last executing test programs: 5.123211979s ago: executing program 4 (id=179): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000080)={{r0}, 0x1, 0xde99, 0xf}) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000100000000000001b11eb95"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='io_uring_cqring_wait\x00', r6}, 0x10) syz_io_uring_setup(0x72c2, &(0x7f0000000380)={0x0, 0x0, 0x2}, &(0x7f0000000100), &(0x7f0000000000)) 2.277104301s ago: executing program 4 (id=185): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x4, 0x20000000, 0x4) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r3 = syz_io_uring_setup(0x4603, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x200000, 0xfffffffe}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) unshare(0x68060200) 2.266873971s ago: executing program 3 (id=188): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x8a, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe5d) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x9) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x12e0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x12cc, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}, @m_tunnel_key={0x34, 0x20, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x160, 0x1c, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0xfff, 0x7ff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x10200}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x1030, 0x9, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0xff4, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xa4, 0x4, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff80, 0x4, 0x10000005, 0x5, 0xa}, 0x26}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x2, 0x8, 0x10001}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x3, 0x8, 0x7, 0x80}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1000, 0x1, 0x2, 0x7ff}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x12e0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r5, {}, {}, {0x0, 0x2}}}, 0x24}}, 0x0) 2.109983913s ago: executing program 0 (id=190): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x10) io_destroy(0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r3 = accept$packet(r0, 0x0, &(0x7f0000000240)) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff25000200475400", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.107979453s ago: executing program 4 (id=201): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000000fc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000f00)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@grpjquota}, {@data_journal}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x518, &(0x7f0000001540)="$eJzs3d9rHFsdAPDvbHZr06Y3ueqDXvB69V5Ji3Y3ufFH8eF6BdEXL6j1vcZkE0I22ZDdtE0omiI+CyIq+KQvvgj+AYIUfPFRhII+iqKiFG31wQftyOxO0jTZTbbtNptmPx+YzJk5M/M9Z8OZnTN7mAlgaL0WEW9HxMM0TS9FxHi+vpBPsd2esu0e3L81l01JpOnVfySR5Ot2jpXk8/P5bmcj4itfiPh6cjBuY3NrebZWq67ny5Xmylqlsbl1eWlldrG6WF2dmZn+5JVPXfnElam+1PNCRLz1ub9+/zs//fxbv/zYjT9d+/vFb2TFGsvz99bjCRUPy2xXvdT6LPbusP6UwU6iYquGudFOW4wcWHP7OZcJAIDOsmv8d0fEhyPiUozHyOGXswAAAMALKP3MWPw3iUg7O9NlPQAAAPACKbTGwCaFcj4WYCwKhXK5PYb3vXGuUKs3mh9dqG+szrfHyk5EqbCwVKtO5WOFJ6KUZMvTrfSj5Tf3Lc9ExMsR8b3x0dZyea5emx/0zQ8AAAAYEuf39f//Pd7u/wMAAACnzMSgCwAAAAA8d/r/AAAAcPrp/wMAAMCp9qV33smmdOf91/PXNzeW69cvz1cby+WVjbnyXH19rbxYry+2ntm3ctTxavX62sdjdeNmpVltNCuNza1rK/WN1ea1pcdegQ0AAAAco5c/eOf3SURsf3q0NWXO9LZrj5sBJ1VxN5Xk8w7N+o8vted/OaZCAcdiZNAFAAamOOgCAANTGnQBgIFLjsjvOnjnN/n8Q/0tDwAA0H+T7+/++3/h0D23D88GTjyNGIaX3/9heLXu+/c6ktfFApwqpQNXAF+c+4N2DkPlmX//P1KaPlGBAACAvhtrTUmhnN/eG4tCoVyOuNB6LUApWViqVaci4qWI+N146V3Z8nRrz+TIPgMAAAAAAAAAAAAAAAAAAAAAAAAA0JamSaS9e5JtAQAAgBMiovC35FftZ/lPjr8xtv/+wJnkP+ORvyL0xo+u/uDmbLO5Pp2t/+fu+uYP8/VvDuIOBgAAAAyF/S/wP9ROP32nHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fTg/q25nek44977bERMdIpfjLOt+dkoRcS5fyVR3LNfEhEjfYg/mv15X6f4SVas3ZCd4o/2If727UPjx0T+KXSKf74P8WGY3cnOP293an+FeK0179z+ihGPLT+t7ue/2D3/jXRp/xd6jPHK3Z9X8uSBU9a92xGvFDuff3biJ13iv95j/K99dWurW17644jJjt8/yWOxKs2VtUpjc+vy0srsYnWxujrz7Tx3qrKwVKvmfzvG+O4HfvGwW/ys/ue6xJ84ov5v9Fj//929ef897WSpU/yLr3eI/+uf5FscjF/Iv/s+kqez/Mmd9HY7vderP/vtq4fVf75L/Y/6/1/ssf6XvvytP/e4KQBwDBqbW8uztVp1/dQmskveE1AMiROY+GZfD5imaZq1qWc4ThIn4WNpJQZ9ZgIAAPrt0UX/oEsCAAAAAAAAAAAAAAAAAAAAw+s4Hie2P+b2birpxyO0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD64v8BAAD//8qW2MU=") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0xaaeb, 0x10100, 0x0, 0x269}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f00000003c0)={'wg2\x00', @random='\x00\x00\x00 \x00'}) 2.040140168s ago: executing program 3 (id=191): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f0000001740)) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 1.982543432s ago: executing program 4 (id=192): r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x81, 0xb4000) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000140)={0x2, 0x1, 0x8b, 0x10, 0x4e13, 0x7}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000900)='ext4_ext_remove_space_done\x00', r6}, 0x10) close(r5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r8, 0x2007ffb) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) openat(r8, &(0x7f0000000000)='./file0\x00', 0x101400, 0x3) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1544010041800400140012800b0001006d616373656300000400ff7f08000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0) 1.968620334s ago: executing program 2 (id=193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r7, @ANYBLOB="b100000000000500280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002170000", @ANYRES32=r7, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0xa8}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x92, &(0x7f00000009c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000002480)={0x958, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6777}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x43e}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x8, 0x3, 0x3, 0x6}, {0x9, 0x6, 0x1, 0x2}, {0xffff, 0x6, 0x10, 0x1}, {0x6, 0xc, 0x4, 0x4}, {0xfff, 0xe1, 0x3, 0x3}, {0x3, 0x9, 0xe9, 0x5}, {0x7, 0xfe, 0x5, 0x6a52}, {0x392b, 0x3, 0xc, 0xb9ed}, {0xff, 0x2, 0x10, 0x90000000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe30e}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x50}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0xd0, 0xd1, 0x7a55}, {0xff, 0xef, 0x7, 0x5}, {0x1, 0x81, 0x1, 0x7ff}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x958}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) 1.75449507s ago: executing program 2 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = syz_io_uring_setup(0x26c0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x4000010, r2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3d59, 0xb283, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x95b}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r7, 0x0, 0x0, 0x0) request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='\'\x00', 0xfffffffffffffffb) 1.754231869s ago: executing program 3 (id=196): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000540)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_pwait(0xffffffffffffffff, 0x0, 0xfffffe38, 0xb328, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0xe, 0x1) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mlock(&(0x7f00004ce000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x80000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) creat(&(0x7f0000000340)='./file0\x00', 0x0) 1.75384528s ago: executing program 0 (id=206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000cc0)='./file0\x00', 0x800714, &(0x7f0000000c40)={[{@quota}]}, 0x0, 0x485, &(0x7f0000001040)="$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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={&(0x7f0000000580)="2aa52279089bc88a2139a406dac0bb262ae82b8ab1ba73399af0d75951237b911c2db141a9a2a4a42bfe630eef62bb70ffdc91cf8370521c35271a09fdc9b6881aded5132a0f75", 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.694504044s ago: executing program 2 (id=198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) msgsnd(0x0, 0x0, 0x8, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) msgctl$IPC_RMID(0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000009c0)='./file2\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2ca, &(0x7f00000011c0)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigpending(0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x201, 0x0) mmap(&(0x7f00000ea000/0x3000)=nil, 0x3000, 0x100000a, 0x4000010, r5, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) 1.607559071s ago: executing program 2 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2200002, &(0x7f0000000080), 0x1, 0x53c, &(0x7f00000025c0)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) tkill(0x0, 0x7) syz_open_procfs$pagemap(r1, &(0x7f0000000200)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x210808, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000680003010000000000000000000009000000000006000300000000000c000200000000000000"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000000040), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 1.607070431s ago: executing program 0 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x11}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800eaffffde1a00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000005dc5773f39c7f424f8ffffffb703000008000000b704ffe80000000085000000019500009500"/58], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0xcd7, &(0x7f0000000a40)=ANY=[@ANYRESDEC=0x0], 0xfd, 0x305, &(0x7f00000004c0)="$eJzs3c1rE00cwPFf0rw07dMnPTw8iCgMFUSRLk3AmweLtCAGlLYRrCBs7VZDtknJhkJEbA+CV88eevAoggjevIh47cW/wLdbL71ZsDiy2U3cJkuaVvrq93PoTnd+v9mZnd02nbabtUtP54tzjvFDx8SX8Ld6yS8sy/kPK59PT77/x/tcqfHRqUxWqaiI3H74cuhdtf/mm3/fJmV18M7aevbb6qkpkZ9T9yWqCo4qaa21mimXqxE3ebbgFA2lbtiW6ViqUHKsSlWZ9XpzxrbUnF1eWKgpszQ70LdQsRxHmaWaKlo1VS2raqWmzHtmoaQMw1ADfQIRGWyWom11kU6J+RcbWsu6O0HJZdFah0QvNwpxf5v8s87iMGmZ/46xbRdHz172DPthQ8ea85/YZv5x/Hj3/5dn3dz/OH4mb01fG83lxiaU6hWZf7KYX8x7W6/+U78UxBZLViYuTG+Ke434JOJ+HL+aGxtRdYNydn7Jz19azHvfHEbn/PyMpN3XKYF8aeRnvHy1NT8ufcH8rKTlv/D8bCNfooH8hJw7E8g3JC0f70pZbJl1X9wG8h9llLpyPddy/FQ9DgAAAAAAAACAo8hQTb/X7yPNX/WmDCNZ/4uPZn3K3e3GeQHN9fURSctm+Pr8SOj6fkxOxg5w4AAAAAAA/EWc2oOiadtWZecF6SKm53mqwyHiIuIWRB4PuZ3p2OD/fo9bqtw2QrISItLeTk83ffYLqYve8V5N+B2T3Z6oPSxERSS4x/tnDXfw9utGTCrs/DjRHV0Aw4n2M2/adu++Djk4UtFahwZL7+4u7GToALspRDYbe06ExujI9u1o0457exo35nZHvxx+O3RZcGffm8HWEzX81WvX7vBF43tziQ8AAADAERL4wQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByQXT2JrfHc/q1V4r9FfPsj2VrfJ57n/gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4hH4FAAD//5t/ryo=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) utime(&(0x7f0000000180)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000001e0c000000b70800004d0000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff32ad5c8ab2635cd7f06c6ddd9afd12f30429bfdcc971505600f0ffff", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x445, 0x6, 0x5, 0x24, 0x7}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}}, {0x6, 0x2, [0x401]}}]}]}, 0x98}}, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x339f607a, 0x200600) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000800)="5800000014009178d427323b4725458db45602117fffefff81000e224e227f0000017b00090080007f001c01e809000000ff0000f03ac7100003ffffffffffff0000000000000000000074ff000000eeffffff00000000000000f5e1d1a4d290cad25b248e58247c4d153e9e9304b27c85c0e1293765d6ec52aad9dd9ca788ce997cbe42fd306bc8f2bf545a075166d5dce3724f7a7d04d08bbf75b77e02ac9afc", 0xa1}], 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)=ANY=[]) 1.455205162s ago: executing program 3 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$eJzs3b9re1UUAPDz0uQl6JAKTiL4QAenL992dUmRFordJIM6qNgWpAlCCwV/YOzk6uLo6iIIbv4TLv4HgqvgZsHCk5f3XpPUNCbVtOr381l6e+85956bvlI65OSd54cnh1kcX3zyU3Q6STR60YvLJDajEbXPYkbviwAA/ssu8zx+zUur5CUR0VlfWQDAGq389/+7tZcEAKzZ62+8+dpOGhFZ1om94efn/eI/++Jrub5zHO/HII7icXTjKiK/Vo738jwfNbPCZrw0HJ33i8zh2z9U++/8EhHF/ltJfWSZ3q7y9w92t7LSVP6oqOOp6vxecf52dOPZOefvH+xuz8mPfhovvzhV/6Poxo/vxQcxiMNxEWV+NCI+3cqyV/Mvf/v4raK8Ij8Znffb47iJfOM+fy4AAAAAAAAAAAAAAAAAAAAAAPy/Pap657Rj3L+nmKr672xcFd+0IqttzvbnKfOvu/rc6A80yuOruj/P4yzL8ipwkt+M55rRfJhbAwAAAAAAAAAAAAAAAAAAwL/L2Ycfnbw7GByd/iODuhtA/bb+u+7Tm5p5IRYHtydnNarhgp1jo45JIhaWUVxi6Zp/r9oe3O2le+a2mr/5dul9vv7ru1eD1hIxf3NQ1ZLd+oy1o57p1A/J99MxaSx5Vjp/qXWar/T4pXOXuivfPX16PBgtiIlkUWGv/Fy+ZtVMcvMWaUTcsnOrGkylz8Z0ln+ei9+UP0l06wAAAAAAAAAAAAAAAAAAgLWavOl3zuLFwtRG3l5bWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwryaf/z8edKrpycy8waiKml1qTmbybr2UxunZA14PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ8QfAQAA//+C9FlJ") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.453546642s ago: executing program 0 (id=214): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000fffffffd0000000000000018120000", @ANYRES16, @ANYRES64, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x58000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x6d99, 0x0, 0x0, 0x400fffffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0xf4c, 0x8, 0x0, 0xffffffffffffffff, 0x46, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xd}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) close(r3) 1.338776701s ago: executing program 1 (id=204): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00'}, 0x10) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x100000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x106) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet(r0, 0x0, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040), 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x2d, 0x3a, 0x30, 0x0]}}}, 0x4e}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x180000000) syz_clone(0x2005400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.273670995s ago: executing program 0 (id=205): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x2, 0x4e2, &(0x7f0000000b80)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x15, 0x5, 0x0, 0x1}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB="4d66849c18206a1aa8f808859161b144b05b8b8202bcd0b1f1ccc307f1a716682e48b5f9ea60d4178f79c9ae7971255ee02a97d9efc6777496d6bb1b4218347e36760f9683d8a47d800716f14e8c971211fb06142aea39905efe0d5a480a46eb307a1ba6c9f7731823746e4af430f74d0854c29bb89653259d2f740227da7d1c7cb79b9d84e8510de13b309670a0635172579b4220b6aba1bac21765ddb2b310ccc747b51d0a530c85f1121d435fb89d4534b28d21d02f3ed09982b60b5d4ed9fd8cbcd9bbff2825851a1d49d42a8cc9f42f7ae6da9ff42181e5551c567a46e44fb00429e400070c869133b20f17177e3fbbdc634fc6409297772b617cd65267ffed90671c1f42e599ac0f47ec329b343da76d5bb0c3574f743e485632e94a9a6e047557e1f57968c0ffba3b62cc1003ffd9991bb25283a817736b557c6d3eefea425eb73a6d5065192d654a4ea70a06f4ad46c551c65700653103272cf995769d03f4fe086ce76d16cde11c722e9838595a0658b0aa93863e3f0f6d26c1", @ANYRES32=0x0], 0x24}}, 0x800) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) readv(r5, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {0x0}], 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64531d7535f784ce34998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99", @ANYRES64=0x0, @ANYRES64], 0x0, 0x2a9, &(0x7f0000000a40)="$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") io_submit(r4, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x48) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) 902.284703ms ago: executing program 1 (id=207): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x200, 0x3, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x510, 0x1e8, 0x358, 0x0, 0x1e8, 0x358, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x941a, 0x7, [0x3f, 0x4, 0x3e, 0x28, 0x27, 0x24, 0x22, 0x6, 0x8, 0x30, 0x3c, 0x1a, 0x3a, 0x40, 0xd, 0x3f], 0x2, 0xffff, 0x4}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x702, 0xffff]}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x80}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x7}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7fffffff, 0x80000000, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@icmp={{0x28}, {0xb, "b5a6"}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="db46e371b11d", 0xe1d, 0x4, [0x0, 0x18, 0x17, 0x24, 0x6, 0x28, 0x35, 0x2c, 0x3b, 0x3d, 0x16, 0x36, 0x2a, 0x2d, 0x1e, 0x35], 0xc00de3d359876e5f, 0x7, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) io_setup(0x8, &(0x7f00000007c0)=0x0) r3 = eventfd2(0x1cc0, 0x1) r4 = eventfd2(0xd7, 0x0) r5 = eventfd2(0xffff, 0x80000) io_submit(r2, 