last executing test programs: 895.338586ms ago: executing program 2 (id=162): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 757.433829ms ago: executing program 2 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x100a}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x3}, 0x1801}], 0x1, 0x0, 0x0) 747.674018ms ago: executing program 1 (id=168): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xfffaffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = fsopen(&(0x7f0000001500)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000cc0)="cd99a0036a5c", 0x6}], 0x2, &(0x7f0000000b40)=[@ip_retopts={{0x10}}], 0x10}, 0x24008004) close(r1) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc64a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x50}}, 0x4000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r10}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kvm_age_hva\x00', r11, 0x0, 0x10003}, 0x18) 642.87037ms ago: executing program 1 (id=170): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x19, 0x3d00, 0x1575}) 620.34128ms ago: executing program 2 (id=171): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 592.349101ms ago: executing program 3 (id=174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in=@local, @in6=@mcast1, 0x4e24, 0x8, 0x4e23, 0x1, 0x2, 0x0, 0x20, 0x2}, {0x0, 0xfffffffffffffff9, 0x3, 0x80080, 0x6, 0x4, 0x1, 0x7}, {0x1, 0x3ff, 0x9, 0x1}, 0x4, 0x400000, 0x1, 0x1, 0x1}, {{@in6=@loopback, 0x4d2, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x1, 0x1, 0x68, 0xf, 0x2ba, 0x7}}, 0xe8) 576.868971ms ago: executing program 1 (id=176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) ioctl$TUNSETGROUP(r2, 0x400454ce, r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) 487.884843ms ago: executing program 1 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x45}, 0x18) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 467.205763ms ago: executing program 3 (id=181): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 408.043704ms ago: executing program 1 (id=184): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x240445, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpquota}, {@noquota}, {@quota}, {@noload}, {@noload}]}, 0x0, 0x50c, &(0x7f0000001440)="$eJzs3c9rHG0dAPDvbHZr06Zv8qoHfcH6o5W0aHeTxrbBQ60geiqo9V5jsgkhm2zIbtomFE3xDxBEVPCkFy+Cf4AgBS8eRSjoWVFRRFs9eNCO7O4kTdPdZNtus2n284HJPM8zM/t9ng0zO8/Mw0wAA+tjEXEjIp6maXoxIkaz8lw2xVZraqz35PH92caURJre+kcSSVa2/VlJNj+dbXYyIr76pYhvJC/GrW1sLs1UKuW1LF+qL6+WahublxaXZxbKC+WVqanJq9PXpq9MT/SknWci4voX/vL97/z0i9d/+em7f7z9twvfbFRrJFu+ux0vKb/fwlbTC83vYvcGa68Y7CjKN1uYGW63xtALJQ/ecJ0AAGivcY7//oj4RERcjNEY2v90FgAAAHgLpZ8bif8mEWl7JzqUAwAAAG+RXHMMbJIrZmMBRiKXKxZbY3g/GKdylWqt/qn56vrKXGus7FgUcvOLlfJENlZ4LApJIz/ZTD/LX96Tn4qIdyPie6PDzXxxtlqZ6/fFDwAAABgQp/f0//892ur/AwAAAMfMWL8rAAAAALxx+v8AAABw/On/AwAAwLH25Zs3G1O6/f7ruTsb60vVO5fmyrWl4vL6bHG2urZaXKhWF5rP7Fs+6PMq1erqZ2Jl/V6pXq7VS7WNzdvL1fWV+u3F516BDQAAAByidz/68PdJRGx9drg5NZzobtMuVwOOqvxOKsnmbXbrP7zTmv/5kCoFHIqhflcA6Jt8vysA9E2h3xUA+i45YHnHwTu/yeYf7219AACA3hv/cOf7/7l9t9zafzFw5NmJYXC5/w+Dq3n/v9uRvE4W4FgpOAOAgffa9/8PlKYvVSEAAKDnRppTkitml/dGIpcrFiPONF8LUEjmFyvliYh4JyJ+N1p4XyM/2dwyObDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pGkSKQAAAHCsReT+mvyq9Sz/8dHzI3uvD5xI/jMa2StC7/7o1g/uzdTra5ON8n/ulNd/mJVf7scVDAAAABgIL/UC/+1++nY/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66cnj+7Pb02HG/fvnI2KsXfx8nGzOT0YhIk79K4n8ru2SiBjqQfzhxp8PtYufNKq1E7Jd/OEexN96sG/8GMu+hXbxT/cgPgyyh43jz409+1+6e432+18+4rn8q+p8/Iud499Qh/3/TJcx3nv081LH+A8i3su3P/5sx086xD/XZfyvf21zs9Oy9McR421/f5LnYpXqy6ul2sbmpcXlmYXyQnllamry6vS16SvTE6X5xUo5+9s2xnc/8oun+7X/VIf4Ywe0/3yX7f/fo3uPP9BKFtrFv3CuTfxf/yRb48X4uey375NZurF8fDu91UrvdvZnvz27X/vnOrT/oP//hS7bf/Er3/5Tl6sCAIegtrG5NFOplNeObaLRSz8C1RjMxI2jUY1OiW/19APTNG32HF/jc5I4Cl9LM9HvIxMAANBrz076+10TAAAAAAAAAAAAAAAAAAAAGFyH8TixvTG3dlJJLx6hDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQE/8PAAD//xaa2hE=") r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) listen(0xffffffffffffffff, 0x0) 407.887794ms ago: executing program 0 (id=185): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000001340)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "2874b1", 0x18, 0x11, 0x0, @local, @empty, {[], {0x4e21, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x4}}}}}}}, 0x0) 407.507824ms ago: executing program 4 (id=194): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 401.578114ms ago: executing program 0 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) msgsnd(0x0, &(0x7f0000000800)={0x2, "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"}, 0xfe9, 0x800) 386.550934ms ago: executing program 3 (id=187): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x19, 0x3d00, 0x1575}) 347.536875ms ago: executing program 4 (id=188): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x81, 0xfffffffffffffffe) 331.368915ms ago: executing program 0 (id=189): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000800000200000000000000000008"}}}]}, 0x48}}, 0x0) 288.953306ms ago: executing program 4 (id=190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) ioctl$TUNSETGROUP(r2, 0x400454ce, r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) 239.347876ms ago: executing program 0 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 238.963636ms ago: executing program 2 (id=192): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 226.100756ms ago: executing program 4 (id=193): unshare(0x24060400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 212.526076ms ago: executing program 3 (id=195): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x20000) 116.128218ms ago: executing program 0 (id=196): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) 115.979978ms ago: executing program 3 (id=197): socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0x5, 0x5}, 0x2c) 103.373889ms ago: executing program 4 (id=198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) 94.298099ms ago: executing program 0 (id=199): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0xdc, 0x31, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x100882, 0x7ff, 0x6, 0x9, 0xb, 0x2, 0x3ff, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r2, 0x0) syz_io_uring_setup(0x277e, &(0x7f00000000c0)={0x0, 0x3d86, 0x2, 0x1, 0x196}, &(0x7f0000000000), &(0x7f0000000280)) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) 77.976609ms ago: executing program 2 (id=200): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="9115463ecc79", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 48.537249ms ago: executing program 1 (id=201): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x81, 0xfffffffffffffffe) 48.262509ms ago: executing program 3 (id=202): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 48.096319ms ago: executing program 4 (id=203): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) 0s ago: executing program 2 (id=204): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300001e, 0x62033, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001c80000000000000000000000000b6000000000000"], 