last executing test programs: 8.354422467s ago: executing program 4 (id=10095): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}]}}]}, 0x44}}, 0x24040084) 8.335595347s ago: executing program 4 (id=10096): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, 0x0, 0x0) 7.461198703s ago: executing program 4 (id=10112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x10) setresuid(0xee01, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x1, 0xc8040) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) utimes(0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="4800000010000b042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="f224000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004000000"], 0x48}}, 0x0) 4.3686308s ago: executing program 4 (id=10160): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x214, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b0, 0x1, [@m_simple={0x174, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x64}}, 0x24040084) 3.105624003s ago: executing program 0 (id=10169): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b9eaf60e13ad2f757066dad0f6e96479714efafa3baa39855b5555583fcd9f66189d5d4de992650c5f5be98baa74cb42d6d2420ec2d87f59", @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESOCT=r0, @ANYBLOB="44f9f0cb9d1040497ef0fd3007cadbaf4db10fd86e529755a68f4a4d57b625f665bc445d6b76"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYRES32=r1, @ANYRES16], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r3}, 0x10) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(0xffffffffffffffff) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 3.062530344s ago: executing program 4 (id=10170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x10) setresuid(0xee01, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x1, 0xc8040) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) utimes(0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="4800000010000b042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="f224000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004000000"], 0x48}}, 0x0) 2.904268887s ago: executing program 0 (id=10174): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB], 0x48}}, 0x40000) 2.860646348s ago: executing program 0 (id=10175): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, 0x0, 0x60101, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fb4e8403aa2e08ae02b69b9b95e2aaf61d0700000000000000000000d86ff0f8396088e403adc534dc25", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 2.72800136s ago: executing program 3 (id=10176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.682739611s ago: executing program 3 (id=10178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000400), 0x4) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x1416c14, &(0x7f0000000340), 0x1, 0x77e, &(0x7f0000001600)="$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") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r5, &(0x7f0000000240)=[{}], 0x1, 0x1400, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x100003c}, 0x18) r7 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) perf_event_open(0x0, 0x0, 0x0, r7, 0xa) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000540)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) 2.167134751s ago: executing program 3 (id=10179): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.152943381s ago: executing program 1 (id=10181): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x214, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b0, 0x1, [@m_simple={0x174, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x14) 1.11559299s ago: executing program 2 (id=10190): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) epoll_create1(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000020c0)="bbf73d0c1e2044a11659f21eff48036983349dc43874210e104912bffb8f598101112dcc8dcf8700a489490d63834f650565c06a604a6ee660b0b214d783319103131be66a34144db07a78eaaa009fefbb25094f1ceba90273858299d3dda778adbb7b37fd136e9747c4ccb9df1fd662ace5e9259f77f09efbb37f4651ec04f6da53da0d528b5dadd15826590686f5a763d4b073d8cad495d83438f215bcbe9f4970cfdb81fd37712948b01600cc11f67e0eb74afa602b7aef28a12ae089162e9abc1aead3538531650e756e33549a3d42c2f6980ccddb13038638d477255ec481ec1b851b7f2edb3810a73496b1644a178314e07ce6658431db612cb5d57e69779dd8b4dc8fd42f96b23124dc7d6f5cc21115594f406a13768b29484d6d6ee760817e016a9a0fd0f5809b8579dd3b8780070f5c8f15d4caa7b266917f82a33a142851371c68e43098334b1a1a1d81c5c4ea0b43dcc7f4f4602f4bc1b8d9f88a31bcd240bcef59406d2003648cfc51d1531d85eb0a9cdee5c909c280a076546976cabd6d9187e0e8e1befde4ef082c0ac509eb49683d6248646487841bc7483bc8974d1d77b6129f80d301d1022217a1f75eae20edc20312fd40dffc32fd34ff0afe9681703c1533fa35eed19fc88dc81506a8f776ec6bc0722d071170f3e23a58cb6e612deecc63e19219f6b45e7b29595b046250f1072ec1cec596c3724325c313e952ef9b3c2c2234775462016b02a03dece1507be5bb565a9c0e074c68c5791c1d8881d134265157148a8cb9316e8c20687336e62516aa4bb17b81f8a9c35b1c7f7180093cf34ccdf5939cd3884af88ea9715728491a4c19eb0617d7763dbc02f6296421690a4d534e4a09bb437bbece800ab4ddfd698980dffef3e57d52e281e913bb929d826e13162503efdc59cf36341eb7006d419993d2d468209a301de1ef557e7d8b12c3dd4e3184bbb70360d2e66a0921b98624026dd5aea99bc45c7395ac345c594bd6cafabe1b0860e1e4f42436f860db11e77a7b3fbea4bf681bef14fa82d3993c1999870d98669a460e083e462b0283a5971a842eb372fec499283786608862317672e4c563d568c2337a5de4b31b152c55c45e58de782f06bebb28bf34d6ac4acacbc9cf62a289ab8770b42a565de537ad8a2c8cafea7eb35ba7a584f265c15e26527f482de543c0476ffdfb57e58e6dcfaef9aa691a3dffe8d04286012b57e0cd7e3ec8848633384ed25b466ace34df96779b9cb878a2a3fd3dcfeba5c4adf3ea240558dc2f6cfe5af2dd7928905d4535d5a495a7a72af182206e50869c300674e5adecf2e9e55f1b2824cb1d7271ec420e9e060b7c45e8bf3312a259626126a62866f9d1007beee2e25f9f4813412354984a9b357072d6aba261b6bdd849bccfe55e6a48ebae857107397c38e41cfea0a11da3d4e0a162dd5c26b6fc3ea1047999eb8751cb14f62348492548649a6072556e16c398d472c0c9fcce21c94e10614395fe216c40440c66b29eac9f961f78d1dd39c344dce276f5d1e21823c0c6c9c780e1eb2b13d70e5f0af676fa93832cece843ba710b06d430c1ec969412b1a247025cacd41dde3cd4b29201e6e7ad3a698c4514ec4bad556c5bdd189ef58637aa012855eae62ec366b006d1cbda583e9ca0865186f3c71bd9635d836584aa122b69406930f1227f2b92c578d0b67d1f5febc5c46826a261125288ec867dbf3f9059a8c14ef804b6403ec68057cceba786265ade4f525d6fcbf61b32e695b0366bbe4e8b11ca410de0c019b62a1ae250a1b9c78be31bcc66615db8f9c4f7dfdbeed3a25e8be30234c3c730d8b5c4c606e66f9a31ed90706ab8f47d81a1af712b6d138a1f2379b866e500f42ffcda368add8253a2e1d45c342161347245dcb0b9ffdf759f5d8aebebb53bfce59cc858e14ef63454e9efadff46e66a7ed82c09f510b24c1923333e8131147407acc1677500a0e1d4dbdbdc996593e668ae31b2790439eee89d97d31d0a96b13afdd5a2106437b112d39d41d668eba36b932901aabee4ce6c94463a3618d5bb4312d254580cd5d25ba72fd9f3c1b293f1d0b083fc5d286f4cf8a17574bc59bd5721661336db2c122064f2f641862be38b2d4ab610acdf03894b4dad4f4d451eab8f2ccb86db0066f5b5034c627b3047b5e7308ec7fe8eacb1714236f58b2d7a2a6bb039ee7af5df1fa373a3354666209239dc6bef6de0409aacdb7252c9583d90c3c4040a760848fb91fa255ac79bbdcd78b8aa1be947cb3f516646646e9e9a198e447c52d7a3b35640bf6848126b383b87a041f2ccd548ff68e013f6496b2ecf19399e5f642676e4ed95f4087dff363e56bc23aa0bffc14d1520e8434b033f86ffcea983573dfc33c47f0dc9eeedafd4fbc49f69914522dc26abaca1e05f619efe1756ee93029f40789b1a6af8056b5055c3759b5b6882a779856caea554b479d97eebed89a33c5c98a5f6e2cf9a715b4ca79dbe380382fc0692b55cf18cfcaf65868953b13330897d136887b3aac9832f393ff7f01c6a96e7d78278f441a9176c6450eeb3c35215d813a34848131a01a72af0ca4722b72e17a72ae3730de6785e2584f115c7be8fed0a4b3e48e48a242674fb6fc8c4935ac6d308051be151e8e75b084bd5b0d3ae5a1ecda8c126975e106e206b257a013f3943f42c0f4244ee004ea728616606358fd84acbeac7edd07e8a640c72ee46995ea6fcda08722e32188c47002d5fa2a321715509a580758562af88a962cddd5abeb06bc305ebd24b9d53a5ee60c5990cccd3abf2874bdd39ca080c66a0df1bc374b61c4c7f6d0d1811bd39763b3c3d5d82551fd1418cbc63aa8bf7ef27778bd9f46bc2007881d56e31efb802f5ea16569948691e", 0x801}, {0x0}], 0x2) r4 = epoll_create(0xa262) epoll_pwait(r4, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f00000000c0)={[0xfa]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.09169204s ago: executing program 2 (id=10191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000400), 0x4) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x1416c14, &(0x7f0000000340), 0x1, 0x77e, &(0x7f0000001600)="$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") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r5, &(0x7f0000000240)=[{}], 0x1, 0x1400, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x100003c}, 0x18) r7 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) perf_event_open(0x0, 0x0, 0x0, r7, 0xa) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000540)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) 1.019701692s ago: executing program 2 (id=10192): openat$ptp0(0xffffffffffffff9c, &(0x7f0000001740), 0x80, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'hugetlb'}]}, 0x9) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) 988.778422ms ago: executing program 2 (id=10193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000180)='mm_vmscan_write_folio\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0)=@ax25={{0x3, @netrom}, [@rose, @remote, @rose, @default, @netrom, @null, @default, @rose]}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000640)=""/40, 0x28}], 0x4, &(0x7f00000006c0)=""/244, 0xf4}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x1}, &(0x7f0000000200)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3ac66eac) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = eventfd2(0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) 427.842612ms ago: executing program 1 (id=10194): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x80) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x4032}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x12, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2d83c067, 0x25, &(0x7f0000000180)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=[{0x4, 0x5, 0xf}, {0x1, 0x4, 0x7, 0x5}, {0x0, 0x2, 0xe, 0x2}, {0x5, 0x4, 0x10, 0xb}], 0x10, 0x400}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0082b9689459820311c72c83e80000", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 345.056264ms ago: executing program 1 (id=10195): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x64}}, 0x24040084) 344.147684ms ago: executing program 1 (id=10196): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 312.130175ms ago: executing program 1 (id=10197): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x60101, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fb4e8403aa2e08ae02b69b9b95e2aaf61d0700000000000000000000d86ff0f8396088e403adc534dc25", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 106.830548ms ago: executing program 2 (id=10198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x68, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 105.833248ms ago: executing program 2 (id=10199): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) syz_open_procfs(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x14) 0s ago: executing program 4 (id=10200): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x18c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x128, 0x1, [@m_simple={0xec, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}]}, {0x7d, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c17daa5d8bfdc1952fbe903567065fbecf72fa157c3aaac70e46ef54a9edbaa0fa0c723674743dac2"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): (while UP) [ 485.785475][T28476] 0{X功: entered allmulticast mode [ 485.791488][T28476] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 485.819667][T28450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.846809][T20447] dummy0: left allmulticast mode [ 485.852075][T20447] bridge0: port 3(dummy0) entered disabled state [ 485.859486][T20447] bridge_slave_1: left allmulticast mode [ 485.865165][T20447] bridge_slave_1: left promiscuous mode [ 485.870913][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.884413][T28478] random: crng reseeded on system resumption [ 485.892205][T20447] bridge_slave_0: left allmulticast mode [ 485.898136][T20447] bridge_slave_0: left promiscuous mode [ 485.903998][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.029405][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.052632][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.062457][T20447] bond0 (unregistering): Released all slaves [ 486.074391][T28450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.118663][T28450] team0: Port device team_slave_0 added [ 486.131546][T28450] team0: Port device team_slave_1 added [ 486.173724][T28450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.180754][T28450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.206741][T28450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.254111][T20447] hsr_slave_0: left promiscuous mode [ 486.261071][T20447] hsr_slave_1: left promiscuous mode [ 486.272721][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.280302][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.288152][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.295541][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.308763][T28496] loop3: detected capacity change from 0 to 128 [ 486.329135][T20447] veth1_macvtap: left promiscuous mode [ 486.340993][T28496] bio_check_eod: 77 callbacks suppressed [ 486.341065][T28496] syz.3.9366: attempt to access beyond end of device [ 486.341065][T28496] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 486.345131][T20447] veth1_vlan: left promiscuous mode [ 486.346999][T28496] syz.3.9366: attempt to access beyond end of device [ 486.346999][T28496] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 