0x7, &(0x7f0000001d80)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0xb353, r0, &(0x7f0000000800)="013ac6f3ffc9220e5bd6250e1d32551a2c9d6a37520f3fba1ca99cabd3ef88c5645372d3c0132b23d9e9f94505953324e3ef42a1d59608f4b7f3ef7f8504a881222708d7a08c65f2dfa5e9e25f0742debc1b40599bb2b30ed1b349e7d583e8108a1ab4e9ac0c43d20fb5ed4f12a10d38f054e6ac629c986f81176e", 0x7b, 0x6, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0xfff9, r1, &(0x7f0000000900)="ddc84f926a9bb74f64e500ed871df6ccc003d0432693494f4f1d7d05bd769dc22bf15391817dd39a4bc52f1cd4be08ed39e5cdfc5abf0b5ba3e05c5191cd2414f80e4d2a424d36a4ec8e3ebc598f4413752367e6a0dc9aa3d1ab79fec7b6378156", 0x61, 0x0, 0x0, 0x2, r3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, 0x0, 0x0, 0x9}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000000b00)="8a0a4bf3d186daba64e8c3561383b466ac20cdb1028d48e588b6d597457f40e71cc76898e3ee92f36dc50b8fc5f840ebff5240f16c42d1515c834fa5e623b9803a2da85659eb2bf699fbdea81d4a88e8f7e3291b916442f5133f788fe2bb08ecdcf637697e59894d9349fa8b94f08e95ea598d77eb04459d8774d379c23f86eb1a3c704a0b4a6eb4186f4a00641d0ba95992b931cc9257c156efe35a69bbb54b92aa4e0f8591555eb7ef0f409ba4a418830ba23ce72b13175ff28d29fb54a9ae78cd5ee3f1c9ae97168f51e50495a372c1fc6e3dd16f72bbe7225b1855fc408a3144340023f9ddb4cfec541e50f1d681ce282f69fe80bc12bb20109394c34793f7dabe9d3428d620cfb0e777525409841ddc9b1817e67ee9088f2a108db76f42a469795df515036c4d6e57b132e850ec601a8e1fcf6545e4b85f1c08c0b74e94c303be44bb8a32eb82d56f4157fa04d3193910b289e88646eb52bcd790880bd28389113b623c2605cae162e974f2b2c03842840bcfd45c170713cf39aed5533501ec3d0ae5e9eef62b182ed35959806d8edc63389113a1c8bd2a84a0d059256e4d707b9c509b9ebf98596bac83b0aec824f4e6c8ddb7e345bd90cff1fd7d4616d1780e95f76afe9d3ecc72faa03182960d20cb706150fc727f7a5cfe6f967f3b3705d28593bbf3c11cfdb5d5d871f0a221c99aa762cc89ed28b6412e86ed697f8ae6f24cb45ed85c7c0aff47ddcc44366f3d7d41823a520aa1ee7dbbd382dbca06cc2589ad097e0fda852cd7ec32e8c7ef8797a67ba615ac99d876f8389639735e547c4cb0efcdd473ce1f45058e7f0c7ea32ff9e1f68ce5783a1c68a7fbbb8ede652ce23864a3ea2eafa9cf5a44eeb7f2503a13c9ab22aebca078a869b5dace87a1da68fa61c8cadc12a29432efc0528742dda94cb63b4a797abd15f612daba9b3633bd23bd0a3bc39cd2a1ea59421c51778c0d009290b1fe11e84d688b9d8abf5b5e64216605768fb81b63e18c12306f5feffa9a3d07861211453539261c9dd27d6ad6bad00515e2ca7ac11c7a3fd9cdf1369e18ea7c49b000571e918ebd834c6fd91f38b82b41dd37f6dcd32a06ed8b2d22da78c775384f0a34fa9c867bbd03cd216e0b31d26899f2d4815077f59cc67509f7f820c46632359d82d42cbc1a0b2388bb9f595be498edf6c7e90f18079c8ebe7bcc6c0288f48461b4084c2276e63d416422b8165b965fb26ebcb07fd96a797d44c8b74eac7959c03687ca8793216bae3029cc176f1d1351aa91baa23ae916c0a9cd40468029f81b624c80838456458699347ea2bd1fe9bb150ffae6f4f4abe8bda6aa04f58e8073632af52bc5a562b3ef4927985b9361fa5d401a4bd5cd43672d397e7d0c8a5ef2ca3934c1141dac69d4e38833329f41e59e8eb994aa7a36b6fce95c98c23f666b4b1a41e98d49488d8739b6a915a31baddacf4057e1783338b6d71cfde8d2ac28f35a1940d7659ac31a447665b305c104d42c1e1c88ddcf3d83bf08a352e2f5f14318d0b22da198fb9db2ebe1e163e80a76f3c5cedee3a6cbeb882946839bd91c7db4528ea3ee8fdb72d9a4c97e93f4cc3f814d8391b4637fc49f74c2b74a131b86f1987a86a68f022b4d47c62831a630ac686f91771bb81129d73f78b148930b8940ca2d018f656370999a14ba4f493d20f1cb8c0227863f688fc0641af83c516310ca89c459208e2021499532a5374fcea718ad1d16e0767c9a6cd654fb0b0963131ae9d377a7ab618f02495a1f2cf224b9fa864856fa55b58b1ed2adad5c56dbb169742fe1adf3d9baf3985c5e110855a45d5d3b04d5558e1aca68a7268c6815666dca163cd6975a1cdc938da1ed100a7f6d49b03655945d574bfd78c54bf63efb48bbef0648a5f853c41d851d5db70ebe57a97f1ed83713872f3591e2bb069c04b0481b4ebcc503a3b36a23bb91b6efa8bb4019d01069543a4fdd1989c7ef68c6fc0a875fd6d28af572dc5caa1f946bfee73440fcb086fb4b12aef95dcf2805d9258a9d9ba373b1823224119f3f5bf49958d2ca904de02fdd9b23083eb0fe466d1442733f68eb6121a51cfa7aabab0e1390a4f43dd66456d870f50e8b656dd6992facce89c411a049b2dbf3674db69a1db654d2ea375179a2d58372533a8f3ea53d7edc8edd938a342edcf296697265d6975d68dbc96b9984bee926dcd274334bd022029eb7c59fb6b226fc0821e9a930b243985aa304d1d899e91deb93b8493e4081665ca02a78e58b7e9cb9abe985f78ff33525bc458f55ec875cec88a8d14fa7e5f3c8ac6070ca3045d9ad8f96d6dc5c91c04e86729d20a19c3dd0e4841108e993a6b3932badcaa003e2da8d9c1b86e385e8569d59929399c4bf529c62ac3bb014d6d9f74d39e72df411e168451ccaa8036d43668efcdac9b6bfebbcbc0f4727fbc0596cbfbad4a61ab7fc0af07f93f0a6f7d6be2c8ad6e35d670e95329ca68e174a834002b29e9e9827b5bc11d6462aa7c7879bede8dfc264248772d6f7654bb8e3374da8eb14b68fd2bc915b810a323fa563ce46234a9949d52ee8cc8330605cb68869ea8ce319f18e5d2ca01c4cf9ee39e314345f0b8c0622081285fdc31986ba3f050593d321f4084adeb77143c589d861b256b696b8382bf90f869bef6bbed4e319960083ed49e56ef5de4d2fade3e9c91e3b7a3b33d86b6516a4fc43a772ce97e6e18f7ab42e3d2ae0ef047e5299cafb48f183f9c818c92dd1cb976442d28b30fc95ad56b01ee11c09aa2104e43033ae100bd4691cbed6cde7054acd13c4512a096a32af45ed7250a1ab64cb8741ccd1c3c0f90ab1bfa37eeb72b67c9d7805cda94922fdb2400886a3013084dacf13fa0a3b4ec54c97f6f6dec2ebfbd0c8426afb4c701b03d30363e2676f5038164831187d858637bfce83bad7c8954ca57f0e4e2f67c96794c380d9f6e013d4549a8dedc0c2fdd8277df3cb02394cf8c877fdf4b47e12e7806e6fbeaca3b418eb70f1917fa76957944742da1d5dafc1a218b5f53c8ae473aacf946b745d334cd49a9e4eb21abe6d1325b7e228291d51b081a18ebef12c612fe18d4fbfd5ae863fcc729bb8ba2963d119d0e32a2d45ffb9f56a26c0d60e7764d1741757c3275777f847768cea9add0d0b69c5dbf9c9e9d7f9df0e81d604aef56b6663bee1a65ed412d89da68ad34b82bd56d5b2b44d5f2df55ffc718b990d949a311b07f9990185cea2273bdcbbc27292a4e9503ce198b0a80a4744237bb95e785e3cfa8c93ff3e0ba9f9f72739d1c2bfc020f2ae974cf970b5f0d2522ca1eebbd973396ab93b437b3d3bd9054a27cea259b2769d6e2b1ed8db909f5e6195ffdd3a05a14964f3bf4f13ebdd9440770c08e046b512ef6cfc23be997c935ef92950d89e5b278fee6705e6fb1987242d48d9b760eea5bd8f035d0388db9533b0fc715258ff75220c8a9395d6eec97e338338f3134c82ee34407fd2782e8cdc1d6b1cf888546ef3cfd71ba8c0dc578f47a35de0fbb2462fe62c5b11de760fd7e3c37b0148130aa6acd3a0181a89bc09dd1a5b810b5f0188192d6bf9ba2d203f0289ad9e45da3007e729293d507f6a53b2d7c16cfcb26b3b6c8cb6ca38d4928ddaa38e9c4e0a542111cb5fb8151bad3f3a902b606387c7a057516914132ba66c264313606b85be36d918ca3375eadd04eb446da74c2ab60731411124875ed6b88b2f54455be3fa783d3e18e217de64abf98bf6bbfcf09d192c36294b5f5bf897147b6feb48b6064a05b52d3b3c1f03cb1dc8ac0baf67f174346d76531663e2eeb9f1c8b3ae400279112a914ac34bd86e5b2ef03c54924b6deb8488884a5500b1fea1f2f6a0b7019ad9a53210512098e37064aef615e6043096e78d10e44bc1ca391637c85558e6930380caa9c4f8357deb097b5e2a71315c562d752fd60cb51d39bea8aa40e00e88c8e59f06b1745684101b5a90c9731f30c0dd944ffe278ee2b7834bd8c3c0d9c2b364d42c57236f6f9be60d547748d33ef90bab6e39eb205c35a6f78e1f452d26746a2906bb9efff2efe49ae91320d31d64ce78c7a40084eb98867589af45c4b78c00e4385f6419982a1dd33d9598c49329e6495f273a591e0972ea32b588839c5838e023428794c95ad33b90ddf64d5243766a1d0e8e4ba4b9d9a120451a212cb7afabb12d1bad09bd5b4b7b294caf2d98e90521e922ac6e6e3968f5de9ef63f2c3a977365de9578bd068238acb2a66d96fc64cc8de57e920cc13d4c513c75f3979bce892a6b70ee1313ce98b7fa15769660835285592ce6795c5bd35e9f943de7eac34c1da08ae9a171b1bbf7c3ce43c947b818353e5073ef2c13e3e53767ee08db85552b55b7d5851463478b09efc0ef0e76b2a367fb533316e7556782ef80129a23c6f7f6f5fd76912702ee20ce4753df63e333dcdd017b9c82e0c34427ba478e0cc9470f5436c25af2723b1a81304443cb1c0df1f1f43cb9b92248eab9d55f889f5f7bd57a94af35d34eb97d28dbedc14df44fe9f3bb0d6d34a6159c2d266a0ea9df08eb9337e82781ed4bfb21526ec9d4331003d4383811a1a65e24c4ed6cb0cc1cff4ecda5f964f464e67cb723765685f7cf5d76aaf32df2caeeb2fdac22c338a0eb90b09c5ab9ccedb442b0a9610eefe4ec0c5a29dfdcc67dd9ba7427a027aa479d5dc888146999b066a90c7fc16f720ea11e52898a93685172f85da8e8fb580a38ce21c0d89e2229c9e967fdd696ec69a0ed20f0ecbdddb99f719cf340b9b83aabd9e4e65dae7512c798de46ae87c9f9d3ad132fbb1e3b68e2fca9962df3e615578a60ee1dd52c4c54e375e897dbdd0af1d5f10bb90e32b63215dd3495186f223f7d618dda4a0d316a1b28b3e10bf7d94b9b31b03aa6c4f293e7a39d4517c808934fdbe29fa85648c7e8b992f5e3d54de08cd62bbe5eb030330fb2ae5352023497299cfe560c4f363e22b8edd3b610f356596dd618e497aaed6918105b567ac87e6427d07e2ebdcfc13c0440228ce1462f37346975fbda1107d56f68590cc01cff9a1617852b57f0c989e80c10a54894694acc36c17c5f784e5de939ba58e3d7ed37960f900ccc14041966f4a54dc8e5efb6602e8215eb74653edcff99a41f16d511db3304bb5695b4b5e73353c40c3d94d8bf5e43b982d3b15cd5c63072d4e7995e96b4a16dd9332cb14072dee50b1c54a8fd501b31b81283bbd27dc31c300960a8ab77201d55bec021d6cc430bcb13893ad095a4c2a074b3599c3b4e04d1efcf4099a74162a9b213622ef77da9fbfce57050577f22881a8ceea3002002ac1c5d34c29986b0d0ec4bb43ff6f11e6f0f26891ed9b7102f9721f8f8177673158cc8d1ed1d0ceb325127164506d1a84ac9b1721f353eb2d5d26cee636f4fcc6ce932c26e1c91f7e9250c2928dd322d40d020d4d34e2926d1b6148d7654bcddc248e337f0c59bb6e145f406805f90404fb23563e1893d82d6bbc701c688b7deedb4759f53bbe84e029fb716e73d0d88880c23303abb0fca39304f28dc885afe0ba99b5c60d3c7dc6ae87dbedc9635a3807505ece721480abf4c2c895a286e37ef44ea7568d5ee3e5a81fbeab9a813b086", 0xf80, 0x2, 0x0, 0x4}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f0000001b40)="60ceaf0d16dbb60a08ce165d3460b8fa5297f7cc42e81599241debaa09c8b7c2600a75267f404acda588a63948c0e667bb02b9", 0x33, 0x7ff, 0x0, 0x4}, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f0000001c00)="39d94faccc64e7c6ed86c4e258d0bd97ff9703339812c19fb0f73def2fd741f67f13fb83967a9fe6bef298cf7f9a570c086d459dc66199", 0x37, 0x5, 0x0, 0x1, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000001d00)="cf90308cf1caf0eb77ace32d2fd7316c49bfc5c788d63fccb0d08e2638", 0x1d, 0x1ff, 0x0, 0x0, r5}]) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ppoll(&(0x7f0000001dc0)=[{r6, 0x228}, {0xffffffffffffffff, 0x1400}, {r0, 0xc010}, {}, {r3, 0x4450}], 0x5, &(0x7f0000001e00), &(0x7f0000001e40)={[0x3]}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001ec0)={0x5, &(0x7f0000001e80)=[{0x3, 0xa, 0x6b, 0x6}, {0xa019, 0x80, 0x1, 0x2cb}, {0x8, 0x1, 0x6, 0xffff}, {0xd45a, 0x6, 0x1, 0x4}, {0x1, 0x2, 0x5, 0x6}]}, 0x10) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000001f00)=""/222, &(0x7f0000002000)=0xde) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x10) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002240), 0x1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4140}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x30, r7, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2004c040) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000002480), 0x8) epoll_wait(r8, &(0x7f00000024c0)=[{}, {}], 0x2, 0x9) syz_open_pts(r6, 0x40c2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002540), 0x4400, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000025c0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x9, "11e54a72a9db3af74adda8018f24fa6a3cc1d4095b93bd8b8473885c41379aca60d269c0b159a7147f8f9c415a5e52e2e30f107e10968af02ad77d50987e49", 0x26}, 0x60) 844.012338ms ago: executing program 4 (id=208): ioperm(0x0, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) clock_nanosleep(0x0, 0x1, &(0x7f0000000140)={0x77359400}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_script(r7, 0x0, 0xfffffe5d) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x9) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r8, {}, {}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="0e", 0x34000}], 0x1}}], 0x2, 0x0) 772.280103ms ago: executing program 1 (id=209): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0xb) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0x0, 0x8000, 0x1e, 0x5, 0x522, 0xe7}, &(0x7f0000000300)=0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(r3) openat(0xffffffffffffff9c, 0x0, 0x141042, 0xb6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) connect$inet6(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write(r1, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1008, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 726.524416ms ago: executing program 2 (id=210): socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x0, @multicast2}}) socket$can_bcm(0x1d, 0x2, 0x2) bind$inet6(r1, &(0x7f00000001c0), 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket(0x1e, 0x4, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500090000000000050008000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0xb9ca80683c163581}}]}, 0xfd, 0x48f, &(0x7f0000000940)="$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") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) gettid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)) ptrace$setsig(0x4203, r4, 0x0, &(0x7f00000003c0)={0x4, 0x0, 0x1}) sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0xc1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) syz_emit_ethernet(0xb59, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xb23, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[@routing], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025a"}}}}}, 0x0) 572.843727ms ago: executing program 2 (id=211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000200ff0000000000000000008500000041000000850000000e000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000000c0)="c5", &(0x7f0000000280)=""/239}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x8400, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, r7, 0x21, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 562.956948ms ago: executing program 1 (id=212): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/80, 0x50}, {0x0}], 0x2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x708, &(0x7f00000005c0)="$eJzs3U9v2/b5APBHjtP65x/QDdtQFEGasmkPCZA5ktw6MHoYNJl22MqiQMpFgh2KonGGoE47NBuweIeul2477CXs0OveRM+777bX0PtO9SDqT2xHltPEtYPg8xFifkU+5Pf50gIfU6GoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACi1l6r1xu16GTdrVvJ0dprRb45Y/l4e98emMzoN6I2+BcLC/HacNZrv3i0+NXBj8txcfjsYiwMJgux+/+v/vS9n8/PjdefkdCpePBw99OPd3a2vzjrRM7IRtrNyjzbbG2kSVbmyerKSv36zfUyWc86aXm77KebSbtIW/28SK60ryaN1dXlJF26nW91N9ZanXQ888Yvm/X6SvL+Ui9tFWXevf7+Utm+mXU6WXejihksHsTcSH77efFB1k/6aWszSe7e29lePi7JQVDjSYKah+adH70YJzOa9Waz0Wg2Gyvvrr57o16fb9YX4sCM+iFxYJWkXp8fv2hrhzf+A/z7aVbiRzN34Fn8efZv9iQO23Ai5kb1PzqRRTe24lYkUx/tWIsi8tg8YvnItxF/qhrX05n97q//4yr/2qPFFwY/Li+Mnl06qv4fkcvpPR7Ew9iNT+Pj2Imd2I4vzjyj031sRBrdyKKMPLLYjFY1JxnNSWI1VmIl6vFR3Iz1KCOJ9ciiE2mUcTvK6EdavaLaUUQarehHHkUkcSXacTWSaMRqrMZyJJHGUtyOPLaiGxuxFq1qK3fjXrXfl2fkOAlqPElQc0bQuJi/NHpdzj/2B8Hs+n9jUv//UdWHB2+fQnHi+XBu3DjZAzg8g71x/Y+9ve/3Bs46IwAAAOCk1ap332uXXpo8X8866W/OOCsAAADgJFWXIV8cTKqrnV+P2uD8v37WaQEAAAAnqBaXRu8CLMYbw9b4k1DeBAAAAIAXRPX//5cGk8VB642oOf8HAACAF81fH91jfzem3mO37M1FxHxE1L7q3Xq7dr81iGvdPzdc79zhLfbXL9ReGW2kmqzMj56104u10d0vJzfB/G40uXvcvf5rRXH+WROImBvFvHlnOL0zWVL1srieddKldt55rxGt1itz/fRW/w+f3ftjxKD3v3U3X6nF3Xs720uffL5zp8rlq8FWvro/upt77Qfk8vt4fRjz+svx2Ih3o3Z+7yedtD7qd3HYb33/+EdjGQ/p//b1+f2UPhf253V5cThdPDj+hcH4G0tHjX6x9vJo/Wca+dfj4LeuvDWcTMmiOSOLal809+//Q/viibKIt47PYvm4LJafMQuAs3J3UoUO1t3zk/r/WN19iqPc6VT3r+PKMObKherAOn9hyhG9PvWIvnfuUI19+ur2z7g6jLk6Dj6qxg7G/PdJv42q328GK3xzZL9l51+j1v3fxfW5h+fjXhW7/VmzubxSf6def7cZ56thjCaDTP+r9gBw0OXq+v9Z37EzPeJcxEvj2v1OvDmMeHRWPahJk4r3s8klBUvxSXweO3EnrlWfNqiuOJja7+K+yxCuxeVRstPPWhf3fcPLtWPO6oax479dniR2+PUyAPAiuXxMHZ7U/8nbx6OIqoQO6/+1fefdC1POuw/W8tlnx/trOQDw40iL72qL/b/UiiLrfdRYXW20+jfTpMjbHyRFtraRJlm3nxbtm63uRpr0iryft/POoPFhtpaWSbnV6+VFP1nPi6SXl9mtX0XWSZPRV7+X6War28/aZa+Ttso0aefdfqvdT9aysp30tn7dycov9/b2BiuXvbSdrWftVj/Lu0mZbxXtdClJyjQdBd5MiyRbS7v9bD0bNLtJr8hejuJ28mHe2dpMk7W0bBdZr58XVTbjvrLuel5sVptdOuudDQDPiQcPdz/9eGdn+4vpjYU4clHV+M/s1YeNsx4jAHDQrCr92NVnAAAAAAAAAAAAAADAmTjm839P36gdmjMXET9WXy9cY+/LU+lr/AEPv53HG9/sm5M8B/mceuOMD0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMMX/AgAA//8a7U+y") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file1/file2\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x14, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x29, 0x4}], 0x10}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x30}}, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x4010, r6, 0xca57e000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, r8, 0x1, 0x20000000, 0x0, {0x54}}, 0x14}}, 0x0) 410.41046ms ago: executing program 4 (id=213): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x2, 0x4e2, &(0x7f0000000b80)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x15, 0x5, 0x0, 0x1}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB="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"], 0x24}}, 0x800) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) readv(r5, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {0x0}], 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64], 0x0, 0x2a9, &(0x7f0000000a40)="$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") io_submit(r4, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x48) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) 358.518414ms ago: executing program 0 (id=215): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0xfffffef1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0xfd88}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454cd, 0x0) 302.903157ms ago: executing program 1 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) write$selinux_load(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='x\x00'/15], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x8, 0x8b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000540)=[{&(0x7f00000002c0)="00214717a70700000000030600710a069d317ebb906ce74b18272786533b905a56fef73ab4", 0x25}], 0x1, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r10, &(0x7f00000002c0), &(0x7f0000000000)=0x6e) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 302.032648ms ago: executing program 3 (id=217): creat(&(0x7f0000000480)='./control\x00', 0x0) r0 = inotify_init() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) read(r0, 0x0, 0x26) r2 = inotify_add_watch(r0, &(0x7f00000001c0)='./control\x00', 0xa2000396) inotify_rm_watch(r0, r2) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x82000, 0x0, 0xe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000980)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_skbedit={0x10c, 0xb, 0x0, 0x0, {{0xc}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x5176d9f1, 0x4, 0x18a, 0x10001}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xcfb4, 0x4, 0xffffffffffffffff, 0x8, 0xf3a}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x7, 0xd4, 0xaa}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xc8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x2, 0x4, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x0, 0x3, 0x2, 0x7ff}}]}, {0x4e, 0x6, "d8fe32d59986a3a3e00d8592b41cad9c2e3955a8a83ca9ee38fd0b0887854bbf4ccc5be2a1664779990347fef41909b99e633b44ae515ccedf62b8f3896829989b6b2c8caf2f0e7333f4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x124}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r5) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x80, 0xfffffffe}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '[-.'