0x50) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(0xffffffffffffffff, &(0x7f0000001b00)="3e214f0deee0e2609361d796ad7459e18a62b163d42e984084f8e13c5a393b00000000800000019f57adc1fd080bc542458529e6fe1797d3257af57434955f935c8072d088203d703e5cc5b50bae822bad16b3edf1d8a411591360181832f7950077cc846f0dcd0ab1e311aa6e36afa0b6632781bdb1c38752e214bceaca516b7e9fdb0fe432595bbdf9c5db318cf6f8fdba85118ea044ddc34341f975a45149a4ee", 0xa2) sendfile(r4, r3, 0x0, 0x7ffff000) fcntl$setlease(r3, 0x400, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r5}, &(0x7f0000000340), &(0x7f0000004040)}, 0x20) fallocate(r2, 0x0, 0x0, 0x1001f0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000200)='vegas\x00', 0x6) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 24.919982][ T29] audit: type=1400 audit(1752719128.639:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.920979][ T3291] cgroup: Unknown subsys name 'net' [ 24.942696][ T29] audit: type=1400 audit(1752719128.639:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.970069][ T29] audit: type=1400 audit(1752719128.669:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.181614][ T3291] cgroup: Unknown subsys name 'cpuset' [ 25.187707][ T3291] cgroup: Unknown subsys name 'rlimit' [ 25.339048][ T29] audit: type=1400 audit(1752719129.059:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.362384][ T29] audit: type=1400 audit(1752719129.059:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.382949][ T29] audit: type=1400 audit(1752719129.059:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.394121][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.403423][ T29] audit: type=1400 audit(1752719129.059:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.432308][ T29] audit: type=1400 audit(1752719129.059:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.457103][ T29] audit: type=1400 audit(1752719129.059:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.458364][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.480373][ T29] audit: type=1400 audit(1752719129.139:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.638259][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.661026][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 26.712961][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.771122][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.779645][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.786772][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.793916][ T3303] bridge_slave_0: entered allmulticast mode [ 26.800355][ T3303] bridge_slave_0: entered promiscuous mode [ 26.807003][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.814154][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.821328][ T3307] bridge_slave_0: entered allmulticast mode [ 26.827669][ T3307] bridge_slave_0: entered promiscuous mode [ 26.844797][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.851878][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.858996][ T3303] bridge_slave_1: entered allmulticast mode [ 26.865589][ T3303] bridge_slave_1: entered promiscuous mode [ 26.871892][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.878984][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.886264][ T3307] bridge_slave_1: entered allmulticast mode [ 26.892871][ T3307] bridge_slave_1: entered promiscuous mode [ 26.901409][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.942519][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.960118][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.982125][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.001494][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.010575][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.017690][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.024814][ T3316] bridge_slave_0: entered allmulticast mode [ 27.031084][ T3316] bridge_slave_0: entered promiscuous mode [ 27.042324][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.049388][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.056605][ T3304] bridge_slave_0: entered allmulticast mode [ 27.063144][ T3304] bridge_slave_0: entered promiscuous mode [ 27.076393][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.083510][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.090587][ T3316] bridge_slave_1: entered allmulticast mode [ 27.096969][ T3316] bridge_slave_1: entered promiscuous mode [ 27.107515][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.114586][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.121742][ T3304] bridge_slave_1: entered allmulticast mode [ 27.127985][ T3304] bridge_slave_1: entered promiscuous mode [ 27.145494][ T3303] team0: Port device team_slave_0 added [ 27.158665][ T3307] team0: Port device team_slave_0 added [ 27.169706][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.179285][ T3303] team0: Port device team_slave_1 added [ 27.195048][ T3307] team0: Port device team_slave_1 added [ 27.201518][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.216123][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.244257][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.253587][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.260515][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.286442][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.297290][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.304375][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.311582][ T3312] bridge_slave_0: entered allmulticast mode [ 27.317812][ T3312] bridge_slave_0: entered promiscuous mode [ 27.338613][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.345590][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.371548][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.384790][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.391934][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.399125][ T3312] bridge_slave_1: entered allmulticast mode [ 27.405555][ T3312] bridge_slave_1: entered promiscuous mode [ 27.411984][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.419014][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.444927][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.456119][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.463110][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.489229][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.500572][ T3316] team0: Port device team_slave_0 added [ 27.512223][ T3304] team0: Port device team_slave_0 added [ 27.525787][ T3316] team0: Port device team_slave_1 added [ 27.537168][ T3304] team0: Port device team_slave_1 added [ 27.555100][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.578403][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.597533][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.604532][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.630582][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.641700][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.648642][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.674803][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.685734][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.692722][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.718698][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.740296][ T3303] hsr_slave_0: entered promiscuous mode [ 27.746226][ T3303] hsr_slave_1: entered promiscuous mode [ 27.761466][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.768408][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.794341][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.811434][ T3307] hsr_slave_0: entered promiscuous mode [ 27.817372][ T3307] hsr_slave_1: entered promiscuous mode [ 27.823248][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.830834][ T3307] Cannot create hsr debugfs directory [ 27.850136][ T3312] team0: Port device team_slave_0 added [ 27.875954][ T3316] hsr_slave_0: entered promiscuous mode [ 27.882152][ T3316] hsr_slave_1: entered promiscuous mode [ 27.887943][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.895515][ T3316] Cannot create hsr debugfs directory [ 27.907182][ T3312] team0: Port device team_slave_1 added [ 27.945163][ T3304] hsr_slave_0: entered promiscuous mode [ 27.951163][ T3304] hsr_slave_1: entered promiscuous mode [ 27.957027][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.964715][ T3304] Cannot create hsr debugfs directory [ 27.976665][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.983701][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.009785][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.039637][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.046628][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.072727][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.171852][ T3312] hsr_slave_0: entered promiscuous mode [ 28.177835][ T3312] hsr_slave_1: entered promiscuous mode [ 28.183728][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.191359][ T3312] Cannot create hsr debugfs directory [ 28.239038][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.247584][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.259851][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.273062][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.304833][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.313624][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.322623][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.331365][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.363328][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.374865][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.383834][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.394738][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.432172][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.440960][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.449932][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.459096][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.481518][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.514289][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.523226][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.532681][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.548171][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.556059][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.570420][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.577515][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.592512][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.599669][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.611703][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.633890][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.654403][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.666547][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.673632][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.682573][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.689633][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.709518][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.727818][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.734880][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.751817][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.776626][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.783704][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.809736][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.827496][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.841718][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.853847][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.861045][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.885274][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.893708][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.900757][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.915241][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.933694][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.944164][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.959678][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.966807][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.975622][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.982717][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.998830][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.029858][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.056926][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.113435][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.147556][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.180306][ T3307] veth0_vlan: entered promiscuous mode [ 29.200807][ T3316] veth0_vlan: entered promiscuous mode [ 29.222903][ T3316] veth1_vlan: entered promiscuous mode [ 29.229917][ T3307] veth1_vlan: entered promiscuous mode [ 29.244040][ T3303] veth0_vlan: entered promiscuous mode [ 29.268482][ T3307] veth0_macvtap: entered promiscuous mode [ 29.279899][ T3303] veth1_vlan: entered promiscuous mode [ 29.291573][ T3316] veth0_macvtap: entered promiscuous mode [ 29.298342][ T3307] veth1_macvtap: entered promiscuous mode [ 29.313044][ T3312] veth0_vlan: entered promiscuous mode [ 29.323410][ T3316] veth1_macvtap: entered promiscuous mode [ 29.330458][ T3312] veth1_vlan: entered promiscuous mode [ 29.343714][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.357160][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.375035][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.383701][ T3303] veth0_macvtap: entered promiscuous mode [ 29.392027][ T3312] veth0_macvtap: entered promiscuous mode [ 29.400836][ T3312] veth1_macvtap: entered promiscuous mode [ 29.411092][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.419453][ T3303] veth1_macvtap: entered promiscuous mode [ 