last executing test programs:

3.464977956s ago: executing program 2 (id=488):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0xfffffffd, @empty, 0x100}, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c000000000000000000000000000000000000000000000000001100", 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x300}}], 0x4, 0xc080)

3.386408782s ago: executing program 2 (id=489):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r0, 0x10d, 0x96, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = syz_open_dev$sg(&(0x7f00000001c0), 0xfffffffffffff800, 0x4002)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000200))
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x7)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0x0, 0xffffffff, 0x1, 0x2008000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pim6reg\x00', 0x112})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000ec000000ec000000060000000400000000000001000000002f000604000000000200000d000000000c000000010000000900000000000000070000000000000b05000000030000000100008406000000070000000100000003000000000000000000000300000000040000000400000001000000090000000000000c040000000900000000000008010000000600000008000005060000000600000001000000070000000d00000001000000ef020000030000000400000001000000"], 0x0, 0x10a, 0x0, 0x4, 0x1f}, 0x20)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r3)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB='<wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r8 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r8, 0x0, 0x0, 0x0, @prog_id}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='ext4_sync_file_exit\x00'}, 0x10)
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'ipvlan1\x00', 0x600})
ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000240))
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r8, 0x0, 0x0}, 0x10)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]})
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000440)={'vcan0\x00', 0x1000})

2.462992718s ago: executing program 2 (id=512):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8)
preadv(r0, &(0x7f0000001100)=[{0x0}, {&(0x7f00000013c0)=""/234, 0xea}], 0x2, 0x1ffff000, 0x0)

2.231854407s ago: executing program 2 (id=513):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = socket$tipc(0x1e, 0x5, 0x0)
socket(0x40000000015, 0x5, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, 0x0)
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
splice(r2, 0x0, r6, 0x0, 0x80, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
write(r6, &(0x7f0000003300)="ac", 0x1)
write(r4, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/132, 0x84}], 0x1, &(0x7f0000000240)}, 0x0)
dup3(r8, r1, 0x0)

2.07798794s ago: executing program 3 (id=519):
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x20, 0x4, 0x1, 0x0, r0}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

1.966532599s ago: executing program 1 (id=522):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x0, 0xffff, r0}, 0x38)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40), 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000a0000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0x57)
syz_pidfd_open(r3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
perf_event_open(0x0, r3, 0xc, r2, 0x1)
poll(0x0, 0x0, 0xffffffff)

1.890580055s ago: executing program 3 (id=524):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0xb)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000380)={0x0, <r5=>0x0})
setpgid(0x0, r5)
fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x2, r5})
close_range(r3, 0xffffffffffffffff, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000100)=0xffff0000)
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000002540))

1.768067705s ago: executing program 3 (id=525):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff51d}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000003000)=""/124, 0x7c}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f00000004c0)=""/236, 0xec}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/90, 0x5a}, {&(0x7f0000000680)}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000780)=""/37, 0x25}], 0x9, &(0x7f0000000e00)=""/84, 0x54}, 0xfffff801}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f00)=""/177, 0xb1}, {&(0x7f0000000fc0)=""/61, 0x3d}], 0x2, &(0x7f0000001040)=""/140, 0x8c}, 0x7}, {{&(0x7f0000001100)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001180)=""/9, 0x9}, {&(0x7f00000011c0)=""/214, 0xd6}, {&(0x7f00000012c0)=""/50, 0x32}, {&(0x7f0000001300)=""/152, 0x98}], 0x4, &(0x7f0000001400)=""/47, 0x2f}, 0x7}, {{&(0x7f0000001440)=@rc, 0x80, &(0x7f0000002900)=[{&(0x7f00000014c0)}, {&(0x7f0000001500)=""/216, 0xd8}, {&(0x7f0000001600)=""/178, 0xb2}, {&(0x7f00000016c0)=""/164, 0xa4}, {&(0x7f0000002880)=""/115, 0x73}], 0x5, &(0x7f0000001780)=""/40, 0x28}}, {{&(0x7f0000002980)=@tipc=@id, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/163, 0xa3}, {&(0x7f0000003ec0)=""/152, 0x98}, {&(0x7f0000002b80)=""/73, 0x49}, {&(0x7f0000002c00)=""/93, 0x5d}], 0x4, &(0x7f0000002cc0)=""/136, 0x88}, 0x8}, {{&(0x7f0000002d80)=@qipcrtr, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002e00)=""/143, 0x8f}, {&(0x7f0000002ec0)=""/124, 0x7c}, {&(0x7f0000002f40)=""/79, 0x4f}, {&(0x7f0000002fc0)=""/33, 0x21}, {&(0x7f0000003e00)=""/140, 0x8c}, {&(0x7f00000030c0)=""/232, 0xe8}, {&(0x7f00000031c0)=""/51, 0x33}, {&(0x7f0000003200)=""/43, 0x2b}, {&(0x7f0000003240)=""/174, 0xae}, {&(0x7f0000003300)=""/175, 0xaf}], 0xa}, 0x5}, {{&(0x7f0000003480)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003500)=""/234, 0xea}, {&(0x7f0000003600)=""/77, 0x4d}], 0x2, &(0x7f00000036c0)=""/53, 0x35}, 0xc}, {{&(0x7f0000003700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003780)=""/120, 0x78}, {&(0x7f0000003800)=""/184, 0xb8}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003900)=""/229, 0xe5}}, {{&(0x7f0000003a00)=@sco, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a80)=""/157, 0x9d}], 0x1, &(0x7f0000003b80)=""/49, 0x31}, 0xff}], 0x9, 0x2, 0x0)
setuid(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000004880)='wg2\x00', 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', <r6=>0x0})
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000140)={@empty, @broadcast, r6}, 0xc)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200010, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@noquota}, {@dax_never}]}, 0x1, 0x576, &(0x7f0000003f80)="$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")
open(&(0x7f0000000080)='./bus\x00', 0xa942, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(0x0, 0x185102, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@mcast2}}, 0xe8)

