last executing test programs: 3m58.16438388s ago: executing program 32 (id=108): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_config_ext={0xffffffffffffffff, 0x7fffffff}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @loopback, 0x4}, {0xa, 0x4e20, 0x101, @mcast1, 0xfffffffd}, r1, 0x1bd}}, 0x48) 3m47.007064545s ago: executing program 33 (id=422): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf6d0e000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 3m21.422230593s ago: executing program 34 (id=1218): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f0000000b40)=ANY=[@ANYBLOB="0008834adfdac3b9411979cc78d7df95433840e78aae1dac0a9184f55102d2174bd167cadb99afb804a83a581a4ecfc00edff224a63c7a249954a133062e9f62897dbc3d"], 0x1, 0x2a2, &(0x7f0000000340)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 3m11.432493501s ago: executing program 35 (id=1485): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x40000000000004, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2f8d, &(0x7f0000010400)={0x0, 0x86e5, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2m50.574799678s ago: executing program 36 (id=2123): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x80002014}) 2m44.92078884s ago: executing program 37 (id=2254): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/202, 0xca}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m41.437570749s ago: executing program 38 (id=2327): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xfffffffc, 0x9, 0xfffffff9, 0x8, 0x7, "a9b5f18ab8fc9d91cbb3c648a4a98b7b3ef297"}) write(r1, &(0x7f0000002e80)="a7", 0x1) 2m33.456117253s ago: executing program 7 (id=2516): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m33.397211226s ago: executing program 7 (id=2519): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000080)={0x40, 0x1, 0x7}) 2m33.343995959s ago: executing program 7 (id=2520): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)) 2m33.280331923s ago: executing program 7 (id=2523): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x21) 2m32.44784626s ago: executing program 7 (id=2546): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m32.314538888s ago: executing program 7 (id=2549): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$caif_seqpacket(0x25, 0x5, 0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m17.313769022s ago: executing program 39 (id=2549): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$caif_seqpacket(0x25, 0x5, 0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m29.652090016s ago: executing program 2 (id=4100): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'ip6gre0\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'wlan1\x00'}}) 1m29.56708045s ago: executing program 2 (id=4101): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r1, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") 1m29.379106181s ago: executing program 2 (id=4102): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2c) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3031, 0xffffffffffffffff, 0x651f4000) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) 1m29.179651852s ago: executing program 2 (id=4104): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x5, 0x12, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204, 0xff]}) write$UHID_INPUT2(r0, 0x0, 0x90) 1m28.955094395s ago: executing program 2 (id=4105): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x20, 0x32, 0x43a1bd76, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fstatfs(0xffffffffffffffff, 0x0) 1m28.432657245s ago: executing program 2 (id=4116): socketpair(0x1, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, 0x0) 1m28.432374075s ago: executing program 40 (id=4116): socketpair(0x1, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, 0x0) 1m20.679420856s ago: executing program 1 (id=4287): bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x600}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(r0, 0x0) 1m20.604291491s ago: executing program 1 (id=4291): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 1m20.402994652s ago: executing program 1 (id=4300): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 1m20.207146613s ago: executing program 1 (id=4304): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200203, 0x1) 1m19.978785726s ago: executing program 1 (id=4314): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=""/13, 0xd}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x22021, 0x0) 1m19.57498343s ago: executing program 1 (id=4316): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0x5501, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0xbe, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) 1m19.551237471s ago: executing program 41 (id=4316): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0x5501, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0xbe, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) 41.915139343s ago: executing program 5 (id=5291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 41.887564185s ago: executing program 5 (id=5292): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r0, 0x0, 0x5, 0x8) write$binfmt_elf64(r2, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 41.031523044s ago: executing program 5 (id=5327): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f5034000000008"], 0x9c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 40.932768289s ago: executing program 5 (id=5334): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 40.827244735s ago: executing program 5 (id=5340): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$kcm(0x2d, 0x2, 0x0) vmsplice(r1, &(0x7f0000001800)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 40.709245632s ago: executing program 5 (id=5345): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) sysinfo(&(0x7f00000000c0)=""/8) 40.646640176s ago: executing program 42 (id=5345): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) sysinfo(&(0x7f00000000c0)=""/8) 14.56518597s ago: executing program 4 (id=6033): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 14.510466973s ago: executing program 4 (id=6037): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x1, 'sh\x00', 0x36, 0x4, 0x6d}, 0x2c) 14.418322909s ago: executing program 4 (id=6042): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) read(r2, &(0x7f0000000240)=""/84, 0x54) write(r0, 0x0, 0x0) 13.52495361s ago: executing program 4 (id=6063): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x3, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 13.407141657s ago: executing program 4 (id=6065): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 13.299551072s ago: executing program 4 (id=6068): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 13.270724434s ago: executing program 43 (id=6068): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 3.772612395s ago: executing program 6 (id=6211): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x3, {0x0, 0x0, 0x1}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r2, 0x3, {0x0, 0xff}, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 3.754936506s ago: executing program 6 (id=6212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) accept(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1, 0x4}) 2.885780286s ago: executing program 6 (id=6230): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8932, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 2.848231038s ago: executing program 6 (id=6232): r0 = socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0x7, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) 1.334527354s ago: executing program 0 (id=6264): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c000180140003"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 979.565894ms ago: executing program 0 (id=6268): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 852.214701ms ago: executing program 0 (id=6270): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 788.845474ms ago: executing program 8 (id=6273): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 759.324556ms ago: executing program 8 (id=6275): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 715.840889ms ago: executing program 9 (id=6277): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 704.43427ms ago: executing program 0 (id=6278): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 599.895485ms ago: executing program 0 (id=6279): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000002b40), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 577.492237ms ago: executing program 9 (id=6280): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xffffff88}}}, &(0x7f0000000680)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) 519.13383ms ago: executing program 9 (id=6281): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0xfffffffd}, 0x14}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 438.843535ms ago: executing program 9 (id=6283): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 380.157088ms ago: executing program 3 (id=6284): write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 378.285178ms ago: executing program 0 (id=6294): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r3, 0x507, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8002}, 0x20000050) 332.814561ms ago: executing program 8 (id=6285): syz_pidfd_open(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) 332.584241ms ago: executing program 3 (id=6286): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 267.279025ms ago: executing program 3 (id=6287): r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 266.939124ms ago: executing program 6 (id=6288): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4000000000000008, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 191.350379ms ago: executing program 8 (id=6289): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2200040, &(0x7f0000003240)=ANY=[], 0x2, 0x33c, &(0x7f0000000340)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 191.007519ms ago: executing program 3 (id=6290): syz_clone(0x8001080, &(0x7f0000000800), 0x0, &(0x7f0000000900), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x5976, 0x9765, 0x2, 0x0, 0x0) 152.220981ms ago: executing program 6 (id=6291): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x2000) r1 = open(&(0x7f0000000240)='./file1\x00', 0x2c102, 0x6e) sendfile(r1, r1, 0x0, 0x800000009) 139.736192ms ago: executing program 9 (id=6292): mount$tmpfs(0x0, 0x0, 0x0, 0x420, 0x0) setresuid(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x466}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 119.667613ms ago: executing program 8 (id=6293): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'dvmrp0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000400)={0x0, 0x100000, 0x10100, 0x6, 0xcb}, &(0x7f0000000280)=0x0, &(0x7f0000000480)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 92.510094ms ago: executing program 3 (id=6295): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) 92.228554ms ago: executing program 9 (id=6296): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 58.368126ms ago: executing program 8 (id=6297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80004000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 0s ago: executing program 3 (id=6298): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): yz.0.4329'. [ 190.667919][T16239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.676463][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.703481][T16239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.759072][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 190.759088][ T28] audit: type=1326 audit(1770728463.841:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 190.791340][ T28] audit: type=1326 audit(1770728463.841:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 190.816097][T16279] bridge2: entered promiscuous mode [ 190.816638][ T28] audit: type=1326 audit(1770728463.841:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 190.818507][ T28] audit: type=1326 audit(1770728463.841:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 190.822828][T16279] bridge2: entered allmulticast mode [ 190.879769][ T28] audit: type=1326 audit(1770728463.841:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 190.903618][ T28] audit: type=1326 audit(1770728463.841:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 190.929556][ T28] audit: type=1326 audit(1770728463.841:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 190.953703][ T28] audit: type=1326 audit(1770728463.841:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 190.977840][ T28] audit: type=1326 audit(1770728463.841:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 191.002315][ T28] audit: type=1326 audit(1770728463.841:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.5.