29.429117][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.437955][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.446760][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.455576][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.469521][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.478251][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.487089][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.495925][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.522155][ T3304] veth0_vlan: entered promiscuous mode [ 29.530067][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.539376][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.551607][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.568134][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.576154][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.584923][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.593794][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.602545][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.616992][ T3304] veth1_vlan: entered promiscuous mode [ 29.632108][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.640931][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.649716][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.658437][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670398][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.677298][ T3304] veth0_macvtap: entered promiscuous mode [ 29.706897][ T3304] veth1_macvtap: entered promiscuous mode [ 29.735874][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.760455][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.780601][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.789516][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.798268][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.807111][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.813885][ T3479] usb usb8: usbfs: process 3479 (syz.2.3) did not claim interface 0 before use [ 29.847461][ T3489] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.895440][ T3489] batadv_slave_1: entered promiscuous mode [ 29.912454][ T3384] IPVS: starting estimator thread 0... [ 29.975227][ T3508] loop2: detected capacity change from 0 to 1024 [ 30.004156][ T3508] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.014710][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 30.014730][ T29] audit: type=1400 audit(1752719133.729:100): avc: denied { prog_load } for pid=3515 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.017297][ T3508] EXT4-fs (loop2): bad geometry: block count 4294901760 exceeds size of device (512 blocks) [ 30.023351][ T29] audit: type=1400 audit(1752719133.729:101): avc: denied { bpf } for pid=3515 comm="syz.3.12" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.049327][ T3518] loop4: detected capacity change from 0 to 512 [ 30.052673][ T3500] IPVS: using max 2736 ests per chain, 136800 per kthread [ 30.125060][ T3518] ======================================================= [ 30.125060][ T3518] WARNING: The mand mount option has been deprecated and [ 30.125060][ T3518] and is ignored by this kernel. Remove the mand [ 30.125060][ T3518] option from the mount to silence this warning. [ 30.125060][ T3518] ======================================================= [ 30.138844][ T29] audit: type=1400 audit(1752719133.799:102): avc: denied { perfmon } for pid=3514 comm="syz.1.14" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.180639][ T29] audit: type=1400 audit(1752719133.809:103): avc: denied { prog_run } for pid=3515 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.215761][ T3524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 30.299690][ T29] audit: type=1400 audit(1752719133.989:104): avc: denied { create } for pid=3527 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.319985][ T29] audit: type=1400 audit(1752719133.999:105): avc: denied { write } for pid=3527 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.340120][ T29] audit: type=1400 audit(1752719133.999:106): avc: denied { read } for pid=3527 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.373173][ T3536] random: crng reseeded on system resumption [ 30.393511][ T3537] audit: audit_backlog=65 > audit_backlog_limit=64 [ 30.400103][ T3537] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 30.407793][ T3537] audit: backlog limit exceeded [ 30.421941][ T3538] loop2: detected capacity change from 0 to 512 [ 30.468198][ T3518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.483666][ T3538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.496423][ T3538] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.509709][ T3538] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #4: comm syz.2.18: corrupted inode contents [ 30.522174][ T3538] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #4: comm syz.2.18: mark_inode_dirty error [ 30.533911][ T3538] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #4: comm syz.2.18: corrupted inode contents [ 30.545918][ T3538] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.18: mark_inode_dirty error [ 30.547878][ T3518] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.580228][ T3538] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.18: Failed to acquire dquot type 1 [ 30.591853][ T3549] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #4: comm syz.2.18: corrupted inode contents [ 30.605019][ T3549] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #4: comm syz.2.18: mark_inode_dirty error [ 30.619080][ T3551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3551 comm=syz.3.23 [ 30.620977][ T3549] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #4: comm syz.2.18: corrupted inode contents [ 30.644681][ T3549] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.18: mark_inode_dirty error [ 30.656222][ T3549] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.18: Failed to acquire dquot type 1 [ 30.658601][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.682281][ T3549] syz.2.18 (3549) used greatest stack depth: 10408 bytes left [ 30.690485][ T3545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.708598][ T3555] loop0: detected capacity change from 0 to 512 [ 30.717225][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.728827][ T3557] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 30.736269][ T3557] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.737108][ T3555] EXT4-fs: Ignoring removed nobh option [ 30.786443][ T3563] loop2: detected capacity change from 0 to 256 [ 30.792476][ T3557] vhci_hcd: invalid port number 0 [ 30.798531][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.22: corrupted inode contents [ 30.815882][ T3555] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.22: mark_inode_dirty error [ 30.846974][ T3563] FAT-fs (loop2): Directory bread(block 64) failed [ 30.850829][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.22: corrupted inode contents [ 30.856612][ T3563] FAT-fs (loop2): Directory bread(block 65) failed [ 30.877529][ T3568] loop4: detected capacity change from 0 to 512 [ 30.884774][ T3563] FAT-fs (loop2): Directory bread(block 66) failed [ 30.891867][ T3568] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 30.900170][ T3563] FAT-fs (loop2): Directory bread(block 67) failed [ 30.907292][ T3568] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.29: inode #1661: comm syz.4.29: iget: illegal inode # [ 30.916890][ T3563] FAT-fs (loop2): Directory bread(block 68) failed [ 30.923562][ T3555] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.22: mark_inode_dirty error [ 30.947349][ T3570] loop3: detected capacity change from 0 to 512 [ 30.947437][ T3568] EXT4-fs (loop4): no journal found [ 30.954119][ T3563] FAT-fs (loop2): Directory bread(block 69) failed [ 30.958964][ T3568] EXT4-fs (loop4): can't get journal size [ 30.960662][ T3555] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.22: Failed to acquire dquot type 0 [ 30.971074][ T3563] FAT-fs (loop2): Directory bread(block 70) failed [ 30.973816][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.22: corrupted inode contents [ 30.989026][ T3568] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 31.002658][ T3555] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.22: mark_inode_dirty error [ 31.010660][ T3563] FAT-fs (loop2): Directory bread(block 71) failed [ 31.023206][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.22: corrupted inode contents [ 31.039387][ T3568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8056c118, mo2=0002] [ 31.047669][ T3568] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 31.047750][ T3555] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.22: mark_inode_dirty error [ 31.055831][ T3568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.093532][ T3563] FAT-fs (loop2): Directory bread(block 72) failed [ 31.100215][ T3563] FAT-fs (loop2): Directory bread(block 73) failed [ 31.107179][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.22: corrupted inode contents [ 31.120293][ T3555] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 31.129732][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.22: corrupted inode contents [ 31.144882][ T3570] EXT4-fs (loop3): 1 orphan inode deleted [ 31.151238][ T3570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.164729][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.175163][ T173] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 31.181251][ T3555] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.22: mark_inode_dirty error [ 31.193365][ T3570] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.215661][ T3555] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 31.238264][ T3570] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.30: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 257, max 0(0), depth 0(0) [ 31.254469][ T3577] loop4: detected capacity change from 0 to 128 [ 31.274063][ T3555] EXT4-fs (loop0): 1 truncate cleaned up [ 31.280162][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.311277][ T3555] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.325189][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.336370][ T3577] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.352041][ T3577] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.387873][ T3555] syz.0.22 (3555) used greatest stack depth: 9768 bytes left [ 31.405449][ T3582] loop3: detected capacity change from 0 to 1024 [ 31.422593][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.424785][ T3586] loop2: detected capacity change from 0 to 1024 [ 31.439556][ T3586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.446986][ T3582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.492443][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.523835][ T3586] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.36: Allocating blocks 497-513 which overlap fs metadata [ 31.538280][ T3595] SET target dimension over the limit! [ 31.552260][ T3586] EXT4-fs (loop2): Remounting filesystem read-only [ 31.560414][ T3585] EXT4-fs (loop2): pa ffff888106a5b070: logic 256, phys. 369, len 9 [ 31.580977][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.637942][ T3601] loop2: detected capacity change from 0 to 764 [ 31.648750][ T3601] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 32.033852][ T3545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.110670][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.205077][ T3615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.46'. [ 32.272540][ T3623] netlink: 'syz.4.50': attribute type 2 has an invalid length. [ 32.280302][ T3623] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 32.328705][ T3629] SELinux: policydb version 51586048 does not match my version range 15-34 [ 32.337620][ T3629] SELinux: failed to load policy [ 32.389880][ T3639] loop4: detected capacity change from 0 to 512 [ 32.397025][ T3639] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.408516][ T3639] EXT4-fs (loop4): 1 truncate cleaned up [ 32.414590][ T3639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.440023][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.472378][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.504321][ T3646] loop4: detected capacity change from 0 to 1024 [ 32.515435][ T3649] loop0: detected capacity change from 0 to 1024 [ 32.538018][ T3646] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 32.548959][ T3646] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 32.560444][ T3646] EXT4-fs (loop4): invalid journal inode [ 32.566176][ T3646] EXT4-fs (loop4): can't get journal size [ 32.572231][ T3649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.596485][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.598454][ T3656] random: crng reseeded on system resumption [ 32.623073][ T3656] Unrecognized hibernate image header format! [ 32.629169][ T3656] PM: hibernation: Image mismatch: architecture specific data [ 32.641451][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.674195][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.790036][ T3680] loop3: detected capacity change from 0 to 164 [ 32.808635][ T3680] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 32.858502][ T3686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.939834][ T3702] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 32.954418][ T3702] hsr0: entered promiscuous mode [ 32.960336][ T3707] loop4: detected capacity change from 0 to 512 [ 32.968914][ T3705] loop2: detected capacity change from 0 to 1024 [ 32.981827][ T3702] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 32.994307][ T3705] EXT4-fs: Ignoring removed orlov option [ 32.998254][ T3707] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.88: casefold flag without casefold feature [ 33.012834][ T3709] loop3: detected capacity change from 0 to 2048 [ 33.014469][ T3702] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 33.031608][ T3702] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 33.038741][ T3707] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.88: couldn't read orphan inode 