486.378916][T28496] buffer_io_error: 32 callbacks suppressed [ 486.378948][T28496] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 486.389265][T20447] veth0_vlan: left promiscuous mode [ 486.488694][T28496] syz.3.9366: attempt to access beyond end of device [ 486.488694][T28496] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 486.526007][T28496] syz.3.9366: attempt to access beyond end of device [ 486.526007][T28496] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 486.539519][T28496] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 486.567920][T28496] syz.3.9366: attempt to access beyond end of device [ 486.567920][T28496] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 486.587963][T28496] syz.3.9366: attempt to access beyond end of device [ 486.587963][T28496] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 486.601488][T28496] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 486.624056][T28496] syz.3.9366: attempt to access beyond end of device [ 486.624056][T28496] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 486.638445][T28496] syz.3.9366: attempt to access beyond end of device [ 486.638445][T28496] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 486.651899][T28496] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 486.662411][T28496] syz.3.9366: attempt to access beyond end of device [ 486.662411][T28496] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 486.676443][T28496] syz.3.9366: attempt to access beyond end of device [ 486.676443][T28496] loop3: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 486.689951][T28496] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 486.700515][T28496] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 486.712365][T28496] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 486.721198][T20447] team0 (unregistering): Port device team_slave_1 removed [ 486.722238][T28496] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 486.737049][T20447] team0 (unregistering): Port device team_slave_0 removed [ 486.738068][T28496] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 486.753763][T28496] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 486.778092][T28450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.785084][T28450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.811068][T28450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.872471][T28450] hsr_slave_0: entered promiscuous mode [ 486.882464][T28450] hsr_slave_1: entered promiscuous mode [ 486.975116][T28528] loop3: detected capacity change from 0 to 1024 [ 486.989421][T28528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.046737][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.102862][T28535] SELinux: failed to load policy [ 487.110070][T28535] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 487.116592][T28535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9378'. [ 487.128291][T28535] bridge0: entered promiscuous mode [ 487.133623][T28535] macsec1: entered allmulticast mode [ 487.139094][T28535] bridge0: entered allmulticast mode [ 487.149523][T28535] bridge0: port 4(macsec1) entered blocking state [ 487.156038][T28535] bridge0: port 4(macsec1) entered disabled state [ 487.164297][T28535] bridge0: left allmulticast mode [ 487.169426][T28535] bridge0: left promiscuous mode [ 487.173749][T28537] netlink: 'syz.2.9379': attribute type 10 has an invalid length. [ 487.183031][T28537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9379'. [ 487.310338][T28541] random: crng reseeded on system resumption [ 487.388801][T28450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.399228][T28450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.418821][T28450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.425964][T28549] loop3: detected capacity change from 0 to 512 [ 487.432803][T28549] EXT4-fs: Ignoring removed mblk_io_submit option [ 487.436615][T28450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.446209][T28549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 487.456956][T28549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 487.466964][T28549] System zones: 1-12 [ 487.472539][T28549] EXT4-fs (loop3): 1 truncate cleaned up [ 487.479666][T28549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.492291][T28450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.508590][T28450] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.518613][T20430] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.525710][T20430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.537326][T20447] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.544433][T20447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.625349][T28450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.826765][T28450] veth0_vlan: entered promiscuous mode [ 487.843322][T28450] veth1_vlan: entered promiscuous mode [ 487.862908][T28450] veth0_macvtap: entered promiscuous mode [ 487.882070][T28450] veth1_macvtap: entered promiscuous mode [ 487.908433][T28450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.920320][T28585] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9388'. [ 487.928931][T28450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.932726][T28584] netlink: zone id is out of range [ 487.942938][T28585] 0{X功: renamed from gretap0 (while UP) [ 487.944036][T28584] netlink: zone id is out of range [ 487.954388][T28584] netlink: zone id is out of range [ 487.959565][T28584] netlink: zone id is out of range [ 487.965057][T28584] netlink: zone id is out of range [ 487.970699][T28584] netlink: zone id is out of range [ 487.980102][T28584] netlink: zone id is out of range [ 487.996004][T28585] 0{X功: entered allmulticast mode [ 488.024432][T20426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.047104][T28590] random: crng reseeded on system resumption [ 488.056814][T20426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.068136][T20426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.077154][T28591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9391'. [ 488.086691][T20430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.287130][T28614] batadv_slave_1: entered promiscuous mode [ 488.302612][T28613] batadv_slave_1: left promiscuous mode [ 488.323944][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.349678][T28616] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9401'. [ 488.364467][T28616] 0{X功: renamed from 31{X功 (while UP) [ 488.476455][T28629] loop2: detected capacity change from 0 to 512 [ 488.483277][T28628] random: crng reseeded on system resumption [ 488.497684][T28629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 488.507635][T28629] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 488.666626][T28646] loop4: detected capacity change from 0 to 764 [ 488.674346][T28646] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 489.271703][T28675] random: crng reseeded on system resumption [ 489.288446][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 489.288462][ T29] audit: type=1326 audit(489.251:40120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.327680][ T29] audit: type=1326 audit(489.281:40121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.350785][ T29] audit: type=1326 audit(489.281:40122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.358758][T28667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.373874][ T29] audit: type=1326 audit(489.281:40123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.373911][ T29] audit: type=1326 audit(489.281:40124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.373960][ T29] audit: type=1326 audit(489.281:40125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.374036][ T29] audit: type=1326 audit(489.281:40126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.374068][ T29] audit: type=1326 audit(489.281:40127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.374113][ T29] audit: type=1326 audit(489.281:40128): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.374151][ T29] audit: type=1326 audit(489.281:40129): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28676 comm="syz.0.9422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 489.662446][T28689] SELinux: failed to load policy [ 489.669456][T28689] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 489.676010][T28689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9427'. [ 489.688280][T28689] bridge0: entered promiscuous mode [ 489.693562][T28689] macsec1: entered allmulticast mode [ 489.698995][T28689] bridge0: entered allmulticast mode [ 489.705903][T28689] bridge0: port 4(macsec1) entered blocking state [ 489.712403][T28689] bridge0: port 4(macsec1) entered disabled state [ 489.724015][T28690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9424'. [ 489.733841][T28689] bridge0: left allmulticast mode [ 489.739180][T28689] bridge0: left promiscuous mode [ 489.838356][T28667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.902523][T28701] netlink: 'syz.3.9431': attribute type 10 has an invalid length. [ 489.911253][T28701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9431'. [ 490.035594][T28711] loop3: detected capacity change from 0 to 512 [ 490.075175][T28711] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.082350][T28711] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 490.107729][T28711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 490.126908][T28711] System zones: 1-12 [ 490.143137][T28711] EXT4-fs (loop3): 1 truncate cleaned up [ 490.158487][T28711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.204921][T28717] loop2: detected capacity change from 0 to 512 [ 490.215941][T28717] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 490.385273][T28725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9438'. [ 490.480710][T28731] random: crng reseeded on system resumption [ 490.573461][T28734] batadv_slave_1: entered promiscuous mode [ 490.585610][T28733] batadv_slave_1: left promiscuous mode [ 490.634088][T28736] netlink: 'syz.1.9443': attribute type 10 has an invalid length. [ 490.642572][T28736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9443'. [ 490.652701][T28736] dummy0: entered promiscuous mode [ 490.665800][T28736] bridge0: port 3(dummy0) entered blocking state [ 490.673283][T28736] bridge0: port 3(dummy0) entered disabled state [ 490.682016][T28736] dummy0: entered allmulticast mode [ 490.702323][T28736] bridge0: port 3(dummy0) entered blocking state [ 490.710116][T28736] bridge0: port 3(dummy0) entered forwarding state [ 490.944370][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.188040][T28753] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9449'. [ 491.207236][T28753] 1{X功: renamed from 30{X功 (while UP) [ 491.215068][T28753] net_ratelimit: 159 callbacks suppressed [ 491.215086][T28753] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 491.324870][T28762] loop2: detected capacity change from 0 to 128 [ 491.347924][T28762] bio_check_eod: 31 callbacks suppressed [ 491.347941][T28762] syz.2.9453: attempt to access beyond end of device [ 491.347941][T28762] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 491.383125][T28762] syz.2.9453: attempt to access beyond end of device [ 491.383125][T28762] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 491.396638][T28762] buffer_io_error: 10 callbacks suppressed [ 491.396656][T28762] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 491.437898][T28760] random: crng reseeded on system resumption [ 491.456632][T28762] syz.2.9453: attempt to access beyond end of device [ 491.456632][T28762] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 491.471445][T28765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9451'. [ 491.494183][T28762] syz.2.9453: attempt to access beyond end of device [ 491.494183][T28762] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 491.507687][T28762] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 491.529049][T28762] syz.2.9453: attempt to access beyond end of device [ 491.529049][T28762] loop2: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 491.549196][T28762] syz.2.9453: attempt to access beyond end of device [ 491.549196][T28762] loop2: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 491.562728][T28762] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 491.573520][T28762] syz.2.9453: attempt to access beyond end of device [ 491.573520][T28762] loop2: rw=2049, sector=242, nr_sectors = 8 limit=128 [ 491.635533][T28762] syz.2.9453: attempt to access beyond end of device [ 491.635533][T28762] loop2: rw=2049, sector=248, nr_sectors = 2 limit=128 [ 491.649104][T28762] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 491.684681][T28762] syz.2.9453: attempt to access beyond end of device [ 491.684681][T28762] loop2: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 491.700355][T28762] syz.2.9453: attempt to access beyond end of device [ 491.700355][T28762] loop2: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 491.713966][T28762] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 491.724735][T28762] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 491.734319][T28762] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 491.744683][T28762] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 491.789602][T28780] loop3: detected capacity change from 0 to 1024 [ 491.800526][T28780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.844404][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.930286][T28792] 1{X功: renamed from 30{X功 (while UP) [ 491.938109][T28792] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 492.009253][T28798] random: crng reseeded on system resumption [ 