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 191.113759][T16239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.121942][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.149254][T16239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.182921][T16239] hsr_slave_0: entered promiscuous mode [ 191.189544][T16239] hsr_slave_1: entered promiscuous mode [ 191.200518][T16239] debugfs: 'hsr0' already exists in 'hsr' [ 191.206379][T16239] Cannot create hsr debugfs directory [ 191.694733][T16348] netlink: 'syz.0.4349': attribute type 4 has an invalid length. [ 191.696266][T16239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.718343][T16239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.754874][T16239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.767637][T16239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.849457][T16239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.869798][T16239] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.883167][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.890314][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.914907][T16372] ip6erspan0: entered promiscuous mode [ 191.929073][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.936547][ T5230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.100159][T16239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.194130][T16418] netlink: 'syz.5.4358': attribute type 10 has an invalid length. [ 192.235753][T16418] team0: Port device netdevsim1 added [ 192.352571][T16239] veth0_vlan: entered promiscuous mode [ 192.369457][T16438] netlink: 'syz.5.4361': attribute type 4 has an invalid length. [ 192.369824][T16239] veth1_vlan: entered promiscuous mode [ 192.498974][T16239] veth0_macvtap: entered promiscuous mode [ 192.537486][T16239] veth1_macvtap: entered promiscuous mode [ 192.551272][T16239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.571221][T16239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.588229][ T2491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.609115][ T2491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.628164][ T2491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.649870][ T2491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.029916][T16516] loop0: detected capacity change from 0 to 164 [ 193.174002][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4379'. [ 193.198334][T16534] xfrm1: entered promiscuous mode [ 193.204923][T16534] xfrm1: entered allmulticast mode [ 193.228357][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4379'. [ 194.326137][T16671] loop4: detected capacity change from 0 to 512 [ 194.355286][T16671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.382684][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4415'. [ 194.447923][T16686] SELinux: unknown common [ 194.569826][T16686] SELinux: failed to load policy [ 194.639167][T16700] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 194.646233][T16700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.654211][T16700] vhci_hcd vhci_hcd.0: Device attached [ 194.676754][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.686624][T16706] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4429'. [ 194.698374][T16700] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 194.723938][T16703] vhci_hcd: connection closed [ 194.724753][ T5230] vhci_hcd vhci_hcd.5: stop threads [ 194.734896][ T5230] vhci_hcd vhci_hcd.5: release socket [ 194.740390][ T5230] vhci_hcd vhci_hcd.5: disconnect device [ 194.898009][T16726] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4437'. [ 194.967817][T16726] bridge1: entered promiscuous mode [ 194.974489][T16726] bridge1: entered allmulticast mode [ 195.383080][T16775] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4459'. [ 195.477781][T16775] bridge1: entered promiscuous mode [ 195.484011][T16775] bridge1: entered allmulticast mode [ 195.570607][T10794] page_pool_release_retry() stalled pool shutdown: id 133, 1 inflight 60 sec [ 196.215800][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 196.215816][ T28] audit: type=1326 audit(1770728469.301:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 196.246512][ T28] audit: type=1326 audit(1770728469.301:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 196.285281][ T28] audit: type=1326 audit(1770728469.301:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 196.309118][ T28] audit: type=1326 audit(1770728469.301:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 196.332858][ T28] audit: type=1326 audit(1770728469.361:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 196.356596][ T28] audit: type=1326 audit(1770728469.361:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f628f3fbce2 code=0x7ffc0000 [ 196.380787][ T28] audit: type=1326 audit(1770728469.361:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f628f3fbd77 code=0x7ffc0000 [ 196.404871][ T28] audit: type=1326 audit(1770728469.361:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 196.428706][ T28] audit: type=1326 audit(1770728469.361:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 196.452803][ T28] audit: type=1326 audit(1770728469.361:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 196.510319][T16818] tipc: Started in network mode [ 196.515387][T16818] tipc: Node identity 405d, cluster identity 4711 [ 196.522147][T16818] tipc: Enabling of bearer rejected, failed to enable media [ 196.535901][T16811] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 197.176359][T16872] loop4: detected capacity change from 0 to 2048 [ 197.232614][T16872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.376495][ T5233] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 197.404061][ T5233] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 197.417473][ T5233] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.417473][ T5233] [ 197.428363][ T5233] EXT4-fs (loop4): Total free blocks count 0 [ 197.434455][ T5233] EXT4-fs (loop4): Free/Dirty block details [ 197.440411][ T5233] EXT4-fs (loop4): free_blocks=2415919504 [ 197.446229][ T5233] EXT4-fs (loop4): dirty_blocks=208 [ 197.452378][ T5233] EXT4-fs (loop4): Block reservation details [ 197.458736][ T5233] EXT4-fs (loop4): i_reserved_data_blocks=13 [ 197.476420][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.676316][T16904] loop5: detected capacity change from 0 to 128 [ 197.694323][T16904] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.838236][T16908] loop5: detected capacity change from 0 to 512 [ 197.859076][T16902] loop0: detected capacity change from 0 to 32768 [ 197.868579][T16908] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.889304][T16908] EXT4-fs (loop5): 1 truncate cleaned up [ 197.903713][T16908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.957861][T16902] loop0: p1 p3 < p5 p6 > [ 197.962497][T16902] loop0: partition table partially beyond EOD, truncated [ 198.154525][T15545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.267789][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 198.271488][ T3768] udevd[3768]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 198.281553][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 198.301492][ T9249] udevd[9249]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 198.672995][T16932] SELinux: failed to load policy [ 198.692996][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4529'. [ 198.737658][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812bf51c00: rx timeout, send abort [ 198.746952][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812bf51c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.775976][T16938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4529'. [ 199.104315][T16975] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.409951][T16995] loop5: detected capacity change from 0 to 256 [ 199.813816][T17012] loop0: detected capacity change from 0 to 1024 [ 199.840987][T17012] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.877672][T17012] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 199.908661][T17012] EXT4-fs (loop0): orphan cleanup on readonly fs [ 199.940596][T17012] EXT4-fs error (device loop0): ext4_acquire_dquot:6991: comm syz.0.4560: Failed to acquire dquot type 0 [ 199.952478][T17012] loop0: lost filesystem error report for type 5 error -117 [ 199.987570][T17012] EXT4-fs error (device loop0): ext4_acquire_dquot:6991: comm syz.0.4560: Failed to acquire dquot type 0 [ 200.006481][T17012] loop0: lost filesystem error report for type 5 error -117 [ 200.088407][T17012] EXT4-fs error (device loop0): ext4_free_blocks:6727: comm syz.0.4560: Freeing blocks not in datazone - block = 0, count = 4096 [ 200.112031][T17012] loop0: lost filesystem error report for type 5 error -117 [ 200.143756][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4565'. [ 200.180769][T17025] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4565'. [ 200.220525][T17012] EXT4-fs error (device loop0): ext4_acquire_dquot:6991: comm syz.0.4560: Failed to acquire dquot type 0 [ 200.233757][T17012] loop0: lost filesystem error report for type 5 error -117 [ 200.254633][T17012] EXT4-fs (loop0): 1 orphan inode deleted [ 200.307993][T17012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.394442][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.623188][T17058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4581'. [ 200.632238][T17058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4581'. [ 200.892166][T17090] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17090 comm=syz.9.4594 [ 201.014473][T17104] veth0: entered promiscuous mode [ 201.024954][T17104] veth0: left promiscuous mode [ 201.111125][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4603'. [ 201.174890][T17118] loop4: detected capacity change from 0 to 512 [ 201.192676][T17120] netlink: 'syz.9.4607': attribute type 1 has an invalid length. [ 201.222010][T17120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.246226][T17118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.284346][T17120] bond3: (slave geneve2): making interface the new active one [ 201.307398][T17118] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.324658][T17120] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 201.381246][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.621071][T17154] netlink: 'syz.3.4621': attribute type 13 has an invalid length. [ 202.047080][T17152] loop5: detected capacity change from 0 to 32768 [ 202.146245][T17161] loop0: detected capacity change from 0 to 512 [ 202.160925][T17161] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.261843][T17161] EXT4-fs (loop0): 1 truncate cleaned up [ 202.269689][T17161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.318929][ T3290] loop5: p1 p2 p3 < p5 p6 > [ 202.372027][ T3290] loop5: p2 size 16775168 extends beyond EOD, truncated [ 202.383012][ T3290] loop5: p5 start 4294970168 is beyond EOD, truncated [ 202.412598][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.429391][T17152] loop5: p1 p2 p3 < > [ 202.435405][T17152] loop5: p2 size 16775168 extends beyond EOD, truncated [ 202.484162][T17154] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.502230][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4626'. [ 202.538578][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 202.549101][ T3768] udevd[3768]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 202.550150][ T9249] udevd[9249]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 202.571520][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 202.628481][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 202.628650][ T3768] udevd[3768]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 202.744411][T17177] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4627'. [ 203.088025][T17154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.119642][T17154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.120137][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 203.120160][ T28] audit: type=1400 audit(1770728476.201:2534): avc: denied { remount } for pid=17184 comm="syz.0.4633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.674768][T17177] bridge1: entered promiscuous mode [ 203.680166][T17177] bridge1: entered allmulticast mode [ 203.771675][T13267] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.781255][T13267] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.792707][T13267] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.815434][T13267] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.903001][ T41] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.972425][ T41] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.003330][T17247] veth0: entered promiscuous mode [ 204.014733][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4656'. [ 204.027175][ T41] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.087382][ T41] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.120003][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4660'. [ 204.151660][ T28] audit: type=1326 audit(1770728477.241:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 204.180623][ T28] audit: type=1326 audit(1770728477.241:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 204.188804][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4660'. [ 204.208582][ T28] audit: type=1326 audit(1770728477.241:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 204.254637][T17234] chnl_net:caif_netlink_parms(): no params data found [ 204.254774][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4660'. [ 204.274394][ T28] audit: type=1326 audit(1770728477.311:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 204.361591][T17234] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.368783][T17234] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.397896][T17234] bridge_slave_0: entered allmulticast mode [ 204.405863][T17234] bridge_slave_0: entered promiscuous mode [ 204.417843][ T28] audit: type=1400 audit(1770728477.511:2539): avc: denied { bind } for pid=17279 comm="syz.5.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.516367][ T41] erspan0 (unregistering): left promiscuous mode [ 204.525814][ T41] gretap0 (unregistering): left promiscuous mode [ 204.538356][ T41] bond0 (unregistering): (slave geneve2): Releasing active interface [ 204.631792][ T41] bond1 (unregistering): Released all slaves [ 204.639977][ T41] bond0 (unregistering): Released all slaves [ 204.648388][T17234] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.655594][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.662909][T17234] bridge_slave_1: entered allmulticast mode [ 204.669630][T17234] bridge_slave_1: entered promiscuous mode [ 204.688897][T17234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.701650][T17234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.722036][ T41] hsr_slave_0: left promiscuous mode [ 204.753338][ T41] hsr_slave_1: left promiscuous mode [ 204.898244][T17234] team0: Port device team_slave_0 added [ 204.905346][T17234] team0: Port device team_slave_1 added [ 204.953422][T17234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.960450][T17234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.986805][T17234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.046457][T17234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.053609][T17234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.081314][T17234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.094027][T17353] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 205.103633][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.111116][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.172452][T17234] hsr_slave_0: entered promiscuous mode [ 205.182119][ T28] audit: type=1326 audit(1770728478.271:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17361 comm="syz.5.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 205.206866][ T28] audit: type=1326 audit(1770728478.271:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17361 comm="syz.5.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 205.232529][ T28] audit: type=1326 audit(1770728478.271:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17361 comm="syz.5.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 205.253479][T17234] hsr_slave_1: entered promiscuous mode [ 205.256335][ T28] audit: type=1326 audit(1770728478.271:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17361 comm="syz.5.