1.410384544s ago: executing program 3 (id=528):
socket$igmp(0x2, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xa)
setresgid(0x0, r1, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
sendto$inet6(r4, &(0x7f0000000200)="d8f96c9d59fd664b1c9295171742c298ff8590b3e7f2b12e04ad9fa2cb1b44185d5f249d06153c38c2f94bf3151b0f09f76931f1e3ac189401d7564e3b9fdeeea10df9879d049ebe16f0392cfe79b3b16a4e4d3ba4ffffe3044d76150ab91a496b1fe5b4467fde10eb4efcc36aa2cf6098f4d8b5ab478fbe0d339cd780c87eed680cd2ee59175a8b16eb5c973cdb4a54e3335125b0560a75956e085b909bb0686690ad879b3fe27d9874f294295660f3a8c9dba4018c43bfb64dfc", 0xbb, 0x4000000, &(0x7f0000000040)={0xa, 0x4e21, 0xa9f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xaee}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40489}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x58}}, 0x0)
sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20}}], 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x400, 0x7ff, 0x201, r8})
sendmsg$nl_route_sched(r3, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20c0}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)=@gettfilter={0x74, 0x2e, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x9, 0x10}, {0x2, 0xffff}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x285}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x7097ceb5}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x480c0}, 0x80)
writev(r2, &(0x7f0000001500)=[{&(0x7f0000000140)="9b63e4acc4cce74bae8acc07bbbdc8011034e8f63f831ac6382c35a7ff624e606a86cc04cee4f3d5671c92328246657661f091ec945cd5eb44a034ee97521c01950cc11b16c75b3a744afe58fbe52d96353db182f9999c1b2108428b1700ecaabc9a60c6eb580effe12ec036fcd2f340666a112f3de358878a41b6d8ad205e306d87b361267f5f3010a46e6631bfac7fad03a83d64372e4fc6b335e8edf8e1e02c7219e5674c62791015ccace579d3", 0xaf}, {&(0x7f0000000200)="ec5292e44a80a910c686d15cd4384ddabb03364ce1ebc5099354f25a14dd6d38b8eb06540d551ca1c7e369bba49e38c3e78095d7b8cfa38d1db2046709e526e7a29e50467a8e80c321c252608ead4cfd7e0dee254ea7b435d0af92197f43d4c97c780edd4074388e750cbb0505c5d273a190ec9ec21e36d2c19503e86af7eaa73d69a4be", 0x84}, {&(0x7f0000000080)="0c2a76fce8cc3656ac2d30b8f7dee7a454bd1f580467ad354c71d14185f155562d1f3f38", 0x24}, {&(0x7f00000002c0)="ec67cbdf85eaba358e82967392694d023994199ffbb89c4e155a021be22eda295952b9d5f3acd221e12b9d76247bc1fb7c2a4b71002976aa59b2cb4ae70a1438bfa0941cbde1383958627e5fe2634cac19df0ed379f0580519458086179193d8aafcfa72f04cc5f9bcf6c4d8d5b4b5347424b4d51a8f31583cbcf57a1954bd51b40609b811fa705d47b1c15732745aa9cb00d17d70", 0x95}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="f21f85958b07383805bad1", 0xb}, {&(0x7f00000013c0)="80258bbc7083b51148608f40927330194aeb56be3e08acc8dcc47676d5ee805f9e5dc13ab02de12cb6f1e338964a573555931805a9b227eb620ed1646b382d11c306282c9b4dd2406b576dc83c90d0d8944b81a14597e53813932fe825f87124f8518a6e4cd00fecec4d0006093e1fab8c25fdd8c5619434bbb0adece7dccad456bff35bea95531bc35c1baa37496399f73a7cc278a8cdcdddf0c3ca56c9ee6ffa88ad2aea22804c714275bb9c66271042ccfd42a51a6ad8692ef9d5719edea530a02ffa67b6ef983fe59a455bce024c6c2193d8c907d8d448d6075399218f3627681b5ce6ef172fc9088efbf4e8efc66864476023fbc944", 0xf8}, {&(0x7f00000014c0)="8ec8a35d88cdc9799cb52370b94f5be314aa848265f25a9bf08b14dd8e7f461a45837679bf29624ec7fab60108ee7f0c7811a798ca26", 0x36}], 0x8)
lseek(r2, 0x8, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="6a3cd7d9191758e47650f7ebe7c462623dd698d00025f31c50f2941f904e0b9f052cc70e95ef3cdbb2217fdc82a8819ff565d95895eb2dec7b2a98e46a886f96fbbbacd3dc8a3c542bbbff4e7cb6503a1b4947e484945307dab03ae3f0b6d756cfda868efa5c47a034ccb8f9fb36e70b2b64a812d487fba20973", 0x7a}, {0x0}], 0x2)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./bus/file0\x00', 0x0, 0x2187017, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0)

