : renamed from bond0 (while UP) [ 67.415945][ T5334] bridge: RTM_NEWNEIGH with invalid ether address [ 67.510308][ T5344] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 67.551235][ T5344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.583279][ T5344] macvlan2: entered promiscuous mode [ 67.588645][ T5344] macvlan2: entered allmulticast mode [ 67.595333][ T5344] bond2: entered promiscuous mode [ 67.600879][ T5344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.609305][ T5344] bond2: left promiscuous mode [ 67.752612][ T5362] wg2: entered promiscuous mode [ 67.757545][ T5362] wg2: entered allmulticast mode [ 67.963698][ T5379] loop3: detected capacity change from 0 to 8192 [ 67.997889][ T5386] loop0: detected capacity change from 0 to 1024 [ 68.024352][ T5386] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.694: Failed to acquire dquot type 0 [ 68.043959][ T5388] loop4: detected capacity change from 0 to 4096 [ 68.047800][ T5386] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 68.067654][ T5386] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.694: corrupted inode contents [ 68.083324][ T5386] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.694: mark_inode_dirty error [ 68.105426][ T5386] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.694: corrupted inode contents [ 68.113670][ T5388] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.128599][ T5386] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.694: mark_inode_dirty error [ 68.146182][ T5386] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.694: corrupted inode contents [ 68.159754][ T5388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.173369][ T5386] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 68.199098][ T5386] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.694: corrupted inode contents [ 68.216738][ T5386] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.694: mark_inode_dirty error [ 68.241319][ T5386] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 68.261595][ T5386] EXT4-fs (loop0): 1 truncate cleaned up [ 68.271469][ T5386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.296384][ T5402] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5402 comm=syz.3.700 [ 68.326121][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.372125][ T5405] futex_wake_op: syz.3.702 tries to shift op by -1; fix this program [ 68.381821][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.596082][ T5423] ip6gre2: entered allmulticast mode [ 68.606902][ T5411] loop2: detected capacity change from 0 to 8192 [ 68.800386][ T5415] futex_wake_op: syz.0.707 tries to shift op by 144; fix this program [ 68.904511][ T5451] loop3: detected capacity change from 0 to 512 [ 68.943377][ T5451] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 68.965833][ T5451] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.990867][ T5451] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.721: Block bitmap for bg 0 marked uninitialized [ 69.017913][ T5451] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 69.064141][ T5451] EXT4-fs (loop3): 1 orphan inode deleted [ 69.077053][ T5451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.194065][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.340372][ T5478] syz.4.734 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.436360][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 69.475524][ T5493] netlink: 'syz.1.742': attribute type 27 has an invalid length. [ 69.490135][ T5493] wg2: left promiscuous mode [ 69.494769][ T5493] wg2: left allmulticast mode [ 69.563047][ T5493] syz_tun: entered allmulticast mode [ 69.621954][ T5492] syz_tun: left allmulticast mode [ 69.640763][ T5507] loop2: detected capacity change from 0 to 1024 [ 69.679767][ T5507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.743633][ T5513] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.758679][ T5513] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 69.779746][ T5513] netlink: 'syz.4.749': attribute type 12 has an invalid length. [ 69.787590][ T5513] netlink: 172 bytes leftover after parsing attributes in process `syz.4.749'. [ 70.146438][ T5541] netlink: 96 bytes leftover after parsing attributes in process `syz.1.758'. [ 70.154018][ T5542] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 70.169920][ T5542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.186537][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 70.208704][ T5542] bond0 (unregistering): Released all slaves [ 70.210825][ T5507] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.746: Allocating blocks 1-17 which overlap fs metadata [ 70.256320][ T5518] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.746: Allocating blocks 1-17 which overlap fs metadata [ 70.366974][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.483707][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 70.483747][ T29] audit: type=1400 audit(70.469:1548): avc: denied { mounton } for pid=5558 comm="syz.1.768" path="/proc/323/task" dev="proc" ino=12494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 70.717570][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 70.757729][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 70.807884][ T29] audit: type=1400 audit(70.789:1549): avc: denied { accept } for pid=5585 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 70.831633][ T5584] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.854936][ T5586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.781'. [ 70.881909][ T5584] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.933708][ T5584] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.955157][ T5596] mmap: syz.3.787 (5596) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.002852][ T5584] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.012818][ T5598] loop4: detected capacity change from 0 to 2048 [ 71.050711][ T3296] loop4: p1 < > p4 [ 71.057088][ T3296] loop4: p4 size 8388608 extends beyond EOD, truncated [ 71.078109][ T407] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.098584][ T5598] loop4: p1 < > p4 [ 71.101684][ T5293] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.111522][ T5598] loop4: p4 size 8388608 extends beyond EOD, truncated [ 71.127490][ T5293] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.146315][ T5293] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.217548][ T5612] netlink: 64 bytes leftover after parsing attributes in process `syz.2.794'. [ 71.250085][ T29] audit: type=1326 audit(71.219:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 71.272839][ T29] audit: type=1326 audit(71.219:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 71.282707][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 71.307309][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 71.405087][ T29] audit: type=1326 audit(71.289:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 71.427830][ T29] audit: type=1326 audit(71.289:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 71.450482][ T29] audit: type=1326 audit(71.289:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 71.473279][ T29] audit: type=1326 audit(71.299:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 71.496022][ T29] audit: type=1326 audit(71.299:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 71.502739][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 71.518754][ T29] audit: type=1326 audit(71.299:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e813feba9 code=0x7ffc0000 [ 71.562575][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 71.633270][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 71.648087][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 71.661359][ T5636] SELinux: ebitmap: truncated map [ 71.666104][ T5640] netlink: 156 bytes leftover after parsing attributes in process `syz.2.807'. [ 71.680266][ T5636] SELinux: failed to load policy [ 71.770510][ T5636] loop4: detected capacity change from 0 to 2048 [ 71.777237][ T5636] EXT4-fs: inline encryption not supported [ 71.793125][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 71.837517][ T5636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.907303][ T5665] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 71.916096][ T5665] ref_ctr increment failed for inode: 0x314 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881049ed080 [ 72.122290][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.268793][ T5684] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 72.288288][ T5684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.360430][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 72.376431][ T5684] bond1 (unregistering): Released all slaves [ 72.554172][ T5704] loop4: detected capacity change from 0 to 512 [ 72.566474][ T5704] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 72.579022][ T5704] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.586283][ T5704] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.833: Failed to acquire dquot type 1 [ 72.601328][ T5704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.833: bg 0: block 40: padding at end of block bitmap is not set [ 72.618144][ T5704] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 72.634812][ T5704] EXT4-fs (loop4): 1 truncate cleaned up [ 72.641295][ T5704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.655525][ T5704] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.833: corrupted xattr block 31: invalid header [ 72.673125][ T5704] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 72.694178][ T5704] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.833: corrupted xattr block 31: invalid header [ 72.712321][ T5704] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 72.721871][ T5704] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.833: bad symlink. [ 72.788449][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.798494][ T5716] bridge: RTM_NEWNEIGH with invalid ether address [ 72.883624][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 72.905047][ T5730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5730 comm=syz.4.844 [ 72.917847][ T5730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5730 comm=syz.4.844 [ 73.006956][ T5739] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 73.024097][ T5739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.041288][ T5739] bond3 (unregistering): Released all slaves [ 73.064218][ T5734] loop4: detected capacity change from 0 to 8192 [ 73.294887][ T5758] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.382442][ T5758] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.442380][ T5758] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.522019][ T5758] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.909706][ T5785] loop4: detected capacity change from 0 to 512 [ 73.931711][ T5785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.961226][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.137607][ T5806] netlink: 'syz.1.873': attribute type 30 has an invalid length. [ 74.273633][ T5811] loop1: detected capacity change from 0 to 512 [ 74.320880][ T5811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.445322][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.521832][ T5826] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 74.535489][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.566297][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.583646][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.604614][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.634950][ T5834] netlink: 'syz.0.887': attribute type 5 has an invalid length. [ 74.655427][ T5838] netlink: 'syz.3.897': attribute type 7 has an invalid length. [ 74.803731][ T5852] loop0: detected capacity change from 0 to 128 [ 74.824109][ T5852] syz.0.895: attempt to access beyond end of device [ 74.824109][ T5852] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 74.843009][ T5854] loop3: detected capacity change from 0 to 512 [ 74.929936][ T5860] loop1: detected capacity change from 0 to 1024 [ 74.957033][ T5860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.027864][ T5877] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 75.055086][ T5877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.075955][ T5877] macvlan2: entered promiscuous mode [ 75.081327][ T5877] macvlan2: entered allmulticast mode [ 75.089385][ T5877] bond2: entered promiscuous mode [ 75.094821][ T5877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.103864][ T5877] bond2: left promiscuous mode [ 75.212656][ T5888] netlink: 'syz.0.910': attribute type 4 has an invalid length. [ 75.422702][ T5860] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.898: Allocating blocks 1-17 which overlap fs metadata [ 75.437347][ T5881] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.898: Allocating blocks 1-17 which overlap fs metadata [ 75.517448][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.540612][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 75.540630][ T29] audit: type=1326 audit(75.529:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.571262][ T29] audit: type=1326 audit(75.529:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.594397][ T29] audit: type=1326 audit(75.559:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.617102][ T29] audit: type=1326 audit(75.559:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.639827][ T29] audit: type=1326 audit(75.559:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.662537][ T29] audit: type=1326 audit(75.559:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.685229][ T29] audit: type=1326 audit(75.569:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.707909][ T29] audit: type=1326 audit(75.569:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.730594][ T29] audit: type=1326 audit(75.629:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.753292][ T29] audit: type=1326 audit(75.629:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcc3deba9 code=0x7ffc0000 [ 75.786045][ T5899] loop2: detected capacity change from 0 to 256 [ 75.848189][ T5903] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.858255][ T5903] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.893540][ T5903] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.903440][ T5903] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.953118][ T5903] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.963163][ T5903] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.002923][ T5903] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.012894][ T5903] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.122865][ T5001] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.131172][ T5001] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147030][ T5001] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.155277][ T5001] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.163838][ T5001] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.172139][ T5001] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.180572][ T5001] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.188767][ T5001] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.735822][ T5929] __nla_validate_parse: 4 callbacks suppressed [ 76.735837][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 76.808757][ T5935] wg2: entered promiscuous mode [ 76.813685][ T5935] wg2: entered allmulticast mode [ 76.880911][ T5938] loop1: detected capacity change from 0 to 1024 [ 76.927954][ T5938] EXT4-fs: Ignoring removed nobh option [ 76.933613][ T5938] EXT4-fs: Ignoring removed bh option [ 76.963053][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.050256][ T5938] loop1: detected capacity change from 1024 to 64 [ 77.073104][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.086699][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.101067][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.114925][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.133019][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.162044][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.207802][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.231668][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.255407][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.279155][ T3304] EXT4-fs warning (device loop1): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.302499][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 77.315531][ T5950] macvlan2: entered promiscuous mode [ 77.320996][ T5950] bond0: entered promiscuous mode [ 77.326087][ T5950] bond_slave_0: entered promiscuous mode [ 77.331907][ T5950] bond_slave_1: entered promiscuous mode [ 77.349487][ T5950] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.365289][ T5959] loop3: detected capacity change from 0 to 1024 [ 77.395422][ T5959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.422089][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.445592][ T5945] kmmpd-loop1: attempt to access beyond end of device [ 77.445592][ T5945] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 77.459195][ T5945] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 77.704681][ T51] bridge_slave_1: left allmulticast mode [ 77.710496][ T51] bridge_slave_1: left promiscuous mode [ 77.716266][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.732994][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.945'. [ 77.742651][ T51] bridge_slave_0: left allmulticast mode [ 77.748447][ T51] bridge_slave_0: left promiscuous mode [ 77.754220][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.862872][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.872641][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.881961][ T51] bond0 (unregistering): Released all slaves [ 77.889598][ T5959] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.937: Allocating blocks 1-17 which overlap fs metadata [ 77.903851][ T5994] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.949'. [ 77.903852][ T51] bond1 (unregistering): (slave batadv1): Releasing active interface [ 77.912935][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.949'. [ 77.929646][ T5966] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.937: Allocating blocks 1-17 which overlap fs metadata [ 77.955696][ T51] bond1 (unregistering): (slave batadv2): Releasing active interface [ 77.966995][ T51] bond1 (unregistering): Released all slaves [ 77.975970][ T51] bond2 (unregistering): Released all slaves [ 78.025130][ T51] hsr_slave_0: left promiscuous mode [ 78.052817][ T51] hsr_slave_1: left promiscuous mode [ 78.058452][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.066914][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.191228][ T51] team0 (unregistering): Port device team_slave_1 removed [ 78.202340][ T51] team0 (unregistering): Port device team_slave_0 removed [ 78.231309][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.413464][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 78.582163][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.589314][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.627134][ T5972] bridge_slave_0: entered allmulticast mode [ 78.636248][ T5972] bridge_slave_0: entered promiscuous mode [ 78.643455][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.650640][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.662413][ T5972] bridge_slave_1: entered allmulticast mode [ 78.669131][ T5972] bridge_slave_1: entered promiscuous mode [ 78.699074][ T6065] loop0: detected capacity change from 0 to 1024 [ 78.705834][ T6063] IPVS: Error connecting to the multicast addr [ 78.722546][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.747728][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.753146][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.776382][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 78.794266][ T6071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.968'. [ 78.808570][ T5972] team0: Port device team_slave_0 added [ 78.823667][ T5972] team0: Port device team_slave_1 added [ 78.880991][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.888041][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.914099][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.970839][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.977846][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.008598][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.137085][ T5972] hsr_slave_0: entered promiscuous mode [ 79.194806][ T5972] hsr_slave_1: entered promiscuous mode [ 79.201158][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 79.206901][ T5972] Cannot create hsr debugfs directory [ 79.260768][ T6065] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.966: Allocating blocks 1-17 which overlap fs metadata [ 79.282995][ T6077] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.966: Allocating blocks 1-17 which overlap fs metadata [ 79.409542][ T5972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.435859][ T5972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.466200][ T5972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.491467][ T5972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.599643][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.622984][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.638349][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.658530][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.665691][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.708389][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.715502][ T5001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.844206][ T5972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.969009][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.011698][ T6160] loop4: detected capacity change from 0 to 1024 [ 80.044795][ T6160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.194433][ T5972] veth0_vlan: entered promiscuous mode [ 80.206839][ T5972] veth1_vlan: entered promiscuous mode [ 80.248652][ T5972] veth0_macvtap: entered promiscuous mode [ 80.264229][ T5972] veth1_macvtap: entered promiscuous mode [ 80.357042][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.370198][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.383827][ T5001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.426341][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.459497][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.514156][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.643913][ T6160] ================================================================== [ 80.652068][ T6160] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 80.659949][ T6160] [ 80.662292][ T6160] write to 0xffffea00047d42d8 of 8 bytes by task 6183 on cpu 1: [ 80.669944][ T6160] __filemap_remove_folio+0x1a5/0x2a0 [ 80.675361][ T6160] folio_unmap_invalidate+0x1dd/0x360 [ 80.680770][ T6160] invalidate_inode_pages2_range+0x27c/0x3d0 [ 80.686794][ T6160] filemap_invalidate_pages+0x16d/0x1a0 [ 80.692374][ T6160] kiocb_invalidate_pages+0x6e/0x80 [ 80.697596][ T6160] __iomap_dio_rw+0x5d4/0x1250 [ 80.702389][ T6160] iomap_dio_rw+0x40/0x90 [ 80.706754][ T6160] ext4_file_write_iter+0xad9/0xf00 [ 80.708503][ T6183] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.987: Allocating blocks 1-17 which overlap fs metadata [ 80.711974][ T6160] iter_file_splice_write+0x663/0xa60 [ 80.712003][ T6160] direct_splice_actor+0x153/0x2a0 [ 80.735943][ T6160] splice_direct_to_actor+0x30f/0x680 [ 80.741337][ T6160] do_splice_direct+0xda/0x150 [ 80.746129][ T6160] do_sendfile+0x380/0x650 [ 80.750582][ T6160] __x64_sys_sendfile64+0x105/0x150 [ 80.755809][ T6160] x64_sys_call+0x2bb0/0x2ff0 [ 80.760519][ T6160] do_syscall_64+0xd2/0x200 [ 80.765080][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.771004][ T6160] [ 80.773337][ T6160] read to 0xffffea00047d42d8 of 8 bytes by task 6160 on cpu 0: [ 80.780897][ T6160] folio_mapping+0xa1/0x120 [ 80.785439][ T6160] folio_wait_writeback+0x43/0x140 [ 80.790594][ T6160] file_write_and_wait_range+0x20b/0x2c0 [ 80.796266][ T6160] generic_buffers_fsync_noflush+0x45/0x120 [ 80.802189][ T6160] ext4_sync_file+0x1ab/0x690 [ 80.806883][ T6160] vfs_fsync_range+0x10d/0x130 [ 80.811674][ T6160] ext4_buffered_write_iter+0x34f/0x3c0 [ 80.817254][ T6160] ext4_file_write_iter+0xdbf/0xf00 [ 80.822473][ T6160] iter_file_splice_write+0x663/0xa60 [ 80.827852][ T6160] direct_splice_actor+0x153/0x2a0 [ 80.832971][ T6160] splice_direct_to_actor+0x30f/0x680 [ 80.838356][ T6160] do_splice_direct+0xda/0x150 [ 80.843131][ T6160] do_sendfile+0x380/0x650 [ 80.847583][ T6160] __x64_sys_sendfile64+0x105/0x150 [ 80.852812][ T6160] x64_sys_call+0x2bb0/0x2ff0 [ 80.857502][ T6160] do_syscall_64+0xd2/0x200 [ 80.862027][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.867933][ T6160] [ 80.870261][ T6160] value changed: 0xffff88811a127af8 -> 0x0000000000000000 [ 80.877366][ T6160] [ 80.879691][ T6160] Reported by Kernel Concurrency Sanitizer on: [ 80.885866][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.4.987 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.895507][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 80.905581][ T6160] ================================================================== [ 80.927251][ T29] kauditd_printk_skb: 217 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 80.927274][ T29] audit: type=1400 audit(80.909:2130): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[553]" dev="pipefs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 80.995476][ T6160] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.987: Allocating blocks 1-17 which overlap fs metadata [ 81.192690][ T6160] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.480728][ T407] bridge_slave_1: left allmulticast mode [ 81.486409][ T407] bridge_slave_1: left promiscuous mode [ 81.492142][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.511129][ T407] bridge_slave_0: left allmulticast mode [ 81.516811][ T407] bridge_slave_0: left promiscuous mode [ 81.522622][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.671483][ T407] bond0 (unregistering): left promiscuous mode [ 81.677684][ T407] bond_slave_0: left promiscuous mode [ 81.683255][ T407] bond_slave_1: left promiscuous mode [ 81.691560][ T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.700772][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.709857][ T407] bond0 (unregistering): Released all slaves [ 81.765137][ T407] hsr_slave_0: left promiscuous mode [ 81.772680][ T407] hsr_slave_1: left promiscuous mode [ 81.778353][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.786676][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.838210][ T407] team0 (unregistering): Port device team_slave_1 removed [ 81.848774][ T407] team0 (unregistering): Port device team_slave_0 removed [ 82.202041][ T407] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.262647][ T407] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.301726][ T407] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.342039][ T407] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.402419][ T407] bridge_slave_1: left allmulticast mode [ 82.408095][ T407] bridge_slave_1: left promiscuous mode [ 82.413853][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.421806][ T407] bridge_slave_0: left allmulticast mode [ 82.427450][ T407] bridge_slave_0: left promiscuous mode [ 82.433205][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.502845][ T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.512898][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.522966][ T407] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 82.532101][ T407] bond0 (unregistering): Released all slaves [ 82.540849][ T407] bond1 (unregistering): (slave batadv1): Releasing active interface [ 82.549946][ T407] bond1 (unregistering): (slave batadv2): Releasing active interface [ 82.559034][ T407] bond1 (unregistering): Released all slaves [ 82.567677][ T407] bond2 (unregistering): Released all slaves [ 82.614778][ T407] hsr_slave_0: left promiscuous mode [ 82.622140][ T407] hsr_slave_1: left promiscuous mode [ 82.627828][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.635440][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.643393][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.650820][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.660134][ T407] veth1_macvtap: left promiscuous mode [ 82.667944][ T407] veth0_macvtap: left promiscuous mode [ 82.673575][ T407] veth1_vlan: left promiscuous mode [ 82.678806][ T407] veth0_vlan: left promiscuous mode [ 82.744690][ T407] team0 (unregistering): Port device team_slave_1 removed [ 82.754062][ T407] team0 (unregistering): Port device team_slave_0 removed [ 83.102989][ T407] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.522675][ T407] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.583020][ T407] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.632654][ T407] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.709392][ T407] bridge_slave_1: left allmulticast mode [ 83.715133][ T407] bridge_slave_1: left promiscuous mode [ 83.720849][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.728688][ T407] bridge_slave_0: left allmulticast mode [ 83.734379][ T407] bridge_slave_0: left promiscuous mode [ 83.740044][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.812115][ T407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.822007][ T407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.831363][ T407] bond0 (unregistering): Released all slaves [ 83.877953][ T407] hsr_slave_0: left promiscuous mode [ 83.885119][ T407] hsr_slave_1: left promiscuous mode [ 83.891024][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.898461][ T407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.907506][ T407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.914993][ T407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.926820][ T407] veth1_macvtap: left promiscuous mode [ 83.932753][ T407] veth0_macvtap: left promiscuous mode [ 83.938285][ T407] veth1_vlan: left promiscuous mode [ 83.944883][ T407] veth0_vlan: left promiscuous mode [ 84.007262][ T407] team0 (unregistering): Port device team_slave_1 removed [ 84.017172][ T407] team0 (unregistering): Port device team_slave_0 removed