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 205.262601][T17234] debugfs: 'hsr0' already exists in 'hsr' [ 205.291830][T17234] Cannot create hsr debugfs directory [ 205.358514][ T41] IPVS: stop unused estimator thread 0... [ 205.620456][T17234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.645675][T17427] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 205.645675][T17427] program syz.9.4702 not setting count and/or reply_len properly [ 205.646466][T17234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.680496][T17234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.712712][T17234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.800662][T17234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.820290][T17234] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.854241][T12720] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.866089][T13267] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.873330][T13267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.894877][T13267] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.902159][T13267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.926870][T17234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.016092][T17234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.041656][T17489] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 206.122667][T17234] veth0_vlan: entered promiscuous mode [ 206.142653][T17234] veth1_vlan: entered promiscuous mode [ 206.175047][T17234] veth0_macvtap: entered promiscuous mode [ 206.196113][T17234] veth1_macvtap: entered promiscuous mode [ 206.225765][T17234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.241126][T17234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.264798][ T5233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.289081][ T5233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.299342][ T5233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.311375][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4715'. [ 206.403895][ T5233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.428535][T17524] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4646'. [ 206.477667][T17534] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4718'. [ 206.519750][T17538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17538 comm=syz.4.4720 [ 206.768316][T17550] loop4: detected capacity change from 0 to 1024 [ 206.782582][T17550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 206.795728][T17550] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.809300][T17550] EXT4-fs (loop4): shut down requested (0) [ 206.825799][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 206.846909][T17199] kernel read not supported for file /vcs (pid: 17199 comm: kworker/1:13) [ 207.031257][T17574] netlink: 'syz.4.4734': attribute type 4 has an invalid length. [ 207.044757][T17574] netlink: 'syz.4.4734': attribute type 4 has an invalid length. [ 207.169472][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4736'. [ 207.186278][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4736'. [ 207.377323][T17592] loop4: detected capacity change from 0 to 128 [ 207.385048][T17592] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 207.395604][T17592] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.408701][T17592] ext2 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.453339][T16239] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.900294][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 207.901078][ T3612] Bluetooth: hci0: command 0x1003 tx timeout [ 208.270238][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 208.270254][ T28] audit: type=1400 audit(1770728481.351:2606): avc: denied { setopt } for pid=17615 comm="syz.5.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.629109][T17624] loop5: detected capacity change from 0 to 1024 [ 208.662019][T17624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.678155][ T28] audit: type=1400 audit(1770728481.771:2607): avc: denied { setattr } for pid=17623 comm="syz.5.4756" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.736204][T15545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.839983][T17632] netlink: 'syz.5.4759': attribute type 1 has an invalid length. [ 208.855704][T17632] bond0: entered promiscuous mode [ 208.861293][T17632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.875193][T17632] bond0: (slave bridge1): making interface the new active one [ 208.883314][T17632] bridge1: entered promiscuous mode [ 208.889352][T17632] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 208.894106][T17464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.947687][T17636] pim6reg1: entered promiscuous mode [ 208.953621][T17636] pim6reg1: entered allmulticast mode [ 209.080154][T17658] loop0: detected capacity change from 0 to 512 [ 209.100514][ T28] audit: type=1400 audit(1770728482.181:2608): avc: denied { listen } for pid=17657 comm="syz.9.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.120539][ T28] audit: type=1400 audit(1770728482.181:2609): avc: denied { accept } for pid=17657 comm="syz.9.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.157584][T17658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.185749][T17658] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.206285][T17658] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.4771: corrupted xattr block 33: overlapping e_value [ 209.224002][T17658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 209.234406][T17658] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.4771: corrupted xattr block 33: overlapping e_value [ 209.269864][T17676] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.4771: corrupted xattr block 33: overlapping e_value [ 209.270295][T17658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 209.294668][ T28] audit: type=1400 audit(1770728482.391:2610): avc: denied { read } for pid=17656 comm="syz.0.4771" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 209.351133][T17676] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 209.403827][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.672612][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4791'. [ 209.737618][T17720] loop0: detected capacity change from 0 to 128 [ 209.752301][T17720] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 209.767843][ T41] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.790306][ T41] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.799695][ T41] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.827103][ T41] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.853717][T17234] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.882951][T17723] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4794'. [ 209.924283][ T28] audit: type=1400 audit(1770728483.011:2611): avc: denied { getopt } for pid=17726 comm="syz.0.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.093831][T17739] ip6gre1: entered allmulticast mode [ 210.339701][T17760] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 210.387757][T17767] SELinux: failed to load policy [ 210.528810][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4821'. [ 210.766314][T17809] netlink: 'syz.9.4834': attribute type 1 has an invalid length. [ 210.783576][T17809] bond4: entered promiscuous mode [ 210.789007][T17809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.821064][T17809] bond4: (slave bridge1): making interface the new active one [ 210.828956][T17809] bridge1: entered promiscuous mode [ 210.837453][T17809] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 210.887784][ T28] audit: type=1400 audit(1770728483.971:2612): avc: denied { read } for pid=17820 comm="syz.0.4839" lport=62000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.932117][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4841'. [ 210.986581][ T28] audit: type=1326 audit(1770728740.079:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17833 comm="syz.3.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 211.012004][ T28] audit: type=1326 audit(1770728740.079:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17833 comm="syz.3.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 211.038297][ T28] audit: type=1326 audit(1770728740.079:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17833 comm="syz.3.4845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 211.116650][T17843] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4849'. [ 211.117439][T17840] SELinux: failed to load policy [ 211.145911][T17843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.315489][T17872] netlink: 'syz.4.4860': attribute type 1 has an invalid length. [ 211.330808][T17872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.537236][T17882] SELinux: failed to load policy [ 211.855284][T17912] loop0: detected capacity change from 0 to 1024 [ 211.874421][T17912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.917076][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.027340][T17924] program syz.9.4880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.092584][T17929] ip6gre3: entered promiscuous mode [ 212.098849][T17929] ip6gre3: entered allmulticast mode [ 212.851684][T17966] loop5: detected capacity change from 0 to 128 [ 212.866670][T17966] sg_write: data in/out 32732/8 bytes for SCSI command 0xbd-- guessing data in; [ 212.866670][T17966] program syz.5.4898 not setting count and/or reply_len properly [ 212.909298][T17970] netlink: 'syz.5.4900': attribute type 3 has an invalid length. [ 212.917803][T17970] netlink: 'syz.5.4900': attribute type 1 has an invalid length. [ 212.925804][T17970] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.4900'. [ 213.309168][T18009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.356226][ T5217] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.493162][T18041] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0000 i0000 l0 [ 213.947863][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4921'. [ 213.951243][T12720] tipc: Subscription rejected, illegal request [ 213.957819][T18114] netlink: 'syz.9.4921': attribute type 30 has an invalid length. [ 213.971212][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 213.971227][ T28] audit: type=1400 audit(1770728743.039:2628): avc: denied { connect } for pid=18111 comm="syz.5.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.490030][T18168] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0000 i0000 l0 [ 214.541552][T18171] syzkaller1: entered promiscuous mode [ 214.548003][T18171] syzkaller1: entered allmulticast mode [ 214.709108][T18183] SELinux: failed to load policy [ 214.744462][T18188] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4937'. [ 214.771170][T18190] SELinux: unknown common  [ 214.776212][T18190] SELinux: failed to load policy [ 214.822343][ T28] audit: type=1400 audit(1770728743.919:2629): avc: denied { bind } for pid=18197 comm="syz.9.4942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.165929][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4962'. [ 215.175219][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4962'. [ 215.197024][ T5217] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.197041][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4962'. [ 215.197061][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4962'. [ 215.213731][ T5217] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.234834][ T5217] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.248763][T13267] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.388338][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4974'. [ 215.411077][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.420780][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4974'. [ 215.461245][T18270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4975'. [ 215.545681][T18279] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 215.636506][T18291] loop4: detected capacity change from 0 to 1024 [ 215.652044][T18291] EXT4-fs: inline encryption not supported [ 215.668160][T18291] EXT4-fs: Ignoring removed nobh option [ 215.674426][T18291] EXT4-fs: Ignoring removed bh option [ 215.708018][T18291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.757942][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.769313][ T28] audit: type=1400 audit(1770728744.829:2630): avc: denied { lock } for pid=18288 comm="syz.4.4984" path="/134/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.814684][T18301] sctp: [Deprecated]: syz.0.4987 (pid 18301) Use of int in max_burst socket option. [ 215.814684][T18301] Use struct sctp_assoc_value instead [ 215.827490][ T28] audit: type=1326 audit(1770728744.919:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18305 comm="syz.3.4991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb362d1bf79 code=0x0 [ 215.873529][T18310] loop4: detected capacity change from 0 to 1024 [ 215.893629][T18308] netlink: 'syz.9.4992': attribute type 1 has an invalid length. [ 215.935942][T18310] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 215.953025][T18308] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 215.960667][T18310] System zones: 0-1, 3-8 [ 215.963849][T18308] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 215.968772][T18310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.992346][T18310] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.004229][T18308] bond5: (slave vxcan1): making interface the new active one [ 216.018780][T18308] bond5: (slave vxcan1): Enslaving as an active interface with an up link [ 216.035485][T18310] EXT4-fs error (device loop4): ext4_free_blocks:6727: comm syz.4.4988: Freeing blocks not in datazone - block = 0, count = 16 [ 216.083380][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 216.349846][ T28] audit: type=1400 audit(1770728745.439:2632): avc: denied { bind } for pid=18356 comm="syz.9.