1.135768537s ago: executing program 2 (id=530):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x3c95}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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")
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x4}, {0x45}, {0x6}]}, 0x10)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x5, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x41000, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000a40)="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")
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x200000000000004b, &(0x7f00000004c0)=[{0x4, 0x0, 0x0, 0xe1}, {0xff01, 0x2, 0x6, 0x3}, {0x7, 0x6b, 0xfa, 0x9}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = dup2(r0, r5)
sendmmsg$inet(r6, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf889f1a6ed430aff1952b2498efc46cbaebc815cb2ea2ff01000067d49ffb192dad5fcac955fee31e59228679db51d72e0ba6bd6fa2545df05482e63a", 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a29e04f23dac714e90c70202e052be86141ead3c90a0e23650d6a5c10ba19943c89ab235f149ddaa2bf84d5e52bce3fbecc01eb03e0cd322dbc4b9c1bd3263a9d7bbc6de3e50842793e1ee7997649a6ab10775e6e50", 0x65}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)="2ea5d94f90933978352c42a3dad24b4909f57c7dba08e38797ab936fc9c5158f38287d", 0x23}], 0x1}}], 0x3, 0x0)

1.135025417s ago: executing program 3 (id=531):
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1405, 0x0, 0x0, 0x0, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}}, 0x0) (async, rerun: 64)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0}) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) (async)
ioctl$TCFLSH(r0, 0x5424, 0x40000020001100)
open(&(0x7f0000000000)='./bus/file0\x00', 0x1e3142, 0x20) (async)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000", @ANYRESHEX=r0, @ANYBLOB='C>'], 0x2c, 0x0)

1.121157438s ago: executing program 1 (id=533):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
r1 = syz_io_uring_setup(0x78ed, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_setup(0x246d, &(0x7f00000002c0), &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r1, 0x184c, 0x0, 0x2000, 0x0, 0x42)

1.054283173s ago: executing program 1 (id=536):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082)
write$sndseq(r0, 0x0, 0x0) (async)
fcntl$dupfd(r0, 0x0, r0)
r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=<r2=>0x0) (async)
syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4) (async)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x28d]}}, {0xfd, 0x20, 0x0, 0x0, @tick=0x612, {}, {0x0, 0x1}, @quote}], 0x38)
read$rfkill(r5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x100001, 0x0, 0x1}, 0x48) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]})
ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000010140)=0x1)
write$ppp(r7, &(0x7f00000001c0)="38d5", 0x2)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) (async)
setsockopt(r8, 0x65, 0x1, 0x0, 0x0) (async)
bind$can_raw(r8, &(0x7f0000000000), 0x10) (async)
close(r8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='cachefiles_ondemand_open\x00'}, 0x10) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000340)=ANY=[], 0x9)

962.308361ms ago: executing program 1 (id=538):
perf_event_open(&(0x7f0000000100)={0x2, 0xd0, 0x26, 0x1, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4480, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x154}}, 0x0)

