last executing test programs: 9.226747588s ago: executing program 1 (id=2152): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@acl}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0x1, 0x44a, &(0x7f0000000e00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) poll(&(0x7f0000000200)=[{r2}], 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8400c61) fallocate(r3, 0x3, 0x0, 0x1) 9.023110734s ago: executing program 1 (id=2154): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10088000}, 0x20044000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x8084) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socket(0x0, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)={0x6c, 0x7d, 0x1, {{0x0, 0x55, 0x9, 0x5, {0x1, 0x4, 0x4}, 0x10000, 0xfffffff8, 0x5, 0x2, 0x14, 'inode_readahead_blks', 0x0, '', 0xa, '/dev/vcsu\x00', 0x4, '\'&-&'}, 0x2, '(-'}}, 0x6c) 6.705936323s ago: executing program 1 (id=2179): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.427853722s ago: executing program 0 (id=2232): r0 = socket(0x2b, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb01500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000080), 0x3) 2.385726406s ago: executing program 0 (id=2233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) io_setup(0x3, &(0x7f0000000000)=0x0) r4 = timerfd_create(0x0, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x840, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000140)) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000005c0)="647c8c047faf63cc87546889ea31", 0xe}], 0x1) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x3c}}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x40140, 0x0, 0x8}, 0x18) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000240)) 2.115715688s ago: executing program 0 (id=2236): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000006c0)='gre0\x00', 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/44, 0x2c}, {0x0}], 0x2, 0x0, 0x0, 0x4000000}, 0x4000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x21000}], 0x2, 0x1800, 0x0, 0x3) 2.008700767s ago: executing program 2 (id=2237): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000001f650000000000006507000002000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba0"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) write$tun(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaa0486dd608a2d5500680000fe801886000000000000000000000000fe80000000fdff0000ffffffffffffff84"], 0xa2) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syz_tun\x00', @remote}) (async) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x4, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x27, 0x4, 0x0, 0xb, 0xcc, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@noop, @cipso={0x86, 0x5d, 0xffffffffffffffff, [{0x0, 0x9, "09adc177dc08be"}, {0x5, 0x10, "0c158f7f8bb0137458ff106f1a23"}, {0x2, 0x12, "87c59d53f8a4b0025091cd6a96773388"}, {0x1, 0x11, "fe2a5ddb61d09ed0b5ce8c01eefaaf"}, {0x5, 0x9, "47aec0309ef352"}, {0x7, 0x12, "585ea8dcd2aeb95c2dabd94241d4482f"}]}, @ssrr={0x89, 0xf, 0xd0, [@rand_addr=0x64010102, @broadcast, @local]}, @ssrr={0x89, 0x1b, 0x56, [@loopback, @local, @broadcast, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x0, 0x0, 0x41424344, r2, 0x0, 0x2, 0xc, 0x0, 0x700, 0x0, 0x4e, {[@window={0xe, 0x3, 0x2}, @exp_fastopen={0xfe, 0xe, 0xf989, "b355cfe23f902158cdc0"}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0xda) (async, rerun: 32) timer_create(0xb, 0x0, &(0x7f0000000400)) (async, rerun: 32) socket$unix(0x1, 0x0, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = mq_open(&(0x7f0000000000)='-$\x00', 0x40, 0x0, 0x0) dup3(r3, r4, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x0) (rerun: 64) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async, rerun: 32) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d}) (rerun: 32) 1.915843524s ago: executing program 0 (id=2238): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc5, 0x0, &(0x7f0000000080)) io_uring_setup(0x4257, &(0x7f00000006c0)={0x0, 0x2, 0x100}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, 0x0, 0x4000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') pread64(r3, &(0x7f0000001c40)=""/4075, 0x1028, 0x1800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000380)=ANY=[@ANYBLOB="c726b76f5344a4693ba7d1d97102249890f0f4314036d697fdabf32595f4fadff117fc12184a9f28d4785d1384af122af5fc759ba20f627963a8034d20dacc2528bfb28bcb46d3dcdc59df088743ba9b9ed2bd6a4b66a5726db32390a84020398a0463ce352104d65c4563a628c6be286a486477fef05c67cbcc0dfd98018ca4645abf24d0f13a04c905b9dd0a364add70c8f69dee34c71619f4714a98ae48fd387d0c5a7a6dfccb64139f231f497b4ce2c4"], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x4, 0x0, &(0x7f0000000280)) 1.393158117s ago: executing program 2 (id=2241): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x24, 0x10, 0x10, 0x70bd2b, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x4}]}, 0x24}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000002018000100000000000000000002000000000000090000000006001500020000000c001680080006000100000029b7f211dc49f53be3e0d185f54aeee82a27ef46006bca43fa61a5a8a66f66b083151996b2660a171235fe94aae75e2468c571dce5c8b9d461d637cd39cb08e9c360e5baa6"], 0x30}}, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) 1.382181598s ago: executing program 2 (id=2243): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000008c0)={0x28, 0x0, 0x0, @host}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0xfffd, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4f23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0x4, 0x5}}}}, @rthdrdstopts={{0x18}}], 0x40, 0x7ffffff7}}], 0x1, 0x0) flock(r4, 0x2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}}, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) unshare(0x6c060000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x40b7400000200, 0x6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000440)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000602, 0x0, &(0x7f0000000140)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0xff) unshare(0x46000000) 1.366514399s ago: executing program 1 (id=2180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfb5e}]}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000000000059078ac1414000a0101024404050300000000bfa96169e47ac6c781737066130b93c860f10ea6e049a7910cd05518f4212183ea0059e5e9639fca3fd1cd0730c45f88a5690353bd1779e820ec921154a4f13deffbd1ee8f33b8cc3b930870f7fa0d36dbae5c7c254323883c97e99dbed2fbe038bb8949541d52959d9a1646", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000f7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRES32=r1], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(0xffffffffffffffff, &(0x7f00000011c0)=[{&(0x7f0000000100)="0e044fa389d2dd6ff4f2f414b5b963a9b4e79c414f7170e1", 0x18}, {0x0, 0x2}], 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') lseek(r8, 0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r9 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0xffff, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) write$binfmt_script(r9, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000005c83995f000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005200010000000000000000000a000000120001002b292d7b2a252a5b2d23d9262d0000004da000b76d0773023f3d9dd901035c1c6bbf9d7f5065c3e22a8400dda9e5335508840f0d6fe570d706871b59afea73add371404acb0c94bd617359a9340a314f996a98d974bc31e182b55f0e7368ce2e53a286ab5bc2046b691db6d86e119fc5521901e03ff70cee7428cc86de45a8e8696dcc0375b6245756e0b34ff229d026ce73a58db014f293f0"], 0x28}}, 0x0) 1.274344147s ago: executing program 3 (id=2246): unshare(0x20000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000800f388f2555fa5401161f5a646e6029500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r4 = syz_open_pts(0xffffffffffffffff, 0x66100) ioctl$VT_RELDISP(r4, 0x5605) 1.258052288s ago: executing program 3 (id=2247): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x480c4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000001c0)={0x2, 0x100000, 0xfffffffd, 0x0, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="2e04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r4, 0x4010744d, 0x20000000) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x24048050) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001180)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x1, 0x0, 0x2, 0x9}}}], 0x18}}], 0x2, 0x4000000) 1.141349498s ago: executing program 0 (id=2248): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x235, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x200000001fb, 0x1, 0x200000000, 0x3, 0x5, 0x2000000200006c0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8]}, 0x79) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) prlimit64(0x0, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x8d) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r6, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="3d980c00fcffffff185900000400"/24], &(0x7f00000001c0)='GPL\x00', 0xfffffffa, 0x86, &(0x7f0000000200)=""/134, 0x41000, 0x20, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x10, 0x4, 0x8bd6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x5}, 0x90) sched_setscheduler(r7, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000780)=""/237) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = gettid() msgctl$IPC_SET(r5, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, r9, 0x98}, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffffa, 0x75b1, 0x5, 0x7, 0x34, 0x7, r10, r7}) r11 = socket(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6254, 0x80000001, 0x0, 0x0, 0x0) 1.140762997s ago: executing program 4 (id=2249): r0 = inotify_init() ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x1, [0x9, 0x5, 0x6, 0x3, 0x84, 0xbf3c]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) getgroups(0x7, &(0x7f0000000140)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xee01, 0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, r6}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x4000040) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000003c0)=[r5, r10, r7, r7]) ioctl$BLKRAGET(r8, 0x1263, &(0x7f0000000400)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r0, 0xf698000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) socket$kcm(0x29, 0x5, 0x0) timer_create(0x5, &(0x7f0000000500)={0x0, 0x25}, &(0x7f0000000540)=0x0) timer_settime(r12, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001780)={0x0, @broadcast, @dev}, &(0x7f00000017c0)=0xc) sendmsg$inet(r8, &(0x7f00000019c0)={&(0x7f00000005c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000600)="00142775be83ce95b72283e45a41f372de1656a1bc751e8311991d87b61cb182bd9f2a2bff95e989923e08fb9a2fba723f158ce774df49c327fc7ddf", 0x3c}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="7f554ec414f5aea5484a49c574cc4c79a42f79f20bb6c6e43e6f8f243bf3eb87eb5a3a7b2dbede83d9b8ecd5ab87ef9668bef20d582b4520d75af0903d890a1d409bd98e4978ffac54c430227119e0082ddca13abda016af923ce9a28c54e662b5a36eb21b03aa7334fe0503638007a0e1b689a4388c3fa465a973e44d9edaadbaf551b9c1a6e9d76122b2451d77e03023dfa6c0e209b041bd1c22e47813fcd3065a79349a2443986aeabc8ad0d46c48d7aea5462ed1be237d0bd08c319426a81eea55", 0xc3}], 0x3, &(0x7f0000001800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xb7, 0x0, 0xa, [0x1ff, 0x5, 0xfffffff7, 0x8, 0x6]}, @timestamp_addr={0x44, 0x1c, 0x96, 0x1, 0x7, [{@multicast2, 0xfffffe01}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xb, 0x3, 0x9, [{@rand_addr=0x64010101, 0x5}, {@private=0xa010101, 0x5}, {@broadcast, 0xfff}]}, @timestamp={0x44, 0x14, 0x66, 0x0, 0x9, [0x0, 0x3ff, 0x2, 0x8]}, @timestamp_addr={0x44, 0x3c, 0xcc, 0x1, 0x8, [{@remote, 0x3}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3b}, {@local, 0x7d}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c8}, {@remote, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0x6, [{@local}, {@private=0xa010102, 0x5}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7a}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffec4}}], 0x1a8}, 0x4000044) syncfs(r0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x54, r14, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x400c0c0) sendmmsg$sock(r1, &(0x7f0000004700)=[{{&(0x7f0000001b80)=@nl=@unspec, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001c00)="20884976c9c422131d999dd0c11c1324deb16016eba5a178f152bb396551a18e70993aebe4971394602d2c8b876d5a8aaa85223185dfb745ea42b3fe5956690d3728ce21cec0c54fa843f28572bcf21c3b8bbb8ad298ebc8480c3575e98d4b1ee692a8b2459d6852c4670bc3f3fa45f2ba63131433ac99527582305bbc08", 0x7e}], 0x1, &(0x7f0000001cc0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xd8}}, {{&(0x7f0000001dc0)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001e40)="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", 0x1000}, {&(0x7f0000002e40)="738c18479f3f412c46741cb94f172d654e2f48d2217ace91ac847f84a7865e5969546e22f87545d3999b5035737b0ab63ef58bad613ac49b59eb4ba1a4cc26d4eb7f6b79c44bb799a8982534a96b3689b4b99aa00bb9bcf045f6bbfee25cd7a8de35b32457dac7a0993bbe74b1405e1ae0a512e0603d7c07cbeec25cd738f25e732f0aeb57ee6a4b17bc39f81ea892d407849ebf682331057e6bf7ff15dc0a35388802dbbb33d8013651b249851f368d2429657f92eef2b7cbe231c1f668a8c9ba7a2928b663f7f4bac7e292a9bf01d3b7cb3b5123116683bab5674753fe67e222", 0xe1}], 0x2, &(0x7f0000002f80)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}}, {{&(0x7f0000002fc0)=@can, 0x80, &(0x7f0000004580)=[{&(0x7f0000003040)="9e7f6ec8b383fa37abbc6f8fb15e1b60e6e7b0bb469d2e728694507ea0aa74535670f6d9275f19fa7b5e1fcae7943b5beb1fe4470212af0e29fa752b42e3f185ecfe1b9d3357ec94d877baf863a7d480ea031898241704c47242f927f7448039766d2c7d227008c0e0a1dcd4abd667c97eedf4fe58e9bc64635e50c5355636c994ed7130e9f399207d58ce80e97ea88f15b8f61e44113e1faaf36c4c8833ab1afcd0d2d427e31d30473fd591a7686ae3133619a4a8ede6f7d06a771f16883179a4d76bd7bc633ddd4cc6d7c70cb52767b19f3f86c33c198e22", 0xd9}, {&(0x7f0000003140)="066ae2209ad053f2f8286e82c5a5887026204fe63bd7d30eac59a42adad5395f79dd1049398d113019010efcbbe62d4834f39e2dc9fde44abb6b368ece28ea429770c07f0dcac495", 0x48}, {&(0x7f00000031c0)="3ccf", 0x2}, {&(0x7f0000003200)="7901048c87be2755aec8b899de893d672b98858a93ceeff6aca82e8018a789976e6be172d0a90ba09f1b949f7d35420b0a7f0b1891fc52320180f977518b8999663970c7ad92277b954fd556f02973fe4e7a68144efd729b85b74326b8d281483a7b2acf65e423e4abf4aad81508052fbaae19017a605a9aea6ae5299f156c319740cd53b221047c3f5d6dd1e9e2dfe04b6358afdace34fc008096c52c848fcffade28cab4624b1c171b7e1d835ea6380588bcf25573fb17bfb59a8cbe2dcf653671b5fadcd3c9729a8afd76076465f1945825cd5133d6e9ebb78eddb2ddb0f59352df469becd79750508e32252165c03726aa", 0xf3}, {&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000004300)="762932900edc2b9873df7bb6e55393babcb786a0a3091696310b62753b7ddf35fcf6ab9aa68850433eb926e21261a87c5173ea797a2957fd740553f7024ca3ae1fa1c72e7832166d5613f33db6efd194aa6be9ad7b30f3c8084767680a545b72ee5577f6f6c21b52ab0d40005846ab3cc3913b86fa98c48ec1b97cf46775ea734b608983", 0x84}, {&(0x7f00000043c0)="6f95687f541d99894b51176bfe42d2455cc2447f9a642ea1d24c214756f9b1425710958e1cad83af632fac9e43a211ef0216c761a8786a727a7ba4b8affc04380cadcc0c6e5f005d3c92b4ff79f4cf35b6f8131474546cf7d4baa0bf56aa4d10ce2960b82ac03680ae0af6b1bf46642a998e1247434a9923de792378c91ec55e05220c1207c04003a72b2994651d2e8a2695477024db0d6cc07fa3f090076fc40226f1ab1495472b36f180ac92579a61857736c4135c560690194b6e1704ce8d0e45299199484745f273248235de88baaddedbaa5c0b8e958c53abd68aab0381f43591826f107fdc22c481051d759464b0ae69e318eacc", 0xf7}, {&(0x7f00000044c0)="74fa5ff0e250e7459f2acb49fa3e55c901a0330681913d3730befc2a9562aaa87b22b8b2ecd5e3332808c8a5163cbbac399242a5e5a20774cd4ba9f48d71f73a59533015698f37e4af58082f4b20901df2369206e40a54a06a9246d39f0027a429945b17fea054e3416c9842c70deb3fb40614bafa857f0b53337f98ff410c3daadbb74736b3601151d5d4d0c6930dd323d1b453", 