492.040412][T28667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.119992][T28667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.166983][T20447] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.187619][T20447] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.204119][T20447] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.221524][T20447] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.418963][T28810] loop4: detected capacity change from 0 to 1024 [ 492.441044][T28810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.503207][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.637685][T28827] 0{X功: renamed from gretap0 (while UP) [ 492.650139][T28829] random: crng reseeded on system resumption [ 492.664017][T28827] 0{X功: entered allmulticast mode [ 492.676192][T28827] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 492.793291][T28841] loop3: detected capacity change from 0 to 1024 [ 492.809249][T28839] SELinux: failed to load policy [ 492.817039][T28839] syz2: rxe_newlink: already configured on vxcan1 [ 492.834216][T28841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.835989][T28839] bridge0: entered promiscuous mode [ 492.876837][T28839] macsec1: entered allmulticast mode [ 492.882318][T28839] bridge0: entered allmulticast mode [ 492.906126][T28839] bridge0: port 4(macsec1) entered blocking state [ 492.912705][T28839] bridge0: port 4(macsec1) entered disabled state [ 492.921311][T28839] bridge0: left allmulticast mode [ 492.926370][T28839] bridge0: left promiscuous mode [ 492.960546][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.972786][T28851] loop4: detected capacity change from 0 to 1024 [ 492.999146][T28851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.047137][T28851] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.9485: Allocating blocks 497-513 which overlap fs metadata [ 493.067330][T28851] EXT4-fs (loop4): pa ffff8881071cc070: logic 256, phys. 369, len 9 [ 493.068395][T28861] __nla_validate_parse: 6 callbacks suppressed [ 493.068412][T28861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9489'. [ 493.075383][T28851] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 493.123852][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.134414][T28864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9490'. [ 493.166400][T28866] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9492'. [ 493.176178][T28866] 1{X功: renamed from 30{X功 (while UP) [ 493.185336][T28866] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 493.331074][T28881] loop2: detected capacity change from 0 to 512 [ 493.347799][T28881] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.387330][T28881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 493.403494][T28881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 493.414269][T28881] System zones: 1-12 [ 493.423281][T28881] EXT4-fs (loop2): 1 truncate cleaned up [ 493.435196][T28881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.498482][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.823073][T28901] loop3: detected capacity change from 0 to 764 [ 493.831576][T28901] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 494.278988][T28907] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9505'. [ 494.289287][T28907] 1{X功: renamed from 30{X功 (while UP) [ 494.297495][T28907] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 494.318131][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 494.318146][ T29] audit: type=1326 audit(494.281:40622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.374658][ T29] audit: type=1326 audit(494.281:40623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.378014][T28911] random: crng reseeded on system resumption [ 494.397722][ T29] audit: type=1326 audit(494.311:40624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.426658][ T29] audit: type=1326 audit(494.311:40625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.449713][ T29] audit: type=1326 audit(494.311:40626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.472779][ T29] audit: type=1326 audit(494.311:40627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.495843][ T29] audit: type=1326 audit(494.311:40628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.519412][ T29] audit: type=1326 audit(494.311:40629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.542426][ T29] audit: type=1326 audit(494.311:40630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.565616][ T29] audit: type=1326 audit(494.311:40631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28906 comm="syz.4.9505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 494.845102][T28935] loop3: detected capacity change from 0 to 1024 [ 494.856667][T28937] loop4: detected capacity change from 0 to 1024 [ 494.870197][T28935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.883810][T28937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.961951][T28937] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.9517: Allocating blocks 497-513 which overlap fs metadata [ 494.992112][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.999342][T28937] EXT4-fs (loop4): pa ffff8881071cc070: logic 256, phys. 369, len 9 [ 495.009275][T28937] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 495.041071][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.070949][T28949] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9520'. [ 495.080183][T28949] 0{X功: renamed from 31{X功 (while UP) [ 495.088399][T28949] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 495.106757][T28952] netlink: 'syz.1.9521': attribute type 10 has an invalid length. [ 495.114739][T28952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9521'. [ 495.142728][T28955] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9523'. [ 495.191894][T28959] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9524'. [ 495.201088][T28959] 1{X功: renamed from 30{X功 (while UP) [ 495.238907][T28959] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 495.255207][T28961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9522'. [ 495.334780][T28966] loop4: detected capacity change from 0 to 512 [ 495.341910][T28966] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 495.449120][T28975] loop4: detected capacity change from 0 to 1024 [ 495.470009][T28975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.524376][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.598708][T28986] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9534'. [ 495.617284][T28986] 0{X功: renamed from 31{X功 (while UP) [ 495.665389][T28986] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 495.716384][T28995] 0{X功: renamed from 31{X功 (while UP) [ 495.731369][T28995] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 495.787332][T28998] loop3: detected capacity change from 0 to 512 [ 495.804546][T28998] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 496.150127][T29025] SELinux: failed to load policy [ 496.160840][T29025] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 496.172593][T29025] bridge0: entered promiscuous mode [ 496.179147][T29025] macsec1: entered allmulticast mode [ 496.184476][T29025] bridge0: entered allmulticast mode [ 496.192841][T29025] bridge0: port 3(macsec1) entered blocking state [ 496.199505][T29025] bridge0: port 3(macsec1) entered disabled state [ 496.209210][T29025] bridge0: left allmulticast mode [ 496.214268][T29025] bridge0: left promiscuous mode [ 496.560707][T29037] 0{X功: renamed from 31{X功 (while UP) [ 496.576927][T29037] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 496.662585][T29039] loop2: detected capacity change from 0 to 512 [ 496.671047][T29039] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 496.783863][T29046] random: crng reseeded on system resumption [ 496.864483][T29054] SELinux: failed to load policy [ 496.885611][T29054] syz2: rxe_newlink: already configured on vxcan1 [ 496.916710][T29054] bridge0: entered promiscuous mode [ 496.945924][T29054] macsec1: entered allmulticast mode [ 496.951483][T29054] bridge0: entered allmulticast mode [ 496.971312][T29054] bridge0: port 4(macsec1) entered blocking state [ 496.977929][T29054] bridge0: port 4(macsec1) entered disabled state [ 497.002258][T29062] random: crng reseeded on system resumption [ 497.012510][T29054] bridge0: left allmulticast mode [ 497.017668][T29054] bridge0: left promiscuous mode [ 497.113339][T29068] loop2: detected capacity change from 0 to 1024 [ 497.171755][T29068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.293243][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.341992][T29092] random: crng reseeded on system resumption [ 497.617246][T29103] SELinux: failed to load policy [ 497.626490][T29103] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 497.638011][T29103] bridge0: entered promiscuous mode [ 497.643312][T29103] macsec1: entered allmulticast mode [ 497.648748][T29103] bridge0: entered allmulticast mode [ 497.656744][T29103] bridge0: port 3(macsec1) entered blocking state [ 497.663325][T29103] bridge0: port 3(macsec1) entered disabled state [ 497.672243][T29103] bridge0: left allmulticast mode [ 497.677460][T29103] bridge0: left promiscuous mode [ 497.691126][T29106] random: crng reseeded on system resumption [ 497.862239][T29115] loop4: detected capacity change from 0 to 512 [ 497.876055][T29115] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 498.107727][T29126] __nla_validate_parse: 10 callbacks suppressed [ 498.107744][T29126] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9587'. [ 498.673351][T29137] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 498.739982][T29137] SELinux: failed to load policy [ 498.747507][T29136] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 498.775530][T29136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9589'. [ 498.815523][T29141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.845129][T29136] bridge0: entered promiscuous mode [ 498.853443][T29136] macsec1: entered allmulticast mode [ 498.858917][T29136] bridge0: entered allmulticast mode [ 498.865855][T29136] bridge0: port 3(macsec1) entered blocking state [ 498.872428][T29136] bridge0: port 3(macsec1) entered disabled state [ 498.880907][T29136] bridge0: left allmulticast mode [ 498.885987][T29136] bridge0: left promiscuous mode [ 498.892284][T29143] random: crng reseeded on system resumption [ 498.906646][T29141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.963440][T29146] netlink: 'syz.4.9593': attribute type 10 has an invalid length. [ 498.971886][T29146] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9593'. [ 498.989750][T29141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.047672][T29146] dummy0: entered promiscuous mode [ 499.061777][T29146] bridge0: port 3(dummy0) entered blocking state [ 499.068677][T29146] bridge0: port 3(dummy0) entered disabled state [ 499.076770][T29146] dummy0: entered allmulticast mode [ 499.094703][T29146] bridge0: port 3(dummy0) entered blocking state [ 499.101893][T29146] bridge0: port 3(dummy0) entered forwarding state [ 499.124630][T29141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.169974][T29155] random: crng reseeded on system resumption [ 499.251346][T20426] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.272732][T20426] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.288865][T20426] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.302952][T20426] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.370663][T29166] batadv_slave_1: entered promiscuous mode [ 499.371520][ T29] kauditd_printk_skb: 793 callbacks suppressed [ 499.371537][ T29] audit: type=1400 audit(499.331:41425): avc: granted { setsecparam } for pid=29167 comm="syz.0.9610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 499.536133][T29165] batadv_slave_1: left promiscuous mode [ 499.543624][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9601'. [ 499.598366][ T29] audit: type=1326 audit(499.561:41426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.625408][T29180] random: crng reseeded on system resumption [ 499.632571][T29177] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9604'. [ 499.642716][T29177] 1{X功: renamed from 30{X功 (while UP) [ 499.650137][ T29] audit: type=1326 audit(499.591:41427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.654382][T29182] netlink: 'syz.0.9606': attribute type 10 has an invalid length. [ 499.673214][ T29] audit: type=1326 audit(499.591:41428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.673289][ T29] audit: type=1326 audit(499.591:41429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.673323][ T29] audit: type=1326 audit(499.591:41430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.673399][ T29] audit: type=1326 audit(499.591:41431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.673504][ T29] audit: type=1326 audit(499.591:41432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.673535][ T29] audit: type=1326 audit(499.591:41433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.681791][T29182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9606'. [ 499.704408][ T29] audit: type=1326 audit(499.591:41434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29176 comm="syz.4.9604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 499.864866][T29177] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 499.882195][T29182] dummy0: entered promiscuous mode [ 499.902990][T29182] bridge0: port 3(dummy0) entered blocking state [ 499.913981][T29182] bridge0: port 3(dummy0) entered disabled state [ 499.925022][T29182] dummy0: entered allmulticast mode [ 499.946595][T29182] bridge0: port 3(dummy0) entered blocking state [ 499.953981][T29182] bridge0: port 3(dummy0) entered forwarding state [ 500.050574][T29196] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.084299][T29201] netlink: 