901.555836ms ago: executing program 1 (id=540):
rseq(0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x500, &(0x7f0000000500)="$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")
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
syz_clone(0x0, 0x0, 0x27, &(0x7f00000003c0), 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0xffffffff000, 0x2})
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="6000000000000000000000fff700450000300000000000020400000000f4c81473dd027a7678000000004500000000000000006c0000ac1414aaac1e1001"], 0x3e)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2}}, 0x20)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000520001000000000000000000020000001400010003"], 0x28}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty=0x1000000, @broadcast}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07080000000000000000130000000e0001006e507464657673696d0000000f0002006e657464657673696d300000080003000000fef53bfd0b00000000000600110000000000"], 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', <r7=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x2010050, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="574ebc0e94989fcde4c7e6c29d5b7d84ea1d3b850bb44bd48bb9519bc17acbb165391925581f91c0647c1d56315d4d044e055c5842362d6e3547a65f0d1dc45f590e08b80c1182db21b765ab93d407000000a9415a11b2facb5efbeda5c99dab23a7176fd9bdcc116a308a7b3a9e3562550da7ba26451b761e0bc1c92c045eee"], 0xff, 0x2ce, &(0x7f0000000640)="$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")
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48)

885.819317ms ago: executing program 4 (id=541):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0xf5ff}, 0x0)

834.412332ms ago: executing program 3 (id=543):
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000a80)=ANY=[], 0x1, 0x2bc, &(0x7f0000000f80)="$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")
madvise(&(0x7f0000536000/0x4000)=nil, 0x4000, 0x17)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
pidfd_getfd(r1, r0, 0x0)

834.309601ms ago: executing program 4 (id=544):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0x15, 0xfffffffffffffffe}, 0x10)

784.625195ms ago: executing program 4 (id=546):
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
preadv(r0, &(0x7f0000001100)=[{&(0x7f00000000c0)=""/4085, 0xfffffecf}, {&(0x7f00000013c0)=""/234, 0xea}], 0x2, 0x1ffff000, 0x80000)

510.459738ms ago: executing program 1 (id=548):
perf_event_open(&(0x7f0000001100)={0x3, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18e573e2dbbcb22d8a66933cff75d6a0e90f1a0000010000850000000500d30000644bafb0a0708495"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TCSETSW2(r3, 0x5437, 0x0)
sigaltstack(&(0x7f0000001380)={0x0, 0x2}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c0016800800010007"], 0x38}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
io_setup(0xaf, &(0x7f0000000080)) (fail_nth: 10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6}, 0x8)

422.526025ms ago: executing program 0 (id=551):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x110, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'ipvlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac=@local, @multicast2, @empty}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'geneve0\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x6f06c632447bf28a}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @local, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10)
socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x5c, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_RATE64={0xc}]}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x5c}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
llistxattr(0x0, 0x0, 0x0)
r7 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00', 0x6e93ebbbcc0884f2, 0x4, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x7})
mq_timedreceive(r7, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680})
r8 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x23, 0x452, &(0x7f0000000880)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0)

381.630829ms ago: executing program 4 (id=552):
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x20, 0x4, 0x1, 0x0, r0}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

256.304939ms ago: executing program 0 (id=553):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x108042)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000002c0)=ANY=[], 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c)

182.685595ms ago: executing program 4 (id=554):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000002c0)=ANY=[], 0x8)
sendto$inet6(r0, 0x0, 0x40000, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c)

182.353545ms ago: executing program 0 (id=555):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0x15, 0xfffffffffffffffe}, 0x10)

182.144655ms ago: executing program 4 (id=556):
socket$nl_route(0x10, 0x3, 0x0) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async)
r0 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000) (async)
io_setup(0x2e, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1001, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)='^', 0x1}]) (async)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) (async)
perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
mkdir(0x0, 0x0) (async)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
writev(r3, &(0x7f00000001c0), 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="7fc19e9e88708c2b4fd87e707708", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async)
connect(r2, &(0x7f0000001380)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
connect$unix(r6, 0x0, 0x0)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) (async)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) (async)
socket$inet(0x2, 0x4000000805, 0x0) (async)
listen(0xffffffffffffffff, 0x3)

142.531138ms ago: executing program 0 (id=557):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="500100001000130700000009000000007f2000010012000000000000000000000000007fffffff80b96f570d512bc6e6f20000ffffac1414fffe000000000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff02040000000000000000000000000100000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x2000c090)

80.191913ms ago: executing program 0 (id=558):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="04010000160001000000000000000000fc010000000000000000000000000000fc01000000000000008e1433a2736b689f00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000001000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400"], 0x104}}, 0x0)

22.516658ms ago: executing program 2 (id=559):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async)
gettid()
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8045)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x0)
fallocate(r2, 0x2, 0x0, 0x400001) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) (async)
getpeername$unix(0xffffffffffffffff, 0x0, 0x0) (async)
pipe2(&(0x7f0000000840), 0x0)
pipe(&(0x7f0000000000)) (async)
open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
socket$can_bcm(0x1d, 0x2, 0x2) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(0xffffffffffffffff, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0xce22, 0x0, @empty}, 0x1c) (async)
listen(r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