0x94}], 0x8, &(0x7f0000004600)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff7fb}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x4cb}}], 0xd8}}], 0x3, 0x20040044) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004940)={'veth0_to_bond\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004b80)={r8, 0x20, &(0x7f0000004b40)={&(0x7f0000004a00)=""/237, 0xed, 0x0, &(0x7f0000004b00)=""/2, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004f40)={0xa, 0xf, &(0x7f00000047c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000004840)='GPL\x00', 0x4, 0x92, &(0x7f0000004880)=""/146, 0x1e00, 0x53, '\x00', r15, 0xb681b35d030ee147, r8, 0x8, &(0x7f0000004980)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000049c0)={0x4, 0x0, 0x8, 0x8}, 0x10, r16, 0xffffffffffffffff, 0x0, &(0x7f0000004f00)=[r11, r8, r4]}, 0x90) 966.116362ms ago: executing program 4 (id=2250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000002c0)="ea", 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'wrr\x00'}, 0x2c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0xfffc, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="9e56854c00ba1a7effcaf75bdda7", 0xe}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xfc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800008068000480"], 0x7c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) r9 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000080)={0x60, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 860.64999ms ago: executing program 4 (id=2251): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4a8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext, 0x80, 0x1, 0x1, 0x4, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r3}, 0x10) close(r2) 763.151998ms ago: executing program 4 (id=2252): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x24, 0x10, 0x10, 0x70bd2b, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x4}]}, 0x24}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000002018000100000000000000000002000000000000090000000006001500020000000c001680080006000100000029b7f211dc49f53be3e0d185f54aeee82a27ef46006bca43fa61a5a8a66f66b083151996b2660a171235fe94aae75e2468c571dce5c8b9d461d637cd39cb08e9c360e5baa6"], 0x30}}, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) 761.253668ms ago: executing program 4 (id=2253): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@acl}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0x1, 0x44a, &(0x7f0000000e00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) poll(&(0x7f0000000200)=[{r2}], 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4001, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8400c61) fallocate(r3, 0x3, 0x0, 0x1) 665.192166ms ago: executing program 4 (id=2254): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xa1ef, 0x2, 0xa, 0x50, 0xffffffffffffffff, 0x2c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x8}, 0x48) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x84}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x408, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@cipso={0x86, 0x10, 0x2, [{0x2, 0xa, "1c3a1b1f1b4bd958"}]}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r9 = dup2(r7, r5) sendto$inet(r9, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) 475.728422ms ago: executing program 2 (id=2255): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x7ffe}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x24}, 0x90) 474.011752ms ago: executing program 1 (id=2256): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="a484eeca947d63ba03f067f0bae1f2e6e3d2a99864dd6bacae10ea26dac2031d2fd936e8e5baa3bd8140ddcd226a800a5487df76c5c05c90dc7be13ab942b520091d03cfb40db37e081df2477f40cd5c94b6f5e88aa72e261ad2d82a565bfa82d91c39322e0a33d6b178146b50a542d3a0c801", 0x73, 0x802f, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 473.249662ms ago: executing program 3 (id=2257): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 470.398872ms ago: executing program 2 (id=2258): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc5, 0x0, &(0x7f0000000080)) io_uring_setup(0x4257, &(0x7f00000006c0)={0x0, 0x2, 0x100}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, 0x0, 0x4000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') pread64(r3, &(0x7f0000001c40)=""/4075, 0x1028, 0x1800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000380)=ANY=[@ANYBLOB="c726b76f5344a4693ba7d1d97102249890f0f4314036d697fdabf32595f4fadff117fc12184a9f28d4785d1384af122af5fc759ba20f627963a8034d20dacc2528bfb28bcb46d3dcdc59df088743ba9b9ed2bd6a4b66a5726db32390a84020398a0463ce352104d65c4563a628c6be286a486477fef05c67cbcc0dfd98018ca4645abf24d0f13a04c905b9dd0a364add70c8f69dee34c71619f4714a98ae48fd387d0c5a7a6dfccb64139f231f497b4ce2c4"], 0x1, 0x27a, &(0x7f0000000540)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x4, 0x0, &(0x7f0000000280)) 406.667357ms ago: executing program 1 (id=2259): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10088000}, 0x20044000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x8084) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socket(0x0, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)={0x6c, 0x7d, 0x1, {{0x0, 0x55, 0x9, 0x5, {0x1, 0x4, 0x4}, 0x10000, 0xfffffff8, 0x5, 0x2, 0x14, 'inode_readahead_blks', 0x0, '', 0xa, '/dev/vcsu\x00', 0x4, '\'&-&'}, 0x2, '(-'}}, 0x6c) 404.623257ms ago: executing program 3 (id=2260): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='projid_map\x00') writev(r0, &(0x7f0000000480)=[{&(0x7f0000000580)="17", 0x1}], 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r2 = io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xcd8f, 0x0, 0x2, 0x295}) syz_io_uring_setup(0x769, &(0x7f0000000080)={0x0, 0x9843, 0x2, 0x1, 0x3ac, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000001c0005"], 0x80}}, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000001800)=0xffffff7f, 0x4) 362.764001ms ago: executing program 3 (id=2261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8010000", @ANYRES16, @ANYBLOB="01"], 0x1f8}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) eventfd2(0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000100fc0220"], 0x28}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000820000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r10, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8], 0x5c}, 0x1, 0xf000}, 0x0) 303.666266ms ago: executing program 3 (id=2262): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x53, 0x92, &(0x7f0000000180)="888c6e59fe492e21545c45ab4c546b49458e0233fb5867f3a3ae86b012b47f2914d815f4dd0bdbf5b41c4d8edb96e1753df731cd5b60fa2ecfc831154057009068cc62b0707a6f8b40a71c021806f57c6a4777", &(0x7f0000000200)=""/146, 0x1f, 0x0, 0xd, 0xe0, &(0x7f00000002c0)="0f50ba7d7785106d9f48e1e510", &(0x7f0000000300)="7ddf022cbca39007d419f72b85113c9226b26e7c92e4c99b0ea6bff66edfbe5c1bf756d471f4793b401a93abe8fc8c74f2dc4582161a854f8316ef1953683662025ea5c94f4c4fc989eca47819e1cfc9790d4245fba52930e5290aae3d84a1079b246b16474e14da0526917f1184d5defe75ccc974a1e438a174d3b8a31700084d38a2999e411d22173072d8349a60d11a0be517e22f947d939b6ef3ae82493368e102bcb39bf39dedcf76fb46c4d476136c4a87303f9be09c212ece955d9c19d27558223d6741d2d4352a261c5e350f767b33dbc89f50802edc896559f28f05", 0x3, 0x0, 0xff}, 0x50) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000640)={[{@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xefe}}, {@data_ordered}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x648}}, {@barrier_val={'barrier', 0x3d, 0x7}}]}, 0x1, 0x5e4, &(0x7f0000000840)="$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") chdir(&(0x7f0000000040)='./file0\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15, 0x0, 0x40, 0xd8}, {0x15, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x5a, 0x7ffffdbe}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) socket(0x10, 0x80000, 0x7b) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYRESOCT, @ANYRESHEX=r3, @ANYBLOB="2c996fff030000000000000000000000752c00"]) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)) ftruncate(r4, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f00000004c0)=[{0x4, 0xd6, 0x8, 0xa}, {0x3, 0xfe, 0x0, 0x8}, {0x6, 0x1, 0x6, 0x9}, {0x5, 0x32, 0x1f}, {0xc, 0x0, 0x0, 0x3}, {0x4, 0x6, 0x8, 0x3ff}, {0x16, 0x0, 0x2b, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000600)={r6, 0x2, 0x3}) fcntl$addseals(r5, 0x409, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000000)=0x1aa, 0x4) recvfrom$unix(r7, 0x0, 0x0, 0x161, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000140)={r6, 0x4, 0x8}) 213.475153ms ago: executing program 0 (id=2263): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) poll(&(0x7f0000000000)=[{r0, 0x9f}, {r0, 0x4080}, {r0, 0xa117a6cc9bed356f}], 0x3, 0x8000) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000002c0)) 0s ago: executing program 2 (id=2264): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@acl}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0x1, 0x44a, &(0x7f0000000e00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) poll(&(0x7f0000000200)=[{r2}], 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4001, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8400c61) fallocate(r3, 0x3, 0x0, 0x1) kernel console output (not intermixed with test programs): esystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.742710][T10362] FAULT_INJECTION: forcing a failure. [ 148.742710][T10362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.756066][T10362] CPU: 0 UID: 0 PID: 10362 Comm: syz.1.1758 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 148.767002][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 148.777144][T10362] Call Trace: [ 148.780405][T10362] [ 148.783315][T10362] dump_stack_lvl+0xf2/0x150 [ 148.787967][T10362] dump_stack+0x15/0x20 [ 148.792156][T10362] should_fail_ex+0x229/0x230 [ 148.796984][T10362] should_fail+0xb/0x10 [ 148.801123][T10362] should_fail_usercopy+0x1a/0x20 [ 148.806130][T10362] _copy_to_user+0x1e/0xa0 [ 148.810543][T10362] simple_read_from_buffer+0xa0/0x110 [ 148.815966][T10362] proc_fail_nth_read+0xff/0x140 [ 148.820903][T10362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.826494][T10362] vfs_read+0x1a2/0x6e0 [ 148.830673][T10362] ? __rcu_read_unlock+0x4e/0x70 [ 148.835601][T10362] ? __fget_files+0x1da/0x210 [ 148.840352][T10362] ksys_read+0xeb/0x1b0 [ 148.844589][T10362] __x64_sys_read+0x42/0x50 [ 148.849161][T10362] x64_sys_call+0x27d3/0x2d60 [ 148.853865][T10362] do_syscall_64+0xc9/0x1c0 [ 148.858380][T10362] ? clear_bhb_loop+0x55/0xb0 [ 148.863128][T10362] ? clear_bhb_loop+0x55/0xb0 [ 148.867920][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.874198][T10362] RIP: 0033:0x7f00530083fc [ 148.878775][T10362] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 148.898482][T10362] RSP: 002b:00007f0051c87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.906871][T10362] RAX: ffffffffffffffda RBX: 00007f00531a5f80 RCX: 00007f00530083fc [ 148.915101][T10362] RDX: 000000000000000f RSI: 00007f0051c870a0 RDI: 0000000000000006 [ 148.923233][T10362] RBP: 00007f0051c87090 R08: 0000000000000000 R09: 0000000000000000 [ 148.923246][T10362] R10: 0000000020fcb000 R11: 0000000000000246 R12: 0000000000000001 [ 148.923258][T10362] R13: 0000000000000000 R14: 00007f00531a5f80 R15: 00007ffc14c32a18 [ 148.947921][T10362] [ 148.952599][ T8069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.013496][T10377] mmap: syz.2.1763 (10377): VmData 29085696 exceed data ulimit 65536. Update limits or use boot option ignore_rlimit_data. [ 149.074159][T10377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1763'. [ 149.110686][T10377] Invalid ELF header magic: != ELF [ 149.111453][ T29] audit: type=1400 audit(1723835365.855:1752): avc: denied { module_load } for pid=10376 comm="syz.2.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 149.169732][T10397] loop2: detected capacity change from 0 to 136 [ 149.184032][T10397] ISOFS: unable to read i-node block [ 149.204482][T10402] loop1: detected capacity change from 0 to 2048 [ 149.219571][T10404] /dev/loop0: Can't lookup blockdev [ 149.256818][T10402] loop1: p1 < > p4 [ 149.257309][T10407] ISOFS: unable to read i-node block [ 149.261273][T10402] loop1: p4 size 8388608 extends beyond EOD, truncated [ 149.531024][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.767675][T10434] loop4: detected capacity change from 0 to 1024 [ 149.774463][T10434] EXT4-fs: Ignoring removed orlov option [ 149.780432][T10434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.797809][T10434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.817505][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 149.817520][ T29] audit: type=1400 audit(1723835366.557:1756): avc: denied { setopt } for pid=10424 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.844567][ T29] audit: type=1400 audit(1723835366.567:1757): avc: denied { bind } for pid=10424 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.896889][ T9732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.053674][T10457] loop2: detected capacity change from 0 to 128 [ 150.287880][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1798'. [ 150.328398][T10487] ucma_write: process 158 (syz.4.1802) changed security contexts after opening file descriptor, this is not allowed. [ 150.392111][T10490] loop2: detected capacity change from 0 to 1024 [ 150.403270][T10490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.412193][T10487] loop4: detected capacity change from 0 to 8192 [ 150.420113][T10490] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 150.446264][T10490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.484628][T10487] loop4: p1 p2 p3 [ 150.492129][ T29] audit: type=1400 audit(1723835367.238:1758): avc: denied { setopt } for pid=10485 comm="syz.4.