15 (err -117) [ 33.047531][ T3705] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.066471][ T3545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.072186][ T3707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.110172][ T3709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.123637][ T3705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.142456][ T3545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.146541][ T3718] netlink: 'syz.0.91': attribute type 2 has an invalid length. [ 33.160397][ T3718] netlink: 'syz.0.91': attribute type 8 has an invalid length. [ 33.168126][ T3718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.91'. [ 33.177501][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.181665][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.197575][ T3705] netlink: 14 bytes leftover after parsing attributes in process `syz.2.81'. [ 33.208041][ T3705] hsr_slave_0: left promiscuous mode [ 33.219848][ T3705] hsr_slave_1: left promiscuous mode [ 33.245534][ T3723] loop9: detected capacity change from 0 to 7 [ 33.249764][ T3545] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.252457][ T3724] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET) [ 33.267379][ T3723] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.277562][ T3728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.95'. [ 33.294338][ T3723] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.300583][ T3545] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.302359][ T3723] loop9: unable to read partition table [ 33.315777][ T3545] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.325309][ T3723] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 33.325309][ T3723] ) failed (rc=-5) [ 33.336089][ T3727] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.367862][ T3727] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.382296][ T3734] loop4: detected capacity change from 0 to 1024 [ 33.388485][ T3727] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.390898][ T3545] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.401412][ T3727] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.429012][ T3727] Buffer I/O error on dev loop9, logical block 0, async page read [ 33.446239][ T3730] loop0: detected capacity change from 0 to 4096 [ 33.455703][ T3730] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.484718][ T3730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.497968][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.552370][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.558380][ T3744] loop3: detected capacity change from 0 to 128 [ 33.586260][ T3744] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.605875][ T3752] loop1: detected capacity change from 0 to 512 [ 33.613366][ T3744] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.623813][ T3747] loop4: detected capacity change from 0 to 256 [ 33.630356][ T3747] msdos: Unknown parameter '0xffffffffffffffff' [ 33.663935][ T3752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.680031][ T3757] loop2: detected capacity change from 0 to 512 [ 33.691948][ T3757] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #17: comm syz.2.107: iget: bogus i_mode (0) [ 33.695429][ T3752] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.711246][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.739999][ T3757] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.107: couldn't read orphan inode 17 (err -117) [ 33.772556][ T3761] loop4: detected capacity change from 0 to 512 [ 33.778923][ T3766] loop0: detected capacity change from 0 to 1024 [ 33.783034][ T3752] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.106: Failed to acquire dquot type 1 [ 33.787877][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.808487][ T3765] loop3: detected capacity change from 0 to 512 [ 33.816493][ T3765] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.835340][ T3766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.841268][ T3761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.852258][ T3757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.107: bg 0: block 7: invalid block bitmap [ 33.870299][ T3766] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.891271][ T3765] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.893953][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.901940][ T3761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.934844][ T3765] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.948353][ T3765] EXT4-fs (loop3): 1 truncate cleaned up [ 33.954448][ T3765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.965851][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.970964][ T3765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.986221][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.046040][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.084562][ T3780] loop3: detected capacity change from 0 to 512 [ 34.091674][ T3782] netlink: 'syz.2.117': attribute type 13 has an invalid length. [ 34.129488][ T3782] gretap0: refused to change device tx_queue_len [ 34.135874][ T3782] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.162771][ T3793] netlink: 156 bytes leftover after parsing attributes in process `syz.4.120'. [ 34.170682][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.200048][ T3780] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.211934][ T3782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 34.249076][ T3791] loop1: detected capacity change from 0 to 8192 [ 34.259121][ T3800] netlink: 440 bytes leftover after parsing attributes in process `syz.4.124'. [ 34.268224][ T3800] netlink: 52 bytes leftover after parsing attributes in process `syz.4.124'. [ 34.282899][ T3791] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.300469][ T3804] openvswitch: netlink: Message has 6 unknown bytes. [ 34.307434][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.377716][ T3813] loop0: detected capacity change from 0 to 512 [ 34.423728][ T3816] loop1: detected capacity change from 0 to 128 [ 34.430285][ T3816] EXT4-fs: Ignoring removed nobh option [ 34.437750][ T3813] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.494305][ T3813] EXT4-fs (loop0): 1 truncate cleaned up [ 34.506852][ T3816] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.510786][ T3813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.522846][ T3816] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.562580][ T3834] loop3: detected capacity change from 0 to 512 [ 34.592398][ T3813] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.129: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 34.601300][ T3834] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.138: Parent and EA inode have the same ino 15 [ 34.627345][ T3834] EXT4-fs (loop3): Remounting filesystem read-only [ 34.634750][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.636153][ T3834] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 34.654141][ T3813] EXT4-fs (loop0): Remounting