'syz.4.9613': attribute type 10 has an invalid length. [ 500.092279][T29201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9613'. [ 500.167829][T29196] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.386389][T29214] random: crng reseeded on system resumption [ 500.461429][T29217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9619'. [ 500.476335][T29220] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9620'. [ 500.485970][T29196] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.518976][T29220] 0{X功: renamed from 31{X功 (while UP) [ 500.547273][T29220] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 500.566274][T29224] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9621'. [ 500.598588][T29226] netlink: 'syz.1.9622': attribute type 10 has an invalid length. [ 500.635385][T29196] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.832601][ T30] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.903912][ T30] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.914694][T29238] random: crng reseeded on system resumption [ 501.358802][ T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.384770][ T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.551681][T29262] 1{X功: renamed from 30{X功 (while UP) [ 501.612773][T29262] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 501.650533][T29265] loop4: detected capacity change from 0 to 1024 [ 501.679112][T29265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.689253][T29271] netlink: 'syz.3.9636': attribute type 10 has an invalid length. [ 501.724730][T29273] loop3: detected capacity change from 0 to 512 [ 501.732567][T29273] EXT4-fs: Ignoring removed mblk_io_submit option [ 501.740526][T29273] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 501.751642][T29273] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 501.760855][T29273] System zones: 1-12 [ 501.765262][T29273] EXT4-fs (loop3): 1 truncate cleaned up [ 501.771449][T29273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.788457][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.821374][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.914157][T29284] random: crng reseeded on system resumption [ 501.933347][T29282] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.035349][T29289] loop3: detected capacity change from 0 to 512 [ 502.057780][T29289] EXT4-fs: Ignoring removed mblk_io_submit option [ 502.068228][T29289] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 502.097645][T29289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 502.109444][T29282] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.115813][T29289] System zones: 1-12 [ 502.126226][T29289] EXT4-fs (loop3): 1 truncate cleaned up [ 502.151201][T29289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.313209][T29282] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.328640][T29293] loop2: detected capacity change from 0 to 128 [ 502.379992][T29293] bio_check_eod: 7 callbacks suppressed [ 502.380011][T29293] syz.2.9644: attempt to access beyond end of device [ 502.380011][T29293] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 502.410436][T29293] syz.2.9644: attempt to access beyond end of device [ 502.410436][T29293] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 502.423971][T29293] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 502.433264][T29293] syz.2.9644: attempt to access beyond end of device [ 502.433264][T29293] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 502.458591][T29293] syz.2.9644: attempt to access beyond end of device [ 502.458591][T29293] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 502.472103][T29293] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 502.542267][T29282] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.560716][T29293] syz.2.9644: attempt to access beyond end of device [ 502.560716][T29293] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 502.592809][T29293] syz.2.9644: attempt to access beyond end of device [ 502.592809][T29293] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 502.606304][T29293] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 502.615617][T29293] syz.2.9644: attempt to access beyond end of device [ 502.615617][T29293] loop2: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 502.629962][T29293] syz.2.9644: attempt to access beyond end of device [ 502.629962][T29293] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 502.643522][T29293] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 502.650321][T29298] random: crng reseeded on system resumption [ 502.697266][T20702] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.719603][T20702] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.730994][T29293] syz.2.9644: attempt to access beyond end of device [ 502.730994][T29293] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 502.748436][T20702] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.757166][T29293] syz.2.9644: attempt to access beyond end of device [ 502.757166][T29293] loop2: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 502.770735][T29293] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 502.779602][T20702] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.788565][T29293] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 502.800218][T29293] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 502.809869][T29293] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 502.830733][T29293] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 502.851478][T29293] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 503.077896][T29317] 0{X功: renamed from 31{X功 (while UP) [ 503.092159][T29317] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 503.115778][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.202033][T29326] netlink: 'syz.2.9659': attribute type 10 has an invalid length. [ 503.211878][T29326] __nla_validate_parse: 4 callbacks suppressed [ 503.211915][T29326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9659'. [ 503.229695][T29331] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 503.263359][T29331] SELinux: failed to load policy [ 503.293402][T29330] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.331055][T29328] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 503.337926][T29328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9660'. [ 503.351226][T29328] bridge0: entered promiscuous mode [ 503.356574][T29328] macsec1: entered allmulticast mode [ 503.361953][T29328] bridge0: entered allmulticast mode [ 503.369867][T29328] bridge0: port 4(macsec1) entered blocking state [ 503.376429][T29328] bridge0: port 4(macsec1) entered disabled state [ 503.385255][T29328] bridge0: left allmulticast mode [ 503.390341][T29328] bridge0: left promiscuous mode [ 503.455531][T29330] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.523837][T29343] loop2: detected capacity change from 0 to 512 [ 503.553237][T29330] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.565721][T29343] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.574198][T29343] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 503.600877][T29343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 503.609887][T29343] System zones: 1-12 [ 503.614218][T29343] EXT4-fs (loop2): 1 truncate cleaned up [ 503.621504][T29343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.712125][T29349] netlink: 'syz.4.9667': attribute type 10 has an invalid length. [ 503.720124][T29349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9667'. [ 503.773925][T29330] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.869296][T29356] loop4: detected capacity change from 0 to 512 [ 503.884434][T29356] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.891456][T29356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 503.902774][T29356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 503.911056][T29356] System zones: 1-12 [ 503.916035][T29356] EXT4-fs (loop4): 1 truncate cleaned up [ 503.922614][T29356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.509792][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 504.509811][ T29] audit: type=1326 audit(504.471:41661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.552721][ T29] audit: type=1326 audit(504.471:41662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.575817][ T29] audit: type=1326 audit(504.471:41663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.598828][ T29] audit: type=1326 audit(504.471:41664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.622097][ T29] audit: type=1326 audit(504.471:41665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.645230][ T29] audit: type=1326 audit(504.471:41666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.668323][ T29] audit: type=1326 audit(504.471:41667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.691572][ T29] audit: type=1326 audit(504.471:41668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.714686][ T29] audit: type=1326 audit(504.471:41669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.737850][ T29] audit: type=1326 audit(504.471:41670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29361 comm="syz.0.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 504.763374][T29366] random: crng reseeded on system resumption [ 504.774252][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.931011][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.076603][T29382] loop2: detected capacity change from 0 to 1024 [ 505.088862][T29382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.122175][T29382] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 505.360603][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.380893][T20412] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.409180][T20412] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.421059][T20412] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.429792][T20412] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.540450][T29394] SELinux: failed to load policy [ 505.546716][T29394] syz2: rxe_newlink: already configured on vxcan1 [ 505.553505][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9682'. [ 505.565148][T29394] bridge0: entered promiscuous mode [ 505.587247][T29394] macsec1: entered allmulticast mode [ 505.592575][T29394] bridge0: entered allmulticast mode [ 505.605434][T29394] bridge0: port 4(macsec1) entered blocking state [ 505.612006][T29394] bridge0: port 4(macsec1) entered disabled state [ 505.633526][T29394] bridge0: left allmulticast mode [ 505.638682][T29394] bridge0: left promiscuous mode [ 505.736428][T29403] netlink: 'syz.2.9685': attribute type 10 has an invalid length. [ 505.744318][T29403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9685'. [ 505.765685][T29405] random: crng reseeded on system resumption [ 505.797041][T29407] loop2: detected capacity change from 0 to 512 [ 505.804400][T29407] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.862792][T29413] loop4: detected capacity change from 0 to 512 [ 505.869681][T29413] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.878020][T29413] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 505.888087][T29407] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 505.911214][T29413] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 505.919726][T29413] System zones: 1-12 [ 505.924362][T29407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 505.932647][T29407] System zones: 1-12 [ 505.937157][T29407] EXT4-fs (loop2): 1 truncate cleaned up [ 505.943060][T29413] EXT4-fs (loop4): 1 truncate cleaned up [ 505.951260][T29413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.957657][T29407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.012478][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.050785][T29423] loop2: detected capacity change from 0 to 512 [ 506.052886][T29420] random: crng reseeded on system resumption [ 506.067564][T29423] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 506.158043][T29430] loop2: detected capacity change from 0 to 512 [ 506.164749][T29430] EXT4-fs: Ignoring removed mblk_io_submit option [ 506.172344][T29430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 506.195007][T29430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 506.203784][T29430] System zones: 1-12 [ 506.210614][T29430] EXT4-fs (loop2): 1 truncate cleaned up [ 506.220957][T29432] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9695'. [ 506.242567][T29430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.256445][T29432] 0{X功: renamed from 31{X功 (while UP) [ 506.275500][T29432] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 506.388259][T29445] random: crng reseeded on system resumption [ 506.476778][T29448] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9700'. [ 507.299091][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.341497][T29470] loop3: detected capacity change from 0 to 512 [ 507.364101][T29470] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 507.381465][T29472] loop4: detected capacity change from 0 to 1024 [ 507.411846][T29472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.481046][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.485851][T29472] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 507.521777][T29476] loop3: detected capacity change from 0 to 1024 [ 507.562626][T29476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.611407][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.615062][T29483] loop2: detected capacity change from 0 to 764 [ 507.639056][T29483] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 507.679195][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.708797][T29486] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9714'. [ 508.082439][T29508] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9719'. [ 508.158176][T29514] loop4: detected capacity change from 0 to 512 [ 508.190700][T29514] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 508.296622][T29525] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9725'. [ 508.321768][T29525] 1{X功: renamed from 30{X功 (while UP) [ 508.344563][T29525] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 508.547764][T29532] random: crng reseeded on system resumption [ 508.917966][T29540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9730'. [ 508.989769][T29545] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9732'. [ 509.727652][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 509.727669][ T29] audit: type=1326 audit(509.681:42073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.1.