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) mq_open(&(0x7f0000000180)='\xf3+:&\x00', 0x80, 0x4, &(0x7f00000001c0)={0xffffffffffff7c92, 0x3, 0x2, 0x180000000000}) mq_notify(r3, 0x0) 170.536597ms ago: executing program 3 (id=218): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xb, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) sched_getaffinity(0x0, 0x8, &(0x7f0000000580)) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/240}], 0x0, &(0x7f0000000480)=""/126}, 0x1}], 0x37, 0x40010040, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 0s ago: executing program 1 (id=220): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000540)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_pwait(0xffffffffffffffff, 0x0, 0xfffffe38, 0xb328, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0xe, 0x1) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mlock(&(0x7f00004ce000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x80000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) creat(&(0x7f0000000340)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): syzkaller login: [ 10.820814][ T2968] udevd (2968) used greatest stack depth: 11936 bytes left [ 10.821919][ T2966] udevd (2966) used greatest stack depth: 11832 bytes left [ 17.745007][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 17.745021][ T29] audit: type=1400 audit(1725534730.174:76): avc: denied { transition } for pid=3170 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.748934][ T29] audit: type=1400 audit(1725534730.174:77): avc: denied { noatsecure } for pid=3170 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.751961][ T29] audit: type=1400 audit(1725534730.174:78): avc: denied { write } for pid=3170 comm="sh" path="pipe:[1613]" dev="pipefs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.755344][ T29] audit: type=1400 audit(1725534730.174:79): avc: denied { rlimitinh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.757903][ T29] audit: type=1400 audit(1725534730.174:80): avc: denied { siginh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.117405][ T3191] sed (3191) used greatest stack depth: 11720 bytes left [ 18.772786][ T29] audit: type=1400 audit(1725534731.214:81): avc: denied { read } for pid=2944 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 24.900338][ T29] audit: type=1400 audit(1725534737.334:82): avc: denied { mounton } for pid=3251 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.901357][ T3251] cgroup: Unknown subsys name 'net' [ 24.923080][ T29] audit: type=1400 audit(1725534737.334:83): avc: denied { mount } for pid=3251 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.950488][ T29] audit: type=1400 audit(1725534737.364:84): avc: denied { unmount } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.207335][ T3251] cgroup: Unknown subsys name 'rlimit' [ 25.329453][ T29] audit: type=1400 audit(1725534737.764:85): avc: denied { setattr } for pid=3251 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.353052][ T29] audit: type=1400 audit(1725534737.764:86): avc: denied { create } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.373754][ T29] audit: type=1400 audit(1725534737.764:87): avc: denied { write } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.379643][ T3255] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.394328][ T29] audit: type=1400 audit(1725534737.764:88): avc: denied { read } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.414762][ T3251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.423156][ T29] audit: type=1400 audit(1725534737.764:89): avc: denied { mounton } for pid=3251 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.456729][ T29] audit: type=1400 audit(1725534737.764:90): avc: denied { mount } for pid=3251 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.479993][ T29] audit: type=1400 audit(1725534737.844:91): avc: denied { relabelto } for pid=3255 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.473620][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 26.523144][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 26.571437][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 26.611897][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.618993][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.626266][ T3262] bridge_slave_0: entered allmulticast mode [ 26.632663][ T3262] bridge_slave_0: entered promiscuous mode [ 26.653118][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.660900][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.668108][ T3262] bridge_slave_1: entered allmulticast mode [ 26.674371][ T3262] bridge_slave_1: entered promiscuous mode [ 26.700064][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.715223][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.722432][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.729636][ T3261] bridge_slave_0: entered allmulticast mode [ 26.736195][ T3261] bridge_slave_0: entered promiscuous mode [ 26.746890][ T3273] chnl_net:caif_netlink_parms(): no params data found [ 26.756450][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.765674][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 26.779126][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.786285][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.793621][ T3261] bridge_slave_1: entered allmulticast mode [ 26.799992][ T3261] bridge_slave_1: entered promiscuous mode [ 26.829809][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.836926][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.843987][ T3266] bridge_slave_0: entered allmulticast mode [ 26.850356][ T3266] bridge_slave_0: entered promiscuous mode [ 26.858845][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.865923][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.873176][ T3266] bridge_slave_1: entered allmulticast mode [ 26.879890][ T3266] bridge_slave_1: entered promiscuous mode [ 26.893342][ T3262] team0: Port device team_slave_0 added [ 26.899979][ T3262] team0: Port device team_slave_1 added [ 26.906803][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.936537][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.961974][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.979787][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.986790][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.012693][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.023877][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.030922][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.056810][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.070174][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.083985][ T3261] team0: Port device team_slave_0 added [ 27.090789][ T3261] team0: Port device team_slave_1 added [ 27.105035][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.112225][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.119734][ T3265] bridge_slave_0: entered allmulticast mode [ 27.126033][ T3265] bridge_slave_0: entered promiscuous mode [ 27.155356][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.162523][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.169681][ T3265] bridge_slave_1: entered allmulticast mode [ 27.177006][ T3265] bridge_slave_1: entered promiscuous mode [ 27.183369][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.190376][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.216290][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.231676][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.238782][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.245951][ T3273] bridge_slave_0: entered allmulticast mode [ 27.252273][ T3273] bridge_slave_0: entered promiscuous mode [ 27.259273][ T3266] team0: Port device team_slave_0 added [ 27.269320][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.276328][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.302239][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.319791][ T3266] team0: Port device team_slave_1 added [ 27.330205][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.337310][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.344679][ T3273] bridge_slave_1: entered allmulticast mode [ 27.351313][ T3273] bridge_slave_1: entered promiscuous mode [ 27.364591][ T3262] hsr_slave_0: entered promiscuous mode [ 27.370765][ T3262] hsr_slave_1: entered promiscuous mode [ 27.387615][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.402482][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.409496][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.435630][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.451954][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.469870][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.476890][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.502844][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.514547][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.524795][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.544268][ T3261] hsr_slave_0: entered promiscuous mode [ 27.550113][ T3261] hsr_slave_1: entered promiscuous mode [ 27.556172][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.563717][ T3261] Cannot create hsr debugfs directory [ 27.585563][ T3265] team0: Port device team_slave_0 added [ 27.595811][ T3273] team0: Port device team_slave_0 added [ 27.602668][ T3273] team0: Port device team_slave_1 added [ 27.610288][ T3265] team0: Port device team_slave_1 added [ 27.657759][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.664715][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.690625][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.701671][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.708643][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.734521][ T3273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.747261][ T3266] hsr_slave_0: entered promiscuous mode [ 27.753120][ T3266] hsr_slave_1: entered promiscuous mode [ 27.759030][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.766666][ T3266] Cannot create hsr debugfs directory [ 27.774609][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.781634][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.807747][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.826058][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.833014][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.858972][ T3273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.914172][ T3273] hsr_slave_0: entered promiscuous mode [ 27.920402][ T3273] hsr_slave_1: entered promiscuous mode [ 27.926324][ T3273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.933884][ T3273] Cannot create hsr debugfs directory [ 27.950418][ T3265] hsr_slave_0: entered promiscuous mode [ 27.956601][ T3265] hsr_slave_1: entered promiscuous mode [ 27.962384][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.970197][ T3265] Cannot create hsr debugfs directory [ 28.044534][ T3262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.067265][ T3262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.075760][ T3262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.096557][ T3262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.150757][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.159428][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.176147][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.186729][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.205533][ T3261] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.214775][ T3261] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.223450][ T3261] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.231997][ T3261] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.266825][ T3265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.292033][ T3265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.301381][ T3265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.310115][ T3265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.318725][ T3273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.327315][ T3273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.336893][ T3273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.345263][ T3273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.380109][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.401484][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.412583][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.442570][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.454635][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.461743][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.471045][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.478147][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.496845][ T1901] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.503906][ T1901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.517238][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.524417][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.535052][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.547722][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.559230][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.566446][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.589164][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.603335][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.610457][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.628071][ T3273] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.656443][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.673406][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.680529][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.690376][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.697494][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.711986][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.748335][ T1901] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.755628][ T1901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.764380][ T1901] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.771490][ T1901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.787121][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.798378][ T3273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.840514][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.849471][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.901789][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.963035][ T3262] veth0_vlan: entered promiscuous mode [ 28.976117][ T3262] veth1_vlan: entered promiscuous