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.618841][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.628720][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.925218][ T29] audit: type=1400 audit(1723835367.679:1759): avc: denied { write } for pid=10506 comm="syz.4.1808" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.949046][T10507] loop4: detected capacity change from 0 to 512 [ 150.958268][T10507] EXT4-fs (loop4): first meta block group too large: 16711680 (group descriptor block count 1) [ 151.117511][T10513] loop4: detected capacity change from 0 to 164 [ 151.125874][T10513] rock: directory entry would overflow storage [ 151.132074][T10513] rock: sig=0x4f50, size=4, remaining=3 [ 151.139090][T10513] isofs: Unable to find the ".." directory for NFS. [ 151.164249][ T8069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.328233][T10545] autofs4:pid:10545:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 151.358321][ T29] audit: type=1326 audit(1723835368.109:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1332f99b9 code=0x7ffc0000 [ 151.388754][T10548] loop4: detected capacity change from 0 to 1024 [ 151.398523][T10548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.405497][ T29] audit: type=1326 audit(1723835368.139:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1332f99b9 code=0x7ffc0000 [ 151.419657][T10548] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 151.429308][ T29] audit: type=1326 audit(1723835368.139:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1332f99b9 code=0x7ffc0000 [ 151.462831][ T29] audit: type=1326 audit(1723835368.139:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1332f99b9 code=0x7ffc0000 [ 151.475130][T10548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.486387][ T29] audit: type=1326 audit(1723835368.139:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd1332f99b9 code=0x7ffc0000 [ 151.522470][ T29] audit: type=1326 audit(1723835368.139:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1332f99f3 code=0x7ffc0000 [ 151.562147][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.570900][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.831569][T10556] loop1: detected capacity change from 0 to 512 [ 151.838158][T10556] ext4: Unknown parameter 'uid>00000000000000000000' [ 151.964995][T10565] loop1: detected capacity change from 0 to 2048 [ 151.983871][T10565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.333110][ T9732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.587243][T10595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=10595 comm=syz.2.1835 [ 152.615685][T10598] loop4: detected capacity change from 0 to 512 [ 152.625387][T10598] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 152.633383][T10598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 152.642567][T10598] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 152.652147][T10598] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 152.662314][T10598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.717894][ T9732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.756360][T10610] team0: Device ipvlan1 failed to register rx_handler [ 152.791566][ T8043] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.829688][T10610] loop4: detected capacity change from 0 to 128 [ 152.837718][T10610] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.852037][T10610] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.952549][T10622] syzkaller0: entered allmulticast mode [ 153.649429][ T9732] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.770696][T10677] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 153.943615][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.952968][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.125874][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.148840][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.168775][T10711] loop1: detected capacity change from 0 to 164 [ 154.175790][T10711] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 154.187728][T10710] netlink: 'syz.1.1877': attribute type 4 has an invalid length. [ 154.195795][T10710] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1877'. [ 154.221767][T10710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10710 comm=syz.1.1877 [ 154.302662][T10723] netlink: 'syz.2.1883': attribute type 3 has an invalid length. [ 154.310449][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 154.321928][T10723] geneve2: entered promiscuous mode [ 154.327248][T10723] geneve2: entered allmulticast mode [ 154.361591][T10725] loop1: detected capacity change from 0 to 256 [ 155.132990][T10760] loop1: detected capacity change from 0 to 512 [ 155.148544][T10760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.162719][T10760] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.226712][T10763] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1897: Directory hole found for htree leaf block 0 [ 155.242505][T10763] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1897: Directory hole found for htree leaf block 0 [ 155.305382][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 155.369315][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 155.369369][ T29] audit: type=1400 audit(1723835372.126:2033): avc: denied { watch } for pid=10779 comm="syz.2.1905" path="/176/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 155.518855][ T29] audit: type=1400 audit(1723835372.276:2034): avc: denied { nlmsg_read } for pid=10784 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 155.657517][T10791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10791 comm=syz.3.1906 [ 155.670037][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'. [ 155.769945][T10793] FAULT_INJECTION: forcing a failure. [ 155.769945][T10793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.783085][T10793] CPU: 1 UID: 0 PID: 10793 Comm: syz.2.1909 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 155.793852][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 155.803913][T10793] Call Trace: [ 155.807189][T10793] [ 155.810143][T10793] dump_stack_lvl+0xf2/0x150 [ 155.814780][T10793] dump_stack+0x15/0x20 [ 155.818974][T10793] should_fail_ex+0x229/0x230 [ 155.823745][T10793] should_fail+0xb/0x10 [ 155.827981][T10793] should_fail_usercopy+0x1a/0x20 [ 155.833065][T10793] _copy_from_user+0x1e/0xd0 [ 155.837671][T10793] ip_mroute_getsockopt+0x1ea/0x360 [ 155.842934][T10793] do_ip_getsockopt+0x148/0x11a0 [ 155.847876][T10793] ? avc_has_perm_noaudit+0x1cc/0x210 [ 155.853249][T10793] ? avc_has_perm+0xd4/0x160 [ 155.857834][T10793] ip_getsockopt+0x5c/0x170 [ 155.862374][T10793] raw_getsockopt+0xac/0x180 [ 155.866974][T10793] sock_common_getsockopt+0x5b/0x70 [ 155.872335][T10793] do_sock_getsockopt+0x121/0x1a0 [ 155.877526][T10793] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 155.883490][T10793] __sys_getsockopt+0x19a/0x210 [ 155.888338][T10793] __x64_sys_getsockopt+0x66/0x80 [ 155.893385][T10793] x64_sys_call+0x11cd/0x2d60 [ 155.898062][T10793] do_syscall_64+0xc9/0x1c0 [ 155.902587][T10793] ? clear_bhb_loop+0x55/0xb0 [ 155.907322][T10793] ? clear_bhb_loop+0x55/0xb0 [ 155.912108][T10793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.918091][T10793] RIP: 0033:0x7fa6c17499b9 [ 155.922542][T10793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.942173][T10793] RSP: 002b:00007fa6c03c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 155.950583][T10793] RAX: ffffffffffffffda RBX: 00007fa6c18e5f80 RCX: 00007fa6c17499b9 [ 155.958631][T10793] RDX: 00000000000000cf RSI: 0000000000000000 RDI: 0000000000000003 [ 155.966638][T10793] RBP: 00007fa6c03c7090 R08: 0000000020000080 R09: 0000000000000000 [ 155.974611][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.982902][T10793] R13: 0000000000000000 R14: 00007fa6c18e5f80 R15: 00007ffd29b31108 [ 155.991549][T10793] [ 156.024294][ T8043] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.051438][T10805] IPVS: persistence engine module ip_vs_pe_si not found [ 156.064368][ T29] audit: type=1400 audit(1723835372.817:2035): avc: denied { ioctl } for pid=10804 comm="syz.1.1913" path="/dev/uhid" dev="devtmpfs" ino=228 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 156.236580][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 156.247355][ T29] audit: type=1400 audit(1723835373.007:2036): avc: denied { setattr } for pid=10812 comm="syz.2.1917" name="SCTPv6" dev="sockfs" ino=29859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.602371][T10847] FAULT_INJECTION: forcing a failure. [ 156.602371][T10847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.615505][T10847] CPU: 0 UID: 0 PID: 10847 Comm: syz.2.1928 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 156.626268][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 156.636322][T10847] Call Trace: [ 156.639676][T10847] [ 156.642613][T10847] dump_stack_lvl+0xf2/0x150 [ 156.647553][T10847] dump_stack+0x15/0x20 [ 156.651843][T10847] should_fail_ex+0x229/0x230 [ 156.656648][T10847] should_fail+0xb/0x10 [ 156.660835][T10847] should_fail_usercopy+0x1a/0x20 [ 156.665879][T10847] _copy_to_user+0x1e/0xa0 [ 156.670389][T10847] ip_mroute_getsockopt+0x2e3/0x360 [ 156.675699][T10847] do_ip_getsockopt+0x148/0x11a0 [ 156.680654][T10847] ? avc_has_perm_noaudit+0x1cc/0x210 [ 156.686052][T10847] ? avc_has_perm+0xd4/0x160 [ 156.690585][ T29] audit: type=1400 audit(1723835373.438:2037): avc: denied { map } for pid=10859 comm="syz.3.1933" path="/proc/1258/net/vlan/vlan0" dev="proc" ino=4026533288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 156.690648][T10847] ip_getsockopt+0x5c/0x170 [ 156.690676][T10847] raw_getsockopt+0xac/0x180 [ 156.724199][T10847] sock_common_getsockopt+0x5b/0x70 [ 156.729545][T10847] do_sock_getsockopt+0x121/0x1a0 [ 156.734584][T10847] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 156.740669][T10847] __sys_getsockopt+0x19a/0x210 [ 156.745535][T10847] __x64_sys_getsockopt+0x66/0x80 [ 156.750660][T10847] x64_sys_call+0x11cd/0x2d60 [ 156.755328][T10847] do_syscall_64+0xc9/0x1c0 [ 156.759827][T10847] ? clear_bhb_loop+0x55/0xb0 [ 156.764490][T10847] ? clear_bhb_loop+0x55/0xb0 [ 156.769147][T10847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.775063][T10847] RIP: 0033:0x7fa6c17499b9 [ 156.779464][T10847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.799560][T10847] RSP: 002b:00007fa6c03c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 156.807984][T10847] RAX: ffffffffffffffda RBX: 00007fa6c18e5f80 RCX: 00007fa6c17499b9 [ 156.815948][T10847] RDX: 00000000000000cf RSI: 0000000000000000 RDI: 0000000000000003 [ 156.823909][T10847] RBP: 00007fa6c03c7090 R08: 0000000020000080 R09: 0000000000000000 [ 156.831877][T10847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.839960][T10847] R13: 0000000000000000 R14: 00007fa6c18e5f80 R15: 00007ffd29b31108 [ 156.848053][T10847] [ 156.966363][T10879] loop4: detected capacity change from 0 to 1024 [ 156.976168][T10879] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 157.021972][ T4282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.054440][T10887] program syz.0.1941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.079996][ T4282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.132568][T10852] chnl_net:caif_netlink_parms(): no params data found [ 157.149185][ T4282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.232856][ T4282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.276259][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.283405][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.322318][T10852] bridge_slave_0: entered allmulticast mode [ 157.336602][T10852] bridge_slave_0: entered promiscuous mode [ 157.361680][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.368831][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.376340][T10852] bridge_slave_1: entered allmulticast mode [ 157.382817][T10852] bridge_slave_1: entered promiscuous mode [ 157.415607][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.442497][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.475255][T10852] team0: Port device team_slave_0 added [ 157.482012][ T4282] bridge_slave_1: left allmulticast mode [ 157.487825][ T4282] bridge_slave_1: left promiscuous mode [ 157.493675][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.502675][ T4282] bridge_slave_0: left allmulticast mode [ 157.508549][ T4282] bridge_slave_0: left promiscuous mode [ 157.514274][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.616307][T10919] FAULT_INJECTION: forcing a failure. [ 157.616307][T10919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.629453][T10919] CPU: 0 UID: 0 PID: 10919 Comm: syz.4.1950 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 157.640291][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 157.650680][T10919] Call Trace: [ 157.654051][T10919] [ 157.656986][T10919] dump_stack_lvl+0xf2/0x150 [ 157.661615][T10919] dump_stack+0x15/0x20 [ 157.665844][T10919] should_fail_ex+0x229/0x230 [ 157.671086][T10919] should_fail+0xb/0x10 [ 157.675512][T10919] should_fail_usercopy+0x1a/0x20 [ 157.681616][T10919] _copy_to_user+0x1e/0xa0 [ 157.686100][T10919] simple_read_from_buffer+0xa0/0x110 [ 157.691727][T10919] proc_fail_nth_read+0xff/0x140 [ 157.696839][T10919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.702380][T10919] vfs_read+0x1a2/0x6e0 [ 157.706540][T10919] ? __rcu_read_unlock+0x4e/0x70 [ 157.711679][T10919] ? __fget_files+0x1da/0x210 [ 157.716512][T10919] ksys_read+0xeb/0x1b0 [ 157.720735][T10919] __x64_sys_read+0x42/0x50 [ 157.725322][T10919] x64_sys_call+0x27d3/0x2d60 [ 157.730058][T10919] do_syscall_64+0xc9/0x1c0 [ 157.734637][T10919] ? clear_bhb_loop+0x55/0xb0 [ 157.739309][T10919] ? clear_bhb_loop+0x55/0xb0 [ 157.744029][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.750020][T10919] RIP: 0033:0x7fd1332f83fc [ 157.754463][T10919] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 157.774358][T10919] RSP: 002b:00007fd131f50030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.783043][T10919] RAX: ffffffffffffffda RBX: 00007fd133496058 RCX: 00007fd1332f83fc [ 157.791012][T10919] RDX: 000000000000000f RSI: 00007fd131f500a0 RDI: 0000000000000004 [ 157.798970][T10919] RBP: 00007fd131f50090 R08: 0000000000000000 R09: 0000000000000000 [ 157.806930][T10919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.814974][T10919] R13: 0000000000000000 R14: 00007fd133496058 R15: 00007ffcba7b47a8 [ 157.823022][T10919] [ 157.850268][T10923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.865648][ T29] audit: type=1326 audit(1723835374.630:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.3.1951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c6ced99b9 code=0x0 [ 157.977673][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.988082][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.144005][ T4282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.155062][ T4282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.165565][ T4282] bond0 (unregistering): Released all slaves [ 158.174068][T10852] team0: Port device team_slave_1 added [ 158.181500][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'. [ 158.205674][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.212740][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.239474][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.251356][T10852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.258625][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.284547][T10852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.310500][T10852] hsr_slave_0: entered promiscuous mode [ 158.317159][T10852] hsr_slave_1: entered promiscuous mode [ 158.324138][T10852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.331830][T10852] Cannot create hsr debugfs directory [ 158.352328][ T4282] hsr_slave_0: left promiscuous mode [ 158.358035][ T4282] hsr_slave_1: left promiscuous mode [ 158.364115][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.371652][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.379360][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.386901][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.398637][ T4282] veth1_macvtap: left promiscuous mode [ 158.404388][ T4282] veth0_macvtap: left promiscuous mode [ 158.410115][ T4282] veth1_vlan: left promiscuous mode [ 158.415664][ T4282] veth0_vlan: left promiscuous mode [ 158.505113][ T4282] team0 (unregistering): Port device team_slave_1 removed [ 158.516747][ T4282] team0 (unregistering): Port device team_slave_0 removed [ 158.856207][T10964] loop2: detected capacity change from 0 to 2048 [ 158.879016][T10852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.888947][T10852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.896676][T10964] loop2: p1 < > p4 [ 158.904591][T10964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 158.931622][T10852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.940510][T10852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.983313][T10852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.996344][T10852] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.008715][ T2100] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.016073][ T2100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.032299][ T2100] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.039376][ T2100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.119392][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.222837][T10852] veth0_vlan: entered promiscuous mode [ 159.232168][T10852] veth1_vlan: entered promiscuous mode [ 159.252847][T10852] veth0_macvtap: entered promiscuous mode [ 159.262046][T10852] veth1_macvtap: entered