last executing test programs: 11.792695251s ago: executing program 0 (id=545): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) unshare(0x20400) unshare(0x4020000) (fail_nth: 12) 11.766179433s ago: executing program 0 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="80000000100039042abd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="03000000c310060060001280080001007369740054000280080001009a"], 0x80}, 0x1, 0x0, 0x2000000000000000, 0x8000}, 0x4008040) 11.734806566s ago: executing program 0 (id=547): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000400000000"], &(0x7f0000000180)='syzkaller\x00', 0x8}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'veth1_vlan\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6}, 0x10) socket$inet(0x2, 0x80000, 0x2) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 10.878272488s ago: executing program 0 (id=554): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008000000000050000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', r1}, 0x90) 10.769635867s ago: executing program 0 (id=555): pipe(&(0x7f0000000080)) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000dc0)="d0b4163e96457321d877d01ac22cf3078c7b0008", 0x14, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r3, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x1f}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.631174022s ago: executing program 0 (id=565): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000980)={[{@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0xd775}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0xfb, 0x496, &(0x7f0000000f40)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000e80301005c000000000600000000000a14000000ea03010000000000000000000000000a"], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e1e, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000003463ad8c17560000000000000100000024060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01000000000000005773ca440000"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x24, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xf6, 0x479, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDv3E5Ly+NXfogPELQKRuKjpeUhCzcaTVxoNNEFxlWdFoIUamhNhBBFFxjjwpC4Ny5N/Atc6caoKxO3uDckxLABXY05c++l7TBTWjq0xfl8kgvn3HuHc7733DNz7jkzBNC1htIflYjNEXE5IgYjotp8wlD+141r52t/Xztfq0S9/uZflfSyuH7tfK34JxpbsinfUa8X+Q0tyr34TsT41NTkmSI/Mnvq/ZGZs+eePXFq/Pjk8cnTY0eOHDywu+/w2KGOxJniur7zo+ldO155+9JrtaOX3v3lu1TfzcXxMo5OGsqvbktPdLqwNbZlXrpSXcOKsCyp3XqL7XIMRk8M3Dw2GC9/uqaVA+62aqvP58KFOvAflgbqQDcqP+jT82+5rdK4Y124+kI+4ZHivlFs+ZFqZMU5vU3Pt53UHxFHL/zzddriLs1DAADM90Ma/zzTavyXxQPzzvtfsYayNSL+HxHbIuK+iNgeEfdHNM59MCIeWmb5zSskt45/sisLsvWeZZawuDT+e75Y21o4/itHf7G1p8htacTfWzl2Ympyf3FN9kXvhpQfXfCShX586fcvm/d9UUyzD80b/6Utlb8wwuxK8wTdxPjs+Mojz139JGJntVX8lZvrgJWI2BERO++wjBNPfbur3bFW8Zdj4dvqwDpT/ZuIJ/P2vxBN8ZcqbdcnR587PHZopD+mJvePlHfFrX797eIb7cpfUfwdkNp/Y8v7P48/PSNW+iNmzp472VivnVl+GRf/+KxWaXNs+23jv/X+r+2N6Ku81Uj3Ffs+HJ+dPTOa9r+asgML9o/NvbbMl+en+PftmYt/POb6/7b88axxJR6OiHQT746IRyLi0aLtHouIxyNizyLx//zi3vfaHWvf/ovMyndQin9ikfZPb3kpNdf+y0/0nPzp+3bl15fU/gcbqX3FnqW8/y21giu5dgAAAHCvyBrfga9kwzfTWTY8nH+Hf3tszKamZ2afPjb9wemJ/LvyW6M3K2e6BufNh44Wc8Nlfqwpf6CYN/6qZ6CRH65NT02sdfDQ5Ta16f/Jn51dagHWI7/Xgu6l/0P30v+he+n/0L30f+hSfa13f7za9QDWxPI///vvSj2A1Wf8D91L/4fupf9DV2r72/hsRT/5v1cT1fVRjZaJgfVRjTIR2bqoRucSr3+ed4n1Up8yUV3yf2Zxh4kNLQ+t9TsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//5h+3n0=") socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x26e1, 0x0) close(r9) 5.935651992s ago: executing program 2 (id=605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x5e, &(0x7f0000000040)={[{@data_err_ignore}, {@usrquota}]}, 0x2, 0x455, &(0x7f0000000380)="$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") chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000200)=""/197, 0xc5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x5e, &(0x7f0000000040)={[{@data_err_ignore}, {@usrquota}]}, 0x2, 0x455, &(0x7f0000000380)="$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") (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) getdents(r1, &(0x7f0000000200)=""/197, 0xc5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) (async) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) (async) 5.83528934s ago: executing program 2 (id=606): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00400300000000003000128009000100766c616e000000002000028006000100000000000c0002000a0000001b0000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x60}}, 0x0) 5.739265009s ago: executing program 2 (id=607): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a008080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2508, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = io_uring_setup(0x168e, &(0x7f0000000180)) close_range(r3, r3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f00000004c0)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x4}}, 0x10, 0x0}, 0xd1) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000d200000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r11, 0x0, r10, 0x0, 0x6, 0x0) dup3(r9, r10, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r10, 0x4, 0x7c00) dup3(r11, r10, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000020acb"], 0x14}}, 0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000040)={{{0x4, 0x1}}, 0x71, 0x8, &(0x7f0000000380)="ff6c07bd518d6f221d4e577bcc421a65b3df117dbf649aef7b96c69ef8e6044585f01b8643df2302e8b3d4df19c2d4dc8f073390dac2d8277a978fd50a5d40f814602904e6397aa2e0040859512b5727b04c9fd84f35d4ac2a21933eb3a59bae69c92d4f64ce8c259d675947a8ca8b8fa0"}) 5.040449407s ago: executing program 3 (id=612): syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) 4.801778367s ago: executing program 2 (id=616): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@user_xattr}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@orlov}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r2, r1, 0x0, 0x8000000d) 4.692208666s ago: executing program 2 (id=619): pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100efff08000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.336137846s ago: executing program 2 (id=620): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000001800610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") 3.113308609s ago: executing program 4 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000030400000000000fff0000007400", @ANYRES32=r2, @ANYBLOB="00000000031201004c0012800b00010062726964676500003c0002800800050001000000060027"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.062907853s ago: executing program 4 (id=626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104d000000000095"], 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/52, 0xfffffdef) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) socket$can_raw(0x1d, 0x3, 0x1) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14957e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r4, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000f400000000000fe7ff000c00078008000200f7"], 0x20}, 0x1, 0x0, 0x0, 0x28890}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) dup3(r2, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7f}, 0x10}, 0x90) r7 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="4762f10c09753ddae88f67c7", 0xc}], 0x1}, 0x48040) 2.98172547s ago: executing program 4 (id=628): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000c40000000000000000400085000000aa00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x90) 2.98157015s ago: executing program 4 (id=629): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@user_xattr}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@orlov}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r2, r1, 0x0, 0x8000000d) 2.942267813s ago: executing program 4 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b245d542fcc7c84000000000000000000000000050001000700100005000400000000000c000780080006000000000015000300686173683a69702c706f72742c6e65740000000005000500020000000506000000000000"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b245d542fcc7c84000000000000000000000000050001000700100005000400000000000c000780080006000000000015000300686173683a69702c706f72742c6e65740000000005000500020000000506000000000000"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x11, 0x8008, 0x6, 0x0, 0x462, 0xffffffffffffffff, 0xe53d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x2}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x4) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000001800000000000d000000840000f3000000000802000000000000006100"/54], &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x2}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000001800000000000d000000840000f3000000000802000000000000006100"/54], &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x2}, 0x20) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000400)=[{0x7, 0x0, 0x0, 0x8000e4}, {0x3ff, 0x9, 0x2, 0xc}, {0x7, 0xb, 0x3, 0x85b}]}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="94dd53cd2bd61b21508170f7543eeda45dfb763d557c8dc8267bbb85f537c95b025c499ede1542332b2cffbd1d835a9cb1fad9978fc48238654b4ebf360ea5fe55f217a3a9b7c25ccfe4bfcafb3ffcefcc80e1af74d211cbf531ef3b87386c4f54c9c025a3f01221bd2f7104b3e575b21f3af06c4bc8adc4c2b8ba8d1006b8c605071609c4329d35f383d4798c609cc7cf3e8e7a83f001aff76447a0e3f95bf6e5419973b6f1034bdda9d5e9c979ee9b2d834d735eba60a518f55f7ac2fb8df7e48b0dd22f", 0xc5, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)="555095260d51d277df26c231670c12b1e0765acef71ab57a0b0ac0f84bba70db662e95fb442cac3bef876b913565108864ada87da846bdb10b4f83268883b6ff467c865af65b42b6b58234204f562dd082b53db0fcae600d8931506a3d0babaaec419f12d58ce4ea59e517d40f5faeb801f59e9984bfd8a6cf4d794414f207cad93482c2bdd17895b614a7aabaff7847dcff7fa7f3059722fc3e8f7e68af86c7f8e3ff13860316870325972735c6b25893135c308a73c835", 0xb8}, {&(0x7f0000000180)="54ca73ee207468e07511775cd7b3b496", 0x10}, {&(0x7f0000000800)="1e95cea57a973deb091faa67cdcf19e2fa5af388ade2633024eccecb3208c9c324559a097c2cbfed9f7ac341a1a0cb47917449e4e096b8c217b471", 0x3b}, {&(0x7f0000001300)="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", 0x5ac}], 0x4}, 0x40410f1) sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000e00)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000e80)}, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x6463, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x401, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffc}, 0x0, 0x0, r2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x401, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffc}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x11000, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x11000, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x18, 0x1, 0x4, &(0x7f0000000000)) (async) socketpair(0x18, 0x1, 0x4, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x1, 0x8, 0x30, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.104658114s ago: executing program 1 (id=636): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xa02714, &(0x7f0000000340)={[], [{@fowner_lt}]}, 0xff, 0x48a, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000180)=ANY=[], 0x2c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.062431067s ago: executing program 1 (id=637): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="28000020e261d06fea131669e5c52f06ced175804fb65476c3a64f08690927d80bafe3e2c4c4a0d895ca07c449ccc64853364efcfc56bba600cf67ca919c016700776aedc1e9c7ea733793a85875419e78cd46b061b324b0ee7263b3f07275e7e62452c5d668ee1a1686244727c0f2fc2cc5da33c59a4236835524644f21ff9e8d0c", @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf250400000014000600ff010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x90) perf_event_open(&(0x7f0000000180)={0x760407e01d572d0, 0x80, 0x42, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9210, 0x1, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0), &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}]}, 0x1, 0xb80, &(0x7f00000017c0)="$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") ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4001}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, 0x0, 0x1e}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) socket(0x26, 0x800, 0x8001) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x810) openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)={0x48c000, 0x10a, 0x10}, 0x18) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0xb0, 0x200) readlinkat(r4, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0)=""/83, 0x53) fcntl$setstatus(r3, 0x4, 0x0) 1.156870293s ago: executing program 1 (id=638): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) unshare(0x20400) unshare(0x4020000) (fail_nth: 13) 877.792536ms ago: executing program 1 (id=639): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@user_xattr}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@orlov}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r2, r1, 0x0, 0x8000000d) 797.770693ms ago: executing program 1 (id=640): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getgid() io_uring_setup(0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0000000000000f0014001a80100004800c00"], 0x34}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r8 = socket(0x1, 0x803, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) pipe2$9p(&(0x7f0000000240), 0x80080) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) getsockname$packet(r12, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300fe80000000000000000000000000000008000a00", @ANYRES32], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x94}}, 0x0) 467.366191ms ago: executing program 4 (id=641): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@errors_continue}, {@noauto_da_alloc}, {@orlov}, {@commit={'commit', 0x3d, 0x6}}, {@norecovery}, {@bh}]}, 0x1, 0x444, &(0x7f00000002c0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgICoeSZOW0gMXEEgcQEKCQzmGJK1K3QY1QaJVBQGhckSVuCOOSPwFnOCCgBMSV7ijShXKpYXTorV3E8exk9h5OMWfj7TOzO6sZ77eHXt2JxtAzxrOXpKIfRHxe0QM1rLLCwzX/txduD7598L1ySTS9K2/kmq5OwvXJ4uixX57i0xfROmzJI40qXf26rWLE5XK9JU8Pzp36f3R2avXnrtwaeL89Pnpy+Nnzpw6OfbC6fHnNyXOLK47hz+aOXrotXduvjF59ua7P3+bFPE3xNFEWm6/yuHVNj6Zpu2/4w62vy6d9HWxIbSlXOum0V/t/4NRjqWDNxivftpsn/ntbCCwZdI0TR9ovXk+Bf7Dkuh2C4DuKH7os+vfYtmmoceOcPul2gVQFvfdfKlt6YtSXqZ/C69nhyPi7Pw/X2VLrH0fAgBgw77Pxj/PNhv/laL+vtD/8zmUoYi4LyIORMTpiDgYEfdHVMs+GBEPtVl/4yTJyvFP6VZHga1TNv57MZ/bWj7+K0Z/MVTOc/ur8fcn5y5Upk/kn8nx6N+V5cdWqeOHV377otW2+vFftmT1F2PBvB23+nYt32dqYm5iIzHXu/1JxOG+ZvEnizMBSUQciojD63i/NFm57sLT3xxtVX7t+JsaqL5uwrg8/Triqdrxn4+G+AvJ6vOTo/+LyvSJ0eKsWOmXX2+82ar+DuPfNNnx39P0/F+Mfyipn6+dbb+OG3983vKaptPzfyB5e9m6Dyfm5q6MRQwkr9caXb9+vKHc+FL5LP7jx5r3/wOx9EkciYjsJH44Ih6JiEfztj8WEY9HxLFV4v/p5Sfe6zz+rZXFP9XW8V9KDETjmuaJ8sUfv1tW6VA78WfH/1Q1dTxfs57vv/W0q7OzGQAAAO49pYjYF0lpZDFdKo2M1P6H/2DsKVVmZueeOTfzweWp2jMCQ9FfKu50DdbdDx3LL+uL/HhD/mR+3/jL8u5qfmRypjLV7eChx+1t0f8zf3bw0Atwj/G8FvQu/R96l/4PvUv/h97VpP/v7kY7gO3X7Pf/4y60A9h+Df3ftB/0ENf/0Lv0f+hd+j/0pNndsfZD8htOJLHlVUhscyJKO6IZEluU6PY3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOb4NwAA//+0veiJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000180)={[{@jqfmt_vfsv1}, {@acl}]}, 0x25, 0x4ed, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = dup2(r2, r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200142, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) write$cgroup_type(r1, &(0x7f0000000000), 0x180600) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x18, &(0x7f0000000740)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x1, 0x0, 0x3, 0x4, 0x1, 0xffffffffffffff9f, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], 0x0, 0x6, 0x95, &(0x7f0000000800)=""/149, 0x0, 0x57, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xe, 0x328, 0x200}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r6, r6, r0, r0, r1, r5], &(0x7f0000000900)=[{0x5, 0x3, 0x3, 0x3}, {0x3, 0x4, 0xb, 0x4}, {0x5, 0x2, 0x2, 0xb}, {0x2, 0x1, 0xc, 0x8}, {0x5, 0x5, 0x0, 0xa}, {0x2, 0x2, 0x3, 0xc}], 0x10, 0x9}, 0x90) 427.327934ms ago: executing program 3 (id=614): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) iopl(0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1408498, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0xffffffffffff8000}}, {@grpquota}, {@nobarrier}, {@nomblk_io_submit}], [{@measure}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '^@'}}]}, 0xfe, 