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.952958][T18373] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5015'. [ 217.380313][T18393] netlink: 'syz.3.5024': attribute type 4 has an invalid length. [ 217.410754][T18393] netlink: 'syz.3.5024': attribute type 4 has an invalid length. [ 217.582241][T18414] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5034'. [ 218.219829][T18447] batadv_slave_1: entered promiscuous mode [ 218.227988][T18446] batadv_slave_1: left promiscuous mode [ 218.337837][T18462] netlink: 'syz.0.5054': attribute type 1 has an invalid length. [ 218.394270][T18462] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 218.404731][T18462] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 218.433438][ T28] audit: type=1400 audit(1770728747.509:2633): avc: denied { watch } for pid=18468 comm="syz.5.5055" path="/proc/433/task" dev="proc" ino=55555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 218.492797][T18462] bond1: (slave vxcan3): making interface the new active one [ 218.506416][T18462] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 218.710304][T18494] syz_tun: entered allmulticast mode [ 218.747459][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 218.969773][T18510] loop5: detected capacity change from 0 to 128 [ 219.017007][T18512] netlink: 'syz.4.5073': attribute type 1 has an invalid length. [ 219.042030][T18512] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 219.052714][T18512] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 219.083321][T18512] bond2: (slave vxcan3): making interface the new active one [ 219.122583][T18517] loop0: detected capacity change from 0 to 512 [ 219.125099][T18512] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 219.195385][T18517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.218831][T18517] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.345526][ T28] audit: type=1326 audit(1770728748.389:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.4.5077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc17884bf79 code=0x0 [ 219.502232][ T28] audit: type=1400 audit(1770728748.599:2635): avc: denied { rename } for pid=18516 comm="syz.0.5074" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.758753][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.930918][T18548] loop5: detected capacity change from 0 to 1024 [ 219.963363][T18548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.000325][T15545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.017729][T18553] 9pnet: p9_errstr2errno: server reported unknown error ˙ [ 220.068599][T18570] veth1_to_bridge: entered allmulticast mode [ 220.082427][T18570] veth1_to_bridge: left allmulticast mode [ 220.095505][ T28] audit: type=1326 audit(1770728749.189:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.3.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 220.119348][ T28] audit: type=1326 audit(1770728749.189:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.3.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 220.146301][ T28] audit: type=1326 audit(1770728749.189:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.3.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 220.171564][ T28] audit: type=1326 audit(1770728749.189:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.3.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 220.217994][ T28] audit: type=1326 audit(1770728749.189:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.3.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 220.243092][ T28] audit: type=1326 audit(1770728749.189:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.3.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 220.268475][ T28] audit: type=1326 audit(1770728749.189:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.3.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 220.294444][ T28] audit: type=1326 audit(1770728749.189:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18572 comm="syz.3.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 220.359711][T18581] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5099'. [ 220.438708][T12720] tipc: Subscription rejected, illegal request [ 220.770316][ T3612] Bluetooth: hci0: command 0x1003 tx timeout [ 220.776546][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 220.888872][T18619] loop4: detected capacity change from 0 to 32768 [ 220.976877][T12720] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.152852][T18639] loop4: detected capacity change from 0 to 512 [ 221.159772][T18639] EXT4-fs: Ignoring removed orlov option [ 221.167115][T18639] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 221.177019][T18639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 221.187125][T18639] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.5126: corrupted in-inode xattr: e_value size too large [ 221.201571][T18639] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.202248][T18639] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5126: couldn't read orphan inode 15 (err -117) [ 221.223716][T18639] loop4: lost filesystem error report for type 5 error -117 [ 221.226287][T18639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.271434][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.328492][T18645] tipc: Enabling of bearer rejected, failed to enable media [ 221.444738][ T23] IPVS: starting estimator thread 0... [ 221.559673][T18659] IPVS: using max 2496 ests per chain, 124800 per kthread [ 221.568500][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5135'. [ 221.703660][T18681] loop4: detected capacity change from 0 to 128 [ 222.484690][T13267] tipc: Subscription rejected, illegal request [ 222.520343][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5153'. [ 222.522344][T18710] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 222.547651][T18714] netlink: 'syz.0.5154': attribute type 27 has an invalid length. [ 222.677065][T18714] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.686471][T18714] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.834310][T18729] loop4: detected capacity change from 0 to 764 [ 222.847796][T18729] rock: directory entry would overflow storage [ 222.854366][T18729] rock: sig=0x4f50, size=4, remaining=3 [ 222.861127][T18729] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 222.938527][T18735] loop4: detected capacity change from 0 to 512 [ 222.952073][T18735] EXT4-fs: Ignoring removed orlov option [ 222.986010][T18735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.007021][T18735] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.021374][ T3612] Bluetooth: hci0: command 0x1003 tx timeout [ 223.028352][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.039591][T18714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.057819][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.090105][T18714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.396938][T18757] netlink: 'syz.4.5173': attribute type 12 has an invalid length. [ 223.405000][T18757] netlink: 'syz.4.5173': attribute type 29 has an invalid length. [ 223.413671][T18757] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5173'. [ 223.423201][T18757] netlink: 'syz.4.5173': attribute type 2 has an invalid length. [ 223.431035][T18757] netlink: 23 bytes leftover after parsing attributes in process `syz.4.5173'. [ 223.440381][T12720] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.450730][T12720] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.459721][T12720] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.469439][T18760] batadv_slave_1: entered promiscuous mode [ 223.477146][T18759] batadv_slave_1: left promiscuous mode [ 223.499969][T12720] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.567922][T18767] loop0: detected capacity change from 0 to 1024 [ 223.588734][T18767] EXT4-fs: Ignoring removed nobh option [ 223.594644][T18767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.616088][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5181'. [ 223.626025][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5181'. [ 223.638817][T18767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.670161][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.700497][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5181'. [ 223.709759][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5181'. [ 223.763083][T18782] tls_set_device_offload: netdev not found [ 223.897948][T18791] loop4: detected capacity change from 0 to 512 [ 223.932023][T18791] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5187: invalid indirect mapped block 256 (level 2) [ 223.949761][T18791] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.976620][T18791] EXT4-fs (loop4): 2 truncates cleaned up [ 224.055946][T18791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.163208][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.402135][T18837] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.5206'. [ 224.601267][T18847] loop4: detected capacity change from 0 to 512 [ 224.616837][T18847] EXT4-fs: Ignoring removed orlov option [ 224.623056][T18847] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.639862][T18847] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.5212: corrupted in-inode xattr: e_value size too large [ 224.654171][T18847] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.656285][T18847] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5212: couldn't read orphan inode 15 (err -117) [ 224.678307][T18847] loop4: lost filesystem error report for type 5 error -117 [ 224.688742][T18847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.715462][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 224.715478][ T28] audit: type=1400 audit(1770728753.809:2697): avc: denied { module_load } for pid=18846 comm="syz.4.5212" path="/186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 224.769908][T18847] Invalid ELF header magic: != ELF [ 224.798763][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.151020][T18870] loop4: detected capacity change from 0 to 128 [ 225.165597][ T28] audit: type=1400 audit(1770728754.259:2698): avc: denied { remount } for pid=18869 comm="syz.4.5222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 225.219174][T18876] bridge_slave_0: invalid flags given to default FDB implementation [ 225.463076][T18894] loop5: detected capacity change from 0 to 256 [ 225.498425][ T28] audit: type=1400 audit(1770728754.589:2699): avc: denied { setopt } for pid=18893 comm="syz.5.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.606520][T18904] netlink: 'syz.5.5237': attribute type 27 has an invalid length. [ 225.742258][T18904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.764147][T18904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.813866][T18904] geneve2: left promiscuous mode [ 225.819297][T18904] geneve2: left allmulticast mode [ 225.827840][T18904] bond0: left promiscuous mode [ 225.833391][T18904] bridge1: left promiscuous mode [ 225.856551][ T5233] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.866577][ T5233] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 65535 - 0 [ 225.946206][ T5233] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.955426][ T5233] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 65535 - 0 [ 225.994137][ T5233] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.003445][ T5233] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 65535 - 0 [ 226.031047][ T5233] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.040130][ T5233] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 65535 - 0 [ 226.053013][T18922] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5244'. [ 226.106720][T18922] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 226.298226][T18936] loop4: detected capacity change from 0 to 512 [ 226.364186][T18936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.392071][T18936] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.410394][ T28] audit: type=1326 audit(1770728755.499:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 226.435315][ T28] audit: type=1326 audit(1770728755.499:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 226.459973][ T28] audit: type=1326 audit(1770728755.499:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 226.484178][ T28] audit: type=1326 audit(1770728755.499:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 226.514140][T18936] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.5249: corrupted inode contents [ 226.514273][ T28] audit: type=1326 audit(1770728755.579:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 226.528705][T18936] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.5249: mark_inode_dirty error [ 226.551374][ T28] audit: type=1326 audit(1770728755.579:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 226.566269][T18936] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.5249: corrupted inode contents [ 226.586656][ T28] audit: type=1326 audit(1770728755.579:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce27bbf79 code=0x7ffc0000 [ 226.640281][T18936] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.5249: mark_inode_dirty error [ 226.772590][T18967] netlink: 'syz.5.5264': attribute type 29 has an invalid length. [ 226.802262][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.811181][T18967] netlink: 'syz.5.5264': attribute type 29 has an invalid length. [ 226.859145][T18967] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5264'. [ 226.875883][T18974] loop0: detected capacity change from 0 to 128 [ 227.066489][T18992] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5275'. [ 227.078381][T18992] chnl_net:caif_netlink_parms(): no params data found [ 228.073048][T19087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.162371][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5306'. [ 228.315114][T19106] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 228.492901][T19134] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5324'. [ 228.593833][T19142] netlink: 'syz.5.5327': attribute type 1 has an invalid length. [ 228.728254][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5335'. [ 228.759238][T19165] loop4: detected capacity change from 0 to 512 [ 228.783058][T19165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.813528][T19165] ext4 filesystem being mounted at /214/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.853751][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.931187][T19179] netlink: 'syz.9.5346': attribute type 1 has an invalid length. [ 228.986365][ T5230] team0: Port device netdevsim1 removed [ 229.112288][T19207] loop4: detected capacity change from 0 to 512 [ 229.142369][ T5230] bridge_slave_1: left allmulticast mode [ 229.148209][ T5230] bridge_slave_1: left promiscuous mode [ 229.154129][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.163962][T19207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.183578][ T5230] bridge_slave_0: left allmulticast mode [ 229.189330][ T5230] bridge_slave_0: left promiscuous mode [ 229.195228][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.198096][T19207] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.305272][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.321764][ T5230] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 229.411766][ T5230] bond0 (unregistering): Released all slaves [ 229.479527][ T5230] hsr_slave_0: left promiscuous mode [ 229.514724][ T5230] hsr_slave_1: left promiscuous mode [ 229.521696][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.529827][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.637419][ T5230] team0 (unregistering): Port device team_slave_1 removed [ 229.684740][ T5230] team0 (unregistering): Port device team_slave_0 removed [ 229.795636][T19190] chnl_net:caif_netlink_parms(): no params data found [ 229.935519][T19190] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.940012][T19239] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5360'. [ 229.942676][T19190] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.950758][T19190] bridge_slave_0: entered allmulticast mode [ 229.951717][T19239] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 