0s ago: executing program 0 (id=560):
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
preadv(r0, &(0x7f0000001100)=[{&(0x7f00000000c0)=""/4085, 0xfffffecf}, {&(0x7f00000013c0)=""/234, 0xea}], 0x2, 0x1ffff000, 0x0) (fail_nth: 5)

kernel console output (not intermixed with test programs):

0.792794][ T3257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.829173][ T3258] veth1_vlan: entered promiscuous mode
[   30.839589][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.850198][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.860141][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.870669][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.880512][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.891087][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.902356][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.911841][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.922411][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.932256][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.942792][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.952650][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.963112][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.974263][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.993137][ T3264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.001971][ T3264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.010719][ T3264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.019469][ T3264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.034106][   T29] kauditd_printk_skb: 27 callbacks suppressed
[   31.034123][   T29] audit: type=1400 audit(1723714525.301:119): avc:  denied  { map_create } for  pid=3402 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.045980][ T3258] veth0_macvtap: entered promiscuous mode
[   31.079065][ T3405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   31.083167][   T29] audit: type=1400 audit(1723714525.301:120): avc:  denied  { open } for  pid=3403 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   31.089249][ T3258] veth1_macvtap: entered promiscuous mode
[   31.106801][   T29] audit: type=1400 audit(1723714525.301:121): avc:  denied  { perfmon } for  pid=3403 comm="syz.3.4" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.119903][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.133262][   T29] audit: type=1400 audit(1723714525.311:122): avc:  denied  { kernel } for  pid=3403 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   31.143622][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.143637][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.162648][   T29] audit: type=1400 audit(1723714525.311:123): avc:  denied  { read } for  pid=3403 comm="syz.3.4" name="ppp" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.172474][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.182897][   T29] audit: type=1400 audit(1723714525.311:124): avc:  denied  { open } for  pid=3403 comm="syz.3.4" path="/dev/ppp" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   31.205185][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.205203][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.205216][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.205232][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.215109][   T29] audit: type=1400 audit(1723714525.331:125): avc:  denied  { create } for  pid=3399 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.245499][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.248366][   T29] audit: type=1400 audit(1723714525.331:126): avc:  denied  { prog_load } for  pid=3402 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.248392][   T29] audit: type=1400 audit(1723714525.331:127): avc:  denied  { bpf } for  pid=3402 comm="syz.0.1" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.259336][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.268603][   T29] audit: type=1400 audit(1723714525.331:128): avc:  denied  { map_read map_write } for  pid=3402 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.278592][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.278606][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.345311][ T3409] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1'.
[   31.355952][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.355969][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.355984][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.355996][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.356008][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.361235][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.461553][ T3400] loop1: detected capacity change from 0 to 2048
[   31.480399][ T3405] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.493428][ T3258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.502442][ T3258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.507800][ T3405] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.511287][ T3258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.531753][ T3258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.652319][ T3421] netlink: zone id is out of range
[   31.657683][ T3421] netlink: zone id is out of range
[   31.662820][ T3421] netlink: zone id is out of range
[   31.668059][ T3421] netlink: get zone limit has 8 unknown bytes
[   31.739146][ T3422] loop3: detected capacity change from 0 to 2048
[   31.773821][ T3436] loop2: detected capacity change from 0 to 256
[   31.794246][ T3436] syz.2.11 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   31.805625][ T3422]  loop3: p1 < > p4
[   31.812003][ T3422] loop3: p4 size 8388608 extends beyond EOD, truncated
[   31.820606][ T3438] loop4: detected capacity change from 0 to 128