0x775, &(0x7f00000019c0)="$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") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) mkdir(0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000052c00000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a320000000008000a4000000003280004800800024000000000080001400000000014000300766c616e30"], 0xc0}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) syz_io_uring_setup(0x6a49, &(0x7f0000000480)={0x0, 0x10, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) 393.008187ms ago: executing program 3 (id=642): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x7fffffff) socket$unix(0x1, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004040) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x15) fchdir(r3) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = mq_open(&(0x7f0000001140)='rm\xda\xb6\x03P\x9c9', 0x2, 0x4, 0x0) sendto$inet6(r1, &(0x7f0000000340)="a4ccbc68e2a6f265ccf3b76426d9007c940db2eedb9cadc6b92c50a93aa6cc76fc9d522642506ba89177d3f62befb887b286efea60df929d6a41b2585746af08890694d5c0994ecb2a449a7042487e8e3c6549c42ea5d16b5a3a4347b31c59581d11f0d5498a09ffef16e9b3ef0aea8dce439cb947fca172efb771f9e2fa528a8c278492ed42deb5abb06a5a593c569995982dcfe816b8e8c93f56cfafd3091688b2e64fc275049db45e9556447eb886164310aaf97a81975fe6534f0c73dd6885d2de0afc6eecbbf1d0dac7621f801867e9f749cd8423bcd59f2f056d42de078d9b5d780688ade0e6a978a2a622e1b23e45d711", 0xf4, 0x40040, &(0x7f0000000140)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0xe7}, 0x1c) mq_notify(r6, &(0x7f0000001200)={0x0, 0x3f, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000280012800b00010067656e6576650000180002800400060008000b400000000006000500"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xfda}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) sendto$inet6(r2, &(0x7f0000000100)="ea", 0x1, 0x3000c004, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) 312.220084ms ago: executing program 1 (id=643): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 103.317561ms ago: executing program 3 (id=645): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) open(0x0, 0x141a42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x4, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) 77.482683ms ago: executing program 3 (id=646): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b00010067726574617000003400028008000700ffffffff05000800080000000500080003000000050009000800000005000800ff000000060010004e20000008000a00", @ANYRES32=r3], 0x6c}}, 0x0) (async) r5 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x6256, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=647): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@mcast1, 0x0, 0x33}, @in=@private}, 0x0, 0x5dfe}, [@XFRMA_SET_MARK_MASK={0x8}, @etimer_thresh={0x8}]}, 0x108}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb01001000000000000000460000004600000008000000050000000100000f02000000050000000000000000000000e457000000000400000d000000000b0000000300000008000000000000000e00000003030069a863c0e939be66ba2a2cacd5d7e9f363892ac414f1000d00000081c3be3e0000f5b2c8374f97170500000000000000006161002e00ec0754b6eee445918eb77d020741833ed68141762a3add4c081c3b5197b60df3e1b7f4d3b68521b853c2d4bffb04204817df91b00415a5a6fa01b885693abce3eac0797e0144b9d39506ee067dc45ab7cfb2c19787beb02f55945d26f6e8f1d26cc65860433131ad36d1bbb021b183a3fe66adc84fccf36838a7c87a8a3ce4b7cccb833ed70d4606da97e230d1cf4847833648ffa5a199eb1561d782599d070e0fea950b0fc3fe85c687407b07f0253c350da4f4"], &(0x7f0000000480)=""/116, 0x68, 0x74, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00a0b42c2900005ce180080001006206000000d934f92f3307363da87e96e4694f2978773a9237e84afd858f1affe2051abaf64dc9bf8bf29d6698e4ccdc06d14e50bae87f3a6de8054f93fd8a43", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000200240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) r7 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="700000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004000128008000100687372003400028008000100", @ANYRES32=r4, @ANYBLOB="0500070001000000050007000100000008000200", @ANYRES32=r10, @ANYBLOB="03000100", @ANYRES32=r4, @ANYBLOB="06000500f9ff000008000500", @ANYRES32=r10, @ANYBLOB="0c090000000f0000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r13, @ANYBLOB="010028057000fcdbdf253b"], 0x398}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000580)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000340)="e6de756fab43d869bab9e66389ca2d6791c3c8b974e5bb45cd231d13671e4c20597a36dcfe58c8acea8ac2cef19d64770bb0f9197dc947a4b4", 0x39}, {&(0x7f0000000380)="274424410f786431f2de0e9cef1d35b74a92e8ee5c9f88d71c2e4b5990", 0x1d}, {&(0x7f0000000640)="3868e5cad8bdafcaa27240f5848991eb9973019c842c3856da71b90b2a3392fd7bf51482bd77e116944b0c4e3a4783910bee5a3f989a7113fc1b1f1aca6369054dc6d638d2a08971594a260b4904369b06aa127b9988ee2016b46773c6909b44d18b8815f2cbd659053c839fb1640c00b8fba3252a9cc9dd2ac6cc5d6786d664bec3169073087f5b658b307d3d3fb140be18bf1b29297712bc0e201ff7b9e483eb4e5687edae98f0", 0xa8}, {&(0x7f0000000700)="84b9a83099ccb9be47fdd4e1ca8c4448fa0aee126a6211f771be5d4a696b09e6110ef46779bc5f6cbe902611fb8f178a77768189277fee1a829aef9829a4379d2f1ae7293b7d57ada6e18433a78806f0b34a03832269747a705711b9d4abb56b3a30bdb0b6c8ee4eb1c05b4aa6727e92275b025c051bdee8312bac3bb82befadb181be91c9e8acd1aaf266d2ca94576794d57983d695e4", 0x97}, {&(0x7f0000000540)="10f7771928f0814d1ffcb7c188923f5d20395189ee89", 0x16}, {&(0x7f00000007c0)="4ed4696534f909342b325597653bb1a30a4e2f4ff9b88a496fd85810c8ee940853adccad0f204fcae77c1a88eb136edc1617203a636a9091aa49722f820f38ebf31ebd81b1d7bb2a84670323995e0cfc3e77561c14867f7d7aadc8fa62365b9044c71ae015eff37bce736720666c089f606264db6d6d2cbaa67520f6eee093b6e8c0f37755d6ae29b1bac477985bffee114eabd960a670b8f5dd4e55deada8af180c5bd691948457f3deea6170aa6c31670ced97dc0c3320ca2eba66fa385e4dd018d5150fa72bf73749fe3b2a7db21ed04ea37f56f3e124c6b9827393613d83dbb80d0ceee1", 0xe6}], 0x6, &(0x7f0000000a40)="a8a2f456b20b31cd687dd35d1f9fe713a66582813039c8351fa7526afd0deadcc3c9e40e5125d2e7476a01b825418b06a30ea38f6f44a0864343d1b6306b5f0423655e033618995e9c26eda8bbc1dee3983aa3b677d7e164def773350a1a030393983bcb146f86f9c8cffc4a5fa94b9a1b6a9760eea8401003de32075255d780ea4b9a139b6790fcc2be063f8bbc58f93a337dcdf2df041f257b6be176ac150c0051732b2045f7a7d8b3927eff263c6ec8e5968f14e371fc9d02604e5409a8d2c7e6d997", 0xc4, 0x1}, 0x24008010) close_range(r14, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ongly recommended to keep mac addresses unique to avoid problems! [ 54.205548][ T4890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.213154][ T40] bridge_slave_1: left allmulticast mode [ 54.218904][ T40] bridge_slave_1: left promiscuous mode [ 54.224628][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.232584][ T40] bridge_slave_0: left allmulticast mode [ 54.238257][ T40] bridge_slave_0: left promiscuous mode [ 54.244048][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.271737][ T4872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.377496][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.387924][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.398061][ T40] bond0 (unregistering): Released all slaves [ 54.412466][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 54.421411][ T5218] tipc: Started in network mode [ 54.426406][ T5218] tipc: Node identity , cluster identity 8 [ 54.438988][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.446061][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.472056][ T4890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.480873][ T4890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.489864][ T4890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.498698][ T4890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.527074][ T5225] syzkaller1: entered promiscuous mode [ 54.532587][ T5225] syzkaller1: entered allmulticast mode [ 54.574786][ T40] hsr_slave_0: left promiscuous mode [ 54.580696][ T40] hsr_slave_1: left promiscuous mode [ 54.587576][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.595017][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.604046][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.611976][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.626987][ T40] veth1_macvtap: left promiscuous mode [ 54.632479][ T40] veth0_macvtap: left promiscuous mode [ 54.638029][ T40] veth1_vlan: left promiscuous mode [ 54.643241][ T40] veth0_vlan: left promiscuous mode [ 54.724489][ T40] team0 (unregistering): Port device team_slave_1 removed [ 54.735419][ T40] team0 (unregistering): Port device team_slave_0 removed [ 54.909136][ T4997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.972683][ T5270] loop1: detected capacity change from 0 to 256 [ 54.990448][ T5270] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.041235][ T5270] loop1: detected capacity change from 256 to 64 [ 55.062992][ T5270] FAT-fs (loop1): Directory bread(block 44) failed [ 55.072432][ T4997] veth0_vlan: entered promiscuous mode [ 55.078044][ T5270] FAT-fs (loop1): Directory bread(block 44) failed [ 55.085792][ T5270] FAT-fs (loop1): Directory bread(block 44) failed [ 55.090353][ T4997] veth1_vlan: entered promiscuous mode [ 55.097999][ T5270] FAT-fs (loop1): FAT read failed (blocknr 32) [ 55.107561][ T29] audit: type=1400 audit(2000000028.499:584): avc: denied { connect } for pid=5268 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.117848][ T4997] veth0_macvtap: entered promiscuous mode [ 55.140672][ T4997] veth1_macvtap: entered promiscuous mode [ 55.155875][ T29] audit: type=1400 audit(2000000028.539:585): avc: denied { bind } for pid=5268 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.176174][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.186723][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.196541][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.207017][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.216835][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.220966][ T5284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.408'. [ 55.227244][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.237041][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.246034][ T5284] netlink: 272 bytes leftover after parsing attributes in process `syz.4.408'. [ 55.255995][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.272583][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.282394][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.292963][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.293171][ T5284] netlink: 72 bytes leftover after parsing attributes in process `syz.4.408'. [ 55.302756][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.302769][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.304169][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.313111][ T4679] FAT-fs (loop1): Directory bread(block 40) failed [ 55.349516][ T5139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.356481][ T4679] FAT-fs (loop1): Directory bread(block 41) failed [ 55.365735][ T5139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.376621][ T4679] FAT-fs (loop1): Directory bread(block 42) failed [ 55.379112][ T4997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.392055][ T4997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.393368][ T4679] FAT-fs (loop1): Directory bread(block 36) failed [ 55.400810][ T4997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.416059][ T4997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.427697][ T5139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.439698][ T5139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.448103][ T5289] netlink: 420 bytes leftover after parsing attributes in process `syz.4.411'. [ 55.507066][ T5293] vlan2: entered allmulticast mode [ 55.512229][ T5293] bond0: entered allmulticast mode [ 55.517538][ T5293] bond_slave_0: entered allmulticast mode [ 55.523283][ T5293] bond_slave_1: entered allmulticast mode [ 55.533302][ T5293] bond0: left allmulticast mode [ 55.538372][ T5293] bond_slave_0: left allmulticast mode [ 55.543888][ T5293] bond_slave_1: left allmulticast mode [ 55.572133][ T5302] FAULT_INJECTION: forcing a failure. [ 55.572133][ T5302] name failslab, interval 1, probability 0, space 0, times 0 [ 55.584833][ T5302] CPU: 1 UID: 0 PID: 5302 Comm: syz.2.395 Not tainted 6.11.0-rc3-syzkaller-00271-g85652baa895b #0 [ 55.589302][ T5139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.595418][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.595432][ T5302] Call Trace: [ 55.595439][ T5302] [ 55.595445][ T5302] dump_stack_lvl+0xf2/0x150 [ 55.595549][ T5302] dump_stack+0x15/0x20 [ 55.610046][ T5139] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.612230][ T5302] should_fail_ex+0x229/0x230 [ 55.618626][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.623071][ T5302] ? skb_clone+0x154/0x1f0 [ 55.627279][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.633769][ T5302] should_failslab+0x8f/0xb0 [ 55.651647][ T5139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.656992][ T5302] kmem_cache_alloc_noprof+0x4c/0x290 [ 55.661620][ T5139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.672001][ T5302] skb_clone+0x154/0x1f0 [ 55.672036][ T5302] dev_queue_xmit_nit+0x149/0x620 [ 55.681843][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.687769][ T5302] dev_hard_start_xmit+0xcc/0x3f0 [ 55.687796][ T5302] ? validate_xmit_skb+0x658/0x8d0 [ 55.692038][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.697012][ T5302] __dev_queue_xmit+0xfd4/0x1fe0 [ 55.697039][ T5302] ? __dev_queue_xmit+0x161/0x1fe0 [ 55.731811][ T5302] ? should_fail_ex+0xd7/0x230 [ 55.736585][ T5302] ? __skb_clone+0x2d0/0x2f0 [ 55.741201][ T5302] __netlink_deliver_tap+0x39f/0x4c0 [ 55.746504][ T5302] netlink_unicast+0x64a/0x670 [ 55.751269][ T5302] netlink_sendmsg+0x5cc/0x6e0 [ 55.756212][ T5302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.761496][ T5302] __sock_sendmsg+0x140/0x180 [ 55.766354][ T5302] ____sys_sendmsg+0x312/0x410 [ 55.771183][ T5302] __sys_sendmsg+0x1e9/0x280 [ 55.775842][ T5302] __x64_sys_sendmsg+0x46/0x50 [ 55.780615][ T5302] x64_sys_call+0x2689/0x2d60 [ 55.785343][ T5302] do_syscall_64+0xc9/0x1c0 [ 55.789853][ T5302] ? clear_bhb_loop+0x55/0xb0 [ 55.794535][ T5302] ? clear_bhb_loop+0x55/0xb0 [ 55.799280][ T5302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.805253][ T5302] RIP: 0033:0x7fec680e9e79 [ 55.809775][ T5302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.829520][ T5302] RSP: 002b:00007fec66d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.837947][ T5302] RAX: ffffffffffffffda RBX: 00007fec68285f80 RCX: 00007fec680e9e79 [ 55.845952][ T5302] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 55.853920][ T5302] RBP: 00007fec66d67090 R08: 0000000000000000 R09: 0000000000000000 [ 55.862006][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.869980][ T5302] R13: 0000000000000000 R14: 00007fec68285f80 R15: 00007fff20de3f08 [ 55.878047][ T5302] [ 55.941651][ T5139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.980078][ T29] audit: type=1400 audit(2000000029.369:586): avc: denied { read } for pid=5338 comm="syz.2.415" path="socket:[10784]" dev="sockfs" ino=10784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.011908][ T5348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.417'. [ 56.028489][ T5348] FAULT_INJECTION: forcing a failure. [ 56.028489][ T5348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.028798][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.041547][ T5348] CPU: 1 UID: 0 PID: 5348 Comm: syz.4.417 Not tainted 6.11.0-rc3-syzkaller-00271-g85652baa895b #0 [ 56.062406][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.072458][ T5348] Call Trace: [ 56.073345][ T5351] netlink: 35 bytes leftover after parsing attributes in process `syz.2.415'. [ 56.075721][ T5348] [ 56.075729][ T5348] dump_stack_lvl+0xf2/0x150 [ 56.075780][ T5348] dump_stack+0x15/0x20 [ 56.096423][ T5348] should_fail_ex+0x229/0x230 [ 56.101236][ T5348] should_fail+0xb/0x10 [ 56.105396][ T5348] should_fail_usercopy+0x1a/0x20 [ 56.110425][ T5348] _copy_to_user+0x1e/0xa0 [ 56.114842][ T5348] simple_read_from_buffer+0xa0/0x110 [ 56.120229][ T5348] proc_fail_nth_read+0xff/0x140 [ 56.125223][ T5348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.130806][ T5348] vfs_read+0x1a2/0x6e0 [ 56.134969][ T5348] ? __rcu_read_unlock+0x4e/0x70 [ 56.139904][ T5348] ? __fget_files+0x1da/0x210 [ 56.144581][ T5348] ksys_read+0xeb/0x1b0 [ 56.148866][ T5348] __x64_sys_read+0x42/0x50 [ 56.153373][ T5348] x64_sys_call+0x27d3/0x2d60 [ 56.158071][ T5348] do_syscall_64+0xc9/0x1c0 [ 56.162597][ T5348] ? clear_bhb_loop+0x55/0xb0 [ 56.167258][ T5348] ? clear_bhb_loop+0x55/0xb0 [ 56.171931][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.177855][ T5348] RIP: 0033:0x7f296c8588bc [ 56.182292][ T5348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 56.202042][ T5348] RSP: 002b:00007f296b4d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.210559][ T5348] RAX: ffffffffffffffda RBX: 00007f296c9f5f80 RCX: 00007f296c8588bc [ 56.218531][ T5348] RDX: 000000000000000f RSI: 00007f296b4d70a0 RDI: 0000000000000005 [ 56.226479][ T5348] RBP: 00007f296b4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.234678][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.242779][ T5348] R13: 0000000000000000 R14: 00007f296c9f5f80 R15: 00007ffc4a1a01e8 [ 56.251057][ T5348] [ 56.258369][ T5351] team0: Device ipvlan0 failed to register rx_handler [ 56.332969][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.345076][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 56.377853][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.396063][ T5139] veth0_vlan: entered promiscuous mode [ 56.435518][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.447358][ T5139] veth1_vlan: entered promiscuous mode [ 56.466436][ T29] audit: type=1400 audit(2000000029.859:587): avc: denied { name_bind } for pid=5372 comm="syz.4.422" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.484257][ T5139] veth0_macvtap: entered promiscuous mode [ 56.516986][ T5139] veth1_macvtap: entered promiscuous mode [ 56.529410][ T29] audit: type=1326 audit(2000000029.919:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.3.429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1b8969e79 code=0x0 [ 56.534443][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.559810][ T5388] program syz.4.