filesystem read-only [ 34.660658][ T3834] EXT4-fs (loop3): 1 orphan inode deleted [ 34.667064][ T3834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.694896][ T3842] loop4: detected capacity change from 0 to 512 [ 34.713757][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.747760][ T3842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.770455][ T3842] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.796865][ T3842] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 34.821478][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.827834][ T3842] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 34.843349][ T3842] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.843349][ T3842] [ 34.853330][ T3842] EXT4-fs (loop4): Total free blocks count 0 [ 34.859345][ T3842] EXT4-fs (loop4): Free/Dirty block details [ 34.865346][ T3842] EXT4-fs (loop4): free_blocks=65280 [ 34.870652][ T3842] EXT4-fs (loop4): dirty_blocks=22 [ 34.875896][ T3842] EXT4-fs (loop4): Block reservation details [ 34.881954][ T3842] EXT4-fs (loop4): i_reserved_data_blocks=22 [ 34.902923][ T3860] loop0: detected capacity change from 0 to 512 [ 34.948097][ T3842] syz.4.143 (3842) used greatest stack depth: 9640 bytes left [ 34.964460][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.000712][ T3873] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 35.021573][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 35.021664][ T29] audit: type=1326 audit(1752719138.749:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.071495][ T29] audit: type=1326 audit(1752719138.749:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.121634][ T29] audit: type=1326 audit(1752719138.849:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.145146][ T29] audit: type=1326 audit(1752719138.849:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.150992][ T3880] loop1: detected capacity change from 0 to 512 [ 35.169240][ T29] audit: type=1326 audit(1752719138.849:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.201458][ T29] audit: type=1326 audit(1752719138.929:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.224713][ T29] audit: type=1326 audit(1752719138.929:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.248360][ T29] audit: type=1326 audit(1752719138.929:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.277165][ T29] audit: type=1326 audit(1752719138.999:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.300517][ T29] audit: type=1326 audit(1752719138.999:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da273e929 code=0x7ffc0000 [ 35.308353][ T3883] Zero length message leads to an empty skb [ 35.372196][ T3875] loop3: detected capacity change from 0 to 512 [ 35.441564][ T3870] Set syz1 is full, maxelem 65536 reached [ 35.448807][ T3875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.461335][ T3875] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.474537][ T3875] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #4: comm syz.3.153: corrupted inode contents [ 35.486635][ T3875] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #4: comm syz.3.153: mark_inode_dirty error [ 35.498684][ T3875] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #4: comm syz.3.153: corrupted inode contents [ 35.510551][ T3875] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.153: mark_inode_dirty error [ 35.521974][ T3875] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.153: Failed to acquire dquot type 1 [ 35.552611][ T3881] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #4: comm syz.3.153: corrupted inode contents [ 35.579236][ T3881] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #4: comm syz.3.153: mark_inode_dirty error [ 35.590912][ T3906] loop0: detected capacity change from 0 to 512 [ 35.617411][ T3881] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #4: comm syz.3.153: corrupted inode contents [ 35.645138][ T3881] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.153: mark_inode_dirty error [ 35.665997][ T3881] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.153: Failed to acquire dquot type 1 [ 35.719835][ T3914] capability: warning: `syz.0.173' uses 32-bit capabilities (legacy support in use) [ 35.741822][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.794290][ T3926] loop0: detected capacity change from 0 to 512 [ 35.894198][ T3936] loop1: detected capacity change from 0 to 512 [ 35.933034][ T3943] __nla_validate_parse: 2 callbacks suppressed [ 35.933053][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 36.077012][ T3956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 36.207758][ T3936] Set syz1 is full, maxelem 65536 reached [ 36.274559][ T3727] ================================================================== [ 36.282686][ T3727] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 36.289669][ T3727] [ 36.292024][ T3727] write to 0xffff8881023d3b14 of 4 bytes by task 3287 on cpu 0: [ 36.299664][ T3727] shmem_mknod+0x137/0x180 [ 36.304087][ T3727] shmem_create+0x34/0x50 [ 36.308432][ T3727] path_openat+0x1105/0x2170 [ 36.313048][ T3727] do_filp_open+0x109/0x230 [ 36.317579][ T3727] do_sys_openat2+0xa6/0x110 [ 36.322207][ T3727] __x64_sys_openat+0xf2/0x120 [ 36.326984][ T3727] x64_sys_call+0x1af/0x2fb0 [ 36.331576][ T3727] do_syscall_64+0xd2/0x200 [ 36.336078][ T3727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.341974][ T3727] [ 36.344301][ T3727] read to 0xffff8881023d3b14 of 4 bytes by task 3727 on cpu 1: [ 36.351846][ T3727] fill_mg_cmtime+0x5b/0x260 [ 36.356446][ T3727] generic_fillattr+0x24a/0x340 [ 36.361296][ T3727] shmem_getattr+0x181/0x200 [ 36.365892][ T3727] vfs_getattr_nosec+0x146/0x1e0 [ 36.370833][ T3727] vfs_statx+0x113/0x390 [ 36.375085][ T3727] vfs_fstatat+0x115/0x170 [ 36.379528][ T3727] __se_sys_newfstatat+0x55/0x260 [ 36.384573][ T3727] __x64_sys_newfstatat+0x55/0x70 [ 36.389612][ T3727] x64_sys_call+0x2c22/0x2fb0 [ 36.394294][ T3727] do_syscall_64+0xd2/0x200 [ 36.398799][ T3727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.404697][ T3727] [ 36.407019][ T3727] value changed: 0x3b85f197 -> 0x3b8f8195 [ 36.412733][ T3727] [ 36.415057][ T3727] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to send rpc fd=3 want=232 sent=0 n=-1 (errno 32: Broken pipe) [ 36.421222][ T3727] CPU: 1 UID: 0 PID: 3727 Comm: udevd Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 36.433204][ T3727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.443269][ T3727] ================================================================== [ 36.487408][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.585256][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.653974][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.773678][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.829549][ T51] bridge_slave_1: left allmulticast mode [ 36.835234][ T51] bridge_slave_1: left promiscuous mode [ 36.841054][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.849042][ T51] bridge_slave_0: left allmulticast mode [ 36.854728][ T51] bridge_slave_0: left promiscuous mode [ 36.860340][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.982929][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.992775][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.003335][ T51] bond0 (unregistering): Released all slaves [ 37.044482][ T51] hsr_slave_0: left promiscuous mode [ 37.050088][ T51] hsr_slave_1: left promiscuous mode [ 37.055674][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.063237][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.071937][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.079340][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.090296][ T51] veth1_macvtap: left promiscuous mode [ 37.096466][ T51] veth0_macvtap: left promiscuous mode [ 37.102675][ T51] veth1_vlan: left promiscuous mode [ 37.107966][ T51] veth0_vlan: left promiscuous mode [ 37.168486][ T51] team0 (unregistering): Port device team_slave_1 removed [ 37.177935][ T51] team0 (unregistering): Port device team_slave_0 removed [ 37.434717][ T51] IPVS: stop unused estimator thread 0... [ 37.505163][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.554090][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.603539][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.653608][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.725994][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.783582][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.854312][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.895225][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.974119][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.034435][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.083894][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.123491][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.197874][ T51] bridge_slave_1: left allmulticast mode [ 38.203707][ T51] bridge_slave_1: left promiscuous mode [ 38.209481][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.218469][ T51] bridge_slave_0: left allmulticast mode [ 38.224283][ T51] bridge_slave_0: left promiscuous mode [ 38.229950][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.238321][ T51] bridge_slave_1: left allmulticast mode [ 38.244029][ T51] bridge_slave_1: left promiscuous mode [ 38.249706][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.257512][ T51] bridge_slave_0: left allmulticast mode [ 38.263336][ T51] bridge_slave_0: left promiscuous mode [ 38.269033][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.277356][ T51] bridge_slave_1: left allmulticast mode [ 38.283096][ T51] bridge_slave_1: left promiscuous mode [ 38.288851][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.296588][ T51] bridge_slave_0: left allmulticast mode [ 38.302321][ T51] bridge_slave_0: left promiscuous mode [ 38.307997][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.413110][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.422829][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.432219][ T51] bond0 (unregistering): Released all slaves [ 38.503035][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.512677][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.523110][ T51] bond0 (unregistering): Released all slaves [ 38.573818][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.583577][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.592988][ T51] bond0 (unregistering): Released all slaves [ 38.636964][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.644463][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.653169][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.660635][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.669925][ T51] hsr_slave_0: left promiscuous mode [ 38.676381][ T51] hsr_slave_1: left promiscuous mode [ 38.683067][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.690542][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.698840][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.706351][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.717223][ T51] hsr_slave_0: left promiscuous mode [ 38.723011][ T51] hsr_slave_1: left promiscuous mode [ 38.728580][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.736007][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.743513][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.750880][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.765124][ T51] veth1_macvtap: left promiscuous mode [ 38.770598][ T51] veth0_macvtap: left promiscuous mode [ 38.776138][ T51] veth1_vlan: left promiscuous mode [ 38.781380][ T51] veth0_vlan: left promiscuous mode [ 38.786985][ T51] veth1_macvtap: left promiscuous mode [ 38.792559][ T51] veth0_macvtap: left promiscuous mode [ 38.798149][ T51] veth1_vlan: left promiscuous mode [ 38.803604][ T51] veth0_vlan: left promiscuous mode [ 38.809332][ T51] veth1_macvtap: left promiscuous mode [ 38.814821][ T51] veth0_macvtap: left promiscuous mode [ 38.820329][ T51] veth1_vlan: left promiscuous mode [ 38.825637][ T51] veth0_vlan: left promiscuous mode [ 38.941870][ T51] team0 (unregistering): Port device team_slave_1 removed [ 38.950848][ T51] team0 (unregistering): Port device team_slave_0 removed [ 39.001936][ T51] team0 (unregistering): Port device team_slave_1 removed [ 39.010719][ T51] team0 (unregistering): Port device team_slave_0 removed [ 39.060397][ T51] team0 (unregistering): Port device team_slave_1 removed [ 39.069806][ T51] team0 (unregistering): Port device team_slave_0 removed [ 39.673159][ T51] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.712504][ T51] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.762538][ T51] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.812456][ T51] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.878716][ T51] bridge_slave_1: left allmulticast mode [ 39.884515][ T51] bridge_slave_1: left promiscuous mode [ 39.890141][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.898161][ T51] bridge_slave_0: left allmulticast mode [ 39.903868][ T51] bridge_slave_0: left promiscuous mode [ 39.909516][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.993004][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.002623][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.011978][ T51] bond0 (unregistering): Released all slaves [ 40.044229][ T51] hsr_slave_0: left promiscuous mode [ 40.049922][ T51] hsr_slave_1: left promiscuous mode [ 40.056063][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.063605][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.071374][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.078772][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.089099][ T51] veth1_macvtap: left promiscuous mode [ 40.095541][ T51] veth0_macvtap: left promiscuous mode [ 40.101067][ T51] veth1_vlan: left promiscuous mode [ 40.106357][ T51] veth0_vlan: left promiscuous mode [ 40.167758][ T51] team0 (unregistering): Port device team_slave_1 removed [ 40.176965][ T51] team0 (unregistering): Port device team_slave_0 removed