last executing test programs: 6.435015226s ago: executing program 1 (id=1248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340), 0x2000) 6.434606936s ago: executing program 1 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6.410968158s ago: executing program 1 (id=1251): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) (fail_nth: 4) 6.17553048s ago: executing program 1 (id=1254): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x15, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020010000000000000000000000000c3200000000000009500000000000020879a3600000000000020a6e57a1d02cf0098cedf4f11eea74f52"], &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = syz_usbip_server_init(0x2) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'ip_vti0\x00', 0x800}) (async) syz_usbip_server_init(0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffeb7, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x8c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 6.131080784s ago: executing program 1 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 6.111564185s ago: executing program 1 (id=1257): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x20000102, &(0x7f00000011c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4008c0d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x1) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 5.289702891s ago: executing program 0 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 5.231127347s ago: executing program 0 (id=1279): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018}, './file0\x00'}) 5.098567269s ago: executing program 0 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000440)=@secondary) 5.050791054s ago: executing program 0 (id=1283): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) dup2(r2, r1) 5.050547934s ago: executing program 0 (id=1284): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) socket$packet(0x11, 0x3, 0x300) close(r0) 4.943107184s ago: executing program 0 (id=1285): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x20000102, &(0x7f00000011c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4008c0d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x1) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 2.189187308s ago: executing program 4 (id=1330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000440)=@secondary) 2.132011123s ago: executing program 4 (id=1331): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@block_validity}]}, 0x1, 0x450, &(0x7f0000000bc0)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r2}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) 2.131617023s ago: executing program 4 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, 0x0, 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.306443239s ago: executing program 4 (id=1334): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r9, r8, 0x0, 0x80000000) r10 = dup(r6) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0xb}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:23', @ANYRESHEX], 0xa) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r4, 0x81, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0xfe00, 0x8000, 0x5, 0x4, 0x4, 0x4, 0x1}, 0x20) write$binfmt_misc(r2, 0x0, 0x0) 1.286745451s ago: executing program 3 (id=1336): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.275275852s ago: executing program 3 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) dup2(r3, r2) 1.265593253s ago: executing program 3 (id=1338): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000340)="8f", 0x1}], 0x3, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='t', 0x1) splice(r0, 0x0, r1, 0x0, 0xffffffe1, 0x0) 1.19186518s ago: executing program 3 (id=1339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) 1.19124517s ago: executing program 3 (id=1340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x80, 0x9, 0x3, 0x8}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000001900)="f4", 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x1, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1962903de6c0269b}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x1d0, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^*\x00'}]}, {0x4}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']#^+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa61}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x05\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "1f772869aab0ac7cd99fbee6d82636fd97fd27409493db069353f7d642b43e180872b22b8446b1610ce49d7e631d011745160be2cd8bbe2989861085734a74ae1d356b22a8d90c4c38bf4a0327ce217a543feaf204e683a718358d8430a0d92dc805c2e20c74881fd45cb9f3b827e9f032511843537bcda4af7fb54135aad32c458b2fecad819e1843f3b486fad2f35e5a53b323c96c42db47f06b871fa3495363f8a733c341175aae305e1f81b96461b03669c3a970f6229b96686a41e61085f907def265835ac371e6c4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044004) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="0036550000ec31a18185f161afafd37c8f82b7ce4112a76a592336d7b50f05e36266666e3089f29f792bccd753b76ed02d7b516b6c6c6f7b695d7dd259977e96de893fad7f4c12777c988028052d7ba504a22b09fbfbd031945d7c5c7ce680e671284c33ea9e66165726f64e2880d1fa2b79061306fcb52d17b11c013fe70f515dacc8f87158857978675cd9b71e8b47fa43bc060428e9082d48074cb1993b52f49128b298e5df51f85447140fdf0eb633157b67d8931bbabd48870f854e825739e239bbf9098fc7a917bb1d05cf700dcb23aa593fc56f4f4c5eed4e", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 1.007695887s ago: executing program 4 (id=1341): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='fdinfo\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) getdents(r0, &(0x7f0000000380)=""/24, 0x18) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) getdents64(r0, 0xffffffffffffffff, 0x43) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040), 0x1, 0x500, &(0x7f00000008c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 824.098714ms ago: executing program 4 (id=1342): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000026c0)=@delchain={0x460, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x430, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x424, 0x6, [@m_simple={0x188, 0x1f, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0xd, 0x3, '@-^[\xa5&,.\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x80000001, 0xfffffffffffffffe, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x495, 0x20000000, 0xc6, 0x62c}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x10000000, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0xd5, 0x6, "bb56072c27c5e2984fb9b39740c7dea2e6372a168bf1fdb8ecb6019c9f5db834fcaca18620641b7aab2922f69d2f9b062f5ec4be8a5a603fe7236ffd67f60e9e007b34e0f9cb58fc8855dae5289e4e856559f64bc5a1c5683263937fdd088e5f34874e0d2d2273a7a09810d9042b32fb69223c74e88c41fda5268c22a3107d32ee49d3a99665178abfde24d27a872b23ece9d09c9560070a6e3cca383ccb4d1a6d7c302ab3ee820e67d26e78f72566a2f9765698d783e6c14d8da6156473bc39143eaba66c1921f94f19f65bc88b127c0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x78, 0x7, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x1, 0xffffffffffffffff, 0x5, 0xfffffff2}}}]}, {0x25, 0x6, "3c4d628f307b84d62ea02c2a83d6801f55d9f79db5283d58343d431b68a6d23b01"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_nat={0x16c, 0xc, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xff, 0x1, 0x8, 0x6}, @broadcast, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x20000000, 0x1ff, 0x800}, @broadcast, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x2, 0x6, 0x5}, @empty, @multicast1, 0xff000000, 0x1}}]}, {0xc9, 0x6, "256c3eb62a3c42cccec027988ad7149d48e69552fccd245cb90ebe3ebe6f36a14b83b65bb651bed880b4bf769cb0b5b18dabcc7d7a108e10124a104ef74333b28537655fecc96352477fe91863d2bd9822da8b57752f8d22cb68e4c4a79e0bba55acd2df7f410043b083dc74a0d99332f2ace4931a9efd89f8b8628f63b4791715c76fbcd195be1b8852f5b1f1e7b1296b3dd78041c0da1131303d605504dce4f02686d6875be1f7027e6e45a30376aff6097249b0111683261e334758927ff3e22f0a847f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x80, 0x1b, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x3, 0x6, 0x4, 0x7}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0x1}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x34, 0x19, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x460}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_macvtap\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010100000000000001000000000100000000", @ANYRES32=0x0, @ANYBLOB="05003400b3000000080026009015000008009f0006000000"], 0x34}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 303.875522ms ago: executing program 3 (id=1344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000380)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 196.944222ms ago: executing program 2 (id=1345): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="a3", 0x1, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40000) 140.109697ms ago: executing program 2 (id=1346): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 139.630587ms ago: executing program 2 (id=1347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) dup2(r3, r2) 133.534957ms ago: executing program 2 (id=1348): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000340)="8f", 0x1}], 0x3, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='t', 0x1) splice(r0, 0x0, r1, 0x0, 0xffffffe1, 0x0) 59.787355ms ago: executing program 2 (id=1349): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) 0s ago: executing program 2 (id=1350): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r9, r8, 0x0, 0x80000000) r10 = dup(r6) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0xb}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:23', @ANYRESHEX], 0xa) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r4, 0x81, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0xfe00, 0x8000, 0x5, 0x4, 0x4, 0x4, 0x1}, 0x20) write$binfmt_misc(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): tman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.177817][T26892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.203736][T26892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.320430][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.399183][T26892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.406204][T26892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.432115][T26892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.470144][T26892] hsr_slave_0: entered promiscuous mode [ 163.478496][T26892] hsr_slave_1: entered promiscuous mode [ 163.484335][T26892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.504896][T26892] Cannot create hsr debugfs directory [ 163.787718][T26954] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.794792][T26954] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.801978][T26954] bridge_slave_0: entered allmulticast mode [ 163.808755][T26954] bridge_slave_0: entered promiscuous mode [ 163.815704][T26954] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.822793][T26954] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.830365][T26954] bridge_slave_1: entered allmulticast mode [ 163.836659][T26954] bridge_slave_1: entered promiscuous mode [ 163.856002][T26954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.866494][T26954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.896888][ T50] bridge_slave_1: left allmulticast mode [ 163.902638][ T50] bridge_slave_1: left promiscuous mode [ 163.908386][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.940726][T27448] FAULT_INJECTION: forcing a failure. [ 163.940726][T27448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.953853][T27448] CPU: 0 UID: 0 PID: 27448 Comm: syz.4.1024 Not tainted 6.12.0-rc1-syzkaller #0 [ 163.962985][T27448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.973031][T27448] Call Trace: [ 163.976304][T27448] [ 163.979429][T27448] dump_stack_lvl+0xf2/0x150 [ 163.984032][T27448] dump_stack+0x15/0x20 [ 163.988187][T27448] should_fail_ex+0x223/0x230 [ 163.992933][T27448] should_fail+0xb/0x10 [ 163.997163][T27448] should_fail_usercopy+0x1a/0x20 [ 164.002265][T27448] _copy_to_user+0x1e/0xa0 [ 164.006676][T27448] simple_read_from_buffer+0xa0/0x110 [ 164.012124][T27448] proc_fail_nth_read+0xf9/0x140 [ 164.017060][T27448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.022616][T27448] vfs_read+0x195/0x720 [ 164.026778][T27448] ? __rcu_read_unlock+0x4e/0x70 [ 164.031737][T27448] ? __fget_files+0x1d4/0x210 [ 164.036421][T27448] ? ksys_read+0x76/0x1b0 [ 164.040847][T27448] ksys_read+0xeb/0x1b0 [ 164.045070][T27448] __x64_sys_read+0x42/0x50 [ 164.049732][T27448] x64_sys_call+0x27d3/0x2d60 [ 164.054479][T27448] do_syscall_64+0xc9/0x1c0 [ 164.059024][T27448] ? clear_bhb_loop+0x55/0xb0 [ 164.063705][T27448] ? clear_bhb_loop+0x55/0xb0 [ 164.068407][T27448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.074301][T27448] RIP: 0033:0x7ff83216ca3c [ 164.078704][T27448] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 164.098303][T27448] RSP: 002b:00007ff830de7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.106710][T27448] RAX: ffffffffffffffda RBX: 00007ff832325f80 RCX: 00007ff83216ca3c [ 164.114684][T27448] RDX: 000000000000000f RSI: 00007ff830de70a0 RDI: 0000000000000004 [ 164.122662][T27448] RBP: 00007ff830de7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.130701][T27448] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 164.138662][T27448] R13: 0000000000000000 R14: 00007ff832325f80 R15: 00007fffe1fa7618 [ 164.146654][T27448] [ 164.306725][ T50] bridge_slave_0: left allmulticast mode [ 164.312386][ T50] bridge_slave_0: left promiscuous mode [ 164.318169][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.587100][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 164.587112][ T29] audit: type=1326 audit(1727695058.649:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.645163][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.665927][ T29] audit: type=1326 audit(1727695058.679:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.689536][ T29] audit: type=1326 audit(1727695058.679:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.713142][ T29] audit: type=1326 audit(1727695058.679:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.736634][ T29] audit: type=1326 audit(1727695058.679:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.760098][ T29] audit: type=1326 audit(1727695058.679:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.783862][ T29] audit: type=1326 audit(1727695058.679:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.807497][ T29] audit: type=1326 audit(1727695058.679:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.830965][ T29] audit: type=1326 audit(1727695058.679:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.855024][ T29] audit: type=1326 audit(1727695058.679:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27451 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 164.890311][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.905909][ T50] bond0 (unregistering): Released all slaves [ 164.972825][T26954] team0: Port device team_slave_0 added [ 165.059618][T26954] team0: Port device team_slave_1 added [ 165.088140][ T50] hsr_slave_0: left promiscuous mode [ 165.093748][ T50] hsr_slave_1: left promiscuous mode [ 165.102636][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.110058][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.137003][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.144500][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.152924][T27538] ALSA: seq fatal error: cannot create timer (-16) [ 165.201995][ T50] veth1_macvtap: left promiscuous mode [ 165.207665][ T50] veth0_macvtap: left promiscuous mode [ 165.213144][ T50] veth1_vlan: left promiscuous mode [ 165.218417][ T50] veth0_vlan: left promiscuous mode [ 165.297760][T27541] ALSA: seq fatal error: cannot create timer (-16) [ 165.442948][ T50] team0 (unregistering): Port device team_slave_1 removed [ 165.469757][ T50] team0 (unregistering): Port device team_slave_0 removed [ 165.562386][T26954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.569531][T26954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.595623][T26954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.711703][T27568] tc_dump_action: action bad kind [ 165.717698][T26954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.724759][T26954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.750900][T26954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.896715][T27592] loop4: detected capacity change from 0 to 136 [ 165.905010][T26954] hsr_slave_0: entered promiscuous mode [ 166.065635][T26954] hsr_slave_1: entered promiscuous mode [ 166.071798][T26954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.081861][T27592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.090584][T26954] Cannot create hsr debugfs directory [ 166.102656][T27592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.229067][T26892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.252003][T26892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.266442][T26892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.277306][T26892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.345832][T26892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.373875][T26892] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.395925][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.403103][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.432764][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.439844][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.501245][T26954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.530375][T26954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.552313][T26954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.573885][T26954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.609534][T26892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.739709][T26954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.787709][T26954] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.823309][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.830427][T11199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.879514][T27726] ALSA: seq fatal error: cannot create timer (-16) [ 166.892499][T26954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.902937][T26954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.966254][T26892] veth0_vlan: entered promiscuous mode [ 166.974437][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.981492][T11199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.010838][T26892] veth1_vlan: entered promiscuous mode [ 167.072992][T26892] veth0_macvtap: entered promiscuous mode [ 167.105432][T26892] veth1_macvtap: entered promiscuous mode [ 167.153481][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.164091][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.173978][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.184424][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.194272][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.204815][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.214730][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.225194][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.235094][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.245576][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.255428][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.265960][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.275796][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.286238][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.296061][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.306646][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.316493][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.328537][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.425633][T26892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.439364][T26954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.455535][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.466004][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.475907][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.486487][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.496412][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.506942][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.516777][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.527202][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.537176][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.547604][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.557408][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.567931][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.577742][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.588367][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.596340][T27742] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 167.598175][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.616305][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.626171][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.636578][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.650373][T26892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.668113][T26892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.676890][T26892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.685672][T26892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.694347][T26892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.791412][T27747] loop4: detected capacity change from 0 to 164 [ 167.804051][T27747] iso9660: Unknown parameter '' [ 167.864171][T26954] veth0_vlan: entered promiscuous mode [ 167.913202][T26954] veth1_vlan: entered promiscuous mode [ 167.976754][T26954] veth0_macvtap: entered promiscuous mode [ 167.994152][T26954] veth1_macvtap: entered promiscuous mode [ 168.017284][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.027957][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.037809][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.048227][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.058043][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.068464][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.078316][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.088887][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.098745][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.109187][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.119009][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.129697][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.139564][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.150082][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.159891][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.170385][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.176042][T27775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=27775 comm=syz.0.1046 [ 168.180197][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.203266][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.213151][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.223584][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.358174][T26954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.395494][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.406040][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.415929][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.426430][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.436298][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.446745][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.456676][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.467106][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.476917][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.487411][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.497230][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.507706][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.517521][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.527969][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.537837][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.548258][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.558119][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.568706][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.578522][T26954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.588949][T26954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.612816][T26954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.622253][T26954] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.631079][T26954] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.640084][T26954] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.648815][T26954] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.693340][T27782] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 168.730133][T27791] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1054'. [ 168.764668][T27791] netlink: 'syz.4.1054': attribute type 9 has an invalid length. [ 168.772451][T27791] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1054'. [ 168.781573][T27791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1054'. [ 168.792752][T27794] loop1: detected capacity change from 0 to 256 [ 168.802629][T27794] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 168.812832][T27794] FAT-fs (loop1): Filesystem has been set read-only [ 168.824656][T27794] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 168.923458][T27801] loop4: detected capacity change from 0 to 128 [ 168.984077][T27813] loop0: detected capacity change from 0 to 1024 [ 169.015645][T27813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.055719][T26954] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 169.063550][T26954] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 169.168018][T25240] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.274089][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.320718][T27920] loop4: detected capacity change from 0 to 512 [ 169.435898][T27920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 169.448528][T27920] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.462494][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.478222][T26374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 169.489369][T27804] chnl_net:caif_netlink_parms(): no params data found [ 169.830833][T27970] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1064'. [ 169.854655][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 169.854670][ T29] audit: type=1400 audit(1727695063.829:2182): avc: denied { setopt } for pid=27966 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.880180][ T29] audit: type=1400 audit(1727695063.829:2183): avc: denied { ioctl } for pid=27966 comm="syz.4.1064" path="socket:[42309]" dev="sockfs" ino=42309 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.905141][ T29] audit: type=1400 audit(1727695063.829:2184): avc: denied { create } for pid=27966 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.924898][ T29] audit: type=1400 audit(1727695063.829:2185): avc: denied { write } for pid=27966 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.944625][ T29] audit: type=1400 audit(1727695063.829:2186): avc: denied { bind } for pid=27966 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.964159][ T29] audit: type=1400 audit(1727695063.889:2187): avc: denied { nlmsg_read } for pid=27966 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.011226][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.024669][T27985] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=987 sclass=netlink_audit_socket pid=27985 comm=syz.4.1064 [ 170.040047][ T29] audit: type=1400 audit(1727695064.079:2188): avc: denied { accept } for pid=27966 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 170.059752][ T29] audit: type=1400 audit(1727695064.079:2189): avc: denied { nlmsg_write } for pid=27966 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 170.094322][T27804] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.101438][T27804] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.111446][T27804] bridge_slave_0: entered allmulticast mode [ 170.125231][T27804] bridge_slave_0: entered promiscuous mode [ 170.167828][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.181488][T27804] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.188626][T27804] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.217065][T27804] bridge_slave_1: entered allmulticast mode [ 170.223521][T27804] bridge_slave_1: entered promiscuous mode [ 170.262963][T26892] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.274432][T27804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.285305][T27804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.329798][ T29] audit: type=1326 audit(1727695064.389:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28051 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 170.331827][T28054] loop4: detected capacity change from 0 to 164 [ 170.354795][T27804] team0: Port device team_slave_0 added [ 170.366245][T27804] team0: Port device team_slave_1 added [ 170.367100][T28054] iso9660: Unknown parameter '' [ 170.376483][ T29] audit: type=1326 audit(1727695064.389:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28051 comm="syz.4.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83216dff9 code=0x7ffc0000 [ 170.419881][T27804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.426896][T27804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.452865][T27804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.491601][T27804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.498701][T27804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.524843][T27804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.575861][T27804] hsr_slave_0: entered promiscuous mode [ 170.582230][T27804] hsr_slave_1: entered promiscuous mode [ 170.588333][T27804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.596606][T27804] Cannot create hsr debugfs directory [ 170.609533][T28103] loop4: detected capacity change from 0 to 512 [ 170.616055][ T11] bridge_slave_1: left allmulticast mode [ 170.621712][ T11] bridge_slave_1: left promiscuous mode [ 170.627445][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.637845][T28103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 170.645894][ T11] bridge_slave_0: left allmulticast mode [ 170.651535][ T11] bridge_slave_0: left promiscuous mode [ 170.657266][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.666749][T28103] System zones: 1-12 [ 170.671014][T28103] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1071: corrupted in-inode xattr: invalid ea_ino [ 170.686800][T28103] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1071: couldn't read orphan inode 15 (err -117) [ 170.699482][T28103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.857351][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.869734][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.880967][ T11] bond0 (unregistering): Released all slaves [ 170.921670][T26374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.941809][ T11] hsr_slave_0: left promiscuous mode [ 170.947730][ T11] hsr_slave_1: left promiscuous mode [ 170.961387][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.968919][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.981077][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.988633][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.001063][T28166] loop4: detected capacity change from 0 to 1024 [ 171.008345][T28166] EXT4-fs: Ignoring removed i_version option [ 171.014631][T28166] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.023402][ T11] veth1_macvtap: left promiscuous mode [ 171.028911][ T11] veth0_macvtap: left promiscuous mode [ 171.034386][ T11] veth1_vlan: left promiscuous mode [ 171.039612][ T11] veth0_vlan: left promiscuous mode [ 171.048147][T28166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.120682][T28168] tmpfs: Unknown parameter 'måÅà~Épol' [ 171.128307][ T11] team0 (unregistering): Port device team_slave_1 removed [ 171.149598][T28170] loop0: detected capacity change from 0 to 136 [ 171.155327][ T11] team0 (unregistering): Port device team_slave_0 removed [ 171.171763][T28170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.212465][T28170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.232532][T28170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.241060][T28170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.272324][T26374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.642162][T27804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.678788][T27804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.697917][T27804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.708897][T27804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.738746][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.796029][T27804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.815523][T27804] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.825387][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.869809][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.876955][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.885840][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.892890][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.912018][T27804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.922473][T27804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.940463][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.999850][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.128325][ T11] bridge_slave_1: left allmulticast mode [ 172.133989][ T11] bridge_slave_1: left promiscuous mode [ 172.139806][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.149851][ T11] bridge_slave_0: left allmulticast mode [ 172.155635][ T11] bridge_slave_0: left promiscuous mode [ 172.161399][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.288620][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.302223][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.312834][ T11] bond0 (unregistering): Released all slaves [ 172.329556][T27804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.419422][T28228] chnl_net:caif_netlink_parms(): no params data found [ 172.431661][ T11] hsr_slave_0: left promiscuous mode [ 172.439262][ T11] hsr_slave_1: left promiscuous mode [ 172.446688][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.454114][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.465104][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.472525][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.484283][ T11] veth1_macvtap: left promiscuous mode [ 172.489785][ T11] veth0_macvtap: left promiscuous mode [ 172.495457][ T11] veth1_vlan: left promiscuous mode [ 172.500664][ T11] veth0_vlan: left promiscuous mode [ 172.603470][ T11] team0 (unregistering): Port device team_slave_1 removed [ 172.615925][ T11] team0 (unregistering): Port device team_slave_0 removed [ 172.690821][T27804] veth0_vlan: entered promiscuous mode [ 172.742399][T27804] veth1_vlan: entered promiscuous mode [ 172.792347][T27804] veth0_macvtap: entered promiscuous mode [ 172.807375][T28228] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.814455][T28228] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.824488][T28441] FAULT_INJECTION: forcing a failure. [ 172.824488][T28441] name failslab, interval 1, probability 0, space 0, times 0 [ 172.826780][T28228] bridge_slave_0: entered allmulticast mode [ 172.837179][T28441] CPU: 1 UID: 0 PID: 28441 Comm: syz.4.1084 Not tainted 6.12.0-rc1-syzkaller #0 [ 172.845764][T28228] bridge_slave_0: entered promiscuous mode [ 172.851960][T28441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.851973][T28441] Call Trace: [ 172.851990][T28441] [ 172.851997][T28441] dump_stack_lvl+0xf2/0x150 [ 172.852018][T28441] dump_stack+0x15/0x20 [ 172.852033][T28441] should_fail_ex+0x223/0x230 [ 172.887449][T28441] ? skb_clone+0x154/0x1f0 [ 172.891862][T28441] should_failslab+0x8f/0xb0 [ 172.896441][T28441] kmem_cache_alloc_noprof+0x4c/0x290 [ 172.901825][T28441] skb_clone+0x154/0x1f0 [ 172.906055][T28441] nfnetlink_rcv+0x2de/0x15c0 [ 172.910726][T28441] ? kmem_cache_free+0xdc/0x2d0 [ 172.915590][T28441] ? nlmon_xmit+0x51/0x60 [ 172.919934][T28441] ? __kfree_skb+0x102/0x150 [ 172.924547][T28441] ? consume_skb+0x49/0x160 [ 172.929050][T28441] ? nlmon_xmit+0x51/0x60 [ 172.933386][T28441] ? __dev_queue_xmit+0x1016/0x1fe0 [ 172.938632][T28441] ? __dev_queue_xmit+0xb8a/0x1fe0 [ 172.943793][T28441] ? ref_tracker_free+0x3a5/0x410 [ 172.948823][T28441] ? __dev_queue_xmit+0x161/0x1fe0 [ 172.953956][T28441] netlink_unicast+0x599/0x670 [ 172.958796][T28441] netlink_sendmsg+0x5cc/0x6e0 [ 172.963615][T28441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.968959][T28441] __sock_sendmsg+0x140/0x180 [ 172.973643][T28441] ____sys_sendmsg+0x312/0x410 [ 172.978510][T28441] __sys_sendmsg+0x1d9/0x270 [ 172.983112][T28441] __x64_sys_sendmsg+0x46/0x50 [ 172.987992][T28441] x64_sys_call+0x2689/0x2d60 [ 172.992661][T28441] do_syscall_64+0xc9/0x1c0 [ 172.997200][T28441] ? clear_bhb_loop+0x55/0xb0 [ 173.001966][T28441] ? clear_bhb_loop+0x55/0xb0 [ 173.006643][T28441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.012644][T28441] RIP: 0033:0x7ff83216dff9 [ 173.017048][T28441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.036646][T28441] RSP: 002b:00007ff830de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.045131][T28441] RAX: ffffffffffffffda RBX: 00007ff832325f80 RCX: 00007ff83216dff9 [ 173.053127][T28441] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 173.061086][T28441] RBP: 00007ff830de7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.069041][T28441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.077077][T28441] R13: 0000000000000000 R14: 00007ff832325f80 R15: 00007fffe1fa7618 [ 173.085048][T28441] [ 173.096937][T27804] veth1_macvtap: entered promiscuous mode [ 173.106653][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.117128][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.126951][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.137433][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.147288][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.157721][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.167755][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.178199][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.188120][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.198565][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.208410][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.218923][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.228757][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.239211][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.249026][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.259446][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.269263][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.279827][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.290796][T27804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.302308][T28228] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.309592][T28228] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.317050][T28228] bridge_slave_1: entered allmulticast mode [ 173.323423][T28228] bridge_slave_1: entered promiscuous mode [ 173.335461][T25236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.358671][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.369290][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.379228][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.389651][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.399455][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.409892][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.419700][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.430183][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.440000][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.450428][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.460285][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.470763][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.480557][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.490996][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.501073][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.511520][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.521401][T27804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.531844][T27804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.542540][T27804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.558516][T28228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.569453][T28228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.598367][T28508] syz.0.1086[28508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.598556][T28508] syz.0.1086[28508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.610096][T28508] syz.0.1086[28508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.623442][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 