mode [ 29.002576][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.034036][ T3262] veth0_macvtap: entered promiscuous mode [ 29.048547][ T3262] veth1_macvtap: entered promiscuous mode [ 29.070914][ T3261] veth0_vlan: entered promiscuous mode [ 29.080570][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.102299][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.111733][ T3261] veth1_vlan: entered promiscuous mode [ 29.130061][ T3262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.139277][ T3262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.148113][ T3262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.156881][ T3262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.171416][ T3273] veth0_vlan: entered promiscuous mode [ 29.179916][ T3266] veth0_vlan: entered promiscuous mode [ 29.195550][ T3261] veth0_macvtap: entered promiscuous mode [ 29.208432][ T3273] veth1_vlan: entered promiscuous mode [ 29.214817][ T3261] veth1_macvtap: entered promiscuous mode [ 29.227775][ T3266] veth1_vlan: entered promiscuous mode [ 29.247816][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.258433][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.271045][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.281693][ T3273] veth0_macvtap: entered promiscuous mode [ 29.294415][ T3273] veth1_macvtap: entered promiscuous mode [ 29.307369][ T3265] veth0_vlan: entered promiscuous mode [ 29.317895][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.328775][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.339529][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.351942][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.362694][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.372726][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.383415][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.394222][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.408552][ T3261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.417483][ T3261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.426219][ T3261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.435014][ T3261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.472375][ T3266] veth0_macvtap: entered promiscuous mode [ 29.480123][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.490828][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.500866][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.511500][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.531314][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.541330][ T3265] veth1_vlan: entered promiscuous mode [ 29.549188][ T3266] veth1_macvtap: entered promiscuous mode [ 29.561992][ T3273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.571119][ T3273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.580042][ T3273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.588775][ T3273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.609884][ T3265] veth0_macvtap: entered promiscuous mode [ 29.618217][ T3265] veth1_macvtap: entered promiscuous mode [ 29.629969][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.640446][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.650393][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.660926][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.670823][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.681242][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.721760][ T3405] loop1: detected capacity change from 0 to 128 [ 29.731239][ T3405] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 29.883720][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.900664][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.911225][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.921233][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.931674][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.941549][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.952013][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.961851][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.972416][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.985364][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 29.985379][ T29] audit: type=1400 audit(1725534742.414:127): avc: denied { map_create } for pid=3404 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.010620][ T29] audit: type=1400 audit(1725534742.414:128): avc: denied { create } for pid=3404 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.030156][ T29] audit: type=1400 audit(1725534742.414:129): avc: denied { ioctl } for pid=3404 comm="syz.1.2" path="socket:[3692]" dev="sockfs" ino=3692 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.063410][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.072238][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.082695][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.092707][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.103325][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.113171][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.123707][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.138465][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.190552][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.201228][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.211123][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.221715][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.231563][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.242092][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.251914][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.262427][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.273865][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.282816][ T3265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.291594][ T3265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.300341][ T3265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.309173][ T3265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.334932][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.343910][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.352949][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.361145][ T29] audit: type=1400 audit(1725534742.794:130): avc: denied { unmount } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.361659][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.440779][ T29] audit: type=1400 audit(1725534742.874:131): avc: denied { create } for pid=3410 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.460311][ T29] audit: type=1400 audit(1725534742.874:132): avc: denied { ioctl } for pid=3410 comm="syz.2.7" path="socket:[3755]" dev="sockfs" ino=3755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.469129][ T3413] loop1: detected capacity change from 0 to 512 [ 30.484547][ T29] audit: type=1400 audit(1725534742.874:133): avc: denied { bind } for pid=3410 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.495745][ T3413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.515297][ T29] audit: type=1400 audit(1725534742.954:134): avc: denied { write } for pid=3410 comm="syz.2.7" path="socket:[3755]" dev="sockfs" ino=3755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.542524][ T29] audit: type=1400 audit(1725534742.954:135): avc: denied { create } for pid=3410 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.561815][ T29] audit: type=1326 audit(1725534742.954:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3410 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057cd1cef9 code=0x7ffc0000 [ 30.595566][ T3413] EXT4-fs: journaled quota format not specified [ 30.643891][ T3420] loop0: detected capacity change from 0 to 512 [ 30.670859][ T3419] lo speed is unknown, defaulting to 1000 [ 30.680669][ T3420] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1: corrupted in-inode xattr: invalid ea_ino [ 30.696829][ T3419] lo speed is unknown, defaulting to 1000 [ 30.703925][ T3419] lo speed is unknown, defaulting to 1000 [ 30.705522][ T3420] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 30.722677][ T3420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.737329][ T3419] infiniband syz1: set active [ 30.742040][ T3419] infiniband syz1: added lo [ 30.746680][ T3339] lo speed is unknown, defaulting to 1000 [ 30.790080][ T3419] RDS/IB: syz1: added [ 30.794423][ T3419] smc: adding ib device syz1 with port count 1 [ 30.839150][ T3430] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.879776][ T3419] smc: ib device syz1 port 1 has pnetid [ 30.886131][ T3344] lo speed is unknown, defaulting to 1000 [ 30.916258][ T3273] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.927896][ T3419] lo speed is unknown, defaulting to 1000 [ 31.138266][ T3419] lo speed is unknown, defaulting to 1000 [ 31.224059][ T3419] lo speed is unknown, defaulting to 1000 [ 31.268694][ T3419] lo speed is unknown, defaulting to 1000 [ 31.305425][ T3419] lo speed is unknown, defaulting to 1000 [ 31.427036][ T3419] syz.3.4 (3419) used greatest stack depth: 10488 bytes left [ 31.491481][ T3471] sd 0:0:1:0: device reset [ 31.631327][ T3486] loop0: detected capacity change from 0 to 2048 [ 31.664099][ T3486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.906006][ T3488] loop4: detected capacity change from 0 to 2048 [ 31.993323][ T3273] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.045574][ T3496] loop0: detected capacity change from 0 to 512 [ 32.088503][ T3496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.112992][ T3496] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.145110][ T3496] tmpfs: Bad value for 'mpol' [ 32.152294][ T3502] syz.4.20: attempt to access beyond end of device [ 32.152294][ T3502] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 32.165616][ T3502] EXT4-fs (loop4): unable to read superblock [ 32.175154][ T3502] mmap: syz.4.20 (3502) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.233832][ T3496] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 32.334380][ T3273] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.428409][ T3511] netlink: 'syz.4.21': attribute type 4 has an invalid length. [ 32.728958][ T3514] loop0: detected capacity change from 0 to 8192 [ 32.758188][ T3518] loop3: detected capacity change from 0 to 1024 [ 32.778661][ T3514] loop0: p1 p2 p3 p4[EZD] [ 32.783450][ T3514] loop0: p1 size 16128 extends beyond EOD, truncated [ 32.798855][ T3518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.805722][ T3514] loop0: p2 size 2130728454 extends beyond EOD, truncated [ 32.830780][ T3518] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 32.853256][ T3514] loop0: p3 start 459039 is beyond EOD, truncated [ 32.860346][ T3514] loop0: p4 start 268437891 is beyond EOD, truncated [ 32.883592][ T3518] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 32.896455][ T3518] EXT4-fs (loop3): This should not happen!! Data will be lost [ 32.896455][ T3518] [ 32.906384][ T3518] EXT4-fs (loop3): Total free blocks count 0 [ 32.912373][ T3518] EXT4-fs (loop3): Free/Dirty block details [ 32.918527][ T3518] EXT4-fs (loop3): free_blocks=68451041280 [ 32.924535][ T3518] EXT4-fs (loop3): dirty_blocks=16 [ 32.929891][ T3518] EXT4-fs (loop3): Block reservation details [ 32.936351][ T3518] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 32.982033][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 32.991042][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.999958][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.044685][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.052623][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.184222][ T3543] loop4: detected capacity change from 0 to 1024 [ 33.203011][ T3543] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.222123][ T3543] JBD2: no valid journal superblock found [ 33.228471][ T3543] EXT4-fs (loop4): Could not load journal inode [ 33.278477][ T3543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 33.300560][ C0] Illegal XDP return value 1603896156 on prog (id 26) dev veth0_to_bridge, expect packet loss! [ 33.566221][ T3588] loop0: detected capacity change from 0 to 256 [ 33.584301][ T3588] ======================================================= [ 33.584301][ T3588] WARNING: The mand mount option has been deprecated and [ 33.584301][ T3588] and is ignored by this kernel. Remove the mand [ 33.584301][ T3588] option from the mount to silence this warning. [ 33.584301][ T3588] ======================================================= [ 33.679425][ T3518] syz.3.25 (3518) used greatest stack depth: 10008 bytes left [ 33.793501][ T3594] loop4: detected capacity change from 0 to 256 [ 33.878985][ T3600] loop4: detected capacity change from 0 to 512 [ 33.898260][ T3600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.912056][ T3600] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.940019][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.176870][ T3655] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.266076][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 34.276793][ T3655] process 'syz.4.35' launched './file0' with NULL argv: empty string added [ 34.298060][ T3655] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 34.331939][ T3677] loop4: detected capacity change from 0 to 128 [ 34.347220][ T3273] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 34.355693][ T3273] FAT-fs (loop0): Filesystem has been set read-only [ 34.376258][ T3273] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 34.467795][ T3677] syz.4.36: attempt to access beyond end of device [ 34.467795][ T3677] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 34.490613][ T3676] syz.4.36: attempt to access beyond end of device [ 34.490613][ T3676] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 34.714729][ T3734] loop4: detected capacity change from 0 to 256 [ 34.737232][ T3734] FAT-fs (loop4): IO charset cp1250 not found [ 34.759388][ T3737] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 34.760015][ T3734] loop4: detected capacity change from 0 to 1024 [ 34.769346][ T3737] SELinux: failed to load policy [ 34.783815][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.798710][ T3737] loop2: detected capacity change from 0 to 1024 [ 34.814042][ T3737] EXT4-fs: Ignoring removed orlov option [ 34.819780][ T3737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.836582][ T3737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.911894][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.988577][ T3742] cgroup: name respecified [ 35.588851][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.593477][ T3744] loop2: detected capacity change from 0 to 128 [ 35.604607][ T3744] vfat: Unknown parameter '#ƒ3sÁÃEñxº‚çà {iQ;i [ˆ)DO€Ê?l#' [ 35.626540][ T3746] loop4: detected capacity change from 0 to 2048 [ 35.646732][ T3746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.661900][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 35.661913][ T29] audit: type=1400 audit(1725535062.094:502): avc: denied { create } for pid=3745 comm="syz.4.42" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.693103][ T29] audit: type=1400 audit(1725535062.124:503): avc: denied { watch } for pid=3745 comm="syz.4.42" path="/17/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.721869][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.742675][ C0] hrtimer: interrupt took 50574 ns [ 35.833682][ T29] audit: type=1400 audit(1725535062.264:504): avc: denied { write } for pid=3743 comm="syz.2.52" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.868279][ T29] audit: type=1400 audit(1725535062.304:505): avc: denied { mount } for pid=3743 comm="syz.2.52" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.911902][ T29] audit: type=1400 audit(1725535062.304:506): avc: denied { read } for pid=3743 comm="syz.2.52" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.934045][ T29] audit: type=1400 audit(1725535062.304:507): avc: denied { open } for pid=3743 comm="syz.2.52" path="/7/file0" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.981950][ T3751] syzkaller0: entered promiscuous mode [ 35.988357][ T3751] syzkaller0: entered allmulticast mode [ 36.103933][ T29] audit: type=1400 audit(1725535062.534:508): avc: denied { nlmsg_write } for pid=3754 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.156442][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.250774][ T29] audit: type=1400 audit(1725535062.684:509): avc: denied { read } for pid=3762 comm="syz.3.47" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.252372][ T3763] loop3: detected capacity change from 0 to 256 [ 36.274758][ T29] audit: type=1400 audit(1725535062.684:510): avc: denied { open } for pid=3762 comm="syz.3.47" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.326067][ T1901] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.353286][ T29] audit: type=1400 audit(1725535062.774:511): avc: denied { remount } for pid=3759 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.451036][ T1901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.516256][ T1901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.535697][ T3265] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 36.544132][ T3265] FAT-fs (loop3): Filesystem has been set read-only [ 36.593515][ T3265] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 36.621386][ T1901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.670301][ T3766] lo speed is unknown, defaulting to 1000 [ 36.781555][ T1901] bridge_slave_1: left allmulticast mode [ 36.788261][ T1901] bridge_slave_1: left promiscuous mode [ 36.793963][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.812913][ T1901] bridge_slave_0: left allmulticast mode [ 36.819091][ T1901] bridge_slave_0: left promiscuous mode [ 36.825049][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.864157][ T3780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.875175][ T3780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.948168][ T1901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.959688][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.970199][ T1901] bond0 (unregistering): Released all slaves [ 37.058990][ T3803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.54'. [ 37.068426][ T3766] chnl_net:caif_netlink_parms(): no params data found [ 37.107525][ T1901] hsr_slave_0: left promiscuous mode [ 37.113615][ T1901] hsr_slave_1: left promiscuous mode [ 37.121955][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.129497][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.138844][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.146415][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.163279][ T1901] veth1_macvtap: left promiscuous mode [ 37.170009][ T1901] veth0_macvtap: left promiscuous mode [ 37.177095][ T1901] veth1_vlan: left promiscuous mode [ 37.182821][ T1901] veth0_vlan: left promiscuous mode [ 37.192908][ T3822] loop4: detected capacity change from 0 to 1024 [ 37.200120][ T3822] EXT4-fs: Ignoring removed orlov option [ 37.206169][ T3822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.227871][ T3822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.280583][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 37.291682][ T1901] team0 (unregistering): Port device team_slave_0 removed [ 37.388731][ T3794] lo speed is unknown, defaulting to 1000 [ 37.395076][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.402316][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.424387][ T3766] bridge_slave_0: entered allmulticast mode [ 37.442315][ T3766] bridge_slave_0: entered promiscuous mode [ 37.467514][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.474896][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.487718][ T3766] bridge_slave_1: entered allmulticast mode [ 37.495821][ T3766] bridge_slave_1: entered promiscuous mode [ 37.530110][ T3766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.555398][ T3766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.605521][ T3766] team0: Port device team_slave_0 added [ 37.613346][ T3766] team0: Port device team_slave_1 added [ 37.642551][ T3766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.649611][ T3766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.675921][ T3766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.687807][ T3794] chnl_net:caif_netlink_parms(): no params data found [ 37.713642][ T3847] netlink: 264 bytes leftover after parsing attributes in process `syz.4.55'. [ 37.723546][ T3766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.730637][ T3766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.757335][ T3766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.846591][ T3766] hsr_slave_0: entered promiscuous mode [ 37.852828][ T3766] hsr_slave_1: entered promiscuous mode [ 37.859883][ T3766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.868961][ T3766] Cannot create hsr debugfs directory [ 37.874461][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.881699][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.890363][ T3794] bridge_slave_0: entered allmulticast mode [ 37.898738][ T3794] bridge_slave_0: entered promiscuous mode [ 37.905812][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.913177][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.921517][ T3794] bridge_slave_1: entered allmulticast mode [ 37.928688][ T3794] bridge_slave_1: entered promiscuous mode [ 37.961662][ T1901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.974947][ T3794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.996238][ T3794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.028543][ T1901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.040119][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.062380][ T3794] team0: Port device team_slave_0 added [ 38.086593][ T3794] team0: Port device team_slave_1 added [ 38.113127][ T1901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.154214][ T3794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.161955][ T3794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.187899][ T3794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.235748][ T1901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.249495][ T3794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.256586][ T3794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.282613][ T3794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.321057][ T3794] hsr_slave_0: entered promiscuous mode [ 38.327425][ T3794] hsr_slave_1: entered promiscuous mode [ 38.333497][ T3794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.341231][ T3794] Cannot create hsr debugfs directory [ 38.382920][ T1901] bridge_slave_1: left allmulticast mode [ 38.388632][ T1901] bridge_slave_1: left promiscuous mode [ 38.394354][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.402980][ T1901] bridge_slave_0: left allmulticast mode [ 38.408826][ T1901] bridge_slave_0: left promiscuous mode [ 38.414639][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.528137][ T1901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.538985][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.549295][ T1901] bond0 (unregistering): Released all slaves [ 38.683869][ T1901] hsr_slave_0: left promiscuous mode [ 38.690501][ T1901] hsr_slave_1: left promiscuous mode [ 38.699111][ T1901] veth1_macvtap: left promiscuous mode [ 38.704901][ T1901] veth0_macvtap: left promiscuous mode [ 38.710543][ T1901] veth1_vlan: left promiscuous mode [ 38.715989][ T1901] veth0_vlan: left promiscuous mode [ 38.772553][ T1901] infiniband syz1: set down [ 38.777534][ T3590] infiniband syz1: ib_query_port failed (-19) [ 38.820796][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 38.831760][ T1901] team0 (unregistering): Port device team_slave_0 removed [ 38.874809][ T3363] smc: removing ib device syz1 [ 38.909023][ T3766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.929190][ T3766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.949532][ T3766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.963996][ T3766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.042661][ T3766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.058424][ T3766] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.070267][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.077515][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.087338][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.094435][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.158664][ T3949] netlink: 68 bytes leftover after parsing attributes in process `syz.4.58'. [ 39.189238][ T3794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.198736][ T3794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.219321][ T3794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.234192][ T3794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.259085][ T3766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.306774][ T3794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.325848][ T3794] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.338990][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.346288][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.368096][ T3766] veth0_vlan: entered promiscuous mode [ 39.377814][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.385444][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.397686][ T3766] veth1_vlan: entered promiscuous mode [ 39.421776][ T3794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.432331][ T3794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.461302][ T3766] veth0_macvtap: entered promiscuous mode [ 39.470757][ T3766] veth1_macvtap: entered promiscuous mode [ 39.485064][ T3766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.495807][ T3766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.505753][ T3766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.516181][ T3766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.526091][ T3766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.536577][ T3766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.549229][ T3766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.569759][ T3766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.580558][ T3766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.590997][ T3766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.601937][ T3766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.611810][ T3766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.622496][ T3766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.634661][ T3766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.644382][ T3794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.664531][ T3766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.673522][ T3766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.682309][ T3766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.691110][ T3766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.770679][ T3794] veth0_vlan: entered promiscuous mode [ 39.791647][ T3794] veth1_vlan: entered promiscuous mode [ 39.818041][ T3794] veth0_macvtap: entered promiscuous mode [ 39.828769][ T3794] veth1_macvtap: entered promiscuous mode [ 39.839764][ T3794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.848110][ T4030] loop0: detected capacity change from 0 to 8192 [ 39.850344][ T3794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.863170][ T4030] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.866577][ T3794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.866594][ T3794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.866671][ T3794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.908234][ T3794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.918263][ T3794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.928760][ T3794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.941172][ T3794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.953988][ T3794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.964677][ T3794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.974546][ T3794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.985324][ T3794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.995497][ T3794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.006100][ T3794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.015990][ T3794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.026467][ T3794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.039071][ T3794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.050130][ T3794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.059121][ T3794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.067853][ T3794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.076679][ T3794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.152039][ T4044] loop3: detected capacity change from 0 to 1024 [ 40.159567][ T4044] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.175456][ T4044] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.53: Invalid block bitmap block 0 in block_group 0 [ 40.190361][ T4044] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.53: Failed to acquire dquot type 0 [ 40.212561][ T4044] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.53: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.231879][ T4044] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.53: Invalid inode bitmap blk 0 in block_group 0 [ 40.245389][ T28] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u8:1: Failed to release dquot type 0 [ 40.245774][ T4044] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 40.266695][ T4044] EXT4-fs (loop3): 1 orphan inode deleted [ 40.272875][ T4044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.305011][ T4044] syz.3.53 (4044) used greatest stack depth: 9640 bytes left [ 40.314011][ T3794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.344285][ T4051] syz.3.61 uses obsolete (PF_INET,SOCK_PACKET) [ 40.646455][ T4066] loop4: detected capacity change from 0 to 8192 [ 40.651907][ T4056] chnl_net:caif_netlink_parms(): no params data found [ 40.653227][ T4066] vfat: Unknown parameter 'ÿÿ' [ 40.688181][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 40.688195][ T29] audit: type=1400 audit(1725535067.124:548): avc: denied { create } for pid=4065 comm="syz.4.65" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.734541][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.745857][ T4066] loop4: detected capacity change from 0 to 512 [ 40.782114][ T4066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.801770][ T4066] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.820886][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.835591][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.842742][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.850743][ T4056] bridge_slave_0: entered allmulticast mode [ 40.863040][ T4056] bridge_slave_0: entered promiscuous mode [ 40.880007][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.891159][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.894085][ T29] audit: type=1400 audit(1725535067.334:549): avc: denied { ioctl } for pid=4065 comm="syz.4.65" path="/29/bus/cgroup.controllers" dev="loop4" ino=19 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.898250][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.930657][ T4056] bridge_slave_1: entered allmulticast mode [ 40.937597][ T4056] bridge_slave_1: entered promiscuous mode [ 40.960354][ T4056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.965384][ T29] audit: type=1400 audit(1725535067.394:550): avc: denied { unlink } for pid=3266 comm="syz-executor" name="file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.996983][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.010066][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.024312][ T4056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.040781][ T29] audit: type=1400 audit(1725535067.474:551): avc: denied { cpu } for pid=4090 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.042894][ T4091] ref_ctr increment failed for inode: 0xbd offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881046baf40 [ 41.082462][ T4091] loop4: detected capacity change from 0 to 128 [ 41.089333][ T4091] vfat: Unknown parameter 'memory.events' [ 41.097570][ T29] audit: type=1326 audit(1725535067.534:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 41.121082][ T29] audit: type=1326 audit(1725535067.534:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 41.145060][ T4056] team0: Port device team_slave_0 added [ 41.152022][ T29] audit: type=1326 audit(1725535067.564:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 41.152059][ T4056] team0: Port device team_slave_1 added [ 41.175524][ T29] audit: type=1326 audit(1725535067.564:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 41.204104][ T29] audit: type=1326 audit(1725535067.564:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 41.227474][ T29] audit: type=1326 