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 509.756896][ T29] audit: type=1326 audit(509.681:42074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29537 comm="syz.1.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 509.843662][ T29] audit: type=1326 audit(509.801:42075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29576 comm="syz.1.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 509.894711][ T29] audit: type=1326 audit(509.801:42076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29576 comm="syz.1.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 509.917843][ T29] audit: type=1326 audit(509.801:42077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29576 comm="syz.1.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 509.940845][ T29] audit: type=1326 audit(509.801:42078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29576 comm="syz.1.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 509.963884][ T29] audit: type=1326 audit(509.801:42079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29576 comm="syz.1.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 509.986887][ T29] audit: type=1326 audit(509.801:42080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29576 comm="syz.1.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 510.009914][ T29] audit: type=1326 audit(509.801:42081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29576 comm="syz.1.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 510.032915][ T29] audit: type=1326 audit(509.801:42082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29576 comm="syz.1.9743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 510.063755][T29587] netlink: 'syz.3.9746': attribute type 10 has an invalid length. [ 510.073051][T29587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9746'. [ 510.177935][T29595] random: crng reseeded on system resumption [ 510.257161][T29599] random: crng reseeded on system resumption [ 510.359494][T29603] loop4: detected capacity change from 0 to 1024 [ 510.421889][T29603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.957355][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.095816][T29623] netlink: 'syz.0.9759': attribute type 10 has an invalid length. [ 511.105402][T29623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9759'. [ 511.201616][T29627] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9761'. [ 511.212145][T29627] 0{X功: renamed from 31{X功 (while UP) [ 511.220478][T29627] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 511.298787][T29634] SELinux: failed to load policy [ 511.318813][T29634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9763'. [ 511.346508][T29634] bridge0: entered promiscuous mode [ 511.361541][T29634] macsec1: entered allmulticast mode [ 511.366893][T29634] bridge0: entered allmulticast mode [ 511.386270][T29634] bridge0: port 4(macsec1) entered blocking state [ 511.392912][T29634] bridge0: port 4(macsec1) entered disabled state [ 511.414965][T29634] bridge0: left allmulticast mode [ 511.420099][T29634] bridge0: left promiscuous mode [ 512.344754][T29662] netlink: 'syz.4.9772': attribute type 10 has an invalid length. [ 512.353333][T29662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9772'. [ 512.390114][T29666] loop3: detected capacity change from 0 to 512 [ 512.397075][T29666] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.405404][T29666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 512.421223][T29666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 512.435720][T29666] System zones: 1-12 [ 512.444798][T29666] EXT4-fs (loop3): 1 truncate cleaned up [ 512.451438][T29671] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.453734][T29666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.499419][T29673] SELinux: failed to load policy [ 512.506946][T29673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9776'. [ 512.519201][T29673] bridge0: entered promiscuous mode [ 512.524516][T29673] macsec1: entered allmulticast mode [ 512.529880][T29673] bridge0: entered allmulticast mode [ 512.539115][T29673] bridge0: port 4(macsec1) entered blocking state [ 512.545608][T29673] bridge0: port 4(macsec1) entered disabled state [ 512.553551][T29673] bridge0: left allmulticast mode [ 512.558717][T29673] bridge0: left promiscuous mode [ 512.568729][T29671] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.689968][T29671] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.728665][T29678] random: crng reseeded on system resumption [ 512.749911][T29671] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.836509][T20430] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.868639][T20430] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.920695][T20430] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.932018][T29684] loop2: detected capacity change from 0 to 512 [ 512.954921][T29684] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 512.992198][T20430] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.168615][T29698] netlink: 'syz.2.9786': attribute type 10 has an invalid length. [ 513.176507][T29698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9786'. [ 513.247740][T29702] loop4: detected capacity change from 0 to 512 [ 513.254304][T29702] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.263699][T29703] loop2: detected capacity change from 0 to 512 [ 513.270359][T29703] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.282361][T29702] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 513.292300][T29703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 513.307913][T29702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 513.315889][T29702] System zones: 1-12 [ 513.328709][T29703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 513.336645][T29703] System zones: 1-12 [ 513.400545][T29703] EXT4-fs (loop2): 1 truncate cleaned up [ 513.488546][T29703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.746881][T29702] EXT4-fs (loop4): 1 truncate cleaned up [ 513.753071][T29702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.859000][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.875482][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.919252][T29714] loop3: detected capacity change from 0 to 512 [ 513.947064][T29714] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.971416][T29714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 514.061891][T29714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 514.082615][T29714] System zones: 1-12 [ 514.090358][T29714] EXT4-fs (loop3): 1 truncate cleaned up [ 514.098109][T29714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.178638][T29722] random: crng reseeded on system resumption [ 514.219435][T29725] loop4: detected capacity change from 0 to 512 [ 514.226180][T29725] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.232929][T29725] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 514.244244][T29725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 514.253680][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.266069][T29725] System zones: 1-12 [ 514.278019][T29725] EXT4-fs (loop4): 1 truncate cleaned up [ 514.332446][T29725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.640022][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9800'. [ 514.769532][T29746] loop2: detected capacity change from 0 to 2048 [ 514.969360][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.998254][T29749] loop3: detected capacity change from 0 to 764 [ 515.006225][T29749] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 515.110385][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.345350][T29755] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9806'. [ 515.442470][T29761] random: crng reseeded on system resumption [ 515.588527][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 515.588544][ T29] audit: type=1326 audit(515.491:42429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.617758][ T29] audit: type=1326 audit(515.491:42430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.640830][ T29] audit: type=1326 audit(515.491:42431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.663956][ T29] audit: type=1326 audit(515.491:42432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.687283][ T29] audit: type=1326 audit(515.491:42433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.710283][ T29] audit: type=1326 audit(515.491:42434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.733369][ T29] audit: type=1326 audit(515.491:42435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.756463][ T29] audit: type=1326 audit(515.491:42436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.779419][ T29] audit: type=1326 audit(515.491:42437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.802408][ T29] audit: type=1326 audit(515.491:42438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29769 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 515.876933][T29787] loop3: detected capacity change from 0 to 512 [ 515.887473][T29787] EXT4-fs: Ignoring removed mblk_io_submit option [ 515.895430][T29787] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 515.921182][T29787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 515.930185][T29787] System zones: 1-12 [ 515.935203][T29787] EXT4-fs (loop3): 1 truncate cleaned up [ 515.941640][T29787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.956155][T29792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.963102][T29795] loop4: detected capacity change from 0 to 1024 [ 516.011809][T29795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.034592][T29792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.101244][T29792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.129516][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.160946][T29792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.170513][T29803] random: crng reseeded on system resumption [ 516.238298][T20702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.253694][T20447] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.265700][T20447] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.279818][T20447] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.350939][T29806] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.351336][T29808] random: crng reseeded on system resumption [ 516.513537][T29806] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.634913][T29806] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.751176][T29806] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.771851][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.988833][T29838] random: crng reseeded on system resumption [ 517.706691][T29856] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9843'. [ 517.805697][T20430] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.817596][T29856] 1{X功: renamed from 30{X功 (while UP) [ 517.831360][T29856] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 517.856698][T20430] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.875625][T20430] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.910621][T20430] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.919004][T29863] loop4: detected capacity change from 0 to 512 [ 517.934220][T29863] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.954241][T29863] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 517.981968][T29867] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9848'. [ 518.003199][T29863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 518.012589][T29872] random: crng reseeded on system resumption [ 518.031079][T29863] System zones: 1-12 [ 518.043971][T29863] EXT4-fs (loop4): 1 truncate cleaned up [ 518.060356][T29863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.265087][T29894] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9857'. [ 518.275658][T29894] 0{X功: renamed from 31{X功 (while UP) [ 518.291646][T29894] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 518.365233][T29902] loop2: detected capacity change from 0 to 764 [ 518.374345][T29902] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 518.430856][T29910] loop3: detected capacity change from 0 to 512 [ 518.437502][T29910] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.444222][T29910] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 518.455422][T29910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 518.463481][T29910] System zones: 1-12 [ 518.468215][T29910] EXT4-fs (loop3): 1 truncate cleaned up [ 518.474521][T29910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.799461][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.095003][T29931] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9871'. [ 519.117586][T29931] 0{X功: renamed from 31{X功 (while UP) [ 519.134647][T29931] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 