173.625847][T27804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.652517][T27804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.661307][T27804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.670014][T27804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.680978][T28228] team0: Port device team_slave_0 added [ 173.689938][T28228] team0: Port device team_slave_1 added [ 173.714881][T28228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.721836][T28228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.748020][T28228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.765964][T28228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.773071][T28228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.799055][T28228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.818355][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 173.901197][T28228] hsr_slave_0: entered promiscuous mode [ 173.907636][T28228] hsr_slave_1: entered promiscuous mode [ 173.913701][T28228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.926060][T28228] Cannot create hsr debugfs directory [ 173.982014][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.995698][T28680] tc_dump_action: action bad kind [ 174.005574][T28393] chnl_net:caif_netlink_parms(): no params data found [ 174.041275][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.043358][T28709] loop2: detected capacity change from 0 to 512 [ 174.081444][T28709] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1092: Parent and EA inode have the same ino 15 [ 174.094211][T28709] EXT4-fs (loop2): 1 orphan inode deleted [ 174.100276][T28709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.115124][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.159824][T28393] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.166978][T28393] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.174244][T28393] bridge_slave_0: entered allmulticast mode [ 174.180864][T28393] bridge_slave_0: entered promiscuous mode [ 174.188032][T28393] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.195143][T28393] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.202454][T28393] bridge_slave_1: entered allmulticast mode [ 174.208952][T28393] bridge_slave_1: entered promiscuous mode [ 174.219464][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.246504][T28393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.257173][T28393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.289721][T28393] team0: Port device team_slave_0 added [ 174.298381][T28393] team0: Port device team_slave_1 added [ 174.311814][ T11] bridge_slave_1: left allmulticast mode [ 174.317497][ T11] bridge_slave_1: left promiscuous mode [ 174.323122][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.330799][ T11] bridge_slave_0: left allmulticast mode [ 174.336533][ T11] bridge_slave_0: left promiscuous mode [ 174.342219][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.427436][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.437881][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.448051][ T11] bond0 (unregistering): Released all slaves [ 174.467404][T28393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.474373][T28393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.500399][T28393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.511898][T28393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.518928][T28393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.544892][T28393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.561093][ T11] hsr_slave_0: left promiscuous mode [ 174.567348][ T11] hsr_slave_1: left promiscuous mode [ 174.573036][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.580615][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.588250][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.595747][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.607019][ T11] veth1_macvtap: left promiscuous mode [ 174.612551][ T11] veth0_macvtap: left promiscuous mode [ 174.618193][ T11] veth1_vlan: left promiscuous mode [ 174.623470][ T11] veth0_vlan: left promiscuous mode [ 174.697342][ T11] team0 (unregistering): Port device team_slave_1 removed [ 174.707615][ T11] team0 (unregistering): Port device team_slave_0 removed [ 174.760744][T28393] hsr_slave_0: entered promiscuous mode [ 174.767335][T28393] hsr_slave_1: entered promiscuous mode [ 174.773399][T28393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.781091][T28393] Cannot create hsr debugfs directory [ 174.856625][T28228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.864730][T28228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.879414][T28228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.889585][T27804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.891666][T28228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.940348][T28228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.952597][T28228] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.961852][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.968978][T11199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.980080][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.987262][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.017744][T28228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.028160][T28228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.089767][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 175.089908][ T29] audit: type=1400 audit(1727695069.149:2248): avc: denied { lock } for pid=29027 comm="syz.2.1103" path="socket:[41909]" dev="sockfs" ino=41909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 175.095606][T29028] loop2: detected capacity change from 0 to 512 [ 175.103533][T28228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.126678][T29028] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 175.180151][ T29] audit: type=1326 audit(1727695069.239:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29027 comm="syz.2.1103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa880dff9 code=0x0 [ 175.184313][T28393] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.216774][T29044] loop4: detected capacity change from 0 to 512 [ 175.226384][T28393] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.234034][T29044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.236395][T28393] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.246968][T29044] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.268218][T28393] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.309754][T28228] veth0_vlan: entered promiscuous mode [ 175.329538][T28228] veth1_vlan: entered promiscuous mode [ 175.336232][T26374] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /57/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 175.353110][T28228] veth0_macvtap: entered promiscuous mode [ 175.376455][T28228] veth1_macvtap: entered promiscuous mode [ 175.391462][T28393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.410979][T28393] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.419029][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.429549][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.439479][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.449974][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.459806][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.470252][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.480078][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.490701][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.500540][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.511058][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.520918][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.531458][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.541330][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.551765][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.561750][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.572235][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.582049][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.592523][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.604811][T28228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.625203][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.635817][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.646095][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.656739][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.666596][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.677010][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.686940][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.697537][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.707396][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.717904][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.727739][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.738269][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.748094][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.758527][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.768441][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.778876][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.788738][T28228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.799161][T28228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.814172][T28228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.820187][ T29] audit: type=1400 audit(1727695069.869:2250): avc: denied { connect } for pid=29077 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 175.852538][T29081] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1107'. [ 175.870125][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.877241][T11199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.885845][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.892976][T11199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.894551][ T29] audit: type=1400 audit(1727695069.949:2251): avc: denied { write } for pid=29077 comm="syz.0.1107" path="socket:[43533]" dev="sockfs" ino=43533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 175.929110][T28393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.939476][T28393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.963121][T28228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.971957][T28228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.980752][T28228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.989545][T28228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.036279][T28393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.095829][T29105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 176.216332][T28393] veth0_vlan: entered promiscuous mode [ 176.224236][T28393] veth1_vlan: entered promiscuous mode [ 176.236693][T28393] veth0_macvtap: entered promiscuous mode [ 176.244333][T28393] veth1_macvtap: entered promiscuous mode [ 176.254298][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.264743][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.274539][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.285000][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.294832][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.305287][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.315200][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.325808][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.335768][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.346273][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.356105][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.366569][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.376429][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.386860][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.396756][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.407271][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.417175][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.427661][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.437589][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.448119][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.459164][T28393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.467555][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.478060][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.487930][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.498381][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.508257][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.518786][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.528750][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.537608][T29139] FAULT_INJECTION: forcing