audit(1725535067.564:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 41.280127][ T4094] loop4: detected capacity change from 0 to 1024 [ 41.309667][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.316785][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.342802][ T4056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.368785][ T28] bridge_slave_1: left allmulticast mode [ 41.374532][ T28] bridge_slave_1: left promiscuous mode [ 41.380290][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.389671][ T28] bridge_slave_0: left allmulticast mode [ 41.395414][ T28] bridge_slave_0: left promiscuous mode [ 41.401057][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.447948][ T4097] netlink: 184 bytes leftover after parsing attributes in process `syz.4.68'. [ 41.488699][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.501567][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.513405][ T28] bond0 (unregistering): Released all slaves [ 41.524954][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.532005][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.557964][ T4056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.594571][ T4056] hsr_slave_0: entered promiscuous mode [ 41.605402][ T4056] hsr_slave_1: entered promiscuous mode [ 41.613191][ T4056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.628256][ T4056] Cannot create hsr debugfs directory [ 41.636530][ T28] hsr_slave_0: left promiscuous mode [ 41.641122][ T4103] loop4: detected capacity change from 0 to 512 [ 41.648324][ T28] hsr_slave_1: left promiscuous mode [ 41.654173][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.654320][ T4103] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.661684][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.681998][ T4103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.692374][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.693400][ T4103] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.699819][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.714190][ T4103] EXT4-fs (loop4): 1 truncate cleaned up [ 41.726373][ T4103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.747198][ T28] veth1_macvtap: left promiscuous mode [ 41.754564][ T28] veth0_macvtap: left promiscuous mode [ 41.761545][ T28] veth1_vlan: left promiscuous mode [ 41.767356][ T28] veth0_vlan: left promiscuous mode [ 41.780274][ T4103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.780745][ T4106] syz.0.71: attempt to access beyond end of device [ 41.780745][ T4106] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 41.863743][ T4108] loop4: detected capacity change from 0 to 512 [ 41.884993][ T4108] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.72: corrupted in-inode xattr: invalid ea_ino [ 41.907007][ T4108] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.72: couldn't read orphan inode 15 (err -117) [ 41.927312][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.956671][ T4111] x_tables: unsorted underflow at hook 3 [ 41.971824][ T28] team0 (unregistering): Port device team_slave_1 removed [ 41.987172][ T28] team0 (unregistering): Port device team_slave_0 removed [ 42.020555][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.049087][ T4114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.74'. [ 42.062502][ T4114] loop4: detected capacity change from 0 to 512 [ 42.074138][ T4114] EXT4-fs: Ignoring removed nobh option [ 42.090856][ T4114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.104558][ T4114] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.178014][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.269714][ T4132] batadv0: entered promiscuous mode [ 42.275884][ T4132] veth0: entered promiscuous mode [ 42.511982][ T4174] loop0: detected capacity change from 0 to 256 [ 42.555309][ T4056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.564956][ T4056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.597677][ T4178] loop3: detected capacity change from 0 to 512 [ 42.611149][ T4056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.664406][ T4056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.696590][ T4178] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 42.706054][ T4178] EXT4-fs (loop3): 1 truncate cleaned up [ 42.712419][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.728454][ T4183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.735861][ T4183] IPv6: NLM_F_CREATE should be set when creating new route [ 42.833572][ T4056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.884421][ T4056] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.902297][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.909440][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.920364][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.927895][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.954862][ T4056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.965489][ T4056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.031448][ T4056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.116731][ T4056] veth0_vlan: entered promiscuous mode [ 43.137045][ T4219] No such timeout policy "syz0" [ 43.149679][ T4056] veth1_vlan: entered promiscuous mode [ 43.161461][ T4056] veth0_macvtap: entered promiscuous mode [ 43.162914][ T4056] veth1_macvtap: entered promiscuous mode [ 43.181223][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.181243][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.181251][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.181327][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.181336][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.181348][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.181355][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.181414][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.182283][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.184942][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.286690][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.286702][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.286714][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.286729][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.286775][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.286784][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.286852][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.290453][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.394782][ T4056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.403742][ T4056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.414658][ T4056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.424276][ T4056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.436339][ T3794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.475208][ T4231] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 43.482899][ T4231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 43.491118][ T4231] vhci_hcd vhci_hcd.0: Device attached [ 43.498370][ T4233] loop3: detected capacity change from 0 to 512 [ 43.513349][ T4236] syz.4.85[4236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.513535][ T4236] syz.4.85[4236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.528413][ T4233] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.84: corrupted in-inode xattr: invalid ea_ino [ 43.556800][ T4233] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.84: couldn't read orphan inode 15 (err -117) [ 43.569573][ T4233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.599509][ T4236] loop4: detected capacity change from 0 to 128 [ 43.615649][ T4236] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.85: iget: checksum invalid [ 43.631891][ T4236] EXT4-fs (loop4): get root inode failed [ 43.638583][ T4236] EXT4-fs (loop4): mount failed [ 43.644214][ T3794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.671260][ T4236] loop4: detected capacity change from 0 to 512 [ 43.697629][ T4236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.718229][ T4245] loop3: detected capacity change from 0 to 2048 [ 43.725302][ T4236] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.764011][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.773265][ T3344] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 43.810415][ T4245] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 43.819600][ T4245] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 43.890535][ T4253] loop3: detected capacity change from 0 to 2048 [ 43.920147][ T4253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.996980][ T4255] loop4: detected capacity change from 0 to 256 [ 44.082048][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'. [ 44.091264][ T4260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.89'. [ 44.301605][ T4232] vhci_hcd: connection reset by peer [ 44.307313][ T40] vhci_hcd: stop threads [ 44.311765][ T40] vhci_hcd: release socket [ 44.316560][ T40] vhci_hcd: disconnect device [ 44.718476][ T4268] loop4: detected capacity change from 0 to 1024 [ 44.726063][ T4268] EXT4-fs: Ignoring removed orlov option [ 44.732132][ T4268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.741089][ T3794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.763224][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.771168][ T4272] loop3: detected capacity change from 0 to 512 [ 44.782485][ T4272] EXT4-fs: Ignoring removed orlov option [ 44.790098][ T4272] EXT4-fs (loop3): 1 truncate cleaned up [ 44.796204][ T4272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.363256][ T4282] loop1: detected capacity change from 0 to 512 [ 45.373077][ T4282] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.96: corrupted in-inode xattr: invalid ea_ino [ 45.387837][ T4282] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.96: couldn't read orphan inode 15 (err -117) [ 45.401498][ T4282] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.438096][ T4056] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 45.459829][ T4285] netlink: 'syz.1.97': attribute type 7 has an invalid length. [ 45.552555][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.576707][ T4288] hub 9-0:1.0: USB hub found [ 45.581893][ T4288] hub 9-0:1.0: 8 ports detected [ 45.607590][ T4290] loop4: detected capacity change from 0 to 128 [ 45.640555][ T3794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.707404][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 45.707421][ T29] audit: type=1326 audit(1725535072.144:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.737427][ T29] audit: type=1326 audit(1725535072.144:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.763081][ T29] audit: type=1326 audit(1725535072.144:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.763103][ T29] audit: type=1326 audit(1725535072.144:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.763159][ T29] audit: type=1326 audit(1725535072.144:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.763181][ T29] audit: type=1326 audit(1725535072.144:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.763202][ T29] audit: type=1400 audit(1725535072.144:1130): avc: denied { setopt } for pid=4296 comm="syz.0.101" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.763221][ T29] audit: type=1326 audit(1725535072.144:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.763314][ T29] audit: type=1326 audit(1725535072.144:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.763334][ T29] audit: type=1326 audit(1725535072.144:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4296 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e055cef9 code=0x7ffc0000 [ 45.931658][ T4301] loop3: detected capacity change from 0 to 512 [ 45.971250][ T4301] EXT4-fs: Ignoring removed i_version option [ 45.971278][ T4301] EXT4-fs: Ignoring removed nobh option [ 45.972224][ T4301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.976105][ T4301] EXT4-fs (loop3): 1 truncate cleaned up [ 46.001416][ T4301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.522235][ T4313] loop1: detected capacity change from 0 to 1024 [ 46.532523][ T4313] EXT4-fs: Ignoring removed orlov option [ 46.539697][ T4313] ext4: Unknown parameter 'noacl' [ 46.623887][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.631575][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.641298][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.650316][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.658217][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.666896][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.675306][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.683309][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.690860][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.698512][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.705953][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.713365][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.720815][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.728261][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.735764][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.743770][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.751269][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.758962][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.766970][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.775099][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.785154][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.792760][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.800276][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.808178][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.816431][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.825563][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.834306][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.842308][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.851107][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.859882][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.868429][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.876118][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.883585][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.893165][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.901736][ T3339] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 46.903045][ T3794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.953046][ T4328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'. [ 46.971621][ T4325] capability: warning: `syz.0.109' uses 32-bit capabilities (legacy support in use) [ 47.007273][ T4336] IPv6: sit1: Disabled Multicast RS [ 47.068992][ T4317] chnl_net:caif_netlink_parms(): no params data found [ 47.114806][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.122099][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.132065][ T4317] bridge_slave_0: entered allmulticast mode [ 47.140079][ T4317] bridge_slave_0: entered promiscuous mode [ 47.148292][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.155575][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.163586][ T4317] bridge_slave_1: entered allmulticast mode [ 47.171184][ T4317] bridge_slave_1: entered promiscuous mode [ 47.192030][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.227957][ T4317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.257067][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.274841][ T4317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.309295][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.352551][ T4355] program syz.0.