229.971387][T19190] bridge_slave_0: entered promiscuous mode [ 229.981140][T19190] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.988196][T19190] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.008378][T19190] bridge_slave_1: entered allmulticast mode [ 230.018584][T19190] bridge_slave_1: entered promiscuous mode [ 230.120773][T19190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.133806][ T23] Process accounting resumed [ 230.151291][T19190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.178252][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 230.178268][ T28] audit: type=1400 audit(1770728759.269:2759): avc: denied { connect } for pid=19285 comm="syz.0.5371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.192208][T19190] team0: Port device team_slave_0 added [ 230.239963][T19190] team0: Port device team_slave_1 added [ 230.293827][T19190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.300911][T19190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.327607][T19190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.344741][T19190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.352579][T19190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.378722][T19190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.435775][T19190] hsr_slave_0: entered promiscuous mode [ 230.442872][T19190] hsr_slave_1: entered promiscuous mode [ 230.448996][T19190] debugfs: 'hsr0' already exists in 'hsr' [ 230.454803][T19190] Cannot create hsr debugfs directory [ 230.719861][T19347] netlink: 'syz.4.5386': attribute type 7 has an invalid length. [ 230.783674][T19190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.793463][T19190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.804229][T19190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.811338][T19347] netlink: 'syz.4.5386': attribute type 7 has an invalid length. [ 230.813381][T19190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.868850][T19190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.885827][T19190] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.904668][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.911774][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.924283][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5387'. [ 230.939546][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.946684][ T5230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.978853][T19190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.989361][T19190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.059667][T19190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.287993][T19190] veth0_vlan: entered promiscuous mode [ 231.316400][T19190] veth1_vlan: entered promiscuous mode [ 231.381291][T19190] veth0_macvtap: entered promiscuous mode [ 231.400724][T19190] veth1_macvtap: entered promiscuous mode [ 231.433708][T19190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.462965][T19190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.502906][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.523521][T19469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.539053][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.565878][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.569955][T19469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.610605][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.725364][T19497] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 231.749952][T19497] SELinux: failed to load policy [ 231.789459][T19504] loop0: detected capacity change from 0 to 1024 [ 231.873318][T19504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.921676][T19504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.014708][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.089027][ T28] audit: type=1326 audit(1770728761.179:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.4.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 232.115210][ T28] audit: type=1326 audit(1770728761.179:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.4.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 232.139250][ T28] audit: type=1326 audit(1770728761.179:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.4.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 232.163861][ T28] audit: type=1326 audit(1770728761.179:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.4.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 232.187842][ T28] audit: type=1326 audit(1770728761.179:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.4.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 232.212685][ T28] audit: type=1326 audit(1770728761.179:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19537 comm="syz.4.5414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 232.332974][T19553] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 232.372396][T19558] SELinux: failed to load policy [ 232.517336][T19585] netlink: 'syz.0.5425': attribute type 1 has an invalid length. [ 232.558178][T19585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.608567][T19593] bond2: (slave gretap2): making interface the new active one [ 232.638092][T19593] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 232.655214][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5428'. [ 232.744827][T19603] loop0: detected capacity change from 0 to 1024 [ 232.764646][T19603] EXT4-fs: Ignoring removed orlov option [ 232.783105][T19603] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 232.822631][T19603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.896387][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.087981][T19652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5440'. [ 233.116498][T19653] netlink: 'syz.9.5439': attribute type 1 has an invalid length. [ 233.124462][T19653] netlink: 'syz.9.5439': attribute type 2 has an invalid length. [ 233.157784][T19663] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5444'. [ 233.263417][ T28] audit: type=1400 audit(1770728762.359:2766): avc: denied { name_bind } for pid=19678 comm="syz.4.5450" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 233.371012][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5454'. [ 233.380407][T19695] netlink: 'syz.4.5454': attribute type 26 has an invalid length. [ 233.388719][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5454'. [ 233.443010][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5454'. [ 233.452082][T19695] netlink: 'syz.4.5454': attribute type 26 has an invalid length. [ 233.460226][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5454'. [ 233.699979][ T28] audit: type=1326 audit(1770728762.789:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19724 comm="syz.4.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 233.760672][ T28] audit: type=1326 audit(1770728762.789:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19724 comm="syz.4.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 233.916889][T19739] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.5468'. [ 233.927771][T19739] netlink: zone id is out of range [ 233.933844][T19739] netlink: zone id is out of range [ 233.941057][T19739] netlink: zone id is out of range [ 233.965338][T19739] netlink: zone id is out of range [ 234.139353][T19739] netlink: set zone limit has 8 unknown bytes [ 234.505687][T19783] loop0: detected capacity change from 0 to 128 [ 234.596572][T19783] syz.0.5485: attempt to access beyond end of device [ 234.596572][T19783] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 234.611105][T19783] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 235.167952][T19809] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 235.347899][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 235.347915][ T28] audit: type=1400 audit(1770728764.439:2841): avc: denied { write } for pid=19828 comm="syz.9.5507" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 235.378749][ T28] audit: type=1400 audit(1770728764.439:2842): avc: denied { ioctl } for pid=19828 comm="syz.9.5507" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 235.608011][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5514'. [ 235.912811][ T28] audit: type=1400 audit(1770728765.009:2843): avc: denied { map } for pid=19863 comm="syz.6.5522" path="socket:[59708]" dev="sockfs" ino=59708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 236.188388][T19887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 236.198249][T19887] netlink: 'syz.4.5533': attribute type 7 has an invalid length. [ 236.255162][ T28] audit: type=1400 audit(1770728765.349:2844): avc: denied { ioctl } for pid=19892 comm="syz.6.5536" path="socket:[59021]" dev="sockfs" ino=59021 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.310640][T19887] netlink: 'syz.4.5533': attribute type 7 has an invalid length. [ 236.489926][T19914] veth1_to_bond: entered allmulticast mode [ 236.497913][T19914] veth1_to_bond: left allmulticast mode [ 236.657889][T19933] batadv_slave_1: entered promiscuous mode [ 236.691391][T19931] batadv_slave_1: left promiscuous mode [ 236.820123][ T28] audit: type=1326 audit(1770728765.909:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19943 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ec3bbf79 code=0x7ffc0000 [ 236.863727][ T28] audit: type=1326 audit(1770728765.919:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19943 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f58ec3bbf79 code=0x7ffc0000 [ 236.887966][ T28] audit: type=1326 audit(1770728765.939:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19943 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ec3bbf79 code=0x7ffc0000 [ 236.912216][ T28] audit: type=1326 audit(1770728765.939:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19943 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ec3bbf79 code=0x7ffc0000 [ 236.937572][ T28] audit: type=1326 audit(1770728765.959:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19943 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f58ec3bbf79 code=0x7ffc0000 [ 236.961371][ T28] audit: type=1326 audit(1770728765.959:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19943 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ec3bbf79 code=0x7ffc0000 [ 237.001795][T19948] netlink: 'syz.0.5559': attribute type 15 has an invalid length. [ 237.013607][T19948] netlink: 'syz.0.5559': attribute type 15 has an invalid length. [ 237.024258][ T5233] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 237.035378][ T5233] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 237.061125][ T5233] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 237.088468][ T5233] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 237.215520][T19963] netlink: 'syz.6.5566': attribute type 3 has an invalid length. [ 239.396440][T20088] __nla_validate_parse: 11 callbacks suppressed [ 239.396456][T20088] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5617'. [ 239.418965][T20088] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.440942][T20088] bond6: (slave batadv1): Opening slave failed [ 239.472279][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5618'. [ 239.697636][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5631'. [ 239.720671][T20123] netlink: 'syz.3.5633': attribute type 4 has an invalid length. [ 239.753255][T20123] netlink: 'syz.3.5633': attribute type 4 has an invalid length. [ 239.775287][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5634'. [ 240.385088][T20162] netlink: 'syz.4.5648': attribute type 13 has an invalid length. [ 240.429443][T20166] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5650'. [ 240.572733][T20162] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.579951][T20162] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.683522][T20188] sctp: [Deprecated]: syz.3.5658 (pid 20188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.683522][T20188] Use struct sctp_sack_info instead [ 240.768925][T20195] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5661'. [ 240.797769][T20162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.826195][T20162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.046841][ T5233] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.055962][ T5233] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.099704][ T5233] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.108805][ T5233] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.128544][ T5233] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.137627][ T5233] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.169825][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 241.169839][ T28] audit: type=1326 audit(1770728770.259:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.0.5674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56cb83bf79 code=0x0 [ 241.235299][ T28] audit: type=1326 audit(1770728770.319:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.3.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 241.235510][T13267] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.259857][ T28] audit: type=1326 audit(1770728770.319:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.3.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 241.268036][T13267] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.292951][ T28] audit: type=1326 audit(1770728770.319:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.3.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 241.325310][ T28] audit: type=1326 audit(1770728770.319:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.3.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 241.349028][ T28] audit: type=1326 audit(1770728770.319:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.3.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 241.390516][ T28] audit: type=1326 audit(1770728770.479:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20234 comm="syz.4.5677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x0 [ 241.864393][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5687'. [ 241.927909][T20267] tipc: Enabling of bearer rejected, failed to enable media [ 242.263042][T20291] netlink: 'syz.4.5698': attribute type 6 has an invalid length. [ 242.270886][T20291] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5698'. [ 242.385037][T20274] loop0: detected capacity change from 0 to 256 [ 242.412787][ T28] audit: type=1326 audit(1770728771.499:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.4.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 242.413628][T20274] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 242.437238][ T28] audit: type=1326 audit(1770728771.499:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.4.