promiscuous mode [ 159.274575][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.285594][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.295613][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.306228][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.316100][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.326861][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.337324][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.347944][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.367011][T10852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.393755][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.404334][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.414387][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.424953][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.434935][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.445378][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.455241][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.465754][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.477847][T10852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.488489][T10852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.497458][T10852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.506304][T10852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.515261][T10852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.536640][ T29] audit: type=1326 audit(1723835376.292:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.2.1970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c17499b9 code=0x0 [ 160.263610][T11028] loop4: detected capacity change from 0 to 512 [ 160.270493][T11028] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.281689][T11028] EXT4-fs (loop4): 1 truncate cleaned up [ 160.287499][T11028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.325722][T11028] netlink: 'syz.4.1981': attribute type 1 has an invalid length. [ 160.334730][T11028] 9pnet_fd: Insufficient options for proto=fd [ 160.348026][ T9732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.385834][T11036] usb usb9: usbfs: process 11036 (syz.4.1982) did not claim interface 0 before use [ 160.411193][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1983'. [ 160.596033][T11052] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1989'. [ 160.627618][T11057] loop2: detected capacity change from 0 to 164 [ 160.641940][T11057] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 160.650934][T11057] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 160.660822][ T29] audit: type=1400 audit(1723835377.434:2040): avc: denied { mounton } for pid=11055 comm="syz.2.1991" path="/202/file1/file0" dev="loop2" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 160.689238][ T29] audit: type=1400 audit(1723835377.464:2041): avc: denied { mount } for pid=11055 comm="syz.2.1991" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 160.752983][T11062] loop4: detected capacity change from 0 to 512 [ 160.764570][T11062] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 160.826953][T11074] loop4: detected capacity change from 0 to 1024 [ 160.835832][T11074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.915988][ T29] audit: type=1400 audit(1723835377.644:2042): avc: denied { create } for pid=11073 comm="syz.4.1997" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.006251][ T9732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.485832][T11103] tmpfs: Bad value for 'mpol' [ 161.684626][T11116] team0: Device ipvlan1 failed to register rx_handler [ 161.954118][T11130] loop1: detected capacity change from 0 to 512 [ 161.960833][T11130] EXT4-fs: inline encryption not supported [ 161.968525][T11130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e018, mo2=0002] [ 161.978007][T11130] System zones: 1-12 [ 161.982438][T11130] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2015: invalid indirect mapped block 8 (level 2) [ 161.996307][T11130] EXT4-fs (loop1): 1 truncate cleaned up [ 162.004063][T11130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.025851][T10852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.061562][T11137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2017'. [ 162.159150][T11141] loop1: detected capacity change from 0 to 1051 [ 162.643171][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'. [ 162.652428][T11167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2028'. [ 162.707708][ T29] audit: type=1400 audit(1723835379.477:2043): avc: denied { read } for pid=11176 comm="syz.3.2031" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.733303][ T29] audit: type=1400 audit(1723835379.477:2044): avc: denied { open } for pid=11176 comm="syz.3.2031" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.758169][ T29] audit: type=1326 audit(1723835379.477:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.3.2031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c6ced99b9 code=0x0 [ 162.789405][T11184] kernel profiling enabled (shift: 11) [ 162.864654][ T29] audit: type=1400 audit(1723835379.627:2046): avc: denied { read } for pid=2947 comm="acpid" name="event)" dev="devtmpfs" ino=980 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 162.886659][ T29] audit: type=1400 audit(1723835379.627:2047): avc: denied { open } for pid=2947 comm="acpid" path="/dev/input/event)" dev="devtmpfs" ino=980 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 162.909797][ T29] audit: type=1400 audit(1723835379.627:2048): avc: denied { ioctl } for pid=2947 comm="acpid" path="/dev/input/event)" dev="devtmpfs" ino=980 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 163.005245][T11196] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 163.016338][ T29] audit: type=1400 audit(1723835379.787:2049): avc: denied { lock } for pid=11195 comm="syz.0.2036" path="socket:[31964]" dev="sockfs" ino=31964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 163.051278][T11198] team0: Device ipvlan1 failed to register rx_handler [ 163.643763][T11238] loop2: detected capacity change from 0 to 128 [ 163.652980][T11238] EXT4-fs: Ignoring removed nobh option [ 163.747401][T11238] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.807368][T11238] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.820227][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2053'. [ 163.898169][ T8069] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.236385][T11249] loop2: detected capacity change from 0 to 256 [ 164.259979][T11249] msdos: Bad value for 'time_offset' [ 164.283825][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2054'. [ 164.446938][T11269] loop4: detected capacity change from 0 to 2048 [ 164.447145][T11271] loop2: detected capacity change from 0 to 512 [ 164.463286][T11271] EXT4-fs: Ignoring removed oldalloc option [ 164.469496][T11271] journal_path: Lookup failure for './file1' [ 164.475655][T11271] EXT4-fs: error: could not find journal device path [ 164.499428][T11271] loop2: detected capacity change from 0 to 1024 [ 164.515147][T11269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.535052][T11271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.560950][T11271] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #2: comm syz.2.2061: corrupted in-inode xattr: bad e_name length [ 164.591756][T11271] EXT4-fs (loop2): Remounting filesystem read-only [ 164.624012][T11246] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.654916][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 164.675345][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 164.695671][T11286] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 164.696812][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 164.708064][T11286] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.708064][T11286] [ 164.708078][T11286] EXT4-fs (loop4): Total free blocks count 0 [ 164.708090][T11286] EXT4-fs (loop4): Free/Dirty block details [ 164.708100][T11286] EXT4-fs (loop4): free_blocks=2415919104 [ 164.708111][T11286] EXT4-fs (loop4): dirty_blocks=16 [ 164.708120][T11286] EXT4-fs (loop4): Block reservation details [ 164.740692][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 164.744356][T11286] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 164.764787][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 164.787518][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 164.798497][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 164.807839][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 164.817131][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 164.817653][ T2100] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 164.826562][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 164.847333][ T8069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 164.877591][ T8666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.919867][ T4286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.940212][T11302] loop1: detected capacity change from 0 to 128 [ 164.957994][T11302] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.971016][T11302] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.990646][ T4286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.045852][ T4286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.078834][T10852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.102103][ T4286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.111383][T11323] loop1: detected capacity change from 0 to 512 [ 165.126440][T11323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.132696][T11307] chnl_net:caif_netlink_parms(): no params data found [ 165.139203][T11323] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.157759][T11323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.171629][T11322] loop1: detected capacity change from 0 to 512 [ 165.193107][T11333] loop1: detected capacity change from 0 to 128 [ 165.204381][T11307] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.211593][T11307] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.219428][T11333] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.232747][T11333] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.265203][T11307] bridge_slave_0: entered allmulticast mode [ 165.272051][T11307] bridge_slave_0: entered promiscuous mode [ 165.278919][ T4286] bridge_slave_1: left allmulticast mode [ 165.284608][ T4286] bridge_slave_1: left promiscuous mode [ 165.290352][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.301154][ T4286] bridge_slave_0: left allmulticast mode [ 165.306921][ T4286] bridge_slave_0: left promiscuous mode [ 165.312718][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.321359][T10852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.434204][ T4286] dvmrp1 (unregistering): left allmulticast mode [ 165.469087][T11342] loop1: detected capacity change from 0 to 2048 [ 165.490317][T11342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.507286][T11342] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.523692][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.523814][T11342] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 165.544665][T11342] EXT4-fs (loop1): This should not happen!! Data will be lost [ 165.544665][T11342] [ 165.554356][T11342] EXT4-fs (loop1): Total free blocks count 0 [ 165.560359][T11342] EXT4-fs (loop1): Free/Dirty block details [ 165.566306][T11342] EXT4-fs (loop1): free_blocks=2415919104 [ 165.572052][T11342] EXT4-fs (loop1): dirty_blocks=16 [ 165.577154][T11342] EXT4-fs (loop1): Block reservation details [ 165.583257][T11342] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 165.604515][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.615448][ T4286] bond0 (unregistering): Released all slaves [ 165.624526][T11307] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.632135][T11307] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.639726][T11307] bridge_slave_1: entered allmulticast mode [ 165.648767][T11307] bridge_slave_1: entered promiscuous mode [ 165.745097][ T4286] hsr_slave_0: left promiscuous mode [ 165.751029][ T4286] hsr_slave_1: left promiscuous mode [ 165.970308][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.977942][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.988353][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.995842][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.008095][ T4286] veth1_macvtap: left promiscuous mode [ 166.013669][ T4286] veth0_macvtap: left promiscuous mode [ 166.019240][ T4286] veth1_vlan: left promiscuous mode [ 166.024586][ T4286] veth0_vlan: left promiscuous mode [ 166.745088][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 166.764317][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 166.846350][T11307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.875829][T11307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.905026][T11307] team0: Port device team_slave_0 added [ 166.912821][T11307] team0: Port device team_slave_1 added [ 166.944609][T11307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.951856][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.978127][T11307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.990455][T11307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.997410][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.023496][T11307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.074262][T11307] hsr_slave_0: entered promiscuous mode [ 167.085045][T11307] hsr_slave_1: entered promiscuous mode [ 167.220414][T10852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.515195][T11307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.533649][T11307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 167.544621][T11307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.554645][T11307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.653313][T11307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.671951][T11307] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.685005][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.692163][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.705594][ T2100] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.712813][ T2100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.807874][T11307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.897164][T11307] veth0_vlan: entered promiscuous mode [ 167.908742][T11307] veth1_vlan: entered promiscuous mode [ 167.925208][T11307] veth0_macvtap: entered promiscuous mode [ 167.934602][T11307] veth1_macvtap: entered promiscuous mode [ 167.945725][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.956228][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.966060][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.976621][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.986545][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.997163][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.007020][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.017448][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.030930][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 168.032820][T11307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.036974][ T29] audit: type=1400 audit(1723835384.814:2055): avc: denied { search } for pid=11430 comm="syz.3.2104" name="/" dev="configfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.049076][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.066544][ T29] audit: type=1400 audit(1723835384.814:2056): avc: denied { read } for pid=11430 