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.371563][ T4357] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 47.401257][ T4317] team0: Port device team_slave_0 added [ 47.411297][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.434089][ T4317] team0: Port device team_slave_1 added [ 47.463610][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.470931][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.497450][ T4317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.511265][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.518419][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.544355][ T4317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.598677][ T4317] hsr_slave_0: entered promiscuous mode [ 47.604733][ T4317] hsr_slave_1: entered promiscuous mode [ 47.611122][ T4317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.619892][ T4317] Cannot create hsr debugfs directory [ 47.625553][ T40] bridge_slave_1: left allmulticast mode [ 47.631213][ T40] bridge_slave_1: left promiscuous mode [ 47.636974][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.644950][ T40] bridge_slave_0: left allmulticast mode [ 47.650679][ T40] bridge_slave_0: left promiscuous mode [ 47.656443][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.766473][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.779670][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.792957][ T40] bond0 (unregistering): Released all slaves [ 47.870029][ T40] hsr_slave_0: left promiscuous mode [ 47.875853][ T40] hsr_slave_1: left promiscuous mode [ 47.881752][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.889418][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.899594][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.907262][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.918792][ T40] veth1_macvtap: left promiscuous mode [ 47.925730][ T40] veth0_macvtap: left promiscuous mode [ 47.931306][ T40] veth1_vlan: left promiscuous mode [ 47.936617][ T40] veth0_vlan: left promiscuous mode [ 48.037545][ T40] team0 (unregistering): Port device team_slave_1 removed [ 48.049009][ T40] team0 (unregistering): Port device team_slave_0 removed [ 48.396010][ T4317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.404812][ T4317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.414148][ T4317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.423487][ T4317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.474039][ T4317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.488256][ T4317] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.497927][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.505058][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.517092][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.524371][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.595452][ T4317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.662257][ T4317] veth0_vlan: entered promiscuous mode [ 48.671072][ T4317] veth1_vlan: entered promiscuous mode [ 48.687703][ T4317] veth0_macvtap: entered promiscuous mode [ 48.695569][ T4317] veth1_macvtap: entered promiscuous mode [ 48.705702][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.716327][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.726299][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.737078][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.747032][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.757546][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.767561][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.778113][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.788928][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.799974][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.811044][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.821463][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.832808][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.842826][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.853632][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.863546][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.865684][ T3344] usb 1-1: enqueue for inactive port 0 [ 48.874376][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.881083][ T3344] usb 1-1: enqueue for inactive port 0 [ 48.893056][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.908297][ T4317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.917356][ T4317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.926414][ T4317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.936118][ T4317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.977867][ T4458] serio: Serial port ptm0 [ 48.985599][ T3344] vhci_hcd: vhci_device speed not set [ 49.120044][ T4467] loop1: detected capacity change from 0 to 8192 [ 49.185359][ T4467] loop1: p1 p2 p4 [ 49.189408][ T4467] loop1: p1 start 83821824 is beyond EOD, truncated [ 49.196152][ T4467] loop1: p2 start 4293394690 is beyond EOD, truncated [ 49.203396][ T4467] loop1: p4 size 50331904 extends beyond EOD, truncated [ 49.475697][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 49.492508][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.504910][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.516332][ T4473] bond0 (unregistering): Released all slaves [ 49.852819][ T4487] loop1: detected capacity change from 0 to 512 [ 49.867194][ T4487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.880671][ T4487] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.895349][ T4487] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 49.932372][ T4056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.006019][ T4497] loop1: detected capacity change from 0 to 512 [ 50.028865][ T4502] netlink: 'syz.0.126': attribute type 10 has an invalid length. [ 50.045227][ T4502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.061418][ T4502] team0: Port device batadv0 added [ 50.069181][ T4497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.083345][ T4505] loop2: detected capacity change from 0 to 512 [ 50.084018][ T4497] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.092884][ T4499] loop3: detected capacity change from 0 to 512 [ 50.113675][ T4497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4497 comm=syz.1.123 [ 50.123458][ T4499] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 50.130638][ T4505] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.138: casefold flag without casefold feature [ 50.139204][ T4499] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 50.161847][ T4505] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.138: couldn't read orphan inode 15 (err -117) [ 50.163630][ T4499] EXT4-fs (loop3): group descriptors corrupted! [ 50.180009][ T4505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.247351][ T4517] loop3: detected capacity change from 0 to 512 [ 50.291621][ T4517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.305376][ T4517] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.333910][ T4317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.384834][ T3794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.496796][ T4535] loop3: detected capacity change from 0 to 128 [ 50.732482][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 50.732497][ T29] audit: type=1400 audit(1725535077.164:1500): avc: denied { write } for pid=4530 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.824715][ T4056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 50.900801][ T29] audit: type=1400 audit(1725535077.324:1501): avc: denied { unmount } for pid=4317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.960394][ T29] audit: type=1326 audit(1725535077.374:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.1.141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38b2c3cef9 code=0x0 [ 50.983530][ T29] audit: type=1326 audit(1725535077.384:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0869abcef9 code=0x7ffc0000 [ 51.007063][ T29] audit: type=1326 audit(1725535077.384:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0869abcef9 code=0x7ffc0000 [ 51.031025][ T29] audit: type=1326 audit(1725535077.384:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0869abcef9 code=0x7ffc0000 [ 51.054430][ T29] audit: type=1326 audit(1725535077.384:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0869abcef9 code=0x7ffc0000 [ 51.077750][ T29] audit: type=1326 audit(1725535077.384:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0869abcef9 code=0x7ffc0000 [ 51.101166][ T29] audit: type=1326 audit(1725535077.384:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0869abcef9 code=0x7ffc0000 [ 51.124503][ T29] audit: type=1326 audit(1725535077.384:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0869abcef9 code=0x7ffc0000 [ 51.396023][ T4559] netlink: 'syz.4.143': attribute type 10 has an invalid length. [ 51.420104][ T4557] loop2: detected capacity change from 0 to 512 [ 51.425455][ T4559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.436460][ T4559] team0: Port device batadv0 added [ 51.438967][ T4557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.470232][ T4557] EXT4-fs (loop2): 1 truncate cleaned up [ 51.477109][ T4557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.528017][ T4569] loop4: detected capacity change from 0 to 512 [ 51.537840][ T4568] loop3: detected capacity change from 0 to 256 [ 51.552520][ T4569] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.147: casefold flag without casefold feature [ 51.573973][ T4317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.611290][ T4569] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.147: couldn't read orphan inode 15 (err -117) [ 51.625693][ T4569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.792415][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.029089][ T4598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 52.060868][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 52.105170][ T4598] hsr_slave_0 (unregistering): left promiscuous mode [ 52.221768][ T4602] loop1: detected capacity change from 0 to 512 [ 52.249652][ T4602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.270394][ T4602] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.304009][ T4056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.326508][ T4608] loop1: detected capacity change from 0 to 512 [ 52.327257][ T4606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.341439][ T4608] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 52.351476][ T4606] batadv_slave_0: entered promiscuous mode [ 52.451729][ T4608] capability: warning: `syz.1.161' uses deprecated v2 capabilities in a way that may be insecure [ 52.503247][ T4613] loop1: detected capacity change from 0 to 256 [ 52.610325][ T4616] loop1: detected capacity change from 0 to 128 [ 52.813920][ T4628] syz.3.169[4628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.814022][ T4628] syz.3.169[4628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.841662][ T4628] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.958504][ T4631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 52.982224][ T4628] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 53.002053][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 53.042170][ T4631] bond0: (slave bond_slave_1): Releasing backup interface [ 53.187657][ T4640] loop3: detected capacity change from 0 to 256 [ 53.578585][ T4647] loop1: detected capacity change from 0 to 256 [ 53.604595][ T4647] FAT-fs (loop1): Directory bread(block 64) failed [ 53.622916][ T4647] FAT-fs (loop1): Directory bread(block 65) failed [ 53.629931][ T4647] FAT-fs (loop1): Directory bread(block 66) failed [ 53.638193][ T4647] FAT-fs (loop1): Directory bread(block 67) failed [ 53.645009][ T4647] FAT-fs (loop1): Directory bread(block 68) failed [ 53.652582][ T4647] FAT-fs (loop1): Directory bread(block 69) failed [ 53.660302][ T4647] FAT-fs (loop1): Directory bread(block 70) failed [ 53.667268][ T4647] FAT-fs (loop1): Directory bread(block 71) failed [ 53.673976][ T4647] FAT-fs (loop1): Directory bread(block 72) failed [ 53.681755][ T4647] FAT-fs (loop1): Directory bread(block 73) failed [ 53.959088][ T4648] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 53.967124][ T4648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.174'. [ 53.977656][ T4648] bridge0: port 3(ipvlan0) entered blocking state [ 53.984193][ T4648] bridge0: port 3(ipvlan0) entered disabled state [ 53.991187][ T4648] ipvlan0: entered allmulticast mode [ 53.996574][ T4648] veth0_vlan: entered allmulticast mode [ 54.002934][ T4648] ipvlan0: left allmulticast mode [ 54.008015][ T4648] veth0_vlan: left allmulticast mode [ 54.013908][ T4648] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 55.500032][ T4653] loop4: detected capacity change from 0 to 512 [ 55.505305][ T4656] loop2: detected capacity change from 0 to 256 [ 55.533538][ T4653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.568403][ T4653] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.675133][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.714807][ T4671] lo speed is unknown, defaulting to 1000 [ 55.721362][ T4671] lo speed is unknown, defaulting to 1000 [ 55.727566][ T4671] lo speed is unknown, defaulting to 1000 [ 55.743899][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 55.743912][ T29] audit: type=1400 audit(1725535082.174:1865): avc: denied { create } for pid=4674 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.772516][ T29] audit: type=1326 audit(1725535082.204:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 55.796349][ T29] audit: type=1326 audit(1725535082.204:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 55.821451][ T29] audit: type=1400 audit(1725535082.214:1868): avc: denied { write } for pid=4674 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.841556][ T29] audit: type=1400 audit(1725535082.214:1869): avc: denied { nlmsg_write } for pid=4674 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.844714][ T4671] infiniband syz1: set active [ 55.864025][ T29] audit: type=1326 audit(1725535082.254:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 55.864053][ T29] audit: type=1326 audit(1725535082.254:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 55.869477][ T4671] infiniband syz1: added lo [ 55.869519][ T3338] lo speed is unknown, defaulting to 1000 [ 55.892959][ T29] audit: type=1326 audit(1725535082.254:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 55.950636][ T29] audit: type=1326 audit(1725535082.254:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 55.950663][ T29] audit: type=1326 audit(1725535082.254:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3068e1cef9 code=0x7ffc0000 [ 56.031405][ T4671] RDS/IB: syz1: added [ 56.037413][ T4671] smc: adding ib device syz1 with port count 1 [ 56.043817][ T4671] smc: ib device syz1 port 1 has pnetid [ 56.049826][ T3338] lo speed is unknown, defaulting to 1000 [ 56.055957][ T4671] lo speed is unknown, defaulting to 1000 [ 56.090313][ T4671] lo speed is unknown, defaulting to 1000 [ 56.126114][ T4671] lo speed is unknown, defaulting to 1000 [ 56.160779][ T4671] lo speed is unknown, defaulting to 1000 [ 56.194725][ T4671] lo speed is unknown, defaulting to 1000 [ 58.529409][ T4684] loop1: detected capacity change from 0 to 512 [ 58.539675][ T4684] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.183: casefold flag without casefold feature [ 58.556192][ T4684] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.183: couldn't read orphan inode 15 (err -117) [ 58.562720][ T4682] lo speed is unknown, defaulting to 1000 [ 58.568437][ T4684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.603789][ T4688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 58.619882][ T4688] bond0: entered promiscuous mode [ 58.644767][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 58.662958][ T4688] bond0 (unregistering): Released all slaves [ 58.693398][ T4697] loop4: detected capacity change from 0 to 512 [ 58.709339][ T4697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.722963][ T4697] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.771192][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.784703][ T4708] veth0_vlan: entered allmulticast mode [ 58.907388][ T4716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 58.961814][ T4718] dummy0: entered promiscuous mode [ 58.968057][ T4056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.017163][ T4718] batman_adv: batadv0: Adding interface: macsec1 [ 59.023539][ T4718] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.052728][ T4720] loop3: detected capacity change from 0 to 512 [ 59.068815][ T4718] batman_adv: batadv0: Interface activated: macsec1 [ 59.089546][ T4720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.118906][ T4720] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.142383][ T4731] loop2: detected capacity change from 0 to 128 [ 59.158908][ T4720] syz.3.196[4720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.158966][ T4720] syz.3.196[4720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.213010][ T4737] loop2: detected capacity change from 0 to 512 [ 59.223910][ T4733] loop1: detected capacity change from 0 to 2048 [ 59.249999][ T4720] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.196: Directory hole found for htree leaf block 0 [ 59.265424][ T4737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.281720][ T4737] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.293860][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.200: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 59.316878][ T4733] loop1: p1 < > p4 [ 59.321321][ T4733] loop1: p4 size 8388608 extends beyond EOD, truncated [ 59.347601][ T4733] 9pnet_fd: Insufficient options for proto=fd [ 59.354613][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.200: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 59.368989][ T4742] syzkaller0: entered promiscuous mode [ 59.385060][ T4742] syzkaller0: entered allmulticast mode [ 59.399511][ T3794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.408947][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.200: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 59.451572][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.200: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.481011][ T4743] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.200: Directory hole found for htree leaf block 0 [ 59.483160][ T3254] udevd[3254]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 59.495049][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 59.613048][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.200: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 59.643064][ T4754] tmpfs: Bad value for 'mpol' [ 59.653939][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.200: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 59.705681][ T4737] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz.2.200: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.734142][ T4756] loop3: detected capacity change from 0 to 256 [ 59.875567][ T4737] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #2: block 18: comm syz.2.200: lblock 23 mapped to illegal pblock 18 (length 1) [ 59.908623][ T4758] x_tables: duplicate underflow at hook 1 [ 60.028175][ T4317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.037607][ T4762] loop1: detected capacity change from 0 to 2048 [ 60.041246][ T4763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 60.061866][ T4763] bond1: entered promiscuous mode [ 60.072518][ T4760] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 60.085388][ T4762] loop1: p1 < > p4 [ 60.085974][ T4760] ip6gretap1: entered promiscuous mode [ 60.091520][ T4762] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.097225][ T4760] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 60.132578][ T4760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 60.136313][ T4766] loop2: detected capacity change from 0 to 512 [ 60.150449][ T4766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.157255][ T4766] ext4: Bad value for 'inode_readahead_blks' [ 60.167693][ T4760] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 60.179702][ T4760] ip6gretap1: left promiscuous mode [ 60.206316][ T4760] bond1 (unregistering): Released all slaves [ 60.239413][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.239517][ T3431] udevd[3431]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 60.282390][ T3254] udevd[3254]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.282534][ T3431] udevd[3431]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 60.307361][ T4775] loop1: detected capacity change from 0 to 764 [ 60.368664][ T4783] loop4: detected capacity change from 0 to 512 [ 60.396133][ T4775] rock: directory entry would overflow storage [ 60.402411][ T4775] rock: sig=0x4f50, size=4, remaining=3 [ 60.408031][ T4775] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.475214][ T3794] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 60.482977][ T3794] FAT-fs (loop3): Filesystem has been set read-only [ 60.492753][ T4783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.492805][ T3794] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 60.542616][ T4803] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 60.553443][ T4803] SELinux: failed to load policy [ 60.561191][ T4783] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.564408][ T4803] loop1: detected capacity change from 0 to 1024 [ 60.588998][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.617613][ T4803] EXT4-fs: Ignoring removed orlov option [ 60.623719][ T4803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.678713][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.691238][ T4803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.759560][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.795858][ T4056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.822366][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.849695][ T4821] lo speed is unknown, defaulting to 1000 [ 60.856955][ T4849] loop1: detected capacity change from 0 to 512 [ 60.868476][ T4851] ================================================================== [ 60.876567][ T4851] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 60.884879][ T4851] [ 60.887179][ T4851] write to 0xffffea00043fa858 of 8 bytes by task 4849 on cpu 1: [ 60.895034][ T4851] delete_from_page_cache_batch+0x308/0x700 [ 60.900946][ T4851] truncate_inode_pages_range+0x1c5/0x6b0 [ 60.906743][ T4851] truncate_inode_pages+0x24/0x30 [ 60.911769][ T4851] set_blocksize+0x267/0x280 [ 60.916363][ T4851] sb_min_blocksize+0x63/0xe0 [ 60.921021][ T4851] ext4_fill_super+0x38b/0x39e0 [ 60.925854][ T4851] get_tree_bdev+0x256/0x2e0 [ 60.930424][ T4851] ext4_get_tree+0x1c/0x30 [ 60.934821][ T4851] vfs_get_tree+0x56/0x1e0 [ 60.939213][ T4851] do_new_mount+0x227/0x690 [ 60.943691][ T4851] path_mount+0x49b/0xb30 [ 60.948016][ T4851] __se_sys_mount+0x27c/0x2d0 [ 60.952676][ T4851] __x64_sys_mount+0x67/0x80 [ 60.957243][ T4851] x64_sys_call+0x203e/0x2d60 [ 60.961921][ T4851] do_syscall_64+0xc9/0x1c0 [ 60.966437][ T4851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.972320][ T4851] [ 60.974622][ T4851] read to 0xffffea00043fa858 of 8 bytes by task 4851 on cpu 0: [ 60.982137][ T4851] folio_mapping+0x97/0x110 [ 60.986619][ T4851] lru_add_fn+0x89/0x440 [ 60.990841][ T4851] folio_batch_move_lru+0x15f/0x230 [ 60.996046][ T4851] lru_add_drain_cpu+0x77/0x260 [ 61.000900][ T4851] lru_add_drain+0x26/0x80 [ 61.005327][ T4851] exit_mmap+0x15d/0x710 [ 61.009549][ T4851] __mmput+0x28/0x1b0 [ 61.013504][ T4851] mmput+0x4c/0x60 [ 61.017219][ T4851] exit_mm+0xe4/0x190 [ 61.021176][ T4851] do_exit+0x55e/0x1720 [ 61.025310][ T4851] do_group_exit+0x142/0x150 [ 61.029889][ T4851] __x64_sys_exit_group+0x1f/0x20 [ 61.034900][ T4851] x64_sys_call+0x2d5d/0x2d60 [ 61.039578][ T4851] do_syscall_64+0xc9/0x1c0 [ 61.044057][ T4851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.049950][ T4851] [ 61.052247][ T4851] value changed: 0xffff8881004c1198 -> 0x0000000000000000 [ 61.059331][ T4851] [ 61.061655][ T4851] Reported by Kernel Concurrency Sanitizer on: [ 61.067893][ T4851] CPU: 0 UID: 0 PID: 4851 Comm: modprobe Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 61.078365][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.088415][ T4851] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 61.127220][ T4849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.153579][ T4849] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.169281][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 61.169596][ T29] audit: type=1400 audit(1725535087.544:2013): avc: denied { write } for pid=3251 comm="syz-executor" path="pipe:[1680]" dev="pipefs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 61.406707][ T40] bridge_slave_1: left allmulticast mode [ 61.412414][ T40] bridge_slave_1: left promiscuous mode [ 61.418207][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.428718][ T40] bridge_slave_0: left allmulticast mode [ 61.434477][ T40] bridge_slave_0: left promiscuous mode [ 61.440246][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.567573][ T4824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.710286][ T40] batadv0: left promiscuous mode [ 61.716506][ T40] veth0: left promiscuous mode [ 61.723242][ T40] hsr_slave_0: left promiscuous mode [ 61.729244][ T40] hsr_slave_1: left promiscuous mode [ 61.734897][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.743039][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.752912][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.760398][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.769328][ T40] veth1_macvtap: left promiscuous mode [ 61.774873][ T40] veth0_macvtap: left promiscuous mode [ 61.780705][ T40] veth1_vlan: left promiscuous mode [ 61.850298][ T40] team0 (unregistering): Port device team_slave_1 removed [ 61.860270][ T40] team0 (unregistering): Port device team_slave_0 removed [ 62.161934][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.209647][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.248558][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.299080][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.364311][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.428295][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.467782][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.493352][ T29] audit: type=1400 audit(1725535088.924:2014): avc: denied { sys_chroot } for pid=5022 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 62.514832][ T29] audit: type=1400 audit(1725535088.924:2015): avc: denied { setgid } for pid=5022 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 62.535673][ T29] audit: type=1400 audit(1725535088.924:2016): avc: denied { setuid } for pid=5022 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 62.556560][ T29] audit: type=1400 audit(1725535088.924:2017): avc: denied { setrlimit } for pid=5022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 62.588392][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.644317][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.678237][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.729009][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.799668][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.865403][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.918719][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.978026][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.019283][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.087113][ T40] bridge_slave_1: left allmulticast mode [ 63.092882][ T40] bridge_slave_1: left promiscuous mode [ 63.098761][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.107697][ T40] bridge_slave_0: left allmulticast mode [ 63.113363][ T40] bridge_slave_0: left promiscuous mode [ 63.119101][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.128532][ T40] bridge_slave_1: left allmulticast mode [ 63.134328][ T40] bridge_slave_1: left promiscuous mode [ 63.139991][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.148780][ T40] bridge_slave_0: left allmulticast mode [ 63.154446][ T40] bridge_slave_0: left promiscuous mode [ 63.160214][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.168371][ T40] bridge_slave_1: left allmulticast mode [ 63.174040][ T40] bridge_slave_1: left promiscuous mode [ 63.179880][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.187556][ T40] bridge_slave_0: left allmulticast mode [ 63.193311][ T40] bridge_slave_0: left promiscuous mode [ 63.198970][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.206903][ T40] bridge_slave_1: left allmulticast mode [ 63.212612][ T40] bridge_slave_1: left promiscuous mode [ 63.218258][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.226081][ T40] bridge_slave_0: left allmulticast mode [ 63.231814][ T40] bridge_slave_0: left promiscuous mode [ 63.237561][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.757363][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.767575][ T40] bond0 (unregistering): Released all slaves [ 63.777126][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.787211][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.797130][ T40] bond0 (unregistering): Released all slaves [ 63.806111][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.816349][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.827176][ T40] bond0 (unregistering): Released all slaves [ 63.836246][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.846221][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.855847][ T40] bond0 (unregistering): Released all slaves [ 63.863579][ T40] bond0 (unregistering): Released all slaves [ 64.188294][ T40] hsr_slave_0: left promiscuous mode [ 64.194047][ T40] hsr_slave_1: left promiscuous mode [ 64.200061][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.208103][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.215628][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.223081][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.233340][ T40] hsr_slave_0: left promiscuous mode [ 64.239022][ T40] hsr_slave_1: left promiscuous mode [ 64.244679][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.252091][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.259524][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.266915][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.274590][ T40] batman_adv: batadv0: Interface deactivated: macsec1 [ 64.281429][ T40] batman_adv: batadv0: Removing interface: macsec1 [ 64.289934][ T40] hsr_slave_1: left promiscuous mode [ 64.296034][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.303533][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.311081][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.318503][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.327555][ T40] hsr_slave_0: left promiscuous mode [ 64.333242][ T40] hsr_slave_1: left promiscuous mode [ 64.339148][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.346716][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.354233][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.365773][ T40] veth1_macvtap: left promiscuous mode [ 64.371419][ T40] veth0_macvtap: left promiscuous mode [ 64.377191][ T40] veth1_vlan: left promiscuous mode [ 64.382450][ T40] veth0_vlan: left promiscuous mode [ 64.388689][ T40] dummy0: left promiscuous mode [ 64.393546][ T40] veth1_macvtap: left promiscuous mode [ 64.399098][ T40] veth0_macvtap: left promiscuous mode [ 64.404654][ T40] veth1_vlan: left promiscuous mode [ 64.410041][ T40] veth0_vlan: left promiscuous mode [ 64.416614][ T40] veth1_macvtap: left promiscuous mode [ 64.422155][ T40] veth0_macvtap: left promiscuous mode [ 64.427739][ T40] veth1_vlan: left promiscuous mode [ 64.432932][ T40] veth0_vlan: left promiscuous mode [ 64.438717][ T40] veth1_macvtap: left promiscuous mode [ 64.444176][ T40] veth0_macvtap: left promiscuous mode [ 64.449785][ T40] veth1_vlan: left promiscuous mode [ 64.455119][ T40] veth0_vlan: left promiscuous mode [ 64.600395][ T40] infiniband syz1: set down [ 64.605773][ T35] infiniband syz1: ib_query_port failed (-19) [ 64.636890][ T40] team0 (unregistering): Port device team_slave_1 removed [ 64.646631][ T40] team0 (unregistering): Port device team_slave_0 removed [ 64.699865][ T40] team0 (unregistering): Port device team_slave_1 removed [ 64.709994][ T40] team0 (unregistering): Port device team_slave_0 removed [ 64.734020][ T40] team0 (unregistering): Port device batadv0 removed [ 64.769657][ T40] team0 (unregistering): Port device team_slave_1 removed [ 64.780347][ T40] team0 (unregistering): Port device team_slave_0 removed [ 64.833458][ T40] team0 (unregistering): Port device team_slave_1 removed [ 64.844419][ T40] team0 (unregistering): Port device team_slave_0 removed [ 64.869640][ T40] team0 (unregistering): Port device batadv0 removed [ 64.883527][ T1901] smc: removing ib device syz1 [ 69.075900][ T29] audit: type=1400 audit(1725535095.514:2018): avc: denied { write } for pid=2944 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.097435][ T29] audit: type=1400 audit(1725535095.514:2019): avc: denied { remove_name } for pid=2944 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.120138][ T29] audit: type=1400 audit(1725535095.514:2020): avc: denied { rename } for pid=2944 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.142495][ T29] audit: type=1400 audit(1725535095.514:2021): avc: denied { add_name } for pid=2944 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.165265][ T29] audit: type=1400 audit(1725535095.514:2022): avc: denied { unlink } for pid=2944 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.188049][ T29] audit: type=1400 audit(1725535095.514:2023): avc: denied { create } for pid=2944 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1