519.292297][T29933] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.472607][T29933] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.529017][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.567371][T29945] SELinux: failed to load policy [ 519.578766][T29947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9877'. [ 519.594509][T29933] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.624661][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9878'. [ 519.636763][T29945] bridge0: entered promiscuous mode [ 519.643425][T29945] macsec1: entered allmulticast mode [ 519.648943][T29945] bridge0: entered allmulticast mode [ 519.656176][T29945] bridge0: port 4(macsec1) entered blocking state [ 519.662758][T29945] bridge0: port 4(macsec1) entered disabled state [ 519.732361][T29945] bridge0: left allmulticast mode [ 519.737593][T29945] bridge0: left promiscuous mode [ 519.762998][T29933] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.825011][T29955] random: crng reseeded on system resumption [ 519.955181][T29960] random: crng reseeded on system resumption [ 520.426208][T29978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9889'. [ 520.457805][T20430] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.497486][T20430] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.517420][T20430] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.538941][T20430] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.568383][T29982] netlink: 'syz.2.9891': attribute type 10 has an invalid length. [ 520.576249][T29982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9891'. [ 520.615622][T29984] SELinux: failed to load policy [ 520.632778][T29984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9892'. [ 520.668855][T29984] bridge0: entered promiscuous mode [ 520.692134][T29984] macsec1: entered allmulticast mode [ 520.697510][T29984] bridge0: entered allmulticast mode [ 520.716503][T29984] bridge0: port 4(macsec1) entered blocking state [ 520.723135][T29984] bridge0: port 4(macsec1) entered disabled state [ 520.731108][T29988] random: crng reseeded on system resumption [ 520.749492][T29984] bridge0: left allmulticast mode [ 520.754587][T29984] bridge0: left promiscuous mode [ 520.866987][T29996] loop2: detected capacity change from 0 to 1024 [ 520.876240][T29998] loop3: detected capacity change from 0 to 512 [ 520.894188][T29998] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.912280][T29998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 520.930644][T29996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.945452][T29998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 520.955241][T29998] System zones: 1-12 [ 520.959575][T29998] EXT4-fs (loop3): 1 truncate cleaned up [ 520.965710][T29998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.033817][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 521.033836][ T29] audit: type=1326 audit(520.991:42608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.063132][ T29] audit: type=1326 audit(520.991:42609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.098574][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.109122][ T29] audit: type=1326 audit(520.991:42610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.132193][ T29] audit: type=1326 audit(520.991:42611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.155293][ T29] audit: type=1326 audit(520.991:42612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.178426][ T29] audit: type=1326 audit(520.991:42613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.201634][ T29] audit: type=1326 audit(520.991:42614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.224627][ T29] audit: type=1326 audit(520.991:42615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.248043][ T29] audit: type=1326 audit(520.991:42616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.271161][ T29] audit: type=1326 audit(520.991:42617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30007 comm="syz.0.9899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 521.303944][T30014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9901'. [ 521.609776][T30028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.049285][T30028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.062614][T30031] random: crng reseeded on system resumption [ 522.086493][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.109569][T30028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.155593][T30045] loop3: detected capacity change from 0 to 512 [ 522.162533][T30045] EXT4-fs: Ignoring removed mblk_io_submit option [ 522.217241][T30045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 522.227689][T30028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.241736][T30045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 522.260301][T30045] System zones: 1-12 [ 522.265807][T30045] EXT4-fs (loop3): 1 truncate cleaned up [ 522.284302][T21290] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.288178][T30045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.311432][T20430] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.380412][T30051] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.418318][T20430] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.460746][T20430] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.535901][T30051] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.561307][T30061] random: crng reseeded on system resumption [ 522.673439][T30051] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.734182][T30066] SELinux: failed to load policy [ 522.749998][T30066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9922'. [ 522.783281][T30051] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.828376][T30066] bridge0: entered promiscuous mode [ 522.833876][T30066] macsec1: entered allmulticast mode [ 522.839282][T30066] bridge0: entered allmulticast mode [ 522.846171][T30066] bridge0: port 4(macsec1) entered blocking state [ 522.853255][T30066] bridge0: port 4(macsec1) entered disabled state [ 522.874475][T30066] bridge0: left allmulticast mode [ 522.879623][T30066] bridge0: left promiscuous mode [ 522.942930][T30071] random: crng reseeded on system resumption [ 523.021908][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.089169][T30087] netlink: 'syz.0.9931': attribute type 10 has an invalid length. [ 523.096920][T30089] loop3: detected capacity change from 0 to 512 [ 523.097137][T30087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9931'. [ 523.103741][T30089] EXT4-fs: Ignoring removed mblk_io_submit option [ 523.137641][T30089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 523.160688][T30089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 523.171248][T30089] System zones: 1-12 [ 523.175920][T30089] EXT4-fs (loop3): 1 truncate cleaned up [ 523.182479][T30089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.228108][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.270261][T30095] SELinux: failed to load policy [ 523.276865][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9934'. [ 523.296352][T30095] bridge0: entered promiscuous mode [ 523.308830][T30095] macsec1: entered allmulticast mode [ 523.314167][T30095] bridge0: entered allmulticast mode [ 523.322795][T30099] loop4: detected capacity change from 0 to 512 [ 523.329419][T30099] EXT4-fs: Ignoring removed mblk_io_submit option [ 523.337151][T30095] bridge0: port 4(macsec1) entered blocking state [ 523.343675][T30095] bridge0: port 4(macsec1) entered disabled state [ 523.350684][T30099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 523.361955][T30095] bridge0: left allmulticast mode [ 523.367071][T30095] bridge0: left promiscuous mode [ 523.373700][T30099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 523.381829][T30099] System zones: 1-12 [ 523.389276][T30099] EXT4-fs (loop4): 1 truncate cleaned up [ 523.398305][T30099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.431866][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.480094][T30104] loop4: detected capacity change from 0 to 512 [ 523.489330][T30104] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 523.510109][T30106] loop3: detected capacity change from 0 to 512 [ 523.526862][T30106] EXT4-fs: Ignoring removed mblk_io_submit option [ 523.541785][T30108] loop4: detected capacity change from 0 to 1024 [ 523.549001][T30106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 523.560734][T30106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 523.571567][T30108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.572791][T30106] System zones: 1-12 [ 523.598510][T30106] EXT4-fs (loop3): 1 truncate cleaned up [ 523.604579][T30106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.633755][T30118] netlink: 'syz.1.9943': attribute type 10 has an invalid length. [ 523.641701][T30118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9943'. [ 523.688488][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.749843][T30123] SELinux: failed to load policy [ 523.757663][T30123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9945'. [ 523.770631][T30123] bridge0: entered promiscuous mode [ 523.775959][T30123] macsec1: entered allmulticast mode [ 523.781310][T30123] bridge0: entered allmulticast mode [ 523.789336][T30123] bridge0: port 4(macsec1) entered blocking state [ 523.795821][T30123] bridge0: port 4(macsec1) entered disabled state [ 523.804059][T30123] bridge0: left allmulticast mode [ 523.809155][T30123] bridge0: left promiscuous mode [ 523.986146][T30128] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.129671][T30128] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.267458][T30128] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.393357][T30128] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.410319][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.442934][T30141] loop3: detected capacity change from 0 to 512 [ 524.460884][T30141] EXT4-fs: Ignoring removed mblk_io_submit option [ 524.480752][T30141] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 524.502143][T30141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 524.519894][T30141] System zones: 1-12 [ 524.529504][T30141] EXT4-fs (loop3): 1 truncate cleaned up [ 524.543193][T30141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.634867][T20447] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.686411][T20447] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.764243][T20447] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.795649][T20447] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.815867][T20447] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.841884][T20447] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.863864][T20447] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.873013][T30158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9958'. [ 524.883092][T20447] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.897459][T30154] random: crng reseeded on system resumption [ 524.973563][T30167] 1{X功: renamed from 30{X功 (while UP) [ 524.983234][T30167] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 525.114360][T30173] SELinux: failed to load policy [ 525.134870][T30173] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 525.227138][T30180] random: crng reseeded on system resumption [ 525.404045][T30191] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.435014][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.483345][T30191] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.506459][T30195] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.535355][T30191] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.566323][T30195] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.605880][T30191] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.670205][T30195] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.715601][T30195] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.825963][T21290] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.851315][T21290] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.876229][T21290] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.900231][T21290] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.241347][T30204] SELinux: failed to load policy [ 526.248428][T30204] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 526.271200][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 526.271266][ T29] audit: type=1326 audit(526.231:43098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30205 comm="syz.1.9979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290adebe9 code=0x0 [ 526.866757][T30211] random: crng reseeded on system resumption [ 526.892251][T30213] __nla_validate_parse: 2 callbacks suppressed [ 526.892264][T30213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9982'. [ 527.037540][ T29] audit: type=1400 audit(527.001:43099): avc: denied { bind } for pid=30222 comm="syz.3.9986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 527.056689][T30224] loop3: detected capacity change from 0 to 128 [ 527.063610][ T29] audit: type=1400 audit(527.001:43100): avc: denied { name_bind } for pid=30222 comm="syz.3.9986" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 527.085167][ T29] audit: type=1400 audit(527.001:43101): avc: denied { node_bind } for pid=30222 comm="syz.3.9986" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 527.296023][T30232] random: crng reseeded on system resumption [ 527.378482][T30235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.430794][T30235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.471741][T30235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.520474][T30235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.584347][T21290] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.595741][T21290] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.606612][T21290] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.618509][T21290] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.988278][T30243] random: crng reseeded on system resumption [ 528.012587][T30245] netlink: 'syz.3.9994': attribute type 10 has an invalid length. [ 528.020545][T30245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9994'. [ 528.065438][ T29] audit: type=1326 audit(528.021:43102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30248 comm="syz.2.