[   31.842433][ T3248] udevd[3248]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   31.844147][ T3435] udevd[3435]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   32.066740][ T3442] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm
[   32.095155][ T3448] atomic_op ffff8881157f3528 conn xmit_atomic 0000000000000000
[   32.156231][ T3450] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   32.444447][ T3451] syz.2.14 (3451) used greatest stack depth: 10056 bytes left
[   32.498920][ T3456] loop1: detected capacity change from 0 to 1024
[   32.511987][ T3456] EXT4-fs: Ignoring removed nomblk_io_submit option
[   32.538851][ T3456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.590834][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.631264][ T3475] tipc: Started in network mode
[   32.636184][ T3475] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   32.643479][ T3475] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[   32.650420][ T3475] tipc: Enabled bearer <ib:caif0>, priority 0
[   32.674221][ T3474] loop4: detected capacity change from 0 to 256
[   32.714313][ T3486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   32.727219][ T3474] support for cryptoloop has been removed.  Use dm-crypt instead.
[   32.791405][ T3500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'.
[   32.908148][ T3503] netlink: 'syz.1.29': attribute type 4 has an invalid length.
[   32.962086][ T3258] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   32.969696][ T3258] FAT-fs (loop4): Filesystem has been set read-only
[   32.985258][ T3258] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   33.004510][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'.
[   33.012196][ T3509] loop2: detected capacity change from 0 to 1024
[   33.039127][ T3509] EXT4-fs: Ignoring removed nomblk_io_submit option
[   33.062403][ T3509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.093661][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.186590][ T3530] loop2: detected capacity change from 0 to 2048
[   33.200845][ T3530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.227421][ T3534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'.
[   33.282229][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.324804][ T3539] loop2: detected capacity change from 0 to 512
[   33.331661][ T3539] =======================================================
[   33.331661][ T3539] WARNING: The mand mount option has been deprecated and
[   33.331661][ T3539]          and is ignored by this kernel. Remove the mand
[   33.331661][ T3539]          option from the mount to silence this warning.
[   33.331661][ T3539] =======================================================
[   33.370051][ T3539] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.41: bad orphan inode 15
[   33.380511][ T3539] ext4_test_bit(bit=14, block=5) = 0
[   33.386232][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.399943][ T3539] EXT4-fs error (device loop2): __ext4_new_inode:1070: comm syz.2.41: reserved inode found cleared - inode=1
[   33.535632][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'.
[   33.778202][    T8] tipc: Node number set to 10136234
[   34.080115][ T3552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'.
[   34.139543][ T3556] loop1: detected capacity change from 0 to 512
[   34.149517][ T3556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.162395][ T3556] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.173457][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.185560][ T3556] netlink: 160 bytes leftover after parsing attributes in process `syz.1.45'.
[   34.235384][ T3564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3564 comm=syz.2.48
[   34.275748][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.322461][ T3572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'.
[   34.330613][ T3576] loop1: detected capacity change from 0 to 1024
[   34.331337][ T3572] netlink: 'syz.2.51': attribute type 7 has an invalid length.
[   34.341853][ T3576] EXT4-fs: Ignoring removed nomblk_io_submit option
[   34.345355][ T3572] netlink: 'syz.2.51': attribute type 8 has an invalid length.
[   34.363535][ T3572] gretap0: entered promiscuous mode
[   34.375320][ T3572] batadv_slave_1: entered promiscuous mode
[   34.457261][ T3576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.679769][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.931620][ T3599] xt_CT: You must specify a L4 protocol and not use inversions on it
[   35.016989][ T3604] loop2: detected capacity change from 0 to 512
[   35.040891][ T3604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.077112][ T3604] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.240190][ T3628] loop3: detected capacity change from 0 to 1024
[   35.247225][ T3628] EXT4-fs: Ignoring removed nomblk_io_submit option
[   35.272204][ T3628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.309514][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.324700][ T3636] bridge0: port 3(vlan2) entered blocking state
[   35.331148][ T3636] bridge0: port 3(vlan2) entered disabled state
[   35.368981][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.383764][ T3636] vlan2: entered allmulticast mode
[   35.388981][ T3636] geneve0: entered allmulticast mode
[   35.415350][ T3636] vlan2: entered promiscuous mode
[   35.420742][ T3636] geneve0: entered promiscuous mode
[   35.427031][ T3636] bridge0: port 3(vlan2) entered blocking state
[   35.433360][ T3636] bridge0: port 3(vlan2) entered forwarding state
[   35.534175][ T3651] geneve2: entered promiscuous mode
[   35.539521][ T3651] geneve2: entered allmulticast mode
[   35.566885][    C1] hrtimer: interrupt took 17216 ns
[   35.874939][ T3677] loop3: detected capacity change from 0 to 512