comm="syz.3.2104" name="/" dev="configfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.076983][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.076998][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.077052][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.077063][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.077076][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.077088][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.099185][ T29] audit: type=1400 audit(1723835384.814:2057): avc: denied { open } for pid=11430 comm="syz.3.2104" path="/" dev="configfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.108976][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.112270][T11307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.203283][T11307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.212093][T11307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.220810][T11307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.229606][T11307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.267258][T11436] loop4: detected capacity change from 0 to 512 [ 168.306684][T11436] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2105: bg 0: block 393: padding at end of block bitmap is not set [ 168.323392][T11436] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 168.333286][T11436] EXT4-fs (loop4): 2 truncates cleaned up [ 168.341253][T11436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.365239][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2105'. [ 168.378621][ T29] audit: type=1400 audit(1723835385.074:2058): avc: denied { ioctl } for pid=11428 comm="syz.0.2103" path="socket:[33118]" dev="sockfs" ino=33118 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.404579][ T29] audit: type=1400 audit(1723835385.134:2059): avc: denied { create } for pid=11435 comm="syz.4.2105" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 168.526043][ T9732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.611297][ T29] audit: type=1400 audit(1723835385.385:2060): avc: denied { ioctl } for pid=11444 comm="syz.2.2108" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 168.714773][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.569022][ C1] sched: RT throttling activated [ 176.867932][T11468] 9pnet_fd: Insufficient options for proto=fd [ 183.340827][T11463] loop4: detected capacity change from 0 to 512 [ 186.008086][T11463] ext4: Unknown parameter 'uid' [ 192.283906][ T4283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.379096][ T4283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.445069][ T4283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.509472][ T4283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.597209][T11478] chnl_net:caif_netlink_parms(): no params data found [ 192.612111][T11473] chnl_net:caif_netlink_parms(): no params data found [ 192.673239][T11484] chnl_net:caif_netlink_parms(): no params data found [ 192.701227][T11488] chnl_net:caif_netlink_parms(): no params data found [ 192.717680][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.724897][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.732283][T11478] bridge_slave_0: entered allmulticast mode [ 192.738725][T11478] bridge_slave_0: entered promiscuous mode [ 192.764595][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.771645][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.779036][T11478] bridge_slave_1: entered allmulticast mode [ 192.785446][T11478] bridge_slave_1: entered promiscuous mode [ 192.791852][ T4283] bridge_slave_1: left allmulticast mode [ 192.797500][ T4283] bridge_slave_1: left promiscuous mode [ 192.803314][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.811183][ T4283] bridge_slave_0: left allmulticast mode [ 192.816874][ T4283] bridge_slave_0: left promiscuous mode [ 192.822516][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.934165][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.944503][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.955233][ T4283] bond0 (unregistering): Released all slaves [ 192.990243][T11482] chnl_net:caif_netlink_parms(): no params data found [ 193.010897][T11473] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.018220][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.025504][T11473] bridge_slave_0: entered allmulticast mode [ 193.032034][T11473] bridge_slave_0: entered promiscuous mode [ 193.046708][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.054264][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.061634][T11488] bridge_slave_0: entered allmulticast mode [ 193.067963][T11488] bridge_slave_0: entered promiscuous mode [ 193.076310][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.087051][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.096600][T11473] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.103772][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.111779][T11473] bridge_slave_1: entered allmulticast mode [ 193.118374][T11473] bridge_slave_1: entered promiscuous mode [ 193.133572][ T4283] hsr_slave_0: left promiscuous mode [ 193.139206][ T4283] hsr_slave_1: left promiscuous mode [ 193.145079][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.152645][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.160603][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.168051][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.177445][ T4283] veth1_macvtap: left promiscuous mode [ 193.182978][ T4283] veth0_macvtap: left promiscuous mode [ 193.188475][ T4283] veth1_vlan: left promiscuous mode [ 193.193851][ T4283] veth0_vlan: left promiscuous mode [ 193.271959][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 193.282656][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 193.319882][T11488] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.327087][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.334667][T11488] bridge_slave_1: entered allmulticast mode [ 193.341895][T11488] bridge_slave_1: entered promiscuous mode [ 193.363027][T11484] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.370110][T11484] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.377913][T11484] bridge_slave_0: entered allmulticast mode [ 193.384766][T11484] bridge_slave_0: entered promiscuous mode [ 193.405246][T11473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.414802][T11484] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.422488][T11484] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.429674][T11484] bridge_slave_1: entered allmulticast mode [ 193.436176][T11484] bridge_slave_1: entered promiscuous mode [ 193.453119][T11488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.463218][T11478] team0: Port device team_slave_0 added [ 193.472088][T11473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.497690][T11484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.507804][T11488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.517964][T11478] team0: Port device team_slave_1 added [ 193.532949][T11482] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.540144][T11482] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.547339][T11482] bridge_slave_0: entered allmulticast mode [ 193.553704][T11482] bridge_slave_0: entered promiscuous mode [ 193.561378][T11484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.585829][T11482] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.592923][T11482] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.600135][T11482] bridge_slave_1: entered allmulticast mode [ 193.606644][T11482] bridge_slave_1: entered promiscuous mode [ 193.622826][T11488] team0: Port device team_slave_0 added [ 193.629018][T11478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.636153][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.662490][T11478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.673791][T11478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.680849][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.707463][T11478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.718933][T11473] team0: Port device team_slave_0 added [ 193.725577][T11473] team0: Port device team_slave_1 added [ 193.741260][T11488] team0: Port device team_slave_1 added [ 193.767588][T11484] team0: Port device team_slave_0 added [ 193.774442][T11484] team0: Port device team_slave_1 added [ 193.794723][T11473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.801795][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.828391][T11473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.840986][T11482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.850428][T11473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.857588][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.883580][T11473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.907348][T11488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.914333][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.940351][T11488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.952430][T11482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.972841][T11484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.979836][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.005821][T11484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.017040][T11484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.024096][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.050176][T11484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.063056][T11478] hsr_slave_0: entered promiscuous mode [ 194.069108][T11478] hsr_slave_1: entered promiscuous mode [ 194.075136][T11478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.082787][T11478] Cannot create hsr debugfs directory [ 194.088485][T11488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.095535][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.121770][T11488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.142920][T11482] team0: Port device team_slave_0 added [ 194.157830][T11482] team0: Port device team_slave_1 added [ 194.174439][T11482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.181570][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.207619][T11482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.225551][T11473] hsr_slave_0: entered promiscuous mode [ 194.231649][T11473] hsr_slave_1: entered promiscuous mode [ 194.237456][T11473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.245098][T11473] Cannot create hsr debugfs directory [ 194.261883][T11482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.269273][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.295898][T11482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.325547][T11484] hsr_slave_0: entered promiscuous mode [ 194.331619][T11484] hsr_slave_1: entered promiscuous mode [ 194.337585][T11484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.345271][T11484] Cannot create hsr debugfs directory [ 194.364518][T11488] hsr_slave_0: entered promiscuous mode [ 194.370736][T11488] hsr_slave_1: entered promiscuous mode [ 194.376861][T11488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.384576][T11488] Cannot create hsr debugfs directory [ 194.397903][T11482] hsr_slave_0: entered promiscuous mode [ 194.404033][T11482] hsr_slave_1: entered promiscuous mode [ 194.410127][T11482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.418183][T11482] Cannot create hsr debugfs directory [ 194.466841][ T4283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.512154][ T4283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.563352][ T4283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.624328][T11473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.638294][ T4283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.683185][T11473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.733414][T11473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.794043][T11473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.844179][ T4283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.864963][T11473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.873816][T11473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.882543][T11473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.890774][T11473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.904266][ T4283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.938188][T11473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.953483][ T4283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.966408][T11473] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.976311][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.983731][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.994765][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.001926][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.033578][ T4283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.069817][T11473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.099954][ T4283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.147877][T11473] veth0_vlan: entered promiscuous mode [ 195.156528][T11473] veth1_vlan: entered promiscuous mode [ 195.165429][ T4283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.187505][T11473] veth0_macvtap: entered promiscuous mode [ 195.195127][T11473] veth1_macvtap: entered promiscuous mode [ 195.206259][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.216958][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.226837][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.237344][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.247295][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.257820][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.267787][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.278254][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.289299][T11473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.305578][ T4283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.318073][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.328677][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.338541][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.348978][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.359305][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.369923][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.380104][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.390641][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.402367][T11473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.411925][T11473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.420896][T11473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.429691][T11473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.438406][T11473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.492672][ T4283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.590489][T11565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.599155][T11565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.627754][ T4283] bridge_slave_1: left allmulticast mode [ 195.633546][ T4283] bridge_slave_1: left promiscuous mode [ 195.639303][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.650042][ T4283] bridge_slave_0: left allmulticast mode [ 195.655840][ T4283] bridge_slave_0: left promiscuous mode [ 195.661587][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.672642][ T4283] bridge_slave_1: left allmulticast mode [ 195.678405][ T4283] bridge_slave_1: left promiscuous mode [ 195.684365][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.695588][ T4283] bridge_slave_0: left allmulticast mode [ 195.701359][ T4283] bridge_slave_0: left promiscuous mode [ 195.707184][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.719747][ T4283] bridge_slave_1: left allmulticast mode [ 195.725521][ T4283] bridge_slave_1: left promiscuous mode [ 195.731550][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.741833][ T4283] bridge_slave_0: left allmulticast