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 528.067980][T30249] FAULT_INJECTION: forcing a failure. [ 528.067980][T30249] name failslab, interval 1, probability 0, space 0, times 0 [ 528.088775][ T29] audit: type=1326 audit(528.021:43103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30248 comm="syz.2.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 528.101190][T30249] CPU: 0 UID: 0 PID: 30249 Comm: syz.2.9996 Not tainted syzkaller #0 PREEMPT(voluntary) [ 528.101220][T30249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.101235][T30249] Call Trace: [ 528.101242][T30249] [ 528.101252][T30249] __dump_stack+0x1d/0x30 [ 528.101272][T30249] dump_stack_lvl+0xe8/0x140 [ 528.101291][T30249] dump_stack+0x15/0x1b [ 528.101361][T30249] should_fail_ex+0x265/0x280 [ 528.101504][T30249] should_failslab+0x8c/0xb0 [ 528.101538][T30249] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 528.101580][T30249] ? sidtab_sid2str_get+0xa0/0x130 [ 528.101654][T30249] kmemdup_noprof+0x2b/0x70 [ 528.101689][T30249] sidtab_sid2str_get+0xa0/0x130 [ 528.101720][T30249] security_sid_to_context_core+0x1eb/0x2e0 [ 528.101829][T30249] security_sid_to_context+0x27/0x40 [ 528.101856][T30249] selinux_lsmprop_to_secctx+0x67/0xf0 [ 528.101886][T30249] security_lsmprop_to_secctx+0x43/0x80 [ 528.101924][T30249] audit_log_task_context+0x77/0x190 [ 528.102027][T30249] audit_log_task+0xf4/0x250 [ 528.102107][T30249] audit_seccomp+0x61/0x100 [ 528.102156][T30249] ? __seccomp_filter+0x68c/0x10d0 [ 528.102183][T30249] __seccomp_filter+0x69d/0x10d0 [ 528.102213][T30249] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 528.102302][T30249] ? vfs_write+0x7e8/0x960 [ 528.102329][T30249] ? __rcu_read_unlock+0x4f/0x70 [ 528.102356][T30249] ? __fget_files+0x184/0x1c0 [ 528.102390][T30249] __secure_computing+0x82/0x150 [ 528.102431][T30249] syscall_trace_enter+0xcf/0x1e0 [ 528.102461][T30249] do_syscall_64+0xac/0x200 [ 528.102562][T30249] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 528.102594][T30249] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 528.102694][T30249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.102743][T30249] RIP: 0033:0x7f86520aebe9 [ 528.102765][T30249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.102791][T30249] RSP: 002b:00007f8650b17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 528.102860][T30249] RAX: ffffffffffffffda RBX: 00007f86522e5fa0 RCX: 00007f86520aebe9 [ 528.102878][T30249] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 528.102894][T30249] RBP: 00007f8650b17090 R08: 0000000000000000 R09: 0000000000000000 [ 528.102960][T30249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.102977][T30249] R13: 00007f86522e6038 R14: 00007f86522e5fa0 R15: 00007ffef5a66b28 [ 528.103001][T30249] [ 528.103012][T30249] audit: error in audit_log_task_context [ 528.124267][ T29] audit: type=1326 audit(528.021:43104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30248 comm="syz.2.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 528.294587][T30256] loop3: detected capacity change from 0 to 1024 [ 528.298258][ T29] audit: type=1326 audit(528.021:43105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30248 comm="syz.2.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 528.298297][ T29] audit: type=1326 audit(528.021:43106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30248 comm="syz.2.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86520ad550 code=0x7ffc0000 [ 528.341138][T30256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.512083][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.549407][T30266] loop3: detected capacity change from 0 to 1024 [ 528.567438][T30266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.631426][T30270] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10003'. [ 528.642824][T30266] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 528.655836][T30270] 0{X功: renamed from 31{X功 (while UP) [ 528.667795][T30270] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 528.716617][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.742055][T30278] netlink: 'syz.0.10006': attribute type 10 has an invalid length. [ 528.750215][T30278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10006'. [ 528.779517][T20702] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.799518][T20702] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.822392][T20702] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.832589][T30287] loop3: detected capacity change from 0 to 764 [ 528.851051][T30287] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 528.859216][T20702] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.866644][T30285] random: crng reseeded on system resumption [ 528.902049][T30291] SELinux: failed to load policy [ 528.909102][T30291] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 529.106848][T30306] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10015'. [ 529.116159][T30306] 1{X功: renamed from 30{X功 (while UP) [ 529.124652][T30306] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 529.183182][T30309] loop3: detected capacity change from 0 to 764 [ 529.191563][T30309] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 529.399309][T30322] netlink: 'syz.3.10019': attribute type 10 has an invalid length. [ 529.407384][T30322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10019'. [ 529.500105][T30328] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.572020][T30328] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.644593][T30328] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.724464][T30328] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.819790][T30330] SELinux: failed to load policy [ 529.828561][T30330] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 530.006105][T20702] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.056971][T20702] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.114955][T20447] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.170326][T20447] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.249597][T30344] loop3: detected capacity change from 0 to 512 [ 530.267136][T30344] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.274053][T30344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 530.284798][T30344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 530.294272][T30344] System zones: 1-12 [ 530.298447][T30344] EXT4-fs (loop3): 1 truncate cleaned up [ 530.304545][T30344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.433737][T30352] netlink: 'syz.1.10031': attribute type 10 has an invalid length. [ 531.441747][T30352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10031'. [ 531.552359][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.588287][T30362] SELinux: failed to load policy [ 531.595450][T30362] syz2: rxe_newlink: already configured on vxcan1 [ 531.606292][T30364] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10037'. [ 531.643554][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 531.643569][ T29] audit: type=1326 audit(531.601:43286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.4.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84eef9ebe9 code=0x7ffc0000 [ 531.726547][ T29] audit: type=1326 audit(531.681:43287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.749726][ T29] audit: type=1326 audit(531.681:43288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.754081][T30375] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10040'. [ 531.791279][ T29] audit: type=1326 audit(531.681:43289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.814449][ T29] audit: type=1326 audit(531.681:43290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.814464][T30375] 1{X功: renamed from 30{X功 (while UP) [ 531.843809][ T29] audit: type=1326 audit(531.681:43291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.867066][ T29] audit: type=1326 audit(531.681:43292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.890285][ T29] audit: type=1326 audit(531.681:43293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.913423][ T29] audit: type=1326 audit(531.681:43294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.936517][ T29] audit: type=1326 audit(531.711:43295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30374 comm="syz.2.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86520aebe9 code=0x7ffc0000 [ 531.965960][T30375] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 532.014922][T30380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10041'. [ 532.126804][T30383] loop3: detected capacity change from 0 to 512 [ 532.133829][T30383] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.142221][T30383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 532.171532][T30383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 532.183270][T30372] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.205333][T30383] System zones: 1-12 [ 532.241157][T30383] EXT4-fs (loop3): 1 truncate cleaned up [ 532.278977][T30383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.492957][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.829778][T30372] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.859131][T30399] SELinux: failed to load policy [ 532.875870][T30393] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.910300][T30397] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.939401][T30399] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 532.946584][T30372] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.994115][T30393] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.073549][T30397] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.104799][T30372] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.116162][T30405] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10052'. [ 533.143165][T30393] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.193952][T30397] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.246297][T30393] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.258428][T30413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10054'. [ 533.303280][T30397] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.303779][T30415] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10055'. [ 533.327090][T30415] 1{X功: renamed from 30{X功 (while UP) [ 533.334780][T30415] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 533.456234][ T30] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.469123][T21290] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.487542][T21290] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.520704][T21290] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.529008][T21290] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.538541][T21290] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.575711][T21290] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.605649][T21290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.622221][T30430] netlink: 'syz.4.10061': attribute type 10 has an invalid length. [ 533.630320][T30430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10061'. [ 533.691955][T30438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10065'. [ 533.721665][T30440] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10066'. [ 533.732881][T30440] 0{X功: renamed from 31{X功 (while UP) [ 533.740854][T30440] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 533.760404][T30441] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10064'. [ 534.276106][T30466] netlink: 'syz.2.10074': attribute type 10 has an invalid length. [ 534.284088][T30466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10074'. [ 534.565673][T30476] loop4: detected capacity change from 0 to 512 [ 534.572598][T30476] EXT4-fs: Ignoring removed mblk_io_submit option [ 534.581270][T30476] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 534.592681][T30476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 534.602129][T30476] System zones: 1-12 [ 534.607008][T30476] EXT4-fs (loop4): 1 truncate cleaned up [ 534.613761][T30476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.132367][T30481] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10079'. [ 535.189178][T20447] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.208092][T20447] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.227367][T20447] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.260729][T20412] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.299231][T30491] loop2: detected capacity change from 0 to 1024 [ 535.319282][T30491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.344636][T30499] netlink: 'syz.0.10086': attribute type 10 has an invalid length. [ 535.388257][T30497] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.432185][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.464260][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.474375][T30503] netlink: 'syz.0.10090': attribute type 10 has an invalid length. [ 535.527040][T30497] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.619300][T30497] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.732655][T30518] SELinux: failed to load policy [ 535.792958][T30526] syz2: rxe_newlink: already configured on