a failure. [ 176.537608][T29139] name failslab, interval 1, probability 0, space 0, times 0 [ 176.539282][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.551740][T29139] CPU: 0 UID: 0 PID: 29139 Comm: syz.1.1119 Not tainted 6.12.0-rc1-syzkaller #0 [ 176.551802][T29139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.551812][T29139] Call Trace: [ 176.551819][T29139] [ 176.551825][T29139] dump_stack_lvl+0xf2/0x150 [ 176.561609][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.570576][T29139] dump_stack+0x15/0x20 [ 176.580626][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.583867][T29139] should_fail_ex+0x223/0x230 [ 176.586791][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.591339][T29139] ? __d_alloc+0x3d/0x340 [ 176.601725][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.605927][T29139] should_failslab+0x8f/0xb0 [ 176.605971][T29139] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 176.605997][T29139] ? xa_load+0xb9/0xe0 [ 176.606016][T29139] __d_alloc+0x3d/0x340 [ 176.615855][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.620477][T29139] d_alloc_parallel+0x54/0xc80 [ 176.630956][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.635245][T29139] ? selinux_inode_permission+0x341/0x410 [ 176.645036][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.649578][T29139] ? lockref_get_not_dead+0x118/0x1b0 [ 176.655374][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.655387][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.659440][T29139] ? down_read+0x171/0x4b0 [ 176.663566][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.673940][T29139] __lookup_slow+0x8d/0x250 [ 176.678693][T28393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.678705][T28393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.679679][T28393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.688504][T29139] lookup_slow+0x3c/0x60 [ 176.688530][T29139] walk_component+0x1f5/0x230 [ 176.785356][T29139] ? path_lookupat+0xfd/0x2b0 [ 176.790165][T29139] path_lookupat+0x10a/0x2b0 [ 176.794759][T29139] filename_lookup+0x127/0x300 [ 176.799524][T29139] vfs_statx+0xa1/0x2f0 [ 176.803680][T29139] __se_sys_newstat+0x6d/0x280 [ 176.808475][T29139] ? fput+0x14e/0x190 [ 176.812464][T29139] ? ksys_write+0x17a/0x1b0 [ 176.816988][T29139] __x64_sys_newstat+0x31/0x40 [ 176.821817][T29139] x64_sys_call+0x5e2/0x2d60 [ 176.826410][T29139] do_syscall_64+0xc9/0x1c0 [ 176.830958][T29139] ? clear_bhb_loop+0x55/0xb0 [ 176.835639][T29139] ? clear_bhb_loop+0x55/0xb0 [ 176.840346][T29139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.846301][T29139] RIP: 0033:0x7fb1d787dff9 [ 176.850711][T29139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.870325][T29139] RSP: 002b:00007fb1d64f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 176.878750][T29139] RAX: ffffffffffffffda RBX: 00007fb1d7a35f80 RCX: 00007fb1d787dff9 [ 176.886711][T29139] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000020000340 [ 176.894672][T29139] RBP: 00007fb1d64f7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.902711][T29139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.910706][T29139] R13: 0000000000000000 R14: 00007fb1d7a35f80 R15: 00007ffe4b871e68 [ 176.918807][T29139] [ 176.936372][T28393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.945128][T28393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.953847][T28393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.962615][T28393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.978619][ T29] audit: type=1326 audit(1727695071.039:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1145dff9 code=0x7ffc0000 [ 177.003349][ T29] audit: type=1326 audit(1727695071.069:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d1145dff9 code=0x7ffc0000 [ 177.026998][ T29] audit: type=1326 audit(1727695071.069:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1145dff9 code=0x7ffc0000 [ 177.050688][ T29] audit: type=1326 audit(1727695071.069:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1145dff9 code=0x7ffc0000 [ 177.079200][ T29] audit: type=1326 audit(1727695071.139:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d1145dff9 code=0x7ffc0000 [ 177.157825][ T29] audit: type=1326 audit(1727695071.139:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29145 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1145dff9 code=0x7ffc0000 [ 177.244649][T29161] ALSA: seq fatal error: cannot create timer (-16) [ 177.467290][T29182] loop2: detected capacity change from 0 to 2048 [ 177.477844][T29182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.573539][ T85] bridge_slave_1: left allmulticast mode [ 177.579338][ T85] bridge_slave_1: left promiscuous mode [ 177.585006][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.593278][ T85] bridge_slave_0: left allmulticast mode [ 177.599120][ T85] bridge_slave_0: left promiscuous mode [ 177.604912][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.747700][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.758755][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.769493][ T85] bond0 (unregistering): Released all slaves [ 177.819199][ T85] hsr_slave_0: left promiscuous mode [ 177.824850][ T85] hsr_slave_1: left promiscuous mode [ 177.830580][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.838192][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.848345][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.855858][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.866820][ T85] veth1_macvtap: left promiscuous mode [ 177.872298][ T85] veth0_macvtap: left promiscuous mode [ 177.877796][ T85] veth1_vlan: left promiscuous mode [ 177.883054][ T85] veth0_vlan: left promiscuous mode [ 177.981732][ T85] team0 (unregistering): Port device team_slave_1 removed [ 177.993076][ T85] team0 (unregistering): Port device team_slave_0 removed [ 178.194045][T29203] ALSA: seq fatal error: cannot create timer (-16) [ 178.266361][T27804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.320542][T29215] netlink: 'syz.1.1141': attribute type 4 has an invalid length. [ 178.322720][T29214] loop2: detected capacity change from 0 to 128 [ 178.346418][T29210] netlink: 'syz.1.1141': attribute type 4 has an invalid length. [ 178.388984][T29214] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.450980][T29214] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.512694][T29214] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.542761][T29226] netlink: 'syz.0.1149': attribute type 4 has an invalid length. [ 178.569810][T29226] netlink: 'syz.0.1149': attribute type 4 has an invalid length. [ 178.700516][T29241] ALSA: seq fatal error: cannot create timer (-16) [ 178.722862][T29245] FAULT_INJECTION: forcing a failure. [ 178.722862][T29245] name failslab, interval 1, probability 0, space 0, times 0 [ 178.735602][T29245] CPU: 0 UID: 0 PID: 29245 Comm: syz.0.1156 Not tainted 6.12.0-rc1-syzkaller #0 [ 178.744690][T29245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.754798][T29245] Call Trace: [ 178.758154][T29245] [ 178.761082][T29245] dump_stack_lvl+0xf2/0x150 [ 178.765684][T29245] dump_stack+0x15/0x20 [ 178.769871][T29245] should_fail_ex+0x223/0x230 [ 178.774616][T29245] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 178.780944][T29245] should_failslab+0x8f/0xb0 [ 178.785535][T29245] __kmalloc_noprof+0xa5/0x370 [ 178.790430][T29245] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 178.796558][T29245] ? ns_capable+0x7d/0xb0 [ 178.800889][T29245] genl_rcv_msg+0x470/0x6c0 [ 178.805429][T29245] ? __pfx_l2tp_nl_cmd_session_delete+0x10/0x10 [ 178.811754][T29245] ? ref_tracker_free+0x3a5/0x410 [ 178.816786][T29245] ? __dev_queue_xmit+0x161/0x1fe0 [ 178.821911][T29245] netlink_rcv_skb+0x12c/0x230 [ 178.826700][T29245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.831727][T29245] genl_rcv+0x28/0x40 [ 178.835700][T29245] netlink_unicast+0x599/0x670 [ 178.840465][T29245] netlink_sendmsg+0x5cc/0x6e0 [ 178.845228][T29245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.850589][T29245] __sock_sendmsg+0x140/0x180 [ 178.855347][T29245] ____sys_sendmsg+0x312/0x410 [ 178.860542][T29245] __sys_sendmsg+0x1d9/0x270 [ 178.865152][T29245] __x64_sys_sendmsg+0x46/0x50 [ 178.869918][T29245] x64_sys_call+0x2689/0x2d60 [ 178.874591][T29245] do_syscall_64+0xc9/0x1c0 [ 178.879149][T29245] ? clear_bhb_loop+0x55/0xb0 [ 178.883845][T29245] ? clear_bhb_loop+0x55/0xb0 [ 178.888534][T29245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.894454][T29245] RIP: 0033:0x7f6d1145dff9 [ 178.898864][T29245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.918528][T29245] RSP: 002b:00007f6d100d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.926942][T29245] RAX: ffffffffffffffda RBX: 00007f6d11615f80 RCX: 00007f6d1145dff9 [ 178.934905][T29245] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 178.942875][T29245] RBP: 00007f6d100d7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.950870][T29245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.958875][T29245] R13: 0000000000000000 R14: 00007f6d11615f80 R15: 00007fff1d6cfa98 [ 178.966877][T29245] [ 179.022068][T29250] loop3: detected capacity change from 0 to 164 [ 179.030873][T29250] iso9660: Unknown parameter '' [ 179.075837][T29258] loop3: detected capacity change from 0 to 1024 [ 179.082628][T29258] EXT4-fs: Ignoring removed nobh option [ 179.090572][T29259] loop0: detected capacity change from 0 to 256 [ 179.100422][T29259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.110653][T29259] FAT-fs (loop0): Filesystem has been set read-only [ 179.117364][T29259] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 179.140055][T29258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.157810][T29258] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 179.170162][T29258] EXT4-fs (loop3): This should not happen!! Data will be lost [ 179.170162][T29258] [ 179.179914][T29258] EXT4-fs (loop3): Total free blocks count 0 [ 179.185896][T29258] EXT4-fs (loop3): Free/Dirty block details [ 179.191802][T29258] EXT4-fs (loop3): free_blocks=0 [ 179.196813][T29258] EXT4-fs (loop3): dirty_blocks=0 [ 179.201819][T29258] EXT4-fs (loop3): Block reservation details [ 179.207808][T29258] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 179.217136][T29262] netlink: 'syz.3.1161': attribute type 39 has an invalid length. [ 179.224982][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 179.235068][T29262] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.242324][T29262] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.309163][T29268] FAULT_INJECTION: forcing a failure. [ 179.309163][T29268] name failslab, interval 1, probability 0, space 0, times 0 [ 179.321877][T29268] CPU: 1 UID: 0 PID: 29268 Comm: syz.1.1163 Not tainted 6.12.0-rc1-syzkaller #0 [ 179.330931][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.341020][T29268] Call Trace: [ 179.344292][T29268] [ 179.347263][T29268] dump_stack_lvl+0xf2/0x150 [ 179.351907][T29268] dump_stack+0x15/0x20 [ 179.356062][T29268] should_fail_ex+0x223/0x230 [ 179.360752][T29268] ? audit_log_d_path+0x96/0x250 [ 179.365785][T29268] should_failslab+0x8f/0xb0 [ 179.370375][T29268] __kmalloc_cache_noprof+0x4b/0x2a0 [ 179.375820][T29268] audit_log_d_path+0x96/0x250 [ 179.380605][T29268] ? get_file_rcu+0xeb/0x100 [ 179.385286][T29268] ? __rcu_read_unlock+0x4e/0x70 [ 179.390306][T29268] audit_log_d_path_exe+0x42/0x70 [ 179.395390][T29268] audit_log_task+0x155/0x180 [ 179.400117][T29268] audit_seccomp+0x68/0x130 [ 179.404674][T29268] __seccomp_filter+0x6fa/0x1180 [ 179.409622][T29268] ? proc_fail_nth_write+0x12a/0x150 [ 179.414907][T29268] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 179.420596][T29268] ? vfs_write+0x580/0x910 [ 179.425259][T29268] __secure_computing+0x9f/0x1c0 [ 179.430198][T29268] syscall_trace_enter+0xd1/0x1f0 [ 179.435265][T29268] do_syscall_64+0xaa/0x1c0 [ 179.439767][T29268] ? clear_bhb_loop+0x55/0xb0 [ 179.444479][T29268] ? clear_bhb_loop+0x55/0xb0 [ 179.449289][T29268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.455190][T29268] RIP: 0033:0x7fb1d787dff9 [ 179.459669][T29268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.479426][T29268] RSP: 002b:00007fb1d64f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 179.487834][T29268] RAX: ffffffffffffffda RBX: 00007fb1d7a35f80 RCX: 00007fb1d787dff9 [ 179.495827][T29268] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000696a [ 179.503786][T29268] RBP: 00007fb1d64f7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.511757][T29268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.519758][T29268] R13: 0000000000000000 R14: 00007fb1d7a35f80 R15: 00007ffe4b871e68 [ 179.527792][T29268] [ 179.558616][T26892] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 179.567072][T26892] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 179.613666][T28393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.655061][T29283] loop2: detected capacity change from 0 to 164 [ 179.661950][T29283] iso9660: Unknown parameter '' [ 179.696090][T29292] FAULT_INJECTION: forcing a failure. [ 179.696090][T29292] name failslab, interval 1, probability 0, space 0, times 0 [ 179.708744][T29292] CPU: 0 UID: 0 PID: 29292 Comm: syz.2.1173 Not tainted 6.12.0-rc1-syzkaller #0 [ 179.717848][T29292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.727895][T29292] Call Trace: [ 179.731182][T29292] [ 179.734104][T29292] dump_stack_lvl+0xf2/0x150 [ 179.738736][T29292] dump_stack+0x15/0x20 [ 179.742938][T29292] should_fail_ex+0x223/0x230 [ 179.747631][T29292] ? __kvmalloc_node_noprof+0x72/0x170 [ 179.753235][T29292] should_failslab+0x8f/0xb0 [ 179.757828][T29292] __kmalloc_node_noprof+0xa8/0x380 [ 179.763086][T29292] __kvmalloc_node_noprof+0x72/0x170 [ 179.768463][T29292] alloc_fdtable+0xf8/0x190 [ 179.773030][T29292] dup_fd+0x56c/0x6c0 [ 179.777019][T29292] copy_files+0xc1/0x130 [ 179.781313][T29292] copy_process+0xcbf/0x1f90 [ 179.785929][T29292] kernel_clone+0x167/0x5e0 [ 179.790468][T29292] ? vfs_write+0x580/0x910 [ 179.794897][T29292] __x64_sys_clone+0xe8/0x120 [ 179.799673][T29292] x64_sys_call+0x2d23/0x2d60 [ 179.804435][T29292] do_syscall_64+0xc9/0x1c0 [ 179.808993][T29292] ? clear_bhb_loop+0x55/0xb0 [ 179.813730][T29292] ? clear_bhb_loop+0x55/0xb0 [ 179.818569][T29292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.824473][T29292] RIP: 0033:0x7f5fa880dff9 [ 179.828892][T29292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.848586][T29292] RSP: 002b:00007f5fa7486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 179.857089][T29292] RAX: ffffffffffffffda RBX: 00007f5fa89c5f80 RCX: 00007f5fa880dff9 [ 179.865073][T29292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.873038][T29292] RBP: 00007f5fa7487090 R08: 0000000000000000 R09: 0000000000000000 [ 179.881067][T29292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.889037][T29292] R13: 0000000000000000 R14: 00007f5fa89c5f80 R15: 00007ffff87cb5f8 [ 179.897021][T29292] [ 179.918812][T29295] 9pnet_fd: Insufficient options for proto=fd [ 179.982430][T29302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1177'. [ 180.011380][T29304] loop2: detected capacity change from 0 to 512 [ 180.025989][T29304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.040505][T29304] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.111066][T27804] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /32/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 180.441351][T29330] chnl_net:caif_netlink_parms(): no params data found [ 180.522545][T29330] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.529711][T29330] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.587064][T29330] bridge_slave_0: entered allmulticast mode [ 180.603792][T29330] bridge_slave_0: entered promiscuous mode [ 180.627783][T29330] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.634871][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 180.634885][ T29] audit: type=1400 audit(1727695074.689:2618): avc: denied { write } for pid=29500 comm="syz.3.1185" path="socket:[44575]" dev="sockfs" ino=44575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.641048][T29330] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.720023][T29330] bridge_slave_1: entered allmulticast mode [ 180.736922][T29330] bridge_slave_1: entered promiscuous mode [ 180.776633][T29330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.796769][T29330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.847017][T29330] team0: Port device team_slave_0 added [ 180.853668][T29330] team0: Port device team_slave_1 added [ 180.860544][T29562] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1192'. [ 180.869545][ T29] audit: type=1326 audit(1727695074.919:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 180.893056][ T29] audit: type=1326 audit(1727695074.919:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 180.916638][ T29] audit: type=1326 audit(1727695074.919:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 180.940273][ T29] audit: type=1326 audit(1727695074.919:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 180.964075][ T29] audit: type=1326 audit(1727695074.919:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 180.987774][ T29] audit: type=1326 audit(1727695074.919:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 181.011166][ T29] audit: type=1326 audit(1727695074.919:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 181.035011][ T29] audit: type=1326 audit(1727695074.919:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 181.058801][ T29] audit: type=1326 audit(1727695074.919:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d787dff9 code=0x7ffc0000 [ 181.090616][T29330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.097647][T29330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.123656][T29330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.135420][T29330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.142521][T29330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.168478][T29330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.258926][T29330] hsr_slave_0: entered promiscuous mode [ 181.259044][T29598] loop1: detected capacity change from 0 to 128 [ 181.271272][T29330] hsr_slave_1: entered promiscuous mode [ 181.277614][T29330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.286017][T29330] Cannot create hsr debugfs directory [ 181.391489][T29330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.456672][T29330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.533670][T29330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.604072][T29330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.689085][T29330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.708848][T29330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.728544][T29330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.737926][T29330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.803234][T29330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.828396][T29330] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.856572][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.863678][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.892124][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.899233][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.932913][T29330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.943687][T29330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.985450][T29720] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1202'. [ 182.044504][T29724] tipc: Started in network mode [ 182.049773][T29724] tipc: Node identity c280ab78cf33, cluster identity 4711 [ 182.057110][T29724] tipc: Enabled bearer , priority 7 [ 182.078570][T29724] ªªªªªª: renamed from syzkaller0 [ 182.084976][T29724] tipc: Disabling bearer [ 182.113548][T29330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.198985][T29742] loop3: detected capacity change from 0 to 128 [ 182.282659][T29330] veth0_vlan: entered promiscuous mode [ 182.297377][T29330] veth1_vlan: entered promiscuous mode [ 182.331140][T29330] veth0_macvtap: entered promiscuous mode [ 182.349081][T29330] veth1_macvtap: entered promiscuous mode [ 182.374152][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.384646][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.394454][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.404991][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.414816][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.425272][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.435092][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.445524][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.455335][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.465760][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.475567][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.486005][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.495815][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.506226][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.516038][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.526638][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.536498][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.546912][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.556734][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.567148][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.580431][T29330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.595173][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.605728][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.615565][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.626030][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.635847][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.646269][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.656083][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.666493][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.676297][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.687125][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.697086][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.707500][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.717310][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.727786][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.737586][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.748016][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.757859][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.768673][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.778548][T29330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.788956][T29330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.800242][T29330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.879153][T29330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.887914][T29330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.896968][T29330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.905716][T29330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.567945][T29780] loop0: detected capacity change from 0 to 2048 [ 183.596025][T29779] loop1: detected capacity change from 0 to 128 [ 183.639658][T29782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.720360][T29782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.780194][T29782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.791926][T29780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.020306][T29782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.084429][T29330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.122628][T29782] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.169383][T29782] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.214491][T29782] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.272580][T29782] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.467299][T29836] syz.3.1232[29836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.467352][T29836] syz.3.1232[29836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.496798][T29836] syz.3.1232[29836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.527470][T29836] loop3: detected capacity change from 0 to 512 [ 184.587959][T29836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.607515][T29836] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.649571][T28393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.591755][T29877] loop0: detected capacity change from 0 to 512 [ 185.608639][T26374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.627039][T29877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 185.646070][T29877] System zones: 1-12 [ 185.657183][T29877] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1243: corrupted in-inode xattr: invalid ea_ino [ 185.691403][T29877] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1243: couldn't read orphan inode 15 (err -117) [ 185.722862][T29857] chnl_net:caif_netlink_parms(): no params data found [ 185.733623][T29877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.799885][T29857] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.807046][T29857] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.820904][T29857] bridge_slave_0: entered allmulticast mode [ 185.828159][T29857] bridge_slave_0: entered promiscuous mode [ 185.837580][T29857] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.844774][T29857] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.852064][T29857] bridge_slave_1: entered allmulticast mode [ 185.860445][T29857] bridge_slave_1: entered promiscuous mode [ 185.885630][T29857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.899214][T29857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.922745][T29857] team0: Port device team_slave_0 added [ 185.932460][T29857] team0: Port device team_slave_1 added [ 185.953275][T29857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.960261][T29857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.986142][T29857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.999519][T29857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.006531][T29857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.032496][T29857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.097458][T29857] hsr_slave_0: entered promiscuous mode [ 186.103884][T29857] hsr_slave_1: entered promiscuous mode [ 186.109940][T29857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.117788][T29857] Cannot create hsr debugfs directory [ 186.167440][T30140] loop1: detected capacity change from 0 to 2048 [ 186.220768][T29330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.324157][T29857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.441677][T29857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.506776][T29857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.575396][T30216] FAULT_INJECTION: forcing a failure. [ 186.575396][T30216] name failslab, interval 1, probability 0, space 0, times 0 [ 186.588194][T30216] CPU: 0 UID: 0 PID: 