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 242.480610][T20312] netlink: 'syz.6.5701': attribute type 4 has an invalid length. [ 242.605461][ T28] audit: type=1326 audit(1770728771.569:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20306 comm="syz.4.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc17884bf79 code=0x7ffc0000 [ 242.634082][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5707'. [ 242.789142][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5712'. [ 243.203190][T20346] loop0: detected capacity change from 0 to 32768 [ 243.254744][T20346] loop0: p1 p3 < > [ 243.456320][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 243.457554][ T9249] udevd[9249]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 243.873618][T20487] syz_tun: entered allmulticast mode [ 243.881466][T20485] syz_tun: left allmulticast mode [ 243.945837][T20498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.962095][T20498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.381863][T20540] netlink: 'syz.4.5759': attribute type 4 has an invalid length. [ 244.455900][T20547] loop4: detected capacity change from 0 to 512 [ 244.473977][T20547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 244.483181][T20547] EXT4-fs (loop4): orphan cleanup on readonly fs [ 244.489954][T20547] EXT4-fs warning (device loop4): ext4_enable_quotas:7226: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 244.512366][T20547] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 244.531699][T20547] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.5764: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 244.550376][T20547] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 244.554792][T20547] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5764: couldn't read orphan inode 13 (err -117) [ 244.576412][T20547] loop4: lost filesystem error report for type 5 error -117 [ 244.578207][T20547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.621094][T20547] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 244.643385][T20547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 244.671961][T20547] EXT4-fs warning (device loop4): ext4_enable_quotas:7226: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 244.713657][T20547] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 244.723774][T20547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 244.741221][T20547] EXT4-fs warning (device loop4): ext4_enable_quotas:7226: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 244.776620][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.941470][T20580] loop0: detected capacity change from 0 to 1024 [ 244.964083][T20580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.991773][T20580] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.5770: inode #778331508: comm syz.0.5770: iget: illegal inode # [ 245.020538][T20580] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.5770: error while reading EA inode 778331508 err=-117 [ 245.037217][T20580] EXT4-fs error (device loop0): ext4_xattr_block_set:2220: inode #15: comm syz.0.5770: bad block 113 [ 245.064051][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.606037][T20618] __nla_validate_parse: 1 callbacks suppressed [ 245.606055][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5784'. [ 245.622256][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5784'. [ 245.661550][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5784'. [ 245.670837][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5784'. [ 245.670914][ T52] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.702174][ T52] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.714757][ T52] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.724076][ T52] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.878744][T20635] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.5792'. [ 245.889154][T20635] netlink: zone id is out of range [ 245.894774][T20635] netlink: zone id is out of range [ 245.911535][T20635] netlink: zone id is out of range [ 245.919012][T20635] netlink: del zone limit has 8 unknown bytes [ 246.031645][T20665] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5802'. [ 246.045030][T20665] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5802'. [ 246.077292][T20660] syzkaller0: entered promiscuous mode [ 246.082861][T20660] syzkaller0: entered allmulticast mode [ 246.184491][T20680] gretap0: entered promiscuous mode [ 246.194224][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5806'. [ 246.203170][T20680] gretap0: left promiscuous mode [ 247.642106][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 247.642191][ T28] audit: type=1400 audit(1770728776.739:2926): avc: denied { getattr } for pid=20767 comm="syz.3.5842" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 248.013216][T20785] loop0: detected capacity change from 0 to 1024 [ 248.043481][T20785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 248.087221][T20793] loop4: detected capacity change from 0 to 256 [ 248.096317][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5851'. [ 248.122901][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 248.229015][T20805] dummy0: left allmulticast mode [ 248.244667][T20805] dummy0: left promiscuous mode [ 248.249728][T20805] bridge0: port 3(dummy0) entered disabled state [ 248.282177][ T28] audit: type=1326 audit(1770728777.379:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20810 comm="syz.9.5860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x0 [ 248.370261][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 248.370262][ T3612] Bluetooth: hci0: command 0x1003 tx timeout [ 248.753537][ T28] audit: type=1326 audit(1770728777.849:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20821 comm="syz.3.5864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x0 [ 249.496544][T20864] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5882'. [ 249.575567][T20872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 249.606068][T20875] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 249.642408][T20872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 249.716866][T20888] loop4: detected capacity change from 0 to 256 [ 249.734690][T20872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 249.763361][T20888] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙01777777777777777777777˙˙' [ 249.781873][T20872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 249.889208][ T5230] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 249.931693][ T5230] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 249.952254][T20904] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.962618][T20904] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.003136][ T5230] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 250.014527][ T5230] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 250.063429][T20904] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.074022][T20904] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.126142][T20919] loop0: detected capacity change from 0 to 512 [ 250.151303][T20904] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.162349][T20904] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.188566][T20919] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #11: block 530: comm syz.0.5907: lblock 4 mapped to illegal pblock 530 (length 1) [ 250.203893][T20919] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 250.220930][T20919] ------------[ cut here ]------------ [ 250.236383][T20919] EA inode 11 i_nlink=2 [ 250.236413][T20919] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.5907/20919 [ 250.251616][T20919] Modules linked in: [ 250.255541][T20919] CPU: 0 UID: 0 PID: 20919 Comm: syz.0.5907 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.266350][T20919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 250.276550][T20919] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 250.283239][T20919] Code: 64 b2 9a ff 4c 8d 2d bd 0a 3e 05 49 8d 7e 40 e8 a4 9d b6 ff 49 8b 6e 40 4c 89 e7 e8 d8 98 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf 24 d1 03 66 66 66 66 66 66 2e [ 250.303709][T20919] RSP: 0018:ffffc90002e9b778 EFLAGS: 00010246 [ 250.309889][T20919] RAX: ffff88815abd9ab0 RBX: ffff88811a48dc18 RCX: ffffffff81be3708 [ 250.318079][T20919] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc41b0 [ 250.326177][T20919] RBP: 000000000000000b R08: 000188811a48dbcb R09: 0000000000000000 [ 250.334869][T20919] R10: ffffc90002e9b6a8 R11: 0001c90002e9b6a8 R12: ffff88811a48dbc8 [ 250.343350][T20919] R13: ffffffff86fc41b0 R14: ffff88811a48db80 R15: 0000000000000001 [ 250.351583][T20919] FS: 00007f56ca2976c0(0000) GS:ffff8882aeb53000(0000) knlGS:0000000000000000 [ 250.361566][T20919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.368169][T20919] CR2: 0000200000000500 CR3: 000000014d798000 CR4: 00000000003506f0 [ 250.376606][T20919] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 250.384892][T20919] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 250.393110][T20919] Call Trace: [ 250.397174][T20919] [ 250.400128][T20919] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 250.406201][T20919] ? errseq_check+0x2c/0x50 [ 250.410251][ T28] audit: type=1326 audit(1770728779.469:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20936 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 250.410794][T20919] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 250.434456][ T28] audit: type=1326 audit(1770728779.469:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20936 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 250.439938][T20919] ? ext4_truncate+0x92b/0xad0 [ 250.463516][ T28] audit: type=1326 audit(1770728779.469:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20936 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 250.463557][ T28] audit: type=1326 audit(1770728779.489:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20936 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 250.463580][ T28] audit: type=1326 audit(1770728779.499:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20936 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 250.514679][ T28] audit: type=1326 audit(1770728779.609:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20936 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 250.519520][T20919] ext4_evict_inode+0xa1f/0xd40 [ 250.548258][ T28] audit: type=1326 audit(1770728779.639:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20936 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628f3fbf79 code=0x7ffc0000 [ 250.567960][T20919] ? __pfx_ext4_evict_inode+0x10/0x10 [ 250.603211][T20919] evict+0x2af/0x510 [ 250.607399][T20919] ? __dquot_initialize+0x146/0x7c0 [ 250.612721][T20919] iput+0x41a/0x580 [ 250.616621][T20919] ext4_process_orphan+0x1a9/0x1c0 [ 250.621921][T20919] ext4_orphan_cleanup+0x6a8/0xa00 [ 250.627063][T20919] ext4_fill_super+0x3476/0x3800 [ 250.632559][T20919] ? set_blocksize+0x19e/0x2c0 [ 250.637430][T20919] ? setup_bdev_super+0x30e/0x370 [ 250.642487][T20919] ? __pfx_ext4_fill_super+0x10/0x10 [ 250.647870][T20919] get_tree_bdev_flags+0x291/0x300 [ 250.653225][T20919] ? __pfx_ext4_fill_super+0x10/0x10 [ 250.658530][T20919] get_tree_bdev+0x1f/0x30 [ 250.663538][T20919] ext4_get_tree+0x1c/0x30 [ 250.667953][T20919] vfs_get_tree+0x57/0x1d0 [ 250.672734][T20919] do_new_mount+0x288/0x8d0 [ 250.677340][T20919] path_mount+0x4d0/0xbc0 [ 250.681708][T20919] __se_sys_mount+0x28c/0x2e0 [ 250.686531][T20919] __x64_sys_mount+0x67/0x80 [ 250.691918][T20919] x64_sys_call+0x2cca/0x3000 [ 250.696765][T20919] do_syscall_64+0xc0/0x2a0 [ 250.701366][T20919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.707310][T20919] RIP: 0033:0x7f56cb83d20a [ 250.711797][T20919] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.732075][T20919] RSP: 002b:00007f56ca296e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.740700][T20919] RAX: ffffffffffffffda RBX: 00007f56ca296ee0 RCX: 00007f56cb83d20a [ 250.748686][T20919] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f56ca296ea0 [ 250.756948][T20919] RBP: 0000200000000180 R08: 00007f56ca296ee0 R09: 0000000000800718 [ 250.765483][T20919] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 250.773480][T20919] R13: 00007f56ca296ea0 R14: 0000000000000482 R15: 0000200000000200 [ 250.781531][T20919] [ 250.784545][T20919] ---[ end trace 0000000000000000 ]--- [ 250.794381][T20919] EXT4-fs (loop0): 1 orphan inode deleted [ 250.800867][T20919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.801982][T20904] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.823377][T20904] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.858174][T17234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.891008][ T30] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.899331][ T30] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.907918][ T30] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.916643][ T30] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.927475][ T30] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.935992][ T30] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.960430][ T30] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.968800][ T30] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.251713][T20967] __nla_validate_parse: 2 callbacks suppressed [ 251.251729][T20967] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5924'. [ 251.267586][T20967] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5924'. [ 251.297749][T20957] loop4: detected capacity change from 0 to 8192 [ 251.352459][ T9249] loop4: p1 p2[DM] p4 [ 251.356651][ T9249] loop4: p1 size 196608 extends beyond EOD, truncated [ 251.366454][ T9249] loop4: p2 start 4292936063 is beyond EOD, truncated [ 251.373471][ T9249] loop4: p4 size 50331648 extends beyond EOD, truncated [ 251.419652][T20957] loop4: p1 p2[DM] p4 [ 251.425709][T20973] syzkaller0: entered allmulticast mode [ 251.425844][T20957] loop4: p1 size 196608 extends beyond EOD, truncated [ 251.439825][T20957] loop4: p2 start 4292936063 is beyond EOD, truncated [ 251.447189][T20973] syzkaller0: entered promiscuous mode [ 251.453214][T20957] loop4: p4 size 50331648 extends beyond EOD, truncated [ 251.461818][T20973] syzkaller0 (unregistering): left allmulticast mode [ 251.468620][T20973] syzkaller0 (unregistering): left promiscuous mode [ 251.580038][ T9249] udevd[9249]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 251.590887][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 251.661443][T20988] loop4: detected capacity change from 0 to 128 [ 251.669747][T20988] msdos: Unknown parameter 'côˇUŚÁ…ă§ict' [ 251.932974][T21014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.941715][T21014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.375070][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5949'. [ 252.444241][T21029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5952'. [ 