mode [ 195.747627][ T4283] bridge_slave_0: left promiscuous mode [ 195.753591][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.764367][ T4283] bridge_slave_1: left allmulticast mode [ 195.770158][ T4283] bridge_slave_1: left promiscuous mode [ 195.775983][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.786481][ T4283] bridge_slave_0: left allmulticast mode [ 195.792232][ T4283] bridge_slave_0: left promiscuous mode [ 195.797999][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.239969][ T4283] bridge0 (unregistering): left allmulticast mode [ 196.381441][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.392203][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.402615][ T4283] bond0 (unregistering): Released all slaves [ 196.411667][ T4283] bond0 (unregistering): Released all slaves [ 196.420617][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.431163][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.441344][ T4283] bond0 (unregistering): Released all slaves [ 196.450327][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.460932][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.471232][ T4283] bond0 (unregistering): Released all slaves [ 196.479893][ T4283] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 196.489923][ T4283] bond1 (unregistering): Released all slaves [ 196.520530][T11478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.529131][T11478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.538394][T11478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.547931][T11478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.561870][ T4283] tipc: Disabling bearer [ 196.567098][ T4283] tipc: Left network mode [ 196.595685][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.607608][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.617039][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.624253][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.637389][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.644545][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.693420][ T4283] hsr_slave_0: left promiscuous mode [ 196.700630][ T4283] hsr_slave_1: left promiscuous mode [ 196.706767][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.714376][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.722551][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.730188][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.739753][ T4283] hsr_slave_0: left promiscuous mode [ 196.745610][ T4283] hsr_slave_1: left promiscuous mode [ 196.751593][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.759081][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.766565][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.774037][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.783289][ T4283] hsr_slave_0: left promiscuous mode [ 196.789076][ T4283] hsr_slave_1: left promiscuous mode [ 196.794872][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.802329][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.810655][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.818135][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.827737][ T4283] hsr_slave_0: left promiscuous mode [ 196.833446][ T4283] hsr_slave_1: left promiscuous mode [ 196.844337][ T4283] veth1_macvtap: left promiscuous mode [ 196.849867][ T4283] veth0_macvtap: left promiscuous mode [ 196.855469][ T4283] veth1_vlan: left promiscuous mode [ 196.861360][ T4283] veth0_vlan: left promiscuous mode [ 196.867256][ T4283] veth1_macvtap: left promiscuous mode [ 196.872764][ T4283] veth0_macvtap: left promiscuous mode [ 196.878351][ T4283] veth1_vlan: left promiscuous mode [ 196.883703][ T4283] veth0_vlan: left promiscuous mode [ 196.889769][ T4283] veth1_macvtap: left promiscuous mode [ 196.895314][ T4283] veth0_macvtap: left promiscuous mode [ 196.900862][ T4283] veth1_vlan: left promiscuous mode [ 196.906065][ T4283] veth0_vlan: left promiscuous mode [ 196.911929][ T4283] veth1_macvtap: left promiscuous mode [ 196.917435][ T4283] veth0_macvtap: left promiscuous mode [ 196.923020][ T4283] veth1_vlan: left promiscuous mode [ 196.928252][ T4283] veth0_vlan: left promiscuous mode [ 197.134235][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 197.145404][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 197.184568][ T4283] pim6reg (unregistering): left allmulticast mode [ 197.218536][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 197.228587][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 197.287849][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 197.298437][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 197.334733][ T4283] pim6reg (unregistering): left allmulticast mode [ 197.373790][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 197.385123][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 197.422805][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.444353][T11484] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.456700][T11484] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.466155][T11484] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.478249][T11484] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.523347][T11478] veth0_vlan: entered promiscuous mode [ 197.535605][T11484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.545064][T11478] veth1_vlan: entered promiscuous mode [ 197.564839][T11484] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.579718][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.586919][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.596573][T11478] veth0_macvtap: entered promiscuous mode [ 197.604306][T11478] veth1_macvtap: entered promiscuous mode [ 197.617034][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.624119][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.648378][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.659050][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.670065][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.682237][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.693538][T11478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.707551][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.719528][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.729678][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.740315][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.751861][T11478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.760593][T11478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.769513][T11478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.778343][T11478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.787119][T11478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.821170][T11488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.830045][T11488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.848605][T11488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.862026][T11488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.906763][T11484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.945163][T11488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.963336][T11488] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.982404][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.992099][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.006425][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.013650][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.064793][T11484] veth0_vlan: entered promiscuous mode [ 198.075585][T11484] veth1_vlan: entered promiscuous mode [ 198.105055][T11484] veth0_macvtap: entered promiscuous mode [ 198.114810][T11482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.126388][T11482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.139394][T11482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.155796][T11484] veth1_macvtap: entered promiscuous mode [ 198.164729][T11482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.183084][T11488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.206342][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.217894][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.227947][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.239586][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.250599][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.261433][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.273609][T11484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.288442][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.298980][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.308861][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.319561][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.329853][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.340545][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.353123][T11484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.380786][T11484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.391338][T11484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.401019][T11484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.409859][T11484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.463814][T11482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.505291][T11482] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.537931][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.545194][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.570065][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.577210][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.682898][T11488] veth0_vlan: entered promiscuous mode [ 198.709893][T11488] veth1_vlan: entered promiscuous mode [ 198.735592][T11488] veth0_macvtap: entered promiscuous mode [ 198.793144][T11482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.811034][T11488] veth1_macvtap: entered promiscuous mode [ 198.828195][T11631] team0: Device ipvlan1 failed to register rx_handler [ 198.855620][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.867618][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.879461][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.890401][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.900470][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.911110][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.921523][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.932532][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.956163][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.966071][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.977150][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.987762][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.998763][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.008846][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.019922][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.029920][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.040805][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.051789][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.062455][T11488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.072255][T11488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.083699][T11488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.093435][T11488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.098781][T11631] loop2: detected capacity change from 0 to 128 [ 199.136362][T11631] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.149934][T11482] veth0_vlan: entered promiscuous mode [ 199.156292][T11631] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.194021][T11482] veth1_vlan: entered promiscuous mode [ 199.221157][T11482] veth0_macvtap: entered promiscuous mode [ 199.235285][T11482] veth1_macvtap: entered promiscuous mode [ 199.249491][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.260386][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.270239][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.280987][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.291235][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.301881][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.311948][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.322583][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.333410][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.344157][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.354881][T11482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.365704][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.377523][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.387976][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.398557][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.408379][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.418802][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.428650][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.439144][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.449152][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.459716][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.472372][T11482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.482083][T11482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.491100][T11482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.500182][T11482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.512454][T11482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.529868][T11649] team0: Device ipvlan1 failed to register rx_handler [ 199.589755][T11653] loop1: detected capacity change from 0 to 512 [ 199.598848][T11653] EXT4-fs: Ignoring removed i_version option [ 199.605288][T11653] EXT4-fs: Ignoring removed nobh option [ 199.619007][T11653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.630512][T11653] EXT4-fs (loop1): 1 truncate cleaned up [ 199.637458][T11653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.651364][T11478] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.678212][T11482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.679252][T11659] loop2: detected capacity change from 0 to 512 [ 199.694989][T11659] EXT4-fs: Ignoring removed bh option [ 199.705922][T11659] EXT4-fs (loop2): 1 truncate cleaned up [ 199.712201][T11659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.728922][ T29] audit: type=1400 audit(1723835416.536:2061): avc: denied { mounton } for pid=11658 comm="syz.2.2131" path="/4/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.763003][ T29] audit: type=1400 audit(1723835416.566:2062): avc: denied { getopt } for pid=11662 comm="syz.1.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.798503][T11665] team0: Device ipvlan1 failed to register rx_handler [ 199.806050][T11659] loop2: detected capacity change from 512 to 64 [ 199.812648][T11665] loop1: detected capacity change from 0 to 128 [ 199.821602][T11659] syz.2.2131: attempt to access beyond end of device [ 199.821602][T11659] loop2: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 199.835030][T11659] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 199.836490][T11665] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.847270][T11659] Buffer I/O error on device loop2, logical block 36 [ 199.867482][T11665] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.887731][T11478] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 14: comm syz-executor: path /4/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0 [ 199.912779][T11478] VFS: Lookup of '.' in ext4 loop2 would have caused loop [ 199.920385][T11478] VFS: Lookup of '.' in ext4 loop2 would have caused loop [ 200.813934][T11482] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.342567][T11691] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 201.351167][T11691] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 201.549732][T11693] team0: Device ipvlan1 failed to register rx_handler [ 201.928362][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 201.943368][T11708] openvswitch: netlink: ct_state flags 00001eac unsupported [ 201.952009][ T29] audit: type=1400 audit(1723835418.758:2063): avc: denied { watch } for pid=11707 comm="syz.4.2147" path="/5/file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.441257][ T29] audit: type=1400 audit(1723835419.248:2064): avc: denied { shutdown } for pid=11714 comm="syz.4.