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.563110][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.582219][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.592652][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.602489][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.612984][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.623109][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.633602][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.644420][ T29] audit: type=1400 audit(2000000029.949:589): avc: denied { write } for pid=5372 comm="syz.4.422" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.644819][ T5139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.728622][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.739099][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.748926][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.759352][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.769185][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.779624][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.789453][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.799868][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.811135][ T5139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.824029][ T5139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.832791][ T5139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.841620][ T5139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.850363][ T5139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.863096][ T5352] chnl_net:caif_netlink_parms(): no params data found [ 56.905923][ T28] bridge_slave_1: left allmulticast mode [ 56.911678][ T28] bridge_slave_1: left promiscuous mode [ 56.917492][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.928847][ T28] bridge_slave_0: left allmulticast mode [ 56.934562][ T28] bridge_slave_0: left promiscuous mode [ 56.940433][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.057796][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.069211][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.079757][ T28] bond0 (unregistering): Released all slaves [ 57.153454][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.160630][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.168279][ T5352] bridge_slave_0: entered allmulticast mode [ 57.181341][ T5352] bridge_slave_0: entered promiscuous mode [ 57.188771][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.195861][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.203146][ T5352] bridge_slave_1: entered allmulticast mode [ 57.210443][ T5352] bridge_slave_1: entered promiscuous mode [ 57.218623][ T28] hsr_slave_0: left promiscuous mode [ 57.224233][ T28] hsr_slave_1: left promiscuous mode [ 57.230462][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.237902][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.246064][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.253477][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.264276][ T28] veth1_macvtap: left promiscuous mode [ 57.269901][ T28] veth0_macvtap: left promiscuous mode [ 57.275416][ T28] veth1_vlan: left promiscuous mode [ 57.280627][ T28] veth0_vlan: left promiscuous mode [ 57.394831][ T28] team0 (unregistering): Port device team_slave_1 removed [ 57.416594][ T28] team0 (unregistering): Port device team_slave_0 removed [ 57.527311][ T5429] netlink: 576 bytes leftover after parsing attributes in process `syz.3.433'. [ 57.566371][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.603414][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.633688][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.674935][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.685822][ T5352] team0: Port device team_slave_0 added [ 57.695564][ T5352] team0: Port device team_slave_1 added [ 57.718771][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.725860][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.751759][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.765800][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.772882][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.799048][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.858298][ T5352] hsr_slave_0: entered promiscuous mode [ 57.864264][ T5352] hsr_slave_1: entered promiscuous mode [ 57.871628][ T5352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.880728][ T5352] Cannot create hsr debugfs directory [ 57.994755][ T5472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.439'. [ 58.004166][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.011383][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.153967][ T5486] loop0: detected capacity change from 0 to 2048 [ 58.177955][ T5486] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 58.288160][ T5507] loop3: detected capacity change from 0 to 764 [ 58.292315][ T5352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.303654][ T5507] rock: directory entry would overflow storage [ 58.309891][ T5507] rock: sig=0x4654, size=5, remaining=4 [ 58.328092][ T5508] team0: Port device syz_tun added [ 58.334342][ T5352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.345877][ T5352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.361767][ T5352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.404419][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.414493][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.449602][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.481351][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.493999][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.501162][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.518645][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.525844][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.546694][ T5547] vlan2: entered promiscuous mode [ 58.552330][ T5547] bond0: entered promiscuous mode [ 58.557389][ T5547] bond_slave_0: entered promiscuous mode [ 58.563280][ T5547] bond_slave_1: entered promiscuous mode [ 58.570186][ T5547] bond0: left promiscuous mode [ 58.575156][ T5547] bond_slave_0: left promiscuous mode [ 58.580651][ T5547] bond_slave_1: left promiscuous mode [ 58.593492][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 58.593504][ T29] audit: type=1400 audit(2000000031.979:600): avc: denied { ioctl } for pid=5530 comm="syz.4.454" path="socket:[11102]" dev="sockfs" ino=11102 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.630037][ T29] audit: type=1400 audit(2000000032.019:601): avc: denied { shutdown } for pid=5530 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 58.731063][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.738604][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.751828][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.752406][ T5569] loop4: detected capacity change from 0 to 1764 [ 58.774140][ T5569] iso9660: Unknown parameter 'g0x0000000000000000' [ 58.825610][ T5352] veth0_vlan: entered promiscuous mode [ 58.833807][ T5352] veth1_vlan: entered promiscuous mode [ 58.849303][ T5352] veth0_macvtap: entered promiscuous mode [ 58.856623][ T5352] veth1_macvtap: entered promiscuous mode [ 58.866879][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.877341][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.887285][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.897700][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.907499][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.918037][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.927839][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.938298][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.949257][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.962210][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.972778][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.972911][ T5581] loop2: detected capacity change from 0 to 512 [ 58.982668][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.999416][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.009596][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.020222][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.030269][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.040936][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.052485][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.065123][ T5352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.073916][ T5352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.082748][ T5352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.091564][ T5352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.110653][ T29] audit: type=1400 audit(2000000032.499:602): avc: denied { map } for pid=5582 comm="syz.2.458" path="socket:[11202]" dev="sockfs" ino=11202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 59.134090][ T5583] loop2: detected capacity change from 0 to 256 [ 59.141569][ T5583] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.174735][ T5588] syzkaller1: entered promiscuous mode [ 59.180455][ T5588] syzkaller1: entered allmulticast mode [ 59.372288][ T29] audit: type=1400 audit(2000000032.759:603): avc: denied { create } for pid=5601 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.378683][ T5599] loop0: detected capacity change from 0 to 8192 [ 59.397343][ T5602] block device autoloading is deprecated and will be removed. [ 59.407381][ T5602] syz.4.463: attempt to access beyond end of device [ 59.407381][ T5602] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 59.421860][ T29] audit: type=1400 audit(2000000032.809:604): avc: denied { listen } for pid=5601 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.425689][ T5599] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.452848][ T5602] __nla_validate_parse: 8 callbacks suppressed [ 59.452921][ T5602] netlink: 18 bytes leftover after parsing attributes in process `syz.4.463'. [ 59.472190][ T5602] bridge0: entered promiscuous mode [ 59.479099][ T5602] bridge0: left promiscuous mode [ 59.517532][ T29] audit: type=1400 audit(2000000032.909:605): avc: denied { map } for pid=5607 comm="syz.0.465" path="socket:[11252]" dev="sockfs" ino=11252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.540798][ T29] audit: type=1400 audit(2000000032.909:606): avc: denied { read } for pid=5607 comm="syz.0.465" path="socket:[11252]" dev="sockfs" ino=11252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.580540][ T29] audit: type=1326 audit(2000000032.969:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bdb5e9e79 code=0x0 [ 59.626671][ T29] audit: type=1400 audit(2000000033.019:608): avc: denied { name_bind } for pid=5611 comm="syz.2.467" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 59.627096][ T5614] loop4: detected capacity change from 0 to 128 [ 59.654454][ T5614] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 59.665327][ T5614] loop4: detected capacity change from 0 to 128 [ 59.671781][ T5614] vfat: Unknown parameter '' [ 59.679208][ T29] audit: type=1400 audit(2000000033.069:609): avc: denied { write } for pid=5613 comm="syz.4.468" path="socket:[11264]" dev="sockfs" ino=11264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 59.715477][ T5612] loop2: detected capacity change from 0 to 2048 [ 59.727658][ T5612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.739930][ T5612] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.767491][ T5622] loop4: detected capacity change from 0 to 2048 [ 59.774737][ T4997] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.782087][ T5622] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.469: casefold flag without casefold feature [ 59.796797][ T5622] EXT4-fs (loop4): get root inode failed [ 59.802439][ T5622] EXT4-fs (loop4): mount failed [ 59.841436][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.853347][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.859249][ T5626] loop2: detected capacity change from 0 to 1024 [ 59.886148][ T5626] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.470: bad orphan inode 2097152 [ 59.897239][ T5626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.917351][ T4997] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.014684][ T5639] vlan2: entered promiscuous mode [ 60.087435][ T5641] loop2: detected capacity change from 0 to 128 [ 60.419561][ T5649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 60.433021][ T5649] vlan2: entered promiscuous mode [ 60.439006][ T5649] bond0: entered promiscuous mode [ 60.440329][ T5651] loop0: detected capacity change from 0 to 1024 [ 60.444045][ T5649] bond_slave_0: entered promiscuous mode [ 60.450859][ T5651] EXT4-fs: Ignoring removed orlov option [ 60.456422][ T5649] bond_slave_1: entered promiscuous mode [ 60.466494][ T5651] EXT4-fs: Ignoring removed bh option [ 60.473350][ T5649] bond0: left promiscuous mode [ 60.476432][ T5651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.478182][ T5649] bond_slave_0: left promiscuous mode [ 60.496631][ T5649] bond_slave_1: left promiscuous mode [ 60.525411][ T5139] team0: Port device syz_tun removed [ 60.573808][ T5655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5655 comm=syz.4.481 [ 61.172321][ T5670] FAULT_INJECTION: forcing a failure. [ 61.172321][ T5670] name failslab, interval 1, probability 0, space 0, times 0 [ 61.185181][ T5670] CPU: 0 UID: 0 PID: 5670 Comm: syz.4.488 Not tainted 6.11.0-rc3-syzkaller-00271-g85652baa895b #0 [ 61.195770][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.205814][ T5670] Call Trace: [ 61.209325][ T5670] [ 61.212251][ T5670] dump_stack_lvl+0xf2/0x150 [ 61.216893][ T5670] dump_stack+0x15/0x20 [ 61.221108][ T5670] should_fail_ex+0x229/0x230 [ 61.225928][ T5670] ? hash_ipport_create+0x480/0x9f0 [ 61.231203][ T5670] should_failslab+0x8f/0xb0 [ 61.235787][ T5670] __kmalloc_cache_noprof+0x4b/0x2a0 [ 61.241170][ T5670] hash_ipport_create+0x480/0x9f0 [ 61.246189][ T5670] ? __pfx_hash_ipport_create+0x10/0x10 [ 61.251743][ T5670] ip_set_create+0x359/0x8a0 [ 61.256323][ T5670] ? strnstr+0xf0/0x100 [ 61.260658][ T5670] ? __nla_parse+0x40/0x60 [ 61.265145][ T5670] nfnetlink_rcv_msg+0x4a9/0x570 [ 61.270117][ T5670] netlink_rcv_skb+0x12c/0x230 [ 61.274896][ T5670] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 61.280347][ T5670] nfnetlink_rcv+0x16c/0x15e0 [ 61.285015][ T5670] ? kmem_cache_free+0xd8/0x280 [ 61.289865][ T5670] ? nlmon_xmit+0x51/0x60 [ 61.294302][ T5670] ? __kfree_skb+0x102/0x150 [ 61.298884][ T5670] ? consume_skb+0x57/0x180 [ 61.303375][ T5670] ? nlmon_xmit+0x51/0x60 [ 61.307828][ T5670] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 61.313132][ T5670] ? __dev_queue_xmit+0xb86/0x1fe0 [ 61.318282][ T5670] ? ref_tracker_free+0x3a5/0x410 [ 61.323443][ T5670] ? __dev_queue_xmit+0x161/0x1fe0 [ 61.328544][ T5670] ? __netlink_deliver_tap+0x495/0x4c0 [ 61.333996][ T5670] netlink_unicast+0x599/0x670 [ 61.338808][ T5670] netlink_sendmsg+0x5cc/0x6e0 [ 61.343560][ T5670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.348852][ T5670] __sock_sendmsg+0x140/0x180 [ 61.353539][ T5670] ____sys_sendmsg+0x312/0x410 [ 61.358299][ T5670] __sys_sendmsg+0x1e9/0x280 [ 61.362893][ T5670] __x64_sys_sendmsg+0x46/0x50 [ 61.367729][ T5670] x64_sys_call+0x2689/0x2d60 [ 61.372461][ T5670] do_syscall_64+0xc9/0x1c0 [ 61.376991][ T5670] ? clear_bhb_loop+0x55/0xb0 [ 61.381849][ T5670] ? clear_bhb_loop+0x55/0xb0 [ 61.386517][ T5670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.392425][ T5670] RIP: 0033:0x7f296c859e79 [ 61.396863][ T5670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.416475][ T5670] RSP: 002b:00007f296b4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.425000][ T5670] RAX: ffffffffffffffda RBX: 00007f296c9f5f80 RCX: 00007f296c859e79 [ 61.433063][ T5670] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 61.441082][ T5670] RBP: 00007f296b4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.449125][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.457145][ T5670] R13: 0000000000000000 R14: 00007f296c9f5f80 R15: 00007ffc4a1a01e8 [ 61.465172][ T5670] [ 61.519311][ T5675] loop4: detected capacity change from 0 to 1024 [ 61.528573][ T5677] netlink: 'syz.2.485': attribute type 8 has an invalid length. [ 61.529842][ T5676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 61.556012][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.563337][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.572322][ T5675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.623168][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.492'. [ 61.632171][ T5682] netlink: 272 bytes leftover after parsing attributes in process `syz.3.492'. [ 61.648641][ T5682] netlink: 64 bytes leftover after parsing attributes in process `syz.3.492'. [ 61.694296][ T5687] loop3: detected capacity change from 0 to 512 [ 61.737172][ T5687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.749943][ T5687] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.781868][ T4890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.866933][ T5702] loop3: detected capacity change from 0 to 512 [ 61.896296][ T5702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.908958][ T5702] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.922265][ T5702] sctp: [Deprecated]: syz.3.499 (pid 5702) Use of int in max_burst socket option. [ 61.922265][ T5702] Use struct sctp_assoc_value instead [ 61.948092][ T4890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.977776][ T5706] vlan2: entered promiscuous mode [ 61.982825][ T5706] bond0: entered promiscuous mode [ 61.987872][ T5706] bond_slave_0: entered promiscuous mode [ 61.993583][ T5706] bond_slave_1: entered promiscuous mode [ 61.999458][ T5706] vlan2: entered allmulticast mode [ 62.004559][ T5706] bond0: entered allmulticast mode [ 62.009899][ T5706] bond_slave_0: entered allmulticast mode [ 62.015796][ T5706] bond_slave_1: entered allmulticast mode [ 62.019489][ T5139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.030552][ T5706] bond0: left allmulticast mode [ 62.035464][ T5706] bond_slave_0: left allmulticast mode [ 62.040924][ T5706] bond_slave_1: left allmulticast mode [ 62.046552][ T5706] bond0: left promiscuous mode [ 62.051395][ T5706] bond_slave_0: left promiscuous mode [ 62.057025][ T5706] bond_slave_1: left promiscuous mode [ 62.082741][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.169263][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.193617][ T5728] loop2: detected capacity change from 0 to 512 [ 62.209067][ T5728] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 62.248967][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.269334][ T5739] loop2: detected capacity change from 0 to 1024 [ 62.269788][ T5737] loop3: detected capacity change from 0 to 512 [ 62.280394][ T5739] EXT4-fs: Ignoring removed orlov option [ 62.292376][ T5739] EXT4-fs: Ignoring removed bh option [ 62.298877][ T5737] EXT4-fs: Ignoring removed oldalloc option [ 62.304930][ T5737] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.312173][ T5737] EXT4-fs: dax option not supported [ 62.322440][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.341394][ T5737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63248 sclass=netlink_route_socket pid=5737 comm=syz.3.511 [ 62.415278][ T5712] chnl_net:caif_netlink_parms(): no params data found [ 62.473805][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 62.477082][ T40] bridge_slave_1: left allmulticast mode [ 62.488589][ T40] bridge_slave_1: left promiscuous mode [ 62.494333][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.524725][ T5770] loop1: detected capacity change from 0 to 512 [ 62.531446][ T40] bridge_slave_0: left allmulticast mode [ 62.536424][ T5770] EXT4-fs: Ignoring removed nobh option [ 62.537130][ T40] bridge_slave_0: left promiscuous mode [ 62.537263][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.557863][ T5770] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 62.566739][ T5770] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.516: attempt to clear invalid blocks 2 len 1 [ 62.580773][ T5770] EXT4-fs (loop1): Remounting filesystem read-only [ 62.587609][ T5770] EXT4-fs (loop1): 1 truncate cleaned up [ 62.593862][ T5770] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 62.668787][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.679791][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.689741][ T40] bond0 (unregistering): Released all slaves [ 62.732300][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.739423][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.747907][ T5712] bridge_slave_0: entered allmulticast mode [ 62.754348][ T5712] bridge_slave_0: entered promiscuous mode [ 62.761519][ T5712] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.768641][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.777221][ T5712] bridge_slave_1: entered allmulticast mode [ 62.783706][ T5712] bridge_slave_1: entered promiscuous mode [ 62.814804][ T5712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.832293][ T5794] netlink: 48 bytes leftover after parsing attributes in process `syz.4.520'. [ 62.847650][ T5712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.894200][ T40] hsr_slave_0: left promiscuous mode [ 62.904378][ T40] hsr_slave_1: left promiscuous mode [ 62.918347][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.925858][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.945522][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.952950][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.970770][ T5820] loop4: detected capacity change from 0 to 1024 [ 62.978131][ T5820] EXT4-fs: Ignoring removed orlov option [ 62.980577][ T40] veth1_macvtap: left promiscuous mode [ 62.989309][ T40] veth0_macvtap: left promiscuous mode [ 62.994809][ T40] veth1_vlan: left promiscuous mode [ 62.995742][ T5820] EXT4-fs: Ignoring removed bh option [ 63.000045][ T40] veth0_vlan: left promiscuous mode [ 63.081638][ T40] team0 (unregistering): Port device team_slave_1 removed [ 63.092471][ T40] team0 (unregistering): Port device team_slave_0 removed [ 63.126769][ T5712] team0: Port device team_slave_0 added [ 63.134292][ T5712] team0: Port device team_slave_1 added [ 63.142189][ T5787] dummy0: entered promiscuous mode [ 63.148299][ T5787] dummy0: left promiscuous mode [ 63.175913][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.182880][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.208969][ T5712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.225268][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.232206][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.258221][ T5712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.312931][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 63.324135][ T5712] hsr_slave_0: entered promiscuous mode [ 63.331880][ T5712] hsr_slave_1: entered promiscuous mode [ 63.338014][ T5712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.346764][ T5712] Cannot create hsr debugfs directory [ 63.417131][ T5829] syzkaller1: entered promiscuous mode [ 63.422699][ T5829] syzkaller1: entered allmulticast mode [ 63.509711][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.516865][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.538826][ T5774] bridge_slave_0: entered allmulticast mode [ 63.548969][ T5774] bridge_slave_0: entered promiscuous mode [ 63.606946][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.614021][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.621231][ T5774] bridge_slave_1: entered allmulticast mode [ 63.627628][ T5774] bridge_slave_1: entered promiscuous mode [ 63.675753][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.700348][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.742789][ T5774] team0: Port device team_slave_0 added [ 63.769475][ T5774] team0: Port device team_slave_1 added [ 63.839915][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.846979][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.872951][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.892699][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.899677][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.925801][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.944399][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.976201][ T5774] hsr_slave_0: entered promiscuous mode [ 63.982144][ T5774] hsr_slave_1: entered promiscuous mode [ 63.988107][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.995697][ T5774] Cannot create hsr debugfs directory [ 64.010289][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 64.010300][ T29] audit: type=1326 audit(2000000037.399:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.3.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1b8969e79 code=0x0 [ 64.049331][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.095314][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.145852][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 64.162919][ T5712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.182771][ T5880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.182766][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.207349][ T5712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.216734][ T5712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.238334][ T5712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.250034][ T5774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.294803][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.302087][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.310965][ T5840] bridge_slave_0: entered allmulticast mode [ 64.317327][ T5840] bridge_slave_0: entered promiscuous mode [ 64.342595][ T5774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.359710][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.367080][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.374390][ T5840] bridge_slave_1: entered allmulticast mode [ 64.380845][ T5840] bridge_slave_1: entered promiscuous mode [ 64.411382][ T5774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.423414][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.434012][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.458696][ T5774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.470643][ T5840] team0: Port device team_slave_0 added [ 64.478772][ T5712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.486928][ T5840] team0: Port device team_slave_1 added [ 64.511281][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.518281][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.544253][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.556473][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.563475][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.589518][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.604119][ T5712] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.630470][ T40] bridge_slave_1: left allmulticast mode [ 64.636158][ T40] bridge_slave_1: left promiscuous mode [ 64.641876][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.650856][ T40] bridge_slave_0: left allmulticast mode [ 64.656616][ T40] bridge_slave_0: left promiscuous mode [ 64.662300][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.670856][ T40] bridge_slave_1: left allmulticast mode [ 64.676552][ T40] bridge_slave_1: left promiscuous mode [ 64.682213][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.689997][ T40] bridge_slave_0: left allmulticast mode [ 64.695688][ T40] bridge_slave_0: left promiscuous mode [ 64.701377][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.910270][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.920784][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.931018][ T40] bond0 (unregistering): Released all slaves [ 64.942184][ T40] bond1 (unregistering): Released all slaves [ 64.952168][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.963537][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.975998][ T40] bond0 (unregistering): Released all slaves [ 64.983728][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.010698][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.017871][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.030107][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.037272][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.073660][ T5964] netlink: 'syz.3.530': attribute type 15 has an invalid length. [ 65.081500][ T5964] netlink: 723 bytes leftover after parsing attributes in process `syz.3.530'. [ 65.134664][ T5968] netlink: 576 bytes leftover after parsing attributes in process `syz.3.531'. [ 65.167635][ T40] hsr_slave_0: left promiscuous mode [ 65.173281][ T40] hsr_slave_1: left promiscuous mode [ 65.182401][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.189896][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.208635][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.216060][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.232178][ T40] hsr_slave_0: left promiscuous mode [ 65.239078][ T40] hsr_slave_1: left promiscuous mode [ 65.247883][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.255392][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.273886][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.281440][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.302027][ T40] veth1_macvtap: left promiscuous mode [ 65.307536][ T40] veth0_macvtap: left promiscuous mode [ 65.313097][ T40] veth1_vlan: left promiscuous mode [ 65.318351][ T40] veth0_vlan: left promiscuous mode [ 65.328657][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.337483][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.346596][ T40] veth1_macvtap: left promiscuous mode [ 65.352187][ T40] veth0_macvtap: left promiscuous mode [ 65.357707][ T40] veth1_vlan: left promiscuous mode [ 65.363002][ T40] veth0_vlan: left promiscuous mode [ 65.476586][ T40] team0 (unregistering): Port device team_slave_1 removed [ 65.486172][ T40] team0 (unregistering): Port device team_slave_0 removed [ 65.543749][ T40] team0 (unregistering): Port device team_slave_1 removed [ 65.554240][ T40] team0 (unregistering): Port device team_slave_0 removed [ 65.587806][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.597782][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.614525][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.628645][ T5840] hsr_slave_0: entered promiscuous mode [ 65.634630][ T5840] hsr_slave_1: entered promiscuous mode [ 65.661420][ T5712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.739151][ T5712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.794263][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.807591][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.826956][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.834131][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.854781][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.861883][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.882489][ T6006] loop1: detected capacity change from 0 to 2048 [ 65.889340][ T6006] EXT4-fs: Ignoring removed orlov option [ 65.937452][ T6006] EXT4-fs mount: 7 callbacks suppressed [ 65.937467][ T6006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.949773][ T6013] loop3: detected capacity change from 0 to 1024 [ 65.963032][ T6013] EXT4-fs: Ignoring removed orlov option [ 65.968887][ T6013] EXT4-fs: Ignoring removed bh option [ 65.999228][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.047737][ T29] audit: type=1400 audit(2000000039.429:674): avc: denied { listen } for pid=6004 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.067233][ T29] audit: type=1400 audit(2000000039.429:675): avc: denied { accept } for pid=6004 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.069069][ T5712] veth0_vlan: entered promiscuous mode [ 66.101730][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.137183][ T5712] veth1_vlan: entered promiscuous mode [ 66.162782][ T5352] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.166469][ T5712] veth0_macvtap: entered promiscuous mode [ 66.192303][ T5712] veth1_macvtap: entered promiscuous mode [ 66.208245][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.218690][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.228576][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.239026][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.249865][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.257292][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 66.266103][ T6044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.538'. [ 66.311181][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.321701][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.331572][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.342039][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.354232][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.361559][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 66.370920][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.381412][ T29] audit: type=1400 audit(2000000039.769:676): avc: denied { setopt } for pid=6046 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.403040][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.411640][ T4890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.435632][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.446950][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.453984][ T29] audit: type=1400 audit(2000000039.819:677): avc: denied { getopt } for pid=6046 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.501059][ T29] audit: type=1400 audit(2000000039.879:678): avc: denied { write } for pid=6046 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.522274][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.531156][ T5712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.539991][ T5712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.548772][ T5712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.598638][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.539'. [ 66.650843][ T5365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.668828][ T5774] veth0_vlan: entered promiscuous mode [ 66.699531][ T5774] veth1_vlan: entered promiscuous mode [ 66.719677][ T5365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.763563][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.777005][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 66.808290][ T5365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.830920][ T6100] loop0: detected capacity change from 0 to 512 [ 66.863665][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.889379][ T5365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.939106][ T5774] veth0_macvtap: entered promiscuous mode [ 66.967725][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.974861][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.993640][ T6118] loop0: detected capacity change from 0 to 512 [ 66.996520][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.006978][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.026957][ T5774] veth1_macvtap: entered promiscuous mode [ 67.033143][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'. [ 67.065732][ T6120] FAULT_INJECTION: forcing a failure. [ 67.065732][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 67.078430][ T6120] CPU: 1 UID: 0 PID: 6120 Comm: syz.0.545 Not tainted 6.11.0-rc3-syzkaller-00271-g85652baa895b #0 [ 67.089013][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 67.099063][ T6120] Call Trace: [ 67.102331][ T6120] [ 67.103468][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.105252][ T6120] dump_stack_lvl+0xf2/0x150 [ 67.120166][ T6120] dump_stack+0x15/0x20 [ 67.124357][ T6120] should_fail_ex+0x229/0x230 [ 67.127717][ T6082] chnl_net:caif_netlink_parms(): no params data found [ 67.129023][ T6120] ? kstrdup_const+0x3e/0x50 [ 67.129045][ T6120] should_failslab+0x8f/0xb0 [ 67.144923][ T6120] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 67.151257][ T6120] kstrdup+0x3a/0x80 [ 67.155241][ T6120] kstrdup_const+0x3e/0x50 [ 67.159719][ T6120] alloc_vfsmnt+0xa9/0x300 [ 67.164151][ T6120] clone_mnt+0x45/0x7a0 [ 67.168384][ T6120] copy_tree+0x2df/0x7f0 [ 67.172606][ T6120] copy_mnt_ns+0x11e/0x5c0 [ 67.177061][ T6120] ? create_new_namespaces+0x3c/0x430 [ 67.182414][ T6120] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 67.188066][ T6120] create_new_namespaces+0x89/0x430 [ 67.193246][ T6120] unshare_nsproxy_namespaces+0xe6/0x120 [ 67.198883][ T6120] ksys_unshare+0x3da/0x720 [ 67.203362][ T6120] ? ksys_write+0x169/0x1b0 [ 67.207844][ T6120] __x64_sys_unshare+0x1f/0x30 [ 67.212603][ T6120] x64_sys_call+0x2c8d/0x2d60 [ 67.217308][ T6120] do_syscall_64+0xc9/0x1c0 [ 67.221888][ T6120] ? clear_bhb_loop+0x55/0xb0 [ 67.226587][ T6120] ? clear_bhb_loop+0x55/0xb0 [ 67.231315][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.237205][ T6120] RIP: 0033:0x7fea542d9e79 [ 67.241662][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.261321][ T6120] RSP: 002b:00007fea52f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 67.269707][ T6120] RAX: ffffffffffffffda RBX: 00007fea54475f80 RCX: 00007fea542d9e79 [ 67.277685][ T6120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004020000 [ 67.285716][ T6120] RBP: 00007fea52f57090 R08: 0000000000000000 R09: 0000000000000000 [ 67.293685][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.301701][ T6120] R13: 0000000000000000 R14: 00007fea54475f80 R15: 00007ffda5f4af28 [ 67.309650][ T6120] [ 67.348300][ T6125] vlan2: entered promiscuous mode [ 67.353986][ T6125] bond0: entered promiscuous mode [ 67.359205][ T6125] bond_slave_0: entered promiscuous mode [ 67.365065][ T6125] bond_slave_1: entered promiscuous mode [ 67.372620][ T6125] bond0: left promiscuous mode [ 67.377421][ T6125] bond_slave_0: left promiscuous mode [ 67.382836][ T6125] bond_slave_1: left promiscuous mode [ 67.404001][ T5365] bridge_slave_1: left allmulticast mode [ 67.409692][ T5365] bridge_slave_1: left promiscuous mode [ 67.415405][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.424117][ T5365] bridge_slave_0: left allmulticast mode [ 67.429907][ T5365] bridge_slave_0: left promiscuous mode [ 67.435572][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.481408][ T6136] loop1: detected capacity change from 0 to 256 [ 67.520336][ T6139] loop1: detected capacity change from 0 to 512 [ 67.527544][ T6139] EXT4-fs: Ignoring removed orlov option [ 67.535030][ T6139] EXT4-fs: Ignoring removed bh option [ 67.541842][ T5365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.546695][ T6139] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.560433][ T6139] EXT4-fs (loop1): can't mount with commit=6, fs mounted w/o journal [ 67.576108][ T6139] loop1: detected capacity change from 0 to 512 [ 67.582536][ T5365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.588122][ T6139] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.601571][ T5365] bond0 (unregistering): Released all slaves [ 67.606876][ T6139] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 67.622141][ T6139] EXT4-fs (loop1): mount failed [ 67.731414][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.741994][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.751812][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.762270][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.772118][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.782651][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.798052][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.809681][ T6157] nftables ruleset with unbound chain [ 67.810213][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.832929][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.840082][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.848461][ T6082] bridge_slave_0: entered allmulticast mode [ 67.854861][ T6082] bridge_slave_0: entered promiscuous mode [ 67.864135][ T5365] hsr_slave_0: left promiscuous mode [ 67.869881][ T5365] hsr_slave_1: left promiscuous mode [ 67.876776][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.884173][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.892033][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.899528][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.910571][ T5365] veth1_macvtap: left promiscuous mode [ 67.916112][ T5365] veth0_macvtap: left promiscuous mode [ 67.921731][ T5365] veth1_vlan: left promiscuous mode [ 67.927032][ T5365] veth0_vlan: left promiscuous mode [ 67.999319][ T5365] team0 (unregistering): Port device team_slave_1 removed [ 68.009601][ T5365] team0 (unregistering): Port device team_slave_0 removed [ 68.047490][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.054617][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.062324][ T6082] bridge_slave_1: entered allmulticast mode [ 68.069926][ T6082] bridge_slave_1: entered promiscuous mode [ 68.086240][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.096680][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.106485][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.116968][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.127521][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.143306][ T6082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.154160][ T6082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.170737][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.179605][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.188308][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.197009][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.220853][ T6082] team0: Port device team_slave_0 added [ 68.240145][ T6082] team0: Port device team_slave_1 added [ 68.279730][ T6082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.286743][ T6082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.297498][ T6188] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.312658][ T6082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.318963][ T6188] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 68.332270][ T6082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.342787][ T6082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.368770][ T6082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.399705][ T6188] hsr_slave_0: left promiscuous mode [ 68.408345][ T6188] hsr_slave_1: left promiscuous mode [ 68.472199][ T5840] veth0_vlan: entered promiscuous mode [ 68.490743][ T6082] hsr_slave_0: entered promiscuous mode [ 68.503898][ T6082] hsr_slave_1: entered promiscuous mode [ 68.511327][ T6082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.521076][ T6082] Cannot create hsr debugfs directory [ 68.541409][ T5840] veth1_vlan: entered promiscuous mode [ 68.576681][ T5840] veth0_macvtap: entered promiscuous mode [ 68.602049][ T5840] veth1_macvtap: entered promiscuous mode [ 68.629481][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.640056][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.649921][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.660383][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.670262][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.680690][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.692267][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.714440][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.725117][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.734936][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.745349][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.755199][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.765607][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.776338][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.787260][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.796175][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.804831][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.813635][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.892763][ T29] audit: type=1400 audit(2000000042.279:679): avc: denied { ioctl } for pid=6237 comm="syz.4.558" path="socket:[16668]" dev="sockfs" ino=16668 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.942714][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 68.951670][ T6254] netlink: 272 bytes leftover after parsing attributes in process `syz.4.561'. [ 69.148148][ T6082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.159243][ T6082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.171017][ T6082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.192070][ T6082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.207606][ T29] audit: type=1400 audit(2000000042.599:680): avc: denied { ioctl } for pid=6289 comm="syz.4.563" path="/dev/ptp0" dev="devtmpfs" ino=221 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.238159][ T6290] loop4: detected capacity change from 0 to 1024 [ 69.266709][ T6290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.286185][ T6082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.304017][ T6082] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.315622][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.322739][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.334017][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.341150][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.380662][ T6082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.391111][ T6082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.487249][ T6082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.562929][ T6329] loop2: detected capacity change from 0 to 2048 [ 69.670751][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.690960][ T6082] veth0_vlan: entered promiscuous mode [ 69.709685][ T6082] veth1_vlan: entered promiscuous mode [ 69.741986][ T6329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.773798][ T6082] veth0_macvtap: entered promiscuous mode [ 69.800376][ T6082] veth1_macvtap: entered promiscuous mode [ 69.829369][ T6082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.839841][ T6082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.849779][ T6082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.860203][ T6082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.870025][ T6082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.880509][ T6082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.890327][ T6082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.900788][ T6082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.971480][ T6324] loop0: detected capacity change from 0 to 512 [ 69.979061][ T6082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.988551][ T6324] EXT4-fs: quotafile must be on filesystem root [ 69.995551][ T6082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.006066][ T6082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.015914][ T6082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.026371][ T6082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.036213][ T6082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.046725][ T6082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.056561][ T6082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.066977][ T6082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.078545][ T6082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.090324][ T6082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.099111][ T6082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.107893][ T6082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.116620][ T6082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.247277][ T29] audit: type=1400 audit(2000000043.639:681): avc: denied { write } for pid=6365 comm="syz.3.541" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.297434][ T6367] Process accounting resumed [ 70.318931][ T29] audit: type=1400 audit(2000000043.689:682): avc: denied { connect } for pid=6365 