252.470550][ T5230] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 252.478809][T21029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5952'. [ 252.488002][ T5230] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 252.516010][ T5230] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 252.528134][T21033] netlink: 'syz.0.5954': attribute type 1 has an invalid length. [ 252.536701][ T5230] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 252.561376][T21033] bond3: (slave geneve2): making interface the new active one [ 252.569445][T21033] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 252.587138][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 252.608473][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 252.617773][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5955'. [ 252.628215][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 252.637644][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 252.651523][T21041] geneve3: entered promiscuous mode [ 252.657415][ T30] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.666302][ T30] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.693379][ T30] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.701896][ T30] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.731783][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'. [ 252.887269][T21060] netlink: 'syz.9.5966': attribute type 83 has an invalid length. [ 253.210416][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 253.210432][ T28] audit: type=1400 audit(1770728782.299:2985): avc: denied { read } for pid=21095 comm="syz.3.5981" path="socket:[63697]" dev="sockfs" ino=63697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 253.364144][T21106] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5981'. [ 253.401954][T21110] geneve2: entered promiscuous mode [ 253.417494][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.431781][T21114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21114 comm=syz.3.5987 [ 253.445923][T21115] netlink: 'syz.6.5988': attribute type 1 has an invalid length. [ 253.455934][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.484159][T21115] bond1: entered promiscuous mode [ 253.489314][T21115] bond1: entered allmulticast mode [ 253.534820][T21122] bond1: (slave ip6gretap1): making interface the new active one [ 253.543316][T21122] ip6gretap1: entered promiscuous mode [ 253.549030][T21122] ip6gretap1: entered allmulticast mode [ 253.590766][T21122] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.599786][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.613852][T21130] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.5994'. [ 253.623510][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.726481][T21135] tap0: tun_chr_ioctl cmd 1074025681 [ 253.727774][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6000'. [ 253.798926][T21147] loop4: detected capacity change from 0 to 1024 [ 253.834359][T21147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 253.853529][T21147] System zones: 0-1, 3-36 [ 253.865727][T21147] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.6001: bad orphan inode 134217728 [ 253.877196][T21147] loop4: lost filesystem error report for type 5 error -117 [ 253.877871][T21147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.104517][ T28] audit: type=1400 audit(1770728783.199:2986): avc: denied { read } for pid=21157 comm="syz.3.6004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 254.257503][T21167] batadv_slave_1: entered promiscuous mode [ 254.264073][T21167] batadv_slave_0: entered promiscuous mode [ 254.272508][T16239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.281894][T21166] batadv_slave_0: left promiscuous mode [ 254.287606][T21166] batadv_slave_1: left promiscuous mode [ 254.327134][T21169] SELinux: failed to load policy [ 254.628860][ T28] audit: type=1400 audit(1770728783.719:2987): avc: denied { getopt } for pid=21192 comm="syz.4.6020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.739239][ T28] audit: type=1326 audit(1770728783.829:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56cb83bf79 code=0x7ffc0000 [ 254.763930][ T28] audit: type=1326 audit(1770728783.829:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56cb83bf79 code=0x7ffc0000 [ 254.822543][ T28] audit: type=1326 audit(1770728783.829:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f56cb83bf79 code=0x7ffc0000 [ 254.846175][ T28] audit: type=1326 audit(1770728783.829:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56cb83bf79 code=0x7ffc0000 [ 254.870836][ T28] audit: type=1326 audit(1770728783.829:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56cb83bf79 code=0x7ffc0000 [ 254.894813][ T28] audit: type=1326 audit(1770728783.879:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f56cb83bf79 code=0x7ffc0000 [ 254.919368][ T28] audit: type=1326 audit(1770728783.879:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56cb83bf79 code=0x7ffc0000 [ 254.951563][T21215] uprobe: syz.4.6029:21215 failed to unregister, leaking uprobe [ 255.116767][ T9586] IPVS: starting estimator thread 0... [ 255.210322][T21236] IPVS: using max 2064 ests per chain, 103200 per kthread [ 255.288915][ T5230] IPVS: stop unused estimator thread 0... [ 255.644135][T21281] loop0: detected capacity change from 0 to 128 [ 255.843924][T21293] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.872343][T21293] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.932361][T21293] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.981684][T21293] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.027449][ T5217] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.039654][ T5217] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.054624][ T5230] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.078244][ T5230] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.097572][T21295] loop4: detected capacity change from 0 to 4096 [ 256.112633][T21295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.147785][T16239] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 256.161774][T16239] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 256.206540][T18526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.294501][ T3451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.341903][ T3451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.421673][ T3451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.491766][ T3451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.697764][ T3451] bridge_slave_1: left allmulticast mode [ 256.703553][ T3451] bridge_slave_1: left promiscuous mode [ 256.709350][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.734203][ T3451] bridge_slave_0: left allmulticast mode [ 256.740127][ T3451] bridge_slave_0: left promiscuous mode [ 256.746701][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.863422][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.874777][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.889792][ T3451] bond0 (unregistering): Released all slaves [ 256.901626][ T3451] bond1 (unregistering): Released all slaves [ 256.914528][ T3451] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 256.924002][ T3451] bond2 (unregistering): Released all slaves [ 256.936542][T21308] chnl_net:caif_netlink_parms(): no params data found [ 256.992134][ T3451] hsr_slave_0: left promiscuous mode [ 256.998232][ T3451] hsr_slave_1: left promiscuous mode [ 257.006979][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.016500][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.061228][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 257.079504][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 257.140662][T21308] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.147921][T21308] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.158356][T21308] bridge_slave_0: entered allmulticast mode [ 257.171162][T21308] bridge_slave_0: entered promiscuous mode [ 257.186675][T21308] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.194840][T21308] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.221228][T21308] bridge_slave_1: entered allmulticast mode [ 257.240586][T21308] bridge_slave_1: entered promiscuous mode [ 257.301328][T21308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.322856][T21308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.391143][T21308] team0: Port device team_slave_0 added [ 257.402428][T21308] team0: Port device team_slave_1 added [ 257.437118][T21308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.444242][T21308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.471252][T21308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.596313][T21308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.603542][T21308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.630332][T21308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.783104][T21308] hsr_slave_0: entered promiscuous mode [ 257.811675][T21308] hsr_slave_1: entered promiscuous mode [ 257.830794][T21308] debugfs: 'hsr0' already exists in 'hsr' [ 257.837017][T21308] Cannot create hsr debugfs directory [ 258.113125][T21383] __nla_validate_parse: 7 callbacks suppressed [ 258.113215][T21383] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6080'. [ 260.723978][T21365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.738086][T21308] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 260.777692][T21308] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 260.793510][T21308] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 260.817452][T21308] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 260.936945][T21308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.966486][T21308] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.987829][T21432] all: renamed from veth1_to_bond (while UP) [ 261.009537][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.016814][ T5217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.049961][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.057207][ T5217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.094811][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6099'. [ 261.269152][T21308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.529239][T21308] veth0_vlan: entered promiscuous mode [ 261.551742][T21308] veth1_vlan: entered promiscuous mode [ 261.604260][T21308] veth0_macvtap: entered promiscuous mode [ 261.615235][T21308] veth1_macvtap: entered promiscuous mode [ 261.642630][T21308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.665585][T21308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.692112][ T3451] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.724119][ T3451] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.759418][ T3451] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.932244][ T3451] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.225924][T21562] netlink: 'syz.8.6120': attribute type 1 has an invalid length. [ 262.285502][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 262.346477][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 262.346493][ T28] audit: type=1400 audit(1770728791.439:2997): avc: denied { setopt } for pid=21570 comm="syz.0.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.572179][T21603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6131'. [ 262.729164][ T28] audit: type=1326 audit(1770728791.819:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21618 comm="syz.6.6137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58ec3bbf79 code=0x0 [ 262.925687][T21637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6139'. [ 263.382450][T21675] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.389756][T21675] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.510894][T21691] sch_fq: defrate 7 ignored. [ 263.695112][ T28] audit: type=1400 audit(1770728792.779:2999): avc: denied { override_creds } for pid=21712 comm="syz.9.6152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 263.846699][ T3427] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 263.861379][ T3427] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.929365][T21735] fido_id[21735]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.227415][T21768] loop8: detected capacity change from 0 to 1024 [ 264.346999][T21768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.385109][T21768] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.428120][T21768] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.6167: lblock 3 mapped to illegal pblock 3 (length 3) [ 264.458139][T21768] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 264.471359][T21768] EXT4-fs (loop8): This should not happen!! Data will be lost [ 264.471359][T21768] [ 264.508431][T21791] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.6167: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.529992][T21791] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.6167: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.548694][T21768] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 4: comm syz.8.6167: lblock 4 mapped to illegal pblock 4 (length 2) [ 264.573489][T21768] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 4: comm syz.8.6167: lblock 4 mapped to illegal pblock 4 (length 2) [ 264.594818][T21791] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.6167: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.619989][T21768] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 4: comm syz.8.6167: lblock 4 mapped to illegal pblock 4 (length 2) [ 264.645415][T21791] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.6167: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.671427][T21768] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 4: comm syz.8.6167: lblock 4 mapped to illegal pblock 4 (length 2) [ 264.688453][T21791] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.6167: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.896872][T21811] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 265.029197][T21822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21822 comm=syz.6.6176 [ 265.065741][T21822] netlink: 'syz.6.6176': attribute type 1 has an invalid length. [ 265.134471][ T12] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 265.146802][ T12] EXT4-fs (loop8): This should not happen!! Data will be lost [ 265.146802][ T12] [ 265.151396][T21822] bond2: (slave bridge1): making interface the new active one [ 265.165571][T21822] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 265.206395][T21308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 265.734110][T21897] loop8: detected capacity change from 0 to 512 [ 265.753461][T21897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.781186][T21897] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.840977][T21308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.928333][ T28] audit: type=1326 audit(1770728795.019:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21917 comm="syz.8.