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.469607][T11715] loop4: detected capacity change from 0 to 512 [ 202.476943][T11715] EXT4-fs: Ignoring removed orlov option [ 202.485436][T11715] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 202.494796][T11715] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2150: invalid indirect mapped block 2683928664 (level 1) [ 202.510358][T11715] EXT4-fs (loop4): 1 truncate cleaned up [ 202.518044][T11715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.535061][ T29] audit: type=1400 audit(1723835419.348:2065): avc: denied { remount } for pid=11714 comm="syz.4.2150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 202.535079][T11715] EXT4-fs: user quota file already specified [ 202.575061][T11488] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 202.597076][T11488] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 202.611399][T11488] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 202.621825][T11488] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 202.621900][ T29] audit: type=1400 audit(1723835419.428:2066): avc: denied { setattr } for pid=11488 comm="syz-executor" path="/8/file0/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.661704][T11488] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 202.714969][T11724] loop1: detected capacity change from 0 to 512 [ 202.721665][T11724] EXT4-fs: Ignoring removed bh option [ 202.730780][T11724] EXT4-fs (loop1): 1 truncate cleaned up [ 202.736975][T11724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.767485][ T29] audit: type=1400 audit(1723835419.578:2067): avc: denied { map } for pid=11725 comm="syz.0.2153" path="/5" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 202.792515][ T29] audit: type=1326 audit(1723835419.598:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.2153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf402299b9 code=0x0 [ 202.816383][T11724] loop1: detected capacity change from 512 to 64 [ 202.825248][T11724] syz.1.2152: attempt to access beyond end of device [ 202.825248][T11724] loop1: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 202.838509][T11724] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 202.849742][T11724] Buffer I/O error on device loop1, logical block 36 [ 202.864177][T11482] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 14: comm syz-executor: path /6/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0 [ 202.886822][T11482] VFS: Lookup of '.' in ext4 loop1 would have caused loop [ 202.895286][T11482] VFS: Lookup of '.' in ext4 loop1 would have caused loop [ 203.366077][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 203.377980][T11478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.397243][ T4286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.458517][ T4286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.510178][ T4286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.573391][T11749] chnl_net:caif_netlink_parms(): no params data found [ 203.598630][ T4286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.631245][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.638650][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.647361][T11749] bridge_slave_0: entered allmulticast mode [ 203.654651][T11749] bridge_slave_0: entered promiscuous mode [ 203.662275][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.669894][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.677973][T11749] bridge_slave_1: entered allmulticast mode [ 203.684949][T11749] bridge_slave_1: entered promiscuous mode [ 203.703387][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.714367][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.744774][T11749] team0: Port device team_slave_0 added [ 203.750914][ T4286] bridge_slave_1: left allmulticast mode [ 203.756985][ T4286] bridge_slave_1: left promiscuous mode [ 203.762804][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.773231][ T4286] bridge_slave_0: left allmulticast mode [ 203.779346][ T4286] bridge_slave_0: left promiscuous mode [ 203.785132][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.855252][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 203.875732][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.886729][T11782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2172'. [ 203.887034][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.906550][ T4286] bond0 (unregistering): Released all slaves [ 203.915050][T11749] team0: Port device team_slave_1 added [ 203.937704][T11749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.944725][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.971079][T11749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.982713][T11749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.990193][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.016425][T11749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.045697][T11749] hsr_slave_0: entered promiscuous mode [ 204.052064][T11749] hsr_slave_1: entered promiscuous mode [ 204.145959][ T4286] hsr_slave_0: left promiscuous mode [ 204.160935][ T4286] hsr_slave_1: left promiscuous mode [ 204.179231][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.186803][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.203105][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.210668][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.231067][ T4286] veth1_macvtap: left promiscuous mode [ 204.236690][ T4286] veth0_macvtap: left promiscuous mode [ 204.242784][ T4286] veth1_vlan: left promiscuous mode [ 204.248040][ T4286] veth0_vlan: left promiscuous mode [ 204.482309][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 204.510662][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 204.744263][T11488] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.846814][T11749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.867233][T11749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.895361][T11749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.935789][T11749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.137500][T11482] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.180980][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.217154][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.230043][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.237117][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.278320][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.285524][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.399434][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.575882][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.647779][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.766047][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.860001][T11749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.874494][T11801] chnl_net:caif_netlink_parms(): no params data found [ 205.903906][ T4286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.948847][ T4286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.975064][T11816] chnl_net:caif_netlink_parms(): no params data found [ 206.032051][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.039177][T11801] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.047873][T11801] bridge_slave_0: entered allmulticast mode [ 206.054627][T11801] bridge_slave_0: entered promiscuous mode [ 206.074527][ T4286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.113164][T11801] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.120814][T11801] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.128989][T11801] bridge_slave_1: entered allmulticast mode [ 206.138657][T11801] bridge_slave_1: entered promiscuous mode [ 206.198417][T11749] veth0_vlan: entered promiscuous mode [ 206.247519][ T4286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.274646][T11801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.302244][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.309476][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.316670][T11816] bridge_slave_0: entered allmulticast mode [ 206.323268][T11816] bridge_slave_0: entered promiscuous mode [ 206.331812][T11801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.365351][T11749] veth1_vlan: entered promiscuous mode [ 206.372597][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.380197][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.387821][T11816] bridge_slave_1: entered allmulticast mode [ 206.395620][T11816] bridge_slave_1: entered promiscuous mode [ 206.453072][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.475769][T11801] team0: Port device team_slave_0 added [ 206.484564][T11801] team0: Port device team_slave_1 added [ 206.492079][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.501663][ T4286] bridge_slave_1: left allmulticast mode [ 206.507341][ T4286] bridge_slave_1: left promiscuous mode [ 206.513303][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.594301][ T4286] bridge_slave_0: left allmulticast mode [ 206.600507][ T4286] bridge_slave_0: left promiscuous mode [ 206.606357][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.653972][ T4286] bridge_slave_1: left allmulticast mode [ 206.659978][ T4286] bridge_slave_1: left promiscuous mode [ 206.666685][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.710368][ T4286] bridge_slave_0: left allmulticast mode [ 206.716430][ T4286] bridge_slave_0: left promiscuous mode [ 206.722328][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.963288][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.974024][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.983980][ T4286] bond0 (unregistering): Released all slaves [ 206.994475][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.005131][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.015902][ T4286] bond0 (unregistering): Released all slaves [ 207.048203][T11749] veth0_macvtap: entered promiscuous mode [ 207.064399][T11816] team0: Port device team_slave_0 added [ 207.073802][T11749] veth1_macvtap: entered promiscuous mode [ 207.084197][T11801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.091336][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.117248][T11801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.128773][T11816] team0: Port device team_slave_1 added [ 207.149243][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.159947][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.170556][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.182340][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.192473][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.203830][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.214217][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.224821][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.235002][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.246914][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.260095][T11749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.268159][T11801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.275161][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.301518][T11801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.334740][T11816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.338087][ T29] audit: type=1326 audit(1723835424.152:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.0.2196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf402299b9 code=0x0 [ 207.341898][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.390866][T11816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.402928][T11816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.411045][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.439871][T11816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.454509][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.465865][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.475798][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.486239][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.496183][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.507691][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.518818][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.529928][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.540020][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.550912][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.561972][T11749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.576216][T11801] hsr_slave_0: entered promiscuous mode [ 207.582442][T11801] hsr_slave_1: entered promiscuous mode [ 207.589021][T11801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.597830][T11801] Cannot create hsr debugfs directory [ 207.606257][ T4286] hsr_slave_0: left promiscuous mode [ 207.612477][ T4286] hsr_slave_1: left promiscuous mode [ 207.618503][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.626020][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.634425][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.642569][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.652257][ T4286] hsr_slave_0: left promiscuous mode [ 207.657899][ T4286] hsr_slave_1: left promiscuous mode [ 207.664279][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.672003][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.680012][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.687638][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.698367][ T4286] veth1_macvtap: left promiscuous mode [ 207.704005][ T4286] veth0_macvtap: left promiscuous mode [ 207.709633][ T4286] veth1_vlan: left promiscuous mode [ 207.714968][ T4286] veth0_vlan: left promiscuous mode [ 207.720953][ T4286] veth1_macvtap: left promiscuous mode [ 207.726564][ T4286] veth0_macvtap: left promiscuous mode [ 207.732157][ T4286] veth1_vlan: left promiscuous mode [ 207.737627][ T4286] veth0_vlan: left promiscuous mode [ 207.859481][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 207.870808][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 207.934477][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 207.946177][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 207.983186][T11749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.992837][T11749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.001902][T11749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.013244][T11749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.048324][T11816] hsr_slave_0: entered promiscuous mode [ 208.054851][T11816] hsr_slave_1: entered promiscuous mode [ 208.061178][T11816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.070928][T11816] Cannot create hsr debugfs directory [ 208.166870][T11897] loop2: detected capacity change from 0 to 128 [ 208.178088][T11897] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.212978][T11897] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.286777][T11749] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.380398][T11912] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 