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.336606][ T6370] syzkaller0: entered promiscuous mode [ 70.339491][ T29] audit: type=1400 audit(2000000043.689:683): avc: denied { mount } for pid=6365 comm="syz.3.541" name="/" dev="ramfs" ino=16885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.345028][ T6370] syzkaller0: entered allmulticast mode [ 70.367010][ T29] audit: type=1400 audit(2000000043.689:684): avc: denied { unmount } for pid=6365 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.396210][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.406981][ T6372] __nla_validate_parse: 1 callbacks suppressed [ 70.407034][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.568'. [ 70.443108][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.446609][ T6376] loop4: detected capacity change from 0 to 2048 [ 70.450296][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.468217][ T6376] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.569: casefold flag without casefold feature [ 70.487274][ T6324] loop0: detected capacity change from 0 to 512 [ 70.491505][ T6376] EXT4-fs (loop4): get root inode failed [ 70.499311][ T6376] EXT4-fs (loop4): mount failed [ 70.514696][ T6324] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 70.528711][ T6324] syz.0.565: attempt to access beyond end of device [ 70.528711][ T6324] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 70.537497][ T6372] loop3: detected capacity change from 0 to 2048 [ 70.542966][ T6324] EXT4-fs (loop0): couldn't read superblock of external journal [ 70.577510][ T6372] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.568: bad orphan inode 8192 [ 70.597750][ T6383] loop4: detected capacity change from 0 to 1024 [ 70.604484][ T6372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.641925][ T6082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.669795][ T6383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.683434][ T29] audit: type=1400 audit(2000000044.069:685): avc: denied { write } for pid=6382 comm="syz.4.570" name="vlan0" dev="proc" ino=4026532412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.707334][ T29] audit: type=1400 audit(2000000044.069:686): avc: denied { execute } for pid=6382 comm="syz.4.570" path="/9/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.737896][ T6387] loop3: detected capacity change from 0 to 128 [ 70.744393][ T6387] vfat: Unknown parameter '' [ 70.759692][ T29] audit: type=1400 audit(2000000044.149:687): avc: denied { checkpoint_restore } for pid=6386 comm="syz.3.571" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.772503][ T6387] loop3: detected capacity change from 0 to 1024 [ 70.790227][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 70.796420][ T6387] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.571: bad orphan inode 2097152 [ 70.810595][ T6387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.824825][ T29] audit: type=1400 audit(2000000044.209:688): avc: denied { getopt } for pid=6394 comm="syz.1.572" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.837248][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.858514][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.876173][ T6082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.898599][ T6399] loop3: detected capacity change from 0 to 1024 [ 70.905967][ T6399] EXT4-fs: Ignoring removed orlov option [ 70.911667][ T6399] EXT4-fs: Ignoring removed bh option [ 70.925979][ T6399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.403434][ T6403] ebtables: ebtables: counters copy to user failed while replacing table [ 71.435617][ T6407] FAULT_INJECTION: forcing a failure. [ 71.435617][ T6407] name failslab, interval 1, probability 0, space 0, times 0 [ 71.448383][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: syz.1.577 Not tainted 6.11.0-rc3-syzkaller-00271-g85652baa895b #0 [ 71.458975][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 71.469037][ T6407] Call Trace: [ 71.472312][ T6407] [ 71.475307][ T6407] dump_stack_lvl+0xf2/0x150 [ 71.479925][ T6407] dump_stack+0x15/0x20 [ 71.484095][ T6407] should_fail_ex+0x229/0x230 [ 71.488839][ T6407] ? fib_insert_alias+0x16d/0x770 [ 71.493852][ T6407] should_failslab+0x8f/0xb0 [ 71.498445][ T6407] kmem_cache_alloc_noprof+0x4c/0x290 [ 71.503821][ T6407] fib_insert_alias+0x16d/0x770 [ 71.508701][ T6407] ? fib_trie_unmerge+0x349/0xa70 [ 71.513878][ T6407] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 71.519602][ T6407] fib_trie_unmerge+0x454/0xa70 [ 71.524539][ T6407] ? __kmalloc_noprof+0x203/0x370 [ 71.529650][ T6407] fib_unmerge+0x7f/0x200 [ 71.533965][ T6407] fib4_rule_delete+0x2b/0x1e0 [ 71.538798][ T6407] fib_nl_delrule+0xcd0/0x1040 [ 71.543562][ T6407] ? ns_capable+0x7d/0xb0 [ 71.547882][ T6407] ? __pfx_fib_nl_delrule+0x10/0x10 [ 71.553132][ T6407] rtnetlink_rcv_msg+0x6aa/0x710 [ 71.558109][ T6407] ? __dev_queue_xmit+0x161/0x1fe0 [ 71.563255][ T6407] netlink_rcv_skb+0x12c/0x230 [ 71.568029][ T6407] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.573537][ T6407] rtnetlink_rcv+0x1c/0x30 [ 71.577940][ T6407] netlink_unicast+0x599/0x670 [ 71.582734][ T6407] netlink_sendmsg+0x5cc/0x6e0 [ 71.587486][ T6407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.592767][ T6407] __sock_sendmsg+0x140/0x180 [ 71.597458][ T6407] ____sys_sendmsg+0x312/0x410 [ 71.602218][ T6407] __sys_sendmsg+0x1e9/0x280 [ 71.606812][ T6407] __x64_sys_sendmsg+0x46/0x50 [ 71.611702][ T6407] x64_sys_call+0x2689/0x2d60 [ 71.616374][ T6407] do_syscall_64+0xc9/0x1c0 [ 71.620929][ T6407] ? clear_bhb_loop+0x55/0xb0 [ 71.625633][ T6407] ? clear_bhb_loop+0x55/0xb0 [ 71.630302][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.636341][ T6407] RIP: 0033:0x7f9df3029e79 [ 71.640906][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.660500][ T6407] RSP: 002b:00007f9df1ca1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.668942][ T6407] RAX: ffffffffffffffda RBX: 00007f9df31c5f80 RCX: 00007f9df3029e79 [ 71.676896][ T6407] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 71.684849][ T6407] RBP: 00007f9df1ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 71.692892][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.700897][ T6407] R13: 0000000000000000 R14: 00007f9df31c5f80 R15: 00007ffc4b492638 [ 71.708862][ T6407] [ 71.718054][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.772028][ T29] audit: type=1400 audit(2000000045.159:689): avc: denied { read } for pid=6415 comm="syz.1.580" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.884004][ T6428] loop1: detected capacity change from 0 to 512 [ 71.890640][ T6428] journal_path: Lookup failure for './file1' [ 71.896683][ T6428] EXT4-fs: error: could not find journal device path [ 71.930129][ T6432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6432 comm=syz.1.586 [ 71.944310][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.952817][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.029194][ T6434] loop4: detected capacity change from 0 to 1024 [ 72.036470][ T6434] EXT4-fs: Ignoring removed orlov option [ 72.042287][ T6434] EXT4-fs: Ignoring removed bh option [ 72.056579][ T6434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.392873][ T6447] loop2: detected capacity change from 0 to 512 [ 72.400210][ T6447] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.410936][ T6447] EXT4-fs (loop2): 1 truncate cleaned up [ 72.417192][ T6447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.451834][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.460383][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.484256][ T6447] team0 (unregistering): Port device team_slave_0 removed [ 72.501448][ T6447] team0 (unregistering): Port device team_slave_1 removed [ 72.505166][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 72.539713][ T6453] loop1: detected capacity change from 0 to 512 [ 72.566686][ T6453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.579252][ T6453] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.600797][ T5352] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.625970][ T6457] loop1: detected capacity change from 0 to 128 [ 72.660363][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 72.669768][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.677045][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.886814][ T6472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6472 comm=syz.1.599 [ 72.900405][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.909770][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.073378][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.090311][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.600'. [ 73.099208][ T6474] netlink: 272 bytes leftover after parsing attributes in process `syz.2.600'. [ 73.108199][ T6474] netlink: 64 bytes leftover after parsing attributes in process `syz.2.600'. [ 73.118719][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.139661][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.174187][ T6481] loop2: detected capacity change from 0 to 512 [ 73.182941][ T6481] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 73.201957][ T6481] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.605: invalid indirect mapped block 1 (level 1) [ 73.219469][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.225658][ T6481] EXT4-fs (loop2): 1 truncate cleaned up [ 73.235758][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.250325][ T6490] EXT4-fs error (device loop2): __ext4_iget:4985: inode #13: block 7962: comm syz.2.605: invalid block [ 73.270527][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.284329][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.337976][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.375596][ T6505] netlink: 277 bytes leftover after parsing attributes in process `syz.2.607'. [ 73.378202][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 73.429828][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.436941][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.444076][ T6483] bridge_slave_0: entered allmulticast mode [ 73.451058][ T6483] bridge_slave_0: entered promiscuous mode [ 73.458185][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.465332][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.474584][ T6483] bridge_slave_1: entered allmulticast mode [ 73.486921][ T6483] bridge_slave_1: entered promiscuous mode [ 73.514490][ T40] bridge_slave_1: left allmulticast mode [ 73.520288][ T40] bridge_slave_1: left promiscuous mode [ 73.526249][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.535254][ T40] bridge_slave_0: left allmulticast mode [ 73.540900][ T40] bridge_slave_0: left promiscuous mode [ 73.546761][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.627075][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.637599][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.647635][ T40] bond0 (unregistering): Released all slaves [ 73.657166][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.667695][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.747075][ T6483] team0: Port device team_slave_0 added [ 73.755198][ T40] hsr_slave_0: left promiscuous mode [ 73.761139][ T40] hsr_slave_1: left promiscuous mode [ 73.766948][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.774350][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.782015][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.789581][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.798590][ T40] veth1_macvtap: left promiscuous mode [ 73.804086][ T40] veth0_macvtap: left promiscuous mode [ 73.809625][ T40] veth1_vlan: left promiscuous mode [ 73.814831][ T40] veth0_vlan: left promiscuous mode [ 73.887839][ T40] team0 (unregistering): Port device team_slave_1 removed [ 73.898327][ T40] team0 (unregistering): Port device team_slave_0 removed [ 73.933296][ T6483] team0: Port device team_slave_1 added [ 73.956132][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.963097][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.989045][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.002831][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.005528][ T6540] loop1: detected capacity change from 0 to 256 [ 74.009948][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.042592][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.050634][ T6082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.089644][ T6483] hsr_slave_0: entered promiscuous mode [ 74.108451][ T6483] hsr_slave_1: entered promiscuous mode [ 74.184351][ T6556] loop1: detected capacity change from 0 to 1024 [ 74.233653][ T6556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.266592][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 74.266621][ T29] audit: type=1400 audit(2000000047.659:693): avc: denied { getopt } for pid=6555 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.313676][ T6577] loop2: detected capacity change from 0 to 1024 [ 74.313938][ T5352] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.329212][ T6577] EXT4-fs: Ignoring removed orlov option [ 74.335055][ T6577] EXT4-fs: Ignoring removed bh option [ 74.347195][ T6577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.369256][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.416336][ T6589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6589 comm=syz.1.618 [ 74.432115][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.451185][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.460755][ T6443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.522284][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 74.566031][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.573105][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.580382][ T6560] bridge_slave_0: entered allmulticast mode [ 74.586844][ T6560] bridge_slave_0: entered promiscuous mode [ 74.593875][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.600953][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.608114][ T6560] bridge_slave_1: entered allmulticast mode [ 74.614362][ T6560] bridge_slave_1: entered promiscuous mode [ 74.624062][ T6483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.643710][ T6483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.654569][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.663880][ T6483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.672894][ T6483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.683057][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.710708][ T6560] team0: Port device team_slave_0 added [ 74.718083][ T6560] team0: Port device team_slave_1 added [ 74.744129][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.751192][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.777120][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.790521][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.797642][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.823608][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.870349][ T6560] hsr_slave_0: entered promiscuous mode [ 74.876523][ T6560] hsr_slave_1: entered promiscuous mode [ 74.882467][ T6560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.890432][ T6560] Cannot create hsr debugfs directory [ 74.926396][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.940192][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.989076][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.996177][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.005250][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.012344][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.064334][ T6483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.070098][ T6654] loop1: detected capacity change from 0 to 2048 [ 75.090176][ T6654] EXT4-fs: Ignoring removed orlov option [ 75.115869][ T6654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.140428][ T6654] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.148488][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.174210][ T6618] chnl_net:caif_netlink_parms(): no params data found [ 75.181807][ T6654] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 75.194070][ T6654] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.194070][ T6654] [ 75.203806][ T6654] EXT4-fs (loop1): Total free blocks count 0 [ 75.210124][ T6654] EXT4-fs (loop1): Free/Dirty block details [ 75.216091][ T6654] EXT4-fs (loop1): free_blocks=2415919120 [ 75.221917][ T6654] EXT4-fs (loop1): dirty_blocks=16 [ 75.227106][ T6654] EXT4-fs (loop1): Block reservation details [ 75.233141][ T6654] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 75.266782][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.273846][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.281134][ T6618] bridge_slave_0: entered allmulticast mode [ 75.287587][ T6618] bridge_slave_0: entered promiscuous mode [ 75.294476][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.301625][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.310847][ T6618] bridge_slave_1: entered allmulticast mode [ 75.317331][ T6618] bridge_slave_1: entered promiscuous mode [ 75.348439][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.359186][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.395628][ T6618] team0: Port device team_slave_0 added [ 75.402072][ T6618] team0: Port device team_slave_1 added [ 75.442557][ T6483] veth0_vlan: entered promiscuous mode [ 75.454132][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.461166][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.487111][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.503339][ T6483] veth1_vlan: entered promiscuous mode [ 75.509716][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.516793][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.542704][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.565788][ T6483] veth0_macvtap: entered promiscuous mode [ 75.573269][ T6483] veth1_macvtap: entered promiscuous mode [ 75.595770][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.606248][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.616071][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.626569][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.636433][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.646936][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.656753][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.667207][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.678269][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.686922][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.697499][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.707385][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.717826][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.727693][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.738159][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.748013][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.758518][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.769897][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.779502][ T6618] hsr_slave_0: entered promiscuous mode [ 75.785647][ T6618] hsr_slave_1: entered promiscuous mode [ 75.791528][ T6618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.799298][ T6618] Cannot create hsr debugfs directory [ 75.813546][ T6483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822335][ T6483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.831032][ T6483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.839724][ T6483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.933945][ T5352] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.958108][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.624'. [ 75.964533][ T29] audit: type=1400 audit(2000000049.349:694): avc: denied { create } for pid=6689 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.986427][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.986524][ T29] audit: type=1400 audit(2000000049.359:695): avc: denied { connect } for pid=6689 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.993625][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.021100][ T29] audit: type=1400 audit(2000000049.399:696): avc: denied { shutdown } for pid=6689 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.041590][ T29] audit: type=1400 audit(2000000049.399:697): avc: denied { bind } for pid=6689 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.095843][ T6699] netlink: 576 bytes leftover after parsing attributes in process `syz.1.627'. [ 76.099955][ T6700] loop4: detected capacity change from 0 to 1024 [ 76.111907][ T6700] EXT4-fs: Ignoring removed orlov option [ 76.117647][ T6700] EXT4-fs: Ignoring removed bh option [ 76.133955][ T6700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.170789][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.188220][ T6706] loop1: detected capacity change from 0 to 512 [ 76.199425][ T6706] ext3: Unknown parameter 'fsname' [ 76.210699][ T29] audit: type=1400 audit(2000000049.599:698): avc: denied { write } for pid=6705 comm="syz.1.632" name="net" dev="proc" ino=18530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 76.232054][ T29] audit: type=1400 audit(2000000049.599:699): avc: denied { add_name } for pid=6705 comm="syz.1.632" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 76.252198][ T29] audit: type=1400 audit(2000000049.599:700): avc: denied { create } for pid=6705 comm="syz.1.632" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 76.272114][ T29] audit: type=1400 audit(2000000049.599:701): avc: denied { associate } for pid=6705 comm="syz.1.632" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.293180][ T29] audit: type=1400 audit(2000000049.649:702): avc: denied { write } for pid=6705 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.294121][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.377027][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 76.393401][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.412493][ T6713] loop1: detected capacity change from 0 to 256 [ 76.421772][ T6713] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.431917][ T6713] FAT-fs (loop1): Filesystem has been set read-only [ 76.438559][ T6713] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.449402][ T6713] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 76.479268][ T40] bridge_slave_1: left allmulticast mode [ 76.485205][ T40] bridge_slave_1: left promiscuous mode [ 76.490832][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.499201][ T40] bridge_slave_0: left allmulticast mode [ 76.504984][ T40] bridge_slave_0: left promiscuous mode [ 76.510560][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.597368][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.607842][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.618278][ T40] bond0 (unregistering): Released all slaves [ 76.629061][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.635'. [ 76.640794][ T6715] FAULT_INJECTION: forcing a failure. [ 76.640794][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 76.653420][ T6715] CPU: 1 UID: 0 PID: 6715 Comm: syz.1.635 Not tainted 6.11.0-rc3-syzkaller-00271-g85652baa895b #0 [ 76.664016][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 76.674050][ T6715] Call Trace: [ 76.677357][ T6715] [ 76.680265][ T6715] dump_stack_lvl+0xf2/0x150 [ 76.684860][ T6715] dump_stack+0x15/0x20 [ 76.689030][ T6715] should_fail_ex+0x229/0x230 [ 76.693690][ T6715] ? __kernfs_new_node+0x6a/0x380 [ 76.698840][ T6715] should_failslab+0x8f/0xb0 [ 76.703420][ T6715] kmem_cache_alloc_noprof+0x4c/0x290 [ 76.708791][ T6715] ? kstrdup+0x55/0x80 [ 76.712837][ T6715] __kernfs_new_node+0x6a/0x380 [ 76.717664][ T6715] ? rb_insert_color+0x6a/0x290 [ 76.722569][ T6715] ? up_write+0x30/0xf0 [ 76.726752][ T6715] ? kernfs_activate+0x256/0x270 [ 76.731669][ T6715] kernfs_new_node+0xc8/0x140 [ 76.736324][ T6715] kernfs_create_link+0x6c/0x120 [ 76.741370][ T6715] sysfs_do_create_link_sd+0x6b/0xf0 [ 76.746632][ T6715] sysfs_create_link+0x51/0x70 [ 76.751394][ T6715] device_add_class_symlinks+0x159/0x1e0 [ 76.757012][ T6715] device_add+0x36c/0x790 [ 76.761362][ T6715] netdev_register_kobject+0x100/0x230 [ 76.766875][ T6715] register_netdevice+0x910/0xe30 [ 76.771981][ T6715] register_vlan_dev+0x222/0x470 [ 76.776909][ T6715] vlan_newlink+0x2e3/0x320 [ 76.781426][ T6715] ? __pfx_vlan_newlink+0x10/0x10 [ 76.786506][ T6715] rtnl_newlink+0xeff/0x1690 [ 76.791136][ T6715] ? mutex_spin_on_owner+0xc6/0x170 [ 76.796370][ T6715] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 76.802591][ T6715] ? _raw_spin_unlock+0x26/0x50 [ 76.807417][ T6715] ? __mutex_lock+0x221/0x8e0 [ 76.812117][ T6715] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.817150][ T6715] rtnetlink_rcv_msg+0x6aa/0x710 [ 76.822137][ T6715] ? ref_tracker_free+0x3a5/0x410 [ 76.827214][ T6715] ? __dev_queue_xmit+0x161/0x1fe0 [ 76.832301][ T6715] netlink_rcv_skb+0x12c/0x230 [ 76.837040][ T6715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.842544][ T6715] rtnetlink_rcv+0x1c/0x30 [ 76.846978][ T6715] netlink_unicast+0x599/0x670 [ 76.851767][ T6715] netlink_sendmsg+0x5cc/0x6e0 [ 76.856582][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.861909][ T6715] __sock_sendmsg+0x140/0x180 [ 76.866692][ T6715] ____sys_sendmsg+0x312/0x410 [ 76.871574][ T6715] __sys_sendmsg+0x1e9/0x280 [ 76.876180][ T6715] __x64_sys_sendmsg+0x46/0x50 [ 76.880951][ T6715] x64_sys_call+0x2689/0x2d60 [ 76.885765][ T6715] do_syscall_64+0xc9/0x1c0 [ 76.890249][ T6715] ? clear_bhb_loop+0x55/0xb0 [ 76.894912][ T6715] ? clear_bhb_loop+0x55/0xb0 [ 76.899659][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.905612][ T6715] RIP: 0033:0x7f9df3029e79 [ 76.910017][ T6715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.929687][ T6715] RSP: 002b:00007f9df1ca1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.938130][ T6715] RAX: ffffffffffffffda RBX: 00007f9df31c5f80 RCX: 00007f9df3029e79 [ 76.946076][ T6715] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 76.954186][ T6715] RBP: 00007f9df1ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 76.962182][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.970218][ T6715] R13: 0000000000000000 R14: 00007f9df31c5f80 R15: 00007ffc4b492638 [ 76.978167][ T6715] [ 77.011549][ T6719] loop1: detected capacity change from 0 to 512 [ 77.087532][ T40] hsr_slave_0: left promiscuous mode [ 77.093314][ T40] hsr_slave_1: left promiscuous mode [ 77.100246][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.107682][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.116593][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.120704][ T6735] loop1: detected capacity change from 0 to 4096 [ 77.124028][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.140455][ T6735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.156270][ T40] veth1_macvtap: left promiscuous mode [ 77.161746][ T40] veth0_macvtap: left promiscuous mode [ 77.167318][ T40] veth1_vlan: left promiscuous mode [ 77.172667][ T40] veth0_vlan: left promiscuous mode [ 77.246966][ T40] team0 (unregistering): Port device team_slave_1 removed [ 77.257884][ T40] team0 (unregistering): Port device team_slave_0 removed [ 77.430080][ T6618] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.441072][ T6560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.450107][ T6560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.458777][ T6560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.467809][ T6560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.479734][ T6618] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.514456][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.528083][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.537340][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.544409][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.555136][ T6618] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.576697][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.583816][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.609695][ T6618] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.640073][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.688240][ T40] bridge_slave_1: left allmulticast mode [ 77.694031][ T40] bridge_slave_1: left promiscuous mode [ 77.699804][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.707483][ T40] bridge_slave_0: left allmulticast mode [ 77.713098][ T40] bridge_slave_0: left promiscuous mode [ 77.718734][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.806883][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.817165][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.826881][ T40] bond0 (unregistering): Released all slaves [ 77.852461][ T6618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.862149][ T6618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.870884][ T6618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.879160][ T6560] veth0_vlan: entered promiscuous mode [ 77.886355][ T6618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.902456][ T6560] veth1_vlan: entered promiscuous mode [ 77.909485][ T5352] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.918541][ T40] hsr_slave_0: left promiscuous mode [ 77.924218][ T40] hsr_slave_1: left promiscuous mode [ 77.940246][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.947854][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.957283][ T6762] FAULT_INJECTION: forcing a failure. [ 77.957283][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 77.970056][ T6762] CPU: 0 UID: 0 PID: 6762 Comm: syz.1.638 Not tainted 6.11.0-rc3-syzkaller-00271-g85652baa895b #0 [ 77.980622][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.990703][ T6762] Call Trace: [ 77.994002][ T6762] [ 77.996913][ T6762] dump_stack_lvl+0xf2/0x150 [ 78.001505][ T6762] dump_stack+0x15/0x20 [ 78.005651][ T6762] should_fail_ex+0x229/0x230 [ 78.010405][ T6762] ? alloc_vfsmnt+0x2b/0x300 [ 78.015021][ T6762] should_failslab+0x8f/0xb0 [ 78.019593][ T6762] kmem_cache_alloc_noprof+0x4c/0x290 [ 78.024979][ T6762] alloc_vfsmnt+0x2b/0x300 [ 78.029415][ T6762] clone_mnt+0x45/0x7a0 [ 78.033553][ T6762] copy_tree+0x2df/0x7f0 [ 78.037775][ T6762] copy_mnt_ns+0x11e/0x5c0 [ 78.042260][ T6762] ? create_new_namespaces+0x3c/0x430 [ 78.047660][ T6762] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 78.053330][ T6762] create_new_namespaces+0x89/0x430 [ 78.058572][ T6762] unshare_nsproxy_namespaces+0xe6/0x120 [ 78.064273][ T6762] ksys_unshare+0x3da/0x720 [ 78.068753][ T6762] ? ksys_write+0x169/0x1b0 [ 78.073247][ T6762] __x64_sys_unshare+0x1f/0x30 [ 78.077989][ T6762] x64_sys_call+0x2c8d/0x2d60 [ 78.082644][ T6762] do_syscall_64+0xc9/0x1c0 [ 78.087136][ T6762] ? clear_bhb_loop+0x55/0xb0 [ 78.091839][ T6762] ? clear_bhb_loop+0x55/0xb0 [ 78.096504][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.102436][ T6762] RIP: 0033:0x7f9df3029e79 [ 78.106836][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.126527][ T6762] RSP: 002b:00007f9df1ca1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 78.134916][ T6762] RAX: ffffffffffffffda RBX: 00007f9df31c5f80 RCX: 00007f9df3029e79 [ 78.142863][ T6762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004020000 [ 78.150809][ T6762] RBP: 00007f9df1ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 78.158838][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.166864][ T6762] R13: 0000000000000000 R14: 00007f9df31c5f80 R15: 00007ffc4b492638 [ 78.174813][ T6762] [ 78.181385][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.189056][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.198140][ T40] veth1_macvtap: left promiscuous mode [ 78.203626][ T40] veth0_macvtap: left promiscuous mode [ 78.209167][ T40] veth1_vlan: left promiscuous mode [ 78.214383][ T40] veth0_vlan: left promiscuous mode [ 78.242258][ T6764] loop1: detected capacity change from 0 to 1024 [ 78.259090][ T6764] EXT4-fs: Ignoring removed orlov option [ 78.265059][ T6764] EXT4-fs: Ignoring removed bh option [ 78.279247][ T6764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.363997][ T6618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.379745][ T6560] veth0_macvtap: entered promiscuous mode [ 78.387778][ T6618] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.395883][ T6560] veth1_macvtap: entered promiscuous mode [ 78.404457][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.411585][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.426630][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.433685][ T5365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.442817][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.453327][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.463331][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.467273][ T6483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.473743][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.492615][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.503063][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.513789][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.538111][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.548627][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.558610][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.569326][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.579244][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.589659][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.600403][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.610619][ T6560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.619406][ T6560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.628287][ T6560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.637232][ T6560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.717961][ T5352] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.718168][ T6618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.852736][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.891606][ T6618] veth0_vlan: entered promiscuous mode [ 78.910642][ T6618] veth1_vlan: entered promiscuous mode [ 78.935028][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.951904][ T6772] chnl_net:caif_netlink_parms(): no params data found [ 79.016413][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.043733][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 79.069912][ T6618] veth0_macvtap: entered promiscuous mode [ 79.076534][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.076547][ T6818] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 79.076625][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.076744][ T6772] bridge_slave_0: entered allmulticast mode [ 79.083665][ T6818] netlink: 'syz.3.647': attribute type 2 has an invalid length. [ 79.093388][ T6772] bridge_slave_0: entered promiscuous mode [ 79.099593][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 79.106228][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.133710][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.140922][ T6772] bridge_slave_1: entered allmulticast mode [ 79.147387][ T6772] bridge_slave_1: entered promiscuous mode [ 79.165939][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.177470][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 79.186324][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 79.196622][ T6818] netlink: 900 bytes leftover after parsing attributes in process `syz.3.647'. [ 79.198006][ T6819] team0: entered promiscuous mode [ 79.210650][ T6819] team_slave_0: entered promiscuous mode [ 79.216484][ T6819] team_slave_1: entered promiscuous mode [ 79.223036][ T6819] team0: left promiscuous mode [ 79.227887][ T6819] team_slave_0: left promiscuous mode [ 79.233455][ T6819] team_slave_1: left promiscuous mode [ 79.252270][ T6772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.262978][ T6772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.282038][ T6618] veth1_macvtap: entered promiscuous mode [ 79.294324][ T6772] team0: Port device team_slave_0 added [ 79.301028][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 79.301039][ T29] audit: type=1326 audit(2000000052.689:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.3.647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7640809e79 code=0x0 [ 79.306960][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.340172][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.350018][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.360521][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.370350][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.380845][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.390667][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.401194][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.412047][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.421698][ T6772] team0: Port device team_slave_1 added [ 79.440466][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.451031][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.460858][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.471304][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.481123][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.491549][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.501412][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.511853][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.522721][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.537096][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.544139][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.570078][ T6772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.598348][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.605447][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.631382][ T6772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.651596][ T6618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.660339][ T6618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.669085][ T6618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.677810][ T6618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.713324][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.734042][ T6772] hsr_slave_0: entered promiscuous mode [ 79.740603][ T6772] hsr_slave_1: entered promiscuous mode [ 79.746882][ T6772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.754457][ T6772] Cannot create hsr debugfs directory [ 79.765350][ T6772] ================================================================== [ 79.773434][ T6772] BUG: KCSAN: data-race in batadv_check_known_mac_addr / batadv_iv_ogm_schedule [ 79.782449][ T6772] [ 79.784754][ T6772] write to 0xffff88811519dc10 of 1 bytes by task 3545 on cpu 0: [ 79.792367][ T6772] batadv_iv_ogm_schedule+0xaa/0x790 [ 79.797645][ T6772] batadv_iv_send_outstanding_bat_ogm_packet+0x44c/0x4b0 [ 79.804654][ T6772] process_scheduled_works+0x483/0x9a0 [ 79.810104][ T6772] worker_thread+0x526/0x700 [ 79.814684][ T6772] kthread+0x1d1/0x210 [ 79.818744][ T6772] ret_from_fork+0x4b/0x60 [ 79.823146][ T6772] ret_from_fork_asm+0x1a/0x30 [ 79.827897][ T6772] [ 79.830202][ T6772] read to 0xffff88811519dc10 of 1 bytes by task 6772 on cpu 1: [ 79.837724][ T6772] batadv_check_known_mac_addr+0x4f/0x180 [ 79.843429][ T6772] batadv_hard_if_event+0xa06/0x1010 [ 79.848701][ T6772] raw_notifier_call_chain+0x6f/0x1d0 [ 79.854064][ T6772] call_netdevice_notifiers_info+0xae/0x100 [ 79.859949][ T6772] register_netdevice+0xca9/0xe30 [ 79.864958][ T6772] veth_newlink+0x5b7/0x830 [ 79.869452][ T6772] rtnl_newlink+0xeff/0x1690 [ 79.874026][ T6772] rtnetlink_rcv_msg+0x6aa/0x710 [ 79.878951][ T6772] netlink_rcv_skb+0x12c/0x230 [ 79.883699][ T6772] rtnetlink_rcv+0x1c/0x30 [ 79.888103][ T6772] netlink_unicast+0x599/0x670 [ 79.892849][ T6772] netlink_sendmsg+0x5cc/0x6e0 [ 79.897600][ T6772] __sock_sendmsg+0x140/0x180 [ 79.902281][ T6772] __sys_sendto+0x1e5/0x260 [ 79.906862][ T6772] __x64_sys_sendto+0x78/0x90 [ 79.911531][ T6772] x64_sys_call+0x2959/0x2d60 [ 79.916197][ T6772] do_syscall_64+0xc9/0x1c0 [ 79.920691][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.926576][ T6772] [ 79.928881][ T6772] value changed: 0x04 -> 0x03 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 79.933534][ T6772] [ 79.935844][ T6772] Reported by Kernel Concurrency Sanitizer on: [ 79.942057][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz-executor Not tainted 6.11.0-rc3-syzkaller-00271-g85652baa895b #0 [ 79.952886][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 79.962924][ T6772] ================================================================== [ 79.972688][ T29] audit: type=1400 audit(2000000053.359:709): avc: denied { write } for pid=3209 comm="syz-executor" path="pipe:[517]" dev="pipefs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 81.198197][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.247557][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.297628][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.383720][ T40] bridge_slave_1: left allmulticast mode [ 81.389493][ T40] bridge_slave_1: left promiscuous mode [ 81.395251][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.402821][ T40] bridge_slave_0: left allmulticast mode [ 81.408460][ T40] bridge_slave_0: left promiscuous mode [ 81.414113][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.424016][ T40] bridge_slave_1: left allmulticast mode [ 81.429798][ T40] bridge_slave_1: left promiscuous mode [ 81.435469][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.442869][ T40] bridge_slave_0: left allmulticast mode [ 81.448688][ T40] bridge_slave_0: left promiscuous mode [ 81.454364][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.638058][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.648256][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.658297][ T40] bond0 (unregistering): Released all slaves [ 81.666731][ T40] bond1 (unregistering): Released all slaves [ 81.676039][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.686239][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.696378][ T40] bond0 (unregistering): Released all slaves [ 81.797552][ T29] audit: type=1400 audit(2000000055.189:710): avc: denied { sys_chroot } for pid=6960 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 81.822292][ T29] audit: type=1400 audit(2000000055.209:711): avc: denied { setgid } for pid=6960 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 81.843061][ T29] audit: type=1400 audit(2000000055.209:712): avc: denied { setuid } for pid=6960 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 81.863932][ T29] audit: type=1400 audit(2000000055.209:713): avc: denied { setrlimit } for pid=6960 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 81.987690][ T40] hsr_slave_0: left promiscuous mode [ 81.993298][ T40] hsr_slave_1: left promiscuous mode [ 81.999056][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.006485][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.014296][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.021703][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.030568][ T40] hsr_slave_0: left promiscuous mode [ 82.036214][ T40] hsr_slave_1: left promiscuous mode [ 82.041782][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.049171][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.056854][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.064223][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.074614][ T40] veth1_macvtap: left promiscuous mode [ 82.080164][ T40] veth0_macvtap: left promiscuous mode [ 82.085844][ T40] veth1_vlan: left promiscuous mode [ 82.091050][ T40] veth0_vlan: left promiscuous mode [ 82.096950][ T40] veth1_macvtap: left promiscuous mode [ 82.102456][ T40] veth0_macvtap: left promiscuous mode [ 82.107966][ T40] veth1_vlan: left promiscuous mode [ 82.113281][ T40] veth0_vlan: left promiscuous mode [ 82.227700][ T40] team0 (unregistering): Port device team_slave_1 removed [ 82.238135][ T40] team0 (unregistering): Port device team_slave_0 removed [ 82.297906][ T40] team0 (unregistering): Port device team_slave_1 removed [ 82.307795][ T40] team0 (unregistering): Port device team_slave_0 removed [ 82.790243][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.810416][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.868171][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.937333][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.024630][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.068681][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.107952][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.158808][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.212326][ T40] bridge_slave_1: left allmulticast mode [ 85.218029][ T40] bridge_slave_1: left promiscuous mode [ 85.223713][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.232413][ T40] bridge_slave_0: left allmulticast mode [ 85.238111][ T40] bridge_slave_0: left promiscuous mode [ 85.243773][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.251607][ T40] bridge_slave_1: left allmulticast mode [ 85.257300][ T40] bridge_slave_1: left promiscuous mode [ 85.262861][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.270706][ T40] bridge_slave_0: left allmulticast mode [ 85.276383][ T40] bridge_slave_0: left promiscuous mode [ 85.282050][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.290010][ T40] bridge_slave_1: left allmulticast mode [ 85.295664][ T40] bridge_slave_1: left promiscuous mode [ 85.301314][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.309053][ T40] bridge_slave_0: left allmulticast mode [ 85.314669][ T40] bridge_slave_0: left promiscuous mode [ 85.320308][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.647336][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.657395][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.667281][ T40] bond0 (unregistering): Released all slaves [ 85.675918][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.686191][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.696009][ T40] bond0 (unregistering): Released all slaves [ 85.704326][ T40] bond1 (unregistering): Released all slaves [ 85.712665][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.722283][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.732051][ T40] bond0 (unregistering): Released all slaves [ 85.740021][ T40] bond0 (unregistering): Released all slaves [ 85.898833][ T40] hsr_slave_0: left promiscuous mode [ 85.904657][ T40] hsr_slave_1: left promiscuous mode [ 85.910645][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.918166][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.926650][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.934044][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.942944][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.950322][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.957885][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.965318][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.973003][ T40] hsr_slave_0: left promiscuous mode [ 85.978729][ T40] hsr_slave_1: left promiscuous mode [ 85.984260][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.991655][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.001363][ T40] veth1_macvtap: left promiscuous mode [ 86.006845][ T40] veth0_macvtap: left promiscuous mode [ 86.012385][ T40] veth1_vlan: left promiscuous mode [ 86.017785][ T40] veth0_vlan: left promiscuous mode [ 86.023420][ T40] veth1_macvtap: left promiscuous mode [ 86.028894][ T40] veth0_macvtap: left promiscuous mode [ 86.034491][ T40] veth1_vlan: left promiscuous mode [ 86.039810][ T40] veth0_vlan: left promiscuous mode [ 86.147426][ T40] team0 (unregistering): Port device team_slave_1 removed [ 86.157671][ T40] team0 (unregistering): Port device team_slave_0 removed [ 86.212209][ T40] team0 (unregistering): Port device team_slave_1 removed [ 86.222234][ T40] team0 (unregistering): Port device team_slave_0 removed [ 86.263845][ T40] team0 (unregistering): Port device team_slave_1 removed [ 86.273725][ T40] team0 (unregistering): Port device team_slave_0 removed [ 86.929830][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.957829][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.998414][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.048052][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.118954][ T40] bridge_slave_1: left allmulticast mode [ 87.124676][ T40] bridge_slave_1: left promiscuous mode [ 87.130337][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.138315][ T40] bridge_slave_0: left allmulticast mode [ 87.143984][ T40] bridge_slave_0: left promiscuous mode [ 87.149690][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.227218][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.237897][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.247488][ T40] bond0 (unregistering): Released all slaves [ 87.316862][ T40] hsr_slave_0: left promiscuous mode [ 87.322639][ T40] hsr_slave_1: left promiscuous mode [ 87.328513][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.335915][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.343940][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.351349][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.360397][ T40] veth1_macvtap: left promiscuous mode [ 87.365955][ T40] veth0_macvtap: left promiscuous mode [ 87.371445][ T40] veth1_vlan: left promiscuous mode [ 87.376770][ T40] veth0_vlan: left promiscuous mode [ 87.444297][ T40] team0 (unregistering): Port device team_slave_1 removed [ 87.454666][ T40] team0 (unregistering): Port device team_slave_0 removed