[   35.909636][ T3677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.942451][ T3677] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.976127][ T3688] loop0: detected capacity change from 0 to 128
[   35.992672][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.099910][   T29] kauditd_printk_skb: 164 callbacks suppressed
[   36.099923][   T29] audit: type=1326 audit(1723714530.361:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.156742][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.211572][   T29] audit: type=1326 audit(1723714530.401:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.234791][   T29] audit: type=1326 audit(1723714530.401:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.258102][   T29] audit: type=1326 audit(1723714530.401:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.281582][   T29] audit: type=1326 audit(1723714530.401:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.304861][   T29] audit: type=1326 audit(1723714530.401:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.328433][   T29] audit: type=1326 audit(1723714530.401:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.351907][   T29] audit: type=1326 audit(1723714530.401:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.475464][   T29] audit: type=1326 audit(1723714530.661:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.498922][   T29] audit: type=1326 audit(1723714530.661:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e0099b9 code=0x7ffc0000
[   36.531682][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.543940][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.561379][ T3665] chnl_net:caif_netlink_parms(): no params data found
[   36.595028][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.629607][ T3712] loop2: detected capacity change from 0 to 2048
[   36.640074][ T3710] netlink: 'syz.3.89': attribute type 7 has an invalid length.
[   36.647751][ T3710] netlink: 'syz.3.89': attribute type 39 has an invalid length.
[   36.714283][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.721658][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.742176][ T3665] bridge_slave_0: entered allmulticast mode
[   36.750389][ T3665] bridge_slave_0: entered promiscuous mode
[   36.767085][ T3717] loop0: detected capacity change from 0 to 1024
[   36.773978][ T3717] EXT4-fs: Ignoring removed nomblk_io_submit option
[   36.781293][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.788518][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.789795][ T3717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.799164][ T3665] bridge_slave_1: entered allmulticast mode
[   36.814700][ T3665] bridge_slave_1: entered promiscuous mode
[   37.019758][ T3722] xt_CT: No such helper "pptp"
[   37.178236][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.225526][ T3736] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[   37.254799][ T3736] loop0: detected capacity change from 0 to 512
[   37.263615][ T3736] EXT4-fs (loop0): 1 orphan inode deleted
[   37.273284][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.295522][ T3736] sg_read: process 56 (syz.0.96) changed security contexts after opening file descriptor, this is not allowed.
[   37.315869][ T3739] __nla_validate_parse: 6 callbacks suppressed
[   37.315887][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'.
[   37.316201][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.341873][ T3665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.352672][ T3665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.362050][   T50] bridge_slave_1: left allmulticast mode
[   37.367850][   T50] bridge_slave_1: left promiscuous mode
[   37.373501][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.394317][ T3743] loop0: detected capacity change from 0 to 512
[   37.433377][   T50] bridge_slave_0: left allmulticast mode
[   37.439199][   T50] bridge_slave_0: left promiscuous mode
[   37.444861][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.504250][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.517879][ T3743] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.600536][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.615709][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   37.617886][ T3765] IPv6: addrconf: prefix option has invalid lifetime
[   37.632081][ T3767] loop0: detected capacity change from 0 to 256
[   37.643025][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   37.654094][   T50] bond0 (unregistering): Released all slaves
[   37.671571][ T3257] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   37.679251][ T3257] FAT-fs (loop0): Filesystem has been set read-only
[   37.686044][ T3257] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   37.702354][ T3763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'.
[   37.716065][ T3665] team0: Port device team_slave_0 added
[   37.730391][ T3665] team0: Port device team_slave_1 added
[   37.752777][ T3772] loop3: detected capacity change from 0 to 512
[   37.759655][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'.
[   37.780223][   T50] hsr_slave_0: left promiscuous mode
[   37.790137][ T3772] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.104: bad orphan inode 15
[   37.807098][   T50] hsr_slave_1: left promiscuous mode
[   37.818841][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.826415][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   37.835507][ T3772] ext4_test_bit(bit=14, block=5) = 0
[   37.841306][ T3772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.855085][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.862556][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   37.878563][   T50] veth1_macvtap: left promiscuous mode