vxcan1 [ 535.821771][T30497] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.976565][T30530] netlink: 'syz.2.10098': attribute type 10 has an invalid length. [ 536.031459][T30532] 1{X功: renamed from 30{X功 (while UP) [ 536.040618][T30532] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 536.181025][T30536] loop2: detected capacity change from 0 to 764 [ 536.188931][T30536] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 536.295392][T30538] netlink: 'syz.1.10102': attribute type 10 has an invalid length. [ 536.511197][T30556] SELinux: failed to load policy [ 536.517981][T30556] syz2: rxe_newlink: already configured on vxcan1 [ 536.527401][T30556] bridge0: entered promiscuous mode [ 536.532652][T30556] macsec1: entered allmulticast mode [ 536.537979][T30556] bridge0: entered allmulticast mode [ 536.569038][T30560] netlink: 'syz.2.10110': attribute type 10 has an invalid length. [ 536.598494][T30562] 1{X功: renamed from 30{X功 (while UP) [ 536.611647][T30562] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 536.636466][T30567] netlink: 'syz.2.10113': attribute type 10 has an invalid length. [ 536.648230][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 536.648245][ T29] audit: type=1326 audit(536.601:43648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.677517][ T29] audit: type=1326 audit(536.601:43649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.700849][ T29] audit: type=1326 audit(536.601:43650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.723977][ T29] audit: type=1326 audit(536.601:43651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.747080][ T29] audit: type=1326 audit(536.601:43652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.770285][ T29] audit: type=1326 audit(536.611:43653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.793334][ T29] audit: type=1326 audit(536.611:43654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.816355][ T29] audit: type=1326 audit(536.611:43655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.839444][ T29] audit: type=1326 audit(536.611:43656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.862522][ T29] audit: type=1326 audit(536.611:43657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30561 comm="syz.1.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 536.961017][T30575] loop2: detected capacity change from 0 to 764 [ 536.969169][T30575] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 537.583426][T30589] random: crng reseeded on system resumption [ 537.657143][T30591] SELinux: failed to load policy [ 537.665880][T30591] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 537.676711][T30591] bridge0: entered promiscuous mode [ 537.682084][T30591] macsec1: entered allmulticast mode [ 537.687449][T30591] bridge0: entered allmulticast mode [ 537.804365][T30598] __nla_validate_parse: 11 callbacks suppressed [ 537.804381][T30598] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10124'. [ 537.819766][T30598] 0{X功: renamed from 31{X功 (while UP) [ 537.827325][T30598] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 537.903299][T30602] netlink: 'syz.0.10126': attribute type 10 has an invalid length. [ 537.912167][T30602] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10126'. [ 537.954099][T30606] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10128'. [ 538.024543][T30616] random: crng reseeded on system resumption [ 538.070041][T30618] SELinux: failed to load policy [ 538.076711][T30618] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 538.085959][T30618] bridge0: entered promiscuous mode [ 538.091616][T30618] macsec1: entered allmulticast mode [ 538.096923][T30618] bridge0: entered allmulticast mode [ 538.124456][T30622] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10135'. [ 538.135051][T30622] 0{X功: renamed from 31{X功 (while UP) [ 538.144015][T30622] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 538.613320][T30636] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10140'. [ 538.906467][T30643] netlink: 'syz.2.10142': attribute type 10 has an invalid length. [ 538.916285][T30643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10142'. [ 538.966154][T30649] random: crng reseeded on system resumption [ 538.996334][T30653] loop2: detected capacity change from 0 to 764 [ 539.003678][T30653] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 539.179719][T30658] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.192485][T30660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10150'. [ 539.244834][T30664] loop2: detected capacity change from 0 to 1024 [ 539.247127][T30658] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.261256][T30664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.301328][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.319736][T30669] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10153'. [ 539.351504][T30658] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.412259][T30658] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.448673][T30677] netlink: 'syz.2.10156': attribute type 10 has an invalid length. [ 539.456768][T30677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10156'. [ 539.560497][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.695633][T21290] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.705562][T21290] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.713927][T30686] loop4: detected capacity change from 0 to 512 [ 539.720550][T21290] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.720747][T30686] EXT4-fs: Ignoring removed mblk_io_submit option [ 539.736916][T30686] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 539.780354][T30686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 539.792394][T30686] System zones: 1-12 [ 539.796965][T30686] EXT4-fs (loop4): 1 truncate cleaned up [ 539.803786][T30686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.687791][T30694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10162'. [ 540.960454][T30707] netlink: 'syz.2.10167': attribute type 10 has an invalid length. [ 540.998529][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.159745][T21290] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.168900][T30720] loop2: detected capacity change from 0 to 1024 [ 541.181955][T21290] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.199365][T21290] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.208562][T21290] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.219663][T30720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.359165][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.384588][T30732] loop3: detected capacity change from 0 to 1024 [ 541.519398][T30732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.890173][T27125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.918991][T30744] netlink: 'syz.3.10179': attribute type 10 has an invalid length. [ 541.963785][T30746] netlink: 'syz.2.10182': attribute type 10 has an invalid length. [ 542.038972][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 542.039012][ T29] audit: type=1326 audit(542.001:43957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30723 comm="syz.0.10175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 542.068372][ T29] audit: type=1326 audit(542.001:43958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30723 comm="syz.0.10175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0abbebe9 code=0x7ffc0000 [ 542.101888][ T29] audit: type=1400 audit(542.051:43959): avc: granted { setsecparam } for pid=30750 comm="syz.3.10185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 542.244747][T30758] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.335821][T30758] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.373670][T30760] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.415351][T30758] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.457757][T30760] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.512412][T30758] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.553522][T30760] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.633620][T30760] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.973459][T30768] loop2: detected capacity change from 0 to 1024 [ 542.999852][T30768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.036505][T25723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.637641][T30779] netlink: 'syz.1.10194': attribute type 10 has an invalid length. [ 543.645777][T30779] __nla_validate_parse: 4 callbacks suppressed [ 543.645959][T30779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10194'. [ 543.715842][T30783] netlink: 'syz.1.10196': attribute type 10 has an invalid length. [ 543.723847][T30783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10196'. [ 543.750136][ T29] audit: type=1326 audit(543.711:43960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30784 comm="syz.1.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 543.773364][ T29] audit: type=1326 audit(543.711:43961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30784 comm="syz.1.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 543.796530][ T29] audit: type=1326 audit(543.711:43962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30784 comm="syz.1.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 543.819713][ T29] audit: type=1326 audit(543.711:43963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30784 comm="syz.1.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 543.842817][ T29] audit: type=1326 audit(543.711:43964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30784 comm="syz.1.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 543.865875][ T29] audit: type=1326 audit(543.711:43965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30784 comm="syz.1.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 543.888985][ T29] audit: type=1326 audit(543.711:43966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30784 comm="syz.1.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe290adebe9 code=0x7ffc0000 [ 544.064542][T30795] loop4: detected capacity change from 0 to 512 [ 544.072326][T30795] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.079052][T30795] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 544.091044][T30795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 544.099126][T30795] System zones: 1-12 [ 544.103510][T30795] EXT4-fs (loop4): 1 truncate cleaned up [ 544.110809][T30795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.522675][T30795] ================================================================== [ 544.530807][T30795] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 544.538655][T30795] [ 544.540995][T30795] write to 0xffffea00051f2658 of 8 bytes by task 30797 on cpu 0: [ 544.548721][T30795] __filemap_remove_folio+0x1a5/0x2a0 [ 544.554118][T30795] folio_unmap_invalidate+0x1dd/0x360 [ 544.559510][T30795] invalidate_inode_pages2_range+0x27c/0x3d0 [ 544.565525][T30795] filemap_invalidate_pages+0x16d/0x1a0 [ 544.571118][T30795] kiocb_invalidate_pages+0x6e/0x80 [ 544.576340][T30795] __iomap_dio_rw+0x5d4/0x1250 [ 544.581124][T30795] iomap_dio_rw+0x40/0x90 [ 544.585464][T30795] ext4_file_write_iter+0xad9/0xf00 [ 544.590693][T30795] iter_file_splice_write+0x666/0xa60 [ 544.596093][T30795] direct_splice_actor+0x156/0x2a0 [ 544.601202][T30795] splice_direct_to_actor+0x312/0x680 [ 544.606570][T30795] do_splice_direct+0xda/0x150 [ 544.611332][T30795] do_sendfile+0x380/0x650 [ 544.615760][T30795] __x64_sys_sendfile64+0x105/0x150 [ 544.620969][T30795] x64_sys_call+0x2bb0/0x2ff0 [ 544.625656][T30795] do_syscall_64+0xd2/0x200 [ 544.630177][T30795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.636073][T30795] [ 544.638396][T30795] read to 0xffffea00051f2658 of 8 bytes by task 30795 on cpu 1: [ 544.646025][T30795] folio_mapping+0xa1/0x120 [ 544.650550][T30795] folio_wait_writeback+0x43/0x140 [ 544.655672][T30795] file_write_and_wait_range+0x20b/0x2c0 [ 544.661402][T30795] generic_buffers_fsync_noflush+0x45/0x120 [ 544.667303][T30795] ext4_sync_file+0x1ab/0x690 [ 544.671982][T30795] vfs_fsync_range+0x10a/0x130 [ 544.676753][T30795] ext4_buffered_write_iter+0x34f/0x3c0 [ 544.682322][T30795] ext4_file_write_iter+0xdbf/0xf00 [ 544.687542][T30795] iter_file_splice_write+0x666/0xa60 [ 544.692928][T30795] direct_splice_actor+0x156/0x2a0 [ 544.698040][T30795] splice_direct_to_actor+0x312/0x680 [ 544.703417][T30795] do_splice_direct+0xda/0x150 [ 544.708183][T30795] do_sendfile+0x380/0x650 [ 544.712614][T30795] __x64_sys_sendfile64+0x105/0x150 [ 544.717836][T30795] x64_sys_call+0x2bb0/0x2ff0 [ 544.722520][T30795] do_syscall_64+0xd2/0x200 [ 544.727041][T30795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.732943][T30795] [ 544.735264][T30795] value changed: 0xffff888119c836a0 -> 0x0000000000000000 [ 544.742369][T30795] [ 544.744704][T30795] Reported by Kernel Concurrency Sanitizer on: [ 544.750854][T30795] CPU: 1 UID: 0 PID: 30795 Comm: syz.4.10200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 544.760755][T30795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.770814][T30795] ================================================================== [ 544.920146][T28450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.232545][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.242942][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.254407][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.265564][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.482710][T20447] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.494113][T20447] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.505571][ T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.516807][ T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0