30216 Comm: syz.1.1251 Not tainted 6.12.0-rc1-syzkaller #0 [ 186.597295][T30216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.607343][T30216] Call Trace: [ 186.610664][T30216] [ 186.613635][T30216] dump_stack_lvl+0xf2/0x150 [ 186.618224][T30216] dump_stack+0x15/0x20 [ 186.622439][T30216] should_fail_ex+0x223/0x230 [ 186.627115][T30216] ? prepare_creds+0x37/0x480 [ 186.631787][T30216] should_failslab+0x8f/0xb0 [ 186.636391][T30216] kmem_cache_alloc_noprof+0x4c/0x290 [ 186.641814][T30216] prepare_creds+0x37/0x480 [ 186.646394][T30216] join_session_keyring+0x19/0x2a0 [ 186.651521][T30216] lookup_user_key+0x3ef/0xdf0 [ 186.656284][T30216] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 186.662505][T30216] __se_sys_add_key+0x24b/0x320 [ 186.667425][T30216] ? fput+0x14e/0x190 [ 186.671437][T30216] __x64_sys_add_key+0x67/0x80 [ 186.676256][T30216] x64_sys_call+0x157d/0x2d60 [ 186.680929][T30216] do_syscall_64+0xc9/0x1c0 [ 186.685435][T30216] ? clear_bhb_loop+0x55/0xb0 [ 186.690216][T30216] ? clear_bhb_loop+0x55/0xb0 [ 186.694895][T30216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.700793][T30216] RIP: 0033:0x7fb1d787dff9 [ 186.705204][T30216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.724803][T30216] RSP: 002b:00007fb1d64f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 186.733353][T30216] RAX: ffffffffffffffda RBX: 00007fb1d7a35f80 RCX: 00007fb1d787dff9 [ 186.741317][T30216] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 186.749374][T30216] RBP: 00007fb1d64f7090 R08: fffffffffffffffd R09: 0000000000000000 [ 186.757352][T30216] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 186.765326][T30216] R13: 0000000000000000 R14: 00007fb1d7a35f80 R15: 00007ffe4b871e68 [ 186.773305][T30216] [ 186.777774][T29857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.851312][T29857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.869764][T29857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.881153][T29857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.890378][T29857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.995863][T29857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.020185][T29857] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.026934][T30255] ALSA: seq fatal error: cannot create timer (-16) [ 187.044383][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.051455][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.072554][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 187.072567][ T29] audit: type=1326 audit(1727695081.129:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.080763][T30264] loop3: detected capacity change from 0 to 164 [ 187.102181][ T29] audit: type=1326 audit(1727695081.129:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.106214][ T29] audit: type=1326 audit(1727695081.129:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.132580][T29857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.155475][ T29] audit: type=1326 audit(1727695081.129:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.155502][ T29] audit: type=1326 audit(1727695081.129:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.166344][T29857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.224213][ T29] audit: type=1326 audit(1727695081.129:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.247838][ T29] audit: type=1326 audit(1727695081.129:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.257163][T30264] iso9660: Unknown parameter '' [ 187.271481][ T29] audit: type=1326 audit(1727695081.129:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.299784][ T29] audit: type=1326 audit(1727695081.129:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f568003dff9 code=0x7ffc0000 [ 187.323275][ T29] audit: type=1326 audit(1727695081.129:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f568003e033 code=0x7ffc0000 [ 187.356819][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.363962][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.437785][T29857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.508490][T30293] loop3: detected capacity change from 0 to 512 [ 187.516200][T30293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 187.524282][T30293] System zones: 1-12 [ 187.535646][T30293] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1273: corrupted in-inode xattr: invalid ea_ino [ 187.579548][T30293] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1273: couldn't read orphan inode 15 (err -117) [ 187.601113][T30293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.633270][T28393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.669543][T30302] ALSA: seq fatal error: cannot create timer (-16) [ 187.706851][T29857] veth0_vlan: entered promiscuous mode [ 187.725347][T29857] veth1_vlan: entered promiscuous mode [ 187.756860][T29857] veth0_macvtap: entered promiscuous mode [ 187.767319][T29857] veth1_macvtap: entered promiscuous mode [ 187.781699][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.792202][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.802041][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.813462][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.823584][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.834015][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.843819][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.854251][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.864089][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.874535][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.884457][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.894999][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.904836][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.915314][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.925140][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.935623][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.945435][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.955930][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.965818][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.976333][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.986223][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.996702][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.008295][T29857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.017305][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.027892][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.037749][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.048222][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.058062][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.068523][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.078331][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.088814][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.098634][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.109052][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.118868][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.129316][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.139176][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.149604][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.159416][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.169896][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.179786][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.190227][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.200038][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.210561][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.220380][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.230789][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.244804][T29857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.257850][T29857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.266646][T29857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.275384][T29857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.284153][T29857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.380263][T30338] ALSA: seq fatal error: cannot create timer (-16) [ 188.556935][T30365] loop3: detected capacity change from 0 to 128 [ 188.625167][T30367] ALSA: seq fatal error: cannot create timer (-16) [ 189.733112][T30397] ALSA: seq fatal error: cannot create timer (-16) [ 190.506318][T30420] chnl_net:caif_netlink_parms(): no params data found [ 190.526075][T27804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.544397][ T85] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.568079][T30420] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.575335][T30420] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.582696][T30420] bridge_slave_0: entered allmulticast mode [ 190.589596][T30420] bridge_slave_0: entered promiscuous mode [ 190.599921][ T85] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.610948][T30420] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.618083][T30420] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.625837][T30420] bridge_slave_1: entered allmulticast mode [ 190.632259][T30420] bridge_slave_1: entered promiscuous mode [ 190.649947][T30420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.662111][ T85] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.677347][T30420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.718274][ T85] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.732750][T30420] team0: Port device team_slave_0 added [ 190.740226][T30420] team0: Port device team_slave_1 added [ 190.760711][T30420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.767718][T30420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.793692][T30420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.818076][T30420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.825252][T30420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.851234][T30420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.865348][T30693] FAULT_INJECTION: forcing a failure. [ 190.865348][T30693] name failslab, interval 1, probability 0, space 0, times 0 [ 190.866945][ T85] bridge_slave_1: left allmulticast mode [ 190.878111][T30693] CPU: 0 UID: 0 PID: 30693 Comm: syz.3.1329 Not tainted 6.12.0-rc1-syzkaller #0 [ 190.878135][T30693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.883771][ T85] bridge_slave_1: left promiscuous mode [ 190.892729][T30693] Call Trace: [ 190.892738][T30693] [ 190.892746][T30693] dump_stack_lvl+0xf2/0x150 [ 190.902987][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.908329][T30693] dump_stack+0x15/0x20 [ 190.930485][T30693] should_fail_ex+0x223/0x230 [ 190.935220][T30693] ? __alloc_skb+0x10b/0x310 [ 190.939808][T30693] should_failslab+0x8f/0xb0 [ 190.944467][T30693] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 190.950330][T30693] __alloc_skb+0x10b/0x310 [ 190.954751][T30693] tipc_msg_build+0xc6/0x820 [ 190.959344][T30693] ? __rcu_read_unlock+0x4e/0x70 [ 190.964339][T30693] ? tipc_node_find+0xf0/0x1d0 [ 190.969249][T30693] __tipc_sendmsg+0x14f7/0x1c40 [ 190.974113][T30693] ? selinux_socket_sendmsg+0x19c/0x1d0 [ 190.979717][T30693] ? __pfx_woken_wake_function+0x10/0x10 [ 190.985341][T30693] ? lock_sock_nested+0x10f/0x140 [ 190.990376][T30693] ? __pfx_tipc_sendmsg+0x10/0x10 [ 190.995422][T30693] tipc_sendmsg+0x3e/0x60 [ 190.999737][T30693] __sock_sendmsg+0x140/0x180 [ 191.004407][T30693] ____sys_sendmsg+0x312/0x410 [ 191.009293][T30693] __sys_sendmsg+0x1d9/0x270 [ 191.013950][T30693] __x64_sys_sendmsg+0x46/0x50 [ 191.018806][T30693] x64_sys_call+0x2689/0x2d60 [ 191.023503][T30693] do_syscall_64+0xc9/0x1c0 [ 191.028021][T30693] ? clear_bhb_loop+0x55/0xb0 [ 191.032695][T30693] ? clear_bhb_loop+0x55/0xb0 [ 191.037440][T30693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.043368][T30693] RIP: 0033:0x7f568003dff9 [ 191.047816][T30693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.067411][T30693] RSP: 002b:00007f567ec90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.075838][T30693] RAX: ffffffffffffffda RBX: 00007f56801f6058 RCX: 00007f568003dff9 [ 191.083800][T30693] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005 [ 191.091759][T30693] RBP: 00007f567ec90090 R08: 0000000000000000 R09: 0000000000000000 [ 191.099731][T30693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.107710][T30693] R13: 0000000000000000 R14: 00007f56801f6058 R15: 00007fff771c1bc8 [ 191.115675][T30693] [ 191.125455][ T85] bridge_slave_0: left allmulticast mode [ 191.131134][ T85] bridge_slave_0: left promiscuous mode [ 191.136817][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.210435][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.220716][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.231766][ T85] bond0 (unregistering): Released all slaves [ 191.257363][T30420] hsr_slave_0: entered promiscuous mode [ 191.263451][T30420] hsr_slave_1: entered promiscuous mode [ 191.269275][T30420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.276849][T30420] Cannot create hsr debugfs directory [ 191.290851][ T85] hsr_slave_0: left promiscuous mode [ 191.296539][ T85] hsr_slave_1: left promiscuous mode [ 191.302113][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.309573][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.317139][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.324727][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.334440][ T85] veth1_macvtap: left promiscuous mode [ 191.339996][ T85] veth0_macvtap: left promiscuous mode [ 191.345545][ T85] veth1_vlan: left