208.583999][T11801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.594735][T11801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.624554][T11801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.656133][T11801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.670472][T11939] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 208.775748][T11801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.791914][T11801] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.805860][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.814031][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.850748][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.857820][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.870562][T11816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.899849][T11816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.911866][T11816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.938256][T11816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.005698][ T29] audit: type=1326 audit(1723835425.823:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.030058][ T29] audit: type=1326 audit(1723835425.823:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.063020][T11816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.072754][T11973] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 209.092040][ T29] audit: type=1326 audit(1723835425.823:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.095631][T11816] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.118106][ T29] audit: type=1326 audit(1723835425.823:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.129804][T11801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.151422][ T29] audit: type=1326 audit(1723835425.823:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.178048][T11816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.183542][ T29] audit: type=1326 audit(1723835425.823:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.194779][T11816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.218859][ T29] audit: type=1326 audit(1723835425.823:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.218954][ T29] audit: type=1326 audit(1723835425.823:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.233051][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.253833][ T29] audit: type=1326 audit(1723835425.853:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdf402299b9 code=0x7ffc0000 [ 209.279422][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.322455][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.330414][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.429085][T11816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.562176][T11816] veth0_vlan: entered promiscuous mode [ 209.569135][T11801] veth0_vlan: entered promiscuous mode [ 209.579928][T11801] veth1_vlan: entered promiscuous mode [ 209.587768][T11816] veth1_vlan: entered promiscuous mode [ 209.614474][T11801] veth0_macvtap: entered promiscuous mode [ 209.631708][T11816] veth0_macvtap: entered promiscuous mode [ 209.650851][T12021] netlink: 'syz.0.2233': attribute type 9 has an invalid length. [ 209.657306][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 209.674095][T11801] veth1_macvtap: entered promiscuous mode [ 209.688764][T11816] veth1_macvtap: entered promiscuous mode [ 209.710748][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.722534][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.732735][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.743557][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.753826][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.765414][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.765670][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 209.776160][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.797544][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.809857][T11801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.817567][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.828185][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.828572][T12027] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 209.838302][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.856811][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.866901][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.877801][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.888302][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.899467][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.909482][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.920035][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.932448][T11816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.940655][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.951177][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.961163][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.971666][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.982114][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.992728][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.002967][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.013821][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.025144][T11816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.042818][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.055459][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.066197][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.077113][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.087220][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.097802][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.107947][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.118810][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.129019][T11801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.139638][T11801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.153650][T11801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.162434][T11816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.171299][T11816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.180069][T11816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.189239][T11816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.204719][T12038] FAULT_INJECTION: forcing a failure. [ 210.204719][T12038] name failslab, interval 1, probability 0, space 0, times 0 [ 210.218053][T12038] CPU: 0 UID: 0 PID: 12038 Comm: syz.3.2239 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 210.228821][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 210.239392][T12038] Call Trace: [ 210.243109][T12038] [ 210.246139][T12038] dump_stack_lvl+0xf2/0x150 [ 210.250847][T12038] dump_stack+0x15/0x20 [ 210.255204][T12038] should_fail_ex+0x229/0x230 [ 210.260489][T12038] ? skb_clone+0x154/0x1f0 [ 210.265112][T12038] should_failslab+0x8f/0xb0 [ 210.269734][T12038] kmem_cache_alloc_noprof+0x4c/0x290 [ 210.275251][T12038] skb_clone+0x154/0x1f0 [ 210.279540][T12038] __netlink_deliver_tap+0x2bd/0x4c0 [ 210.284847][T12038] __netlink_sendskb+0xda/0xe0 [ 210.289729][T12038] netlink_dump+0x673/0x760 [ 210.294251][T12038] netlink_recvmsg+0x427/0x780 [ 210.299026][T12038] ? __pfx_netlink_recvmsg+0x10/0x10 [ 210.304405][T12038] sock_recvmsg+0x13f/0x170 [ 210.309154][T12038] __sys_recvfrom+0x16b/0x230 [ 210.313857][T12038] __x64_sys_recvfrom+0x78/0x90 [ 210.318728][T12038] x64_sys_call+0x1726/0x2d60 [ 210.323484][T12038] do_syscall_64+0xc9/0x1c0 [ 210.328073][T12038] ? clear_bhb_loop+0x55/0xb0 [ 210.332950][T12038] ? clear_bhb_loop+0x55/0xb0 [ 210.337641][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.343560][T12038] RIP: 0033:0x7f8da536b684 [ 210.348060][T12038] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 210.368228][T12038] RSP: 002b:00007f8da3fc4ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 210.369604][T11801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.377171][T12038] RAX: ffffffffffffffda RBX: 00007f8da3fc4fc0 RCX: 00007f8da536b684 [ 210.377190][T12038] RDX: 0000000000001000 RSI: 00007f8da3fc5010 RDI: 0000000000000003 [ 210.377202][T12038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.386171][T11801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.394088][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 210.394102][T12038] R13: 00007f8da3fc4f68 R14: 00007f8da3fc5010 R15: 0000000000000000 [ 210.394120][T12038] [ 210.402077][T11801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.449689][T11801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.557579][T12053] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.579778][T12054] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2178'. [ 211.004357][T12080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.016938][T12080] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2250'. [ 211.100347][ T941] IPVS: starting estimator thread 0... [ 211.152508][T12088] loop4: detected capacity change from 0 to 512 [ 211.159216][T12088] EXT4-fs: Ignoring removed bh option [ 211.166353][T12088] EXT4-fs (loop4): 1 truncate cleaned up [ 211.172467][T12088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.209936][T12084] IPVS: using max 3312 ests per chain, 165600 per kthread [ 211.229321][T12088] loop4: detected capacity change from 512 to 64 [ 211.243705][T11801] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 14: comm syz-executor: path /5/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0 [ 211.266868][T11801] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 211.274491][T11801] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 211.491095][T12103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2260'. [ 211.630137][T12109] 9pnet_fd: Insufficient options for proto=fd [ 211.918281][T12116] loop2: detected capacity change from 0 to 512 [ 211.928355][T12116] EXT4-fs: Ignoring removed bh option [ 211.936915][T12116] EXT4-fs (loop2): 1 truncate cleaned up [ 211.943870][T12116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.009020][T12116] loop2: detected capacity change from 512 to 64 [ 212.017358][T12118] ================================================================== [ 212.025831][T12118] BUG: KCSAN: data-race in __bio_queue_enter / blk_mq_unfreeze_queue [ 212.034384][T12118] [ 212.036720][T12118] read-write to 0xffff888101244a9c of 4 bytes by task 12116 on cpu 0: [ 212.045415][T12118] blk_mq_unfreeze_queue+0x38/0xc0 [ 212.050806][T12118] loop_set_status+0x414/0x550 [ 212.055767][T12118] lo_ioctl+0x7fd/0x11d0 [ 212.060073][T12118] blkdev_ioctl+0x35f/0x450 [ 212.064668][T12118] __se_sys_ioctl+0xd3/0x150 [ 212.069677][T12118] __x64_sys_ioctl+0x43/0x50 [ 212.074373][T12118] x64_sys_call+0x15cc/0x2d60 [ 212.079066][T12118] do_syscall_64+0xc9/0x1c0 [ 212.083726][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.089828][T12118] [ 212.092252][T12118] read to 0xffff888101244a9c of 4 bytes by task 12118 on cpu 1: [ 212.099983][T12118] __bio_queue_enter+0x164/0x500 [ 212.105090][T12118] blk_mq_submit_bio+0x197/0xe30 [ 212.110146][T12118] __submit_bio+0xf2/0x470 [ 212.114690][T12118] submit_bio_noacct_nocheck+0x295/0x6e0 [ 212.120422][T12118] submit_bio_noacct+0x767/0x9b0 [ 212.125369][T12118] submit_bio+0x218/0x230 [ 212.130240][T12118] submit_bh_wbc+0x2de/0x320 [ 212.134938][T12118] submit_bh+0x1e/0x30 [ 212.139400][T12118] ext4_read_bh_lock+0x16c/0x190 [ 212.144526][T12118] ext4_bread_batch+0x18d/0x360 [ 212.149655][T12118] __ext4_find_entry+0x9d3/0x10a0 [ 212.155046][T12118] ext4_lookup+0xba/0x390 [ 212.159686][T12118] path_openat+0xc5f/0x1f10 [ 212.164298][T12118] do_filp_open+0xf7/0x200 [ 212.169019][T12118] do_sys_openat2+0xab/0x120 [ 212.174068][T12118] __x64_sys_openat+0xf3/0x120 [ 212.179456][T12118] x64_sys_call+0x1025/0x2d60 [ 212.184197][T12118] do_syscall_64+0xc9/0x1c0 [ 212.188899][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.195264][T12118] [ 212.197944][T12118] value changed: 0x00000001 -> 0x00000000 [ 212.204102][T12118] [ 212.206518][T12118] Reported by Kernel Concurrency Sanitizer on: [ 212.213420][T12118] CPU: 1 UID: 0 PID: 12118 Comm: syz.2.2264 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0 [ 212.225090][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 212.235335][T12118] ================================================================== [ 212.279762][T11749] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 14: comm syz-executor: path /17/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0 [ 212.317867][T11749] VFS: Lookup of '.' in ext4 loop2 would have caused loop [ 212.329176][T11749] VFS: Lookup of '.' in ext4 loop2 would have caused loop [ 212.850214][T11749] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.863347][ T4283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.903331][ T4283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.952970][ T4283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.002199][ T4283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.074110][ T4283] bridge_slave_1: left allmulticast mode [ 213.080065][ T4283] bridge_slave_1: left promiscuous mode [ 213.086268][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.095466][ T4283] bridge_slave_0: left allmulticast mode [ 213.101175][ T4283] bridge_slave_0: left promiscuous mode [ 213.106940][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.221494][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.233800][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.244261][ T4283] bond0 (unregistering): Released all slaves [ 213.353881][ T4283] hsr_slave_0: left promiscuous mode [ 213.359798][ T4283] hsr_slave_1: left promiscuous mode [ 213.365490][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.373845][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.383404][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.396946][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.408068][ T4283] veth1_macvtap: left promiscuous mode [ 213.414216][ T4283] veth0_macvtap: left promiscuous mode [ 213.420939][ T4283] veth1_vlan: left promiscuous mode [ 213.426593][ T4283] veth0_vlan: left promiscuous mode [ 213.522685][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 213.533862][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 214.062231][T11801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.074996][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.382893][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.452582][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.532669][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.614003][ T28] bridge_slave_1: left allmulticast mode [ 215.619866][ T28] bridge_slave_1: left promiscuous mode [ 215.625495][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.634199][ T28] bridge_slave_0: left allmulticast mode [ 215.640258][ T28] bridge_slave_0: left promiscuous mode [ 215.646109][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.741804][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.753682][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.766149][ T28] bond0 (unregistering): Released all slaves [ 215.861430][ T28] hsr_slave_0: left promiscuous mode [ 215.867136][ T28] hsr_slave_1: left promiscuous mode [ 215.875049][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.883447][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.892231][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.899906][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.910340][ T28] veth1_macvtap: left promiscuous mode [ 215.916183][ T28] veth0_macvtap: left promiscuous mode [ 215.922292][ T28] veth1_vlan: left promiscuous mode [ 215.927539][ T28] veth0_vlan: left promiscuous mode [ 216.022197][ T28] team0 (unregistering): Port device team_slave_1 removed [ 216.035119][ T28] team0 (unregistering): Port device team_slave_0 removed [ 216.371146][ T28] IPVS: stop unused estimator thread 0...