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b8d5bf79 code=0x7ffc0000 [ 265.973976][ T28] audit: type=1326 audit(1770728795.019:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21917 comm="syz.8.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b8d5bf79 code=0x7ffc0000 [ 265.998386][ T28] audit: type=1326 audit(1770728795.049:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21917 comm="syz.8.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe2b8d5bf79 code=0x7ffc0000 [ 266.022546][ T28] audit: type=1326 audit(1770728795.049:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21917 comm="syz.8.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b8d5bf79 code=0x7ffc0000 [ 266.046351][ T28] audit: type=1326 audit(1770728795.049:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21917 comm="syz.8.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b8d5bf79 code=0x7ffc0000 [ 266.070717][ T28] audit: type=1326 audit(1770728795.059:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21917 comm="syz.8.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2b8d5bf79 code=0x7ffc0000 [ 266.094162][ T28] audit: type=1326 audit(1770728795.059:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21917 comm="syz.8.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b8d5bf79 code=0x7ffc0000 [ 267.640050][T22100] tipc: Started in network mode [ 267.645048][T22100] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 267.653012][T22100] tipc: Enabled bearer , priority 18 [ 267.718811][T22108] loop0: detected capacity change from 0 to 256 [ 267.733730][T22108] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 267.744147][T22108] FAT-fs (loop0): Filesystem has been set read-only [ 267.751531][T22108] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.282336][T22156] netlink: 'syz.0.6264': attribute type 3 has an invalid length. [ 268.285581][T22155] netlink: 'syz.8.6265': attribute type 10 has an invalid length. [ 268.294512][T22156] netlink: 'syz.0.6264': attribute type 3 has an invalid length. [ 268.318115][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 268.318131][ T28] audit: type=1326 audit(1770728797.409:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 268.320080][T22155] team0: Failed to send options change via netlink (err -105) [ 268.324276][ T28] audit: type=1326 audit(1770728797.409:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 268.324378][ T28] audit: type=1326 audit(1770728797.409:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb362cdc84e code=0x7ffc0000 [ 268.324404][ T28] audit: type=1326 audit(1770728797.409:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb362cdc84e code=0x7ffc0000 [ 268.324498][ T28] audit: type=1326 audit(1770728797.409:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 268.324523][ T28] audit: type=1326 audit(1770728797.409:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 268.351482][ T28] audit: type=1326 audit(1770728797.419:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 268.356686][T22155] team0: Port device dummy0 added [ 268.470451][ T28] audit: type=1326 audit(1770728797.549:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 268.520399][T22159] netlink: 'syz.8.6265': attribute type 10 has an invalid length. [ 268.532422][ T28] audit: type=1326 audit(1770728797.609:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 268.560462][ T28] audit: type=1326 audit(1770728797.619:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb362d1bf79 code=0x7ffc0000 [ 268.634829][T22159] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 268.663381][T22159] team0: Failed to send options change via netlink (err -105) [ 268.680421][T22159] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 268.689479][T22159] team0: Port device dummy0 removed [ 268.699528][T22159] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.708297][T10149] tipc: Node number set to 10463914 [ 268.953758][T22184] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 269.012096][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6279'. [ 269.051621][T22191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.243932][T22202] syzkaller0: entered promiscuous mode [ 269.249621][T22202] syzkaller0: entered allmulticast mode [ 269.301770][T22211] veth2: entered promiscuous mode [ 269.306840][T22211] veth2: entered allmulticast mode [ 269.330764][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6288'. [ 269.339691][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6288'. [ 269.369102][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6288'. [ 269.378100][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6288'. [ 269.409495][T22220] loop8: detected capacity change from 0 to 128 [ 269.538392][T22230] ================================================================== [ 269.546509][T22230] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 269.554417][T22230] [ 269.556746][T22230] write to 0xffff88811b725cc8 of 8 bytes by task 22233 on cpu 0: [ 269.564464][T22230] cpu_map_kthread_run+0x4e7/0x1650 [ 269.569942][T22230] kthread+0x22a/0x280 [ 269.574025][T22230] ret_from_fork+0x148/0x280 [ 269.578638][T22230] ret_from_fork_asm+0x1a/0x30 [ 269.583426][T22230] [ 269.585752][T22230] read to 0xffff88811b725cc8 of 8 bytes by task 22230 on cpu 1: [ 269.593393][T22230] bq_flush_to_queue+0x124/0x350 [ 269.598856][T22230] cpu_map_enqueue+0x1a5/0x1c0 [ 269.603634][T22230] xdp_do_redirect_frame+0x27b/0x560 [ 269.608921][T22230] bpf_test_run_xdp_live+0xac3/0x1360 [ 269.614286][T22230] bpf_prog_test_run_xdp+0x57b/0xa10 [ 269.619591][T22230] bpf_prog_test_run+0x204/0x340 [ 269.624563][T22230] __sys_bpf+0x4c0/0x7b0 [ 269.628803][T22230] __x64_sys_bpf+0x41/0x50 [ 269.633215][T22230] x64_sys_call+0x28e1/0x3000 [ 269.637890][T22230] do_syscall_64+0xc0/0x2a0 [ 269.642405][T22230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.648300][T22230] [ 269.650609][T22230] value changed: 0xffff88811c635070 -> 0x0000000000000000 [ 269.657734][T22230] [ 269.660046][T22230] Reported by Kernel Concurrency Sanitizer on: [ 269.666191][T22230] CPU: 1 UID: 0 PID: 22230 Comm: syz.9.6296 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 269.677646][T22230] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.681438][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 269.691484][T22230] ================================================================== [ 270.012020][ T5230] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.082948][ T5230] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.144313][ T5230] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.212966][ T5230] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.303702][ T5230] bridge_slave_1: left allmulticast mode [ 270.309435][ T5230] bridge_slave_1: left promiscuous mode [ 270.315158][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.353709][ T5230] bridge_slave_0: left allmulticast mode [ 270.359366][ T5230] bridge_slave_0: left promiscuous mode [ 270.365771][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.453570][ T5230] gretap0 (unregistering): left promiscuous mode [ 270.461152][ T5230] bond2 (unregistering): (slave gretap1): Releasing active interface [ 270.542686][ T5230] bond0 (unregistering): left promiscuous mode [ 270.548876][ T5230] bond_slave_0: left promiscuous mode [ 270.554437][ T5230] bond_slave_1: left promiscuous mode [ 270.562495][ T5230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.572526][ T5230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.582048][ T5230] bond0 (unregistering): Released all slaves [ 270.589749][ T5230] bond1 (unregistering): Released all slaves [ 270.597717][ T5230] bond2 (unregistering): Released all slaves [ 270.606307][T22205] syz_tun (unregistering): left allmulticast mode [ 270.654234][ T5230] tipc: Left network mode [ 270.663527][ T5230] hsr_slave_0: left promiscuous mode [ 270.669169][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.676708][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.732312][ T5230] team0 (unregistering): Port device team_slave_1 removed [ 270.742351][ T5230] team0 (unregistering): Port device team_slave_0 removed [ 271.053557][ T5230] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 271.063382][ T5230] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 271.073163][ T5230] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 271.083101][ T5230] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.152004][ T5230] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 271.162047][ T5230] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 271.171900][ T5230] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 271.182484][ T5230] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.243121][ T5230] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 271.252957][ T5230] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 271.262952][ T5230] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 271.273245][ T5230] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.332015][ T5230] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 271.342201][ T5230] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 271.352012][ T5230] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 271.362006][ T5230] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.421047][ T5230] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.463054][ T5230] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.494058][ T5230] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.554231][ T5230] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.637436][ T5230] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.648134][ T5230] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.681613][ T5230] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.691426][ T5230] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.741951][ T5230] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.751805][ T5230] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.805807][ T5230] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.815707][ T5230] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.921644][ T5230] bridge_slave_1: left allmulticast mode [ 271.927313][ T5230] bridge_slave_1: left promiscuous mode [ 271.933288][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.941804][ T5230] bridge_slave_0: left allmulticast mode [ 271.947441][ T5230] bridge_slave_0: left promiscuous mode [ 271.953690][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.964654][ T5230] bridge_slave_1: left allmulticast mode [ 271.970424][ T5230] bridge_slave_1: left promiscuous mode [ 271.976150][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.984319][ T5230] bridge_slave_0: left allmulticast mode [ 271.989946][ T5230] bridge_slave_0: left promiscuous mode [ 271.995665][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.003800][ T5230] bridge_slave_1: left allmulticast mode [ 272.009425][ T5230] bridge_slave_1: left promiscuous mode [ 272.015607][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.023520][ T5230] bridge_slave_0: left allmulticast mode [ 272.029230][ T5230] bridge_slave_0: left promiscuous mode [ 272.035022][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.101325][ T5230] bond2 (unregistering): (slave gretap2): Releasing active interface [ 272.113880][ T5230] bond3 (unregistering): (slave geneve2): Releasing active interface [ 272.137471][ T5230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.146893][ T5230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.156405][ T5230] bond0 (unregistering): Released all slaves [ 272.164329][ T5230] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 272.174370][ T5230] bond1 (unregistering): Released all slaves [ 272.183360][ T5230] bond2 (unregistering): Released all slaves [ 272.191465][ T5230] bond3 (unregistering): Released all slaves [ 272.255679][ T5230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.265841][ T5230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.275985][ T5230] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 272.286933][ T5230] bond0 (unregistering): Released all slaves [ 272.297170][ T5230] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 272.305543][ T5230] ip6gretap1 (unregistering): left promiscuous mode [ 272.312775][ T5230] ip6gretap1 (unregistering): left allmulticast mode [ 272.393184][ T5230] bond2 (unregistering): (slave bridge1): Releasing active interface [ 272.452898][ T5230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.463311][ T5230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.473271][ T5230] bond0 (unregistering): Released all slaves [ 272.481113][ T5230] bond1 (unregistering): Released all slaves [ 272.488986][ T5230] bond2 (unregistering): Released all slaves [ 272.538517][ T5230] tipc: Disabling bearer [ 272.544316][ T5230] tipc: Left network mode [ 272.554373][ T5230] hsr_slave_0: left promiscuous mode [ 272.560070][ T5230] hsr_slave_1: left promiscuous mode [ 272.567940][ T5230] hsr_slave_0: left promiscuous mode [ 272.574507][ T5230] hsr_slave_1: left promiscuous mode [ 272.581380][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.588805][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.596638][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.604076][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.614845][ T5230] hsr_slave_0: left promiscuous mode [ 272.620556][ T5230] hsr_slave_1: left promiscuous mode [ 272.626169][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.633561][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.641753][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.649147][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.661099][ T5230] veth1_macvtap: left promiscuous mode [ 272.666583][ T5230] veth0_macvtap: left promiscuous mode [ 272.672654][ T5230] veth1_vlan: left promiscuous mode [ 272.677861][ T5230] veth0_vlan: left promiscuous mode [ 272.683511][ T5230] veth1_macvtap: left promiscuous mode [ 272.689020][ T5230] veth0_macvtap: left promiscuous mode [ 272.694694][ T5230] veth1_vlan: left promiscuous mode [ 272.699902][ T5230] veth0_vlan: left promiscuous mode [ 272.794233][ T5230] team0 (unregistering): Port device team_slave_1 removed [ 272.806094][ T5230] team0 (unregistering): Port device team_slave_0 removed [ 272.857943][ T5230] team0 (unregistering): Port device team_slave_1 removed [ 272.871118][ T5230] team0 (unregistering): Port device team_slave_0 removed [ 272.921997][ T5230] team0 (unregistering): Port device team_slave_1 removed [ 272.935022][ T5230] team0 (unregistering): Port device team_slave_0 removed [ 273.549948][ T5230] IPVS: stop unused estimator thread 0...