promiscuous mode [ 191.350788][ T85] veth0_vlan: left promiscuous mode [ 191.431435][ T85] team0 (unregistering): Port device team_slave_1 removed [ 191.442149][ T85] team0 (unregistering): Port device team_slave_0 removed [ 191.724289][T30799] loop4: detected capacity change from 0 to 256 [ 191.733571][T30799] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 191.743788][T30799] FAT-fs (loop4): Filesystem has been set read-only [ 191.750429][T30799] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 191.837361][T30420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.846621][T30420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.855340][T30420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.863867][T30420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.898168][T30420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.911909][T30420] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.925564][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.932629][T11199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.938440][T29857] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 191.941896][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.948404][T29857] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 191.954388][T11199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.021655][T30420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.083484][T30420] veth0_vlan: entered promiscuous mode [ 192.091461][T30420] veth1_vlan: entered promiscuous mode [ 192.113276][ T85] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.127350][T30420] veth0_macvtap: entered promiscuous mode [ 192.136357][T30420] veth1_macvtap: entered promiscuous mode [ 192.150130][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.160670][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.170541][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.181069][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.190878][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.201319][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.211189][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.221700][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.231651][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.242204][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.252080][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.262486][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.272391][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.282856][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.293168][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.303957][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.313799][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.324266][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.334086][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.344486][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.354297][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.364784][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.375677][T30420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.387700][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.398179][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.408112][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.418612][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.428419][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.438857][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.448871][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.459388][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.469190][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.479718][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.489622][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.500048][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.509950][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.520344][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.530229][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.540639][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.550450][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.560906][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.570803][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.581215][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.591007][T30420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.601414][T30420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.612257][T30420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.621718][T30420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.630489][T30420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.639349][T30420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.648190][T30420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.664110][ T85] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.733708][ T85] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.783061][T30836] chnl_net:caif_netlink_parms(): no params data found [ 192.798762][ T85] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.839437][T30836] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.846663][T30836] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.854152][T30836] bridge_slave_0: entered allmulticast mode [ 192.861019][T30836] bridge_slave_0: entered promiscuous mode [ 192.868069][T30836] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.875122][T30836] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.882318][T30836] bridge_slave_1: entered allmulticast mode [ 192.888994][T30836] bridge_slave_1: entered promiscuous mode [ 192.910955][T30836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.918966][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 192.918977][ T29] audit: type=1326 audit(1727695086.969:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31038 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ba3adff9 code=0x7ffc0000 [ 192.924482][T30836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.966166][ T29] audit: type=1326 audit(1727695086.989:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31038 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f13ba3adff9 code=0x7ffc0000 [ 192.989814][ T29] audit: type=1326 audit(1727695086.989:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31038 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ba3adff9 code=0x7ffc0000 [ 193.015581][ T50] ================================================================== [ 193.023654][ T50] BUG: KCSAN: data-race in alloc_pid / copy_process [ 193.030232][ T50] [ 193.032539][ T50] read-write to 0xffffffff8665d858 of 4 bytes by task 11199 on cpu 1: [ 193.040678][ T50] alloc_pid+0x542/0x6f0 [ 193.044917][ T50] copy_process+0xe72/0x1f90 [ 193.049498][ T50] kernel_clone+0x167/0x5e0 [ 193.053991][ T50] user_mode_thread+0x7d/0xb0 [ 193.058657][ T50] call_usermodehelper_exec_work+0x41/0x150 [ 193.064556][ T50] process_scheduled_works+0x483/0x9a0 [ 193.070013][ T50] worker_thread+0x51d/0x6f0 [ 193.074589][ T50] kthread+0x1d1/0x210 [ 193.078649][ T50] ret_from_fork+0x4b/0x60 [ 193.083075][ T50] ret_from_fork_asm+0x1a/0x30 [ 193.087836][ T50] [ 193.090144][ T50] read to 0xffffffff8665d858 of 4 bytes by task 50 on cpu 0: [ 193.097499][ T50] copy_process+0x1799/0x1f90 [ 193.102169][ T50] kernel_clone+0x167/0x5e0 [ 193.106661][ T50] user_mode_thread+0x7d/0xb0 [ 193.111425][ T50] call_usermodehelper_exec_work+0x41/0x150 [ 193.117323][ T50] process_scheduled_works+0x483/0x9a0 [ 193.122781][ T50] worker_thread+0x51d/0x6f0 [ 193.127361][ T50] kthread+0x1d1/0x210 [ 193.131430][ T50] ret_from_fork+0x4b/0x60 [ 193.135850][ T50] ret_from_fork_asm+0x1a/0x30 [ 193.140611][ T50] [ 193.142914][ T50] value changed: 0x800000d1 -> 0x800000d2 [ 193.148613][ T50] [ 193.150920][ T50] Reported by Kernel Concurrency Sanitizer on: [ 193.157052][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted 6.12.0-rc1-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 193.165974][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.176015][ T50] Workqueue: events_unbound call_usermodehelper_exec_work [ 193.183124][ T50] ================================================================== [ 193.212437][ T29] audit: type=1400 audit(1727695087.259:2713): avc: denied { write } for pid=3250 comm="syz-executor" path="pipe:[1546]" dev="pipefs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 193.248880][ T85] bridge_slave_1: left allmulticast mode [ 193.254697][ T85] bridge_slave_1: left promiscuous mode [ 193.260416][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.266799][T31077] loop2: detected capacity change from 0 to 256 [ 193.274719][ T85] bridge_slave_0: left allmulticast mode [ 193.280412][ T85] bridge_slave_0: left promiscuous mode [ 193.286121][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.377706][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.388069][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.398056][ T85] bond0 (unregistering): Released all slaves [ 193.407604][T30836] team0: Port device team_slave_0 added [ 193.457973][ T85] hsr_slave_0: left promiscuous mode [ 193.463602][ T85] hsr_slave_1: left promiscuous mode [ 193.469851][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.477345][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.484965][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.492377][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.501595][ T85] veth1_macvtap: left promiscuous mode [ 193.507124][ T85] veth0_macvtap: left promiscuous mode [ 193.512696][ T85] veth1_vlan: left promiscuous mode [ 193.517907][ T85] veth0_vlan: left promiscuous mode [ 193.594793][ T85] team0 (unregistering): Port device team_slave_1 removed [ 193.604379][ T85] team0 (unregistering): Port device team_slave_0 removed [ 194.007784][ T85] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.087592][ T85] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.157039][ T85] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.198528][ T85] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.266434][ T85] bridge_slave_1: left allmulticast mode [ 194.272139][ T85] bridge_slave_1: left promiscuous mode [ 194.277786][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.285543][ T85] bridge_slave_0: left allmulticast mode [ 194.291214][ T85] bridge_slave_0: left promiscuous mode [ 194.296902][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.304766][ T85] bridge_slave_1: left allmulticast mode [ 194.310387][ T85] bridge_slave_1: left promiscuous mode [ 194.316063][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.323729][ T85] bridge_slave_0: left allmulticast mode [ 194.329380][ T85] bridge_slave_0: left promiscuous mode [ 194.335132][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.466213][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.476380][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.486147][ T85] bond0 (unregistering): Released all slaves [ 194.495049][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.505146][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.515019][ T85] bond0 (unregistering): Released all slaves [ 194.579644][ T85] hsr_slave_0: left promiscuous mode [ 194.585276][ T85] hsr_slave_1: left promiscuous mode [ 194.590858][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.598275][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.606034][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.613498][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.622688][ T85] veth1_macvtap: left promiscuous mode [ 194.628171][ T85] veth0_macvtap: left promiscuous mode [ 194.633679][ T85] veth1_vlan: left promiscuous mode [ 194.638903][ T85] veth0_vlan: left promiscuous mode [ 194.686393][ T85] team0 (unregistering): Port device team_slave_0 removed [ 194.743932][ T85] team0 (unregistering): Port device team_slave_1 removed [ 194.756964][ T85] team0 (unregistering): Port device team_slave_0 removed [ 195.568589][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.018076][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.067360][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.137420][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.185826][ T11] bridge_slave_1: left allmulticast mode [ 197.191469][ T11] bridge_slave_1: left promiscuous mode [ 197.197148][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.205022][ T11] bridge_slave_0: left allmulticast mode [ 197.210641][ T11] bridge_slave_0: left promiscuous mode [ 197.216425][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.326927][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.337417][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.347303][ T11] bond0 (unregistering): Released all slaves [ 197.408161][ T11] hsr_slave_0: left promiscuous mode [ 197.413663][ T11] hsr_slave_1: left promiscuous mode [ 197.420098][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.427501][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.435142][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.442512][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.451574][ T11] veth1_macvtap: left promiscuous mode [ 197.457095][ T11] veth0_macvtap: left promiscuous mode [ 197.462671][ T11] veth1_vlan: left promiscuous mode [ 197.467870][ T11] veth0_vlan: left promiscuous mode [ 197.539639][ T11] team0 (unregistering): Port device team_slave_1 removed [ 197.550000][ T11] team0 (unregistering): Port device team_slave_0 removed