[   37.880086][ T3772] EXT4-fs error (device loop3): __ext4_new_inode:1070: comm syz.3.104: reserved inode found cleared - inode=1
[   37.884081][   T50] veth0_macvtap: left promiscuous mode
[   37.884175][   T50] veth1_vlan: left promiscuous mode
[   37.906531][   T50] veth0_vlan: left promiscuous mode
[   38.015783][   T50] team0 (unregistering): Port device team_slave_1 removed
[   38.027838][   T50] team0 (unregistering): Port device team_slave_0 removed
[   38.066682][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.074195][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.100238][ T3665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.113451][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.120452][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.146468][ T3665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.186851][ T3665] hsr_slave_0: entered promiscuous mode
[   38.193023][ T3665] hsr_slave_1: entered promiscuous mode
[   38.198964][ T3665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.206557][ T3665] Cannot create hsr debugfs directory
[   38.300467][ T3803] FAULT_INJECTION: forcing a failure.
[   38.300467][ T3803] name failslab, interval 1, probability 0, space 0, times 1
[   38.313176][ T3803] CPU: 0 UID: 0 PID: 3803 Comm: syz.2.107 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   38.323945][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   38.334106][ T3803] Call Trace:
[   38.337407][ T3803]  <TASK>
[   38.340368][ T3803]  dump_stack_lvl+0xf2/0x150
[   38.344996][ T3803]  dump_stack+0x15/0x20
[   38.349189][ T3803]  should_fail_ex+0x229/0x230
[   38.353993][ T3803]  ? sk_prot_alloc+0x41/0x190
[   38.358701][ T3803]  should_failslab+0x8f/0xb0
[   38.363357][ T3803]  kmem_cache_alloc_noprof+0x4c/0x290
[   38.368842][ T3803]  ? security_inode_alloc+0x32/0xd0
[   38.374064][ T3803]  sk_prot_alloc+0x41/0x190
[   38.378660][ T3803]  sk_alloc+0x33/0x360
[   38.383705][ T3803]  ? inet_create+0x39e/0x740
[   38.388399][ T3803]  inet_create+0x3bd/0x740
[   38.392862][ T3803]  __sock_create+0x2db/0x4f0
[   38.397541][ T3803]  sock_create_kern+0x38/0x50
[   38.402238][ T3803]  udp_sock_create4+0x67/0x2a0
[   38.407114][ T3803]  wg_socket_init+0x244/0x620
[   38.411899][ T3803]  ? __pfx_wg_receive+0x10/0x10
[   38.416785][ T3803]  wg_set_device+0x377/0x1240
[   38.421571][ T3803]  ? __nla_parse+0x40/0x60
[   38.425995][ T3803]  ? genl_family_rcv_msg_attrs_parse+0x148/0x1a0
[   38.432400][ T3803]  ? genl_family_rcv_msg_attrs_parse+0x182/0x1a0
[   38.438754][ T3803]  genl_rcv_msg+0x61b/0x6c0
[   38.443269][ T3803]  ? __pfx_wg_set_device+0x10/0x10
[   38.448384][ T3803]  netlink_rcv_skb+0x12c/0x230
[   38.453333][ T3803]  ? __pfx_genl_rcv_msg+0x10/0x10
[   38.458390][ T3803]  genl_rcv+0x28/0x40
[   38.462392][ T3803]  netlink_unicast+0x593/0x670
[   38.467178][ T3803]  netlink_sendmsg+0x5cc/0x6e0
[   38.472027][ T3803]  ? __pfx_netlink_sendmsg+0x10/0x10
[   38.477393][ T3803]  __sock_sendmsg+0x140/0x180
[   38.482084][ T3803]  ____sys_sendmsg+0x312/0x410
[   38.486937][ T3803]  __sys_sendmsg+0x1e9/0x280
[   38.491579][ T3803]  __x64_sys_sendmsg+0x46/0x50
[   38.496367][ T3803]  x64_sys_call+0x2689/0x2d60
[   38.501127][ T3803]  do_syscall_64+0xc9/0x1c0
[   38.505681][ T3803]  ? clear_bhb_loop+0x55/0xb0
[   38.510376][ T3803]  ? clear_bhb_loop+0x55/0xb0
[   38.515066][ T3803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.520977][ T3803] RIP: 0033:0x7fbf884099b9
[   38.525389][ T3803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.545079][ T3803] RSP: 002b:00007fbf87081038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   38.553491][ T3803] RAX: ffffffffffffffda RBX: 00007fbf885a5f80 RCX: 00007fbf884099b9
[   38.561470][ T3803] RDX: 0000000000000000 RSI: 0000000020001040 RDI: 0000000000000008
[   38.569605][ T3803] RBP: 00007fbf87081090 R08: 0000000000000000 R09: 0000000000000000
[   38.577641][ T3803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   38.585620][ T3803] R13: 0000000000000000 R14: 00007fbf885a5f80 R15: 00007ffc77ed2ad8
[   38.593624][ T3803]  </TASK>
[   38.596919][ T3803] wireguard: wg2: Could not create IPv4 socket
[   38.601166][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.636084][ T3820] vlan3: entered allmulticast mode
[   38.649564][ T3823] loop2: detected capacity change from 0 to 512
[   38.668787][ T3823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.670874][ T3825] loop3: detected capacity change from 0 to 1024
[   38.683159][ T3823] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.690457][ T3825] EXT4-fs: Ignoring removed nomblk_io_submit option
[   38.725542][ T3825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.780841][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.796226][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.811058][ T3784] chnl_net:caif_netlink_parms(): no params data found
[   38.948949][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'.
[   39.040735][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.047880][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.066402][ T3784] bridge_slave_0: entered allmulticast mode
[   39.074383][ T3784] bridge_slave_0: entered promiscuous mode
[   39.084276][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.091555][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.112554][ T3784] bridge_slave_1: entered allmulticast mode
[   39.136964][ T3784] bridge_slave_1: entered promiscuous mode
[   39.179211][ T3784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.204313][ T3860] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.232090][ T3872] loop3: detected capacity change from 0 to 1024
[   39.247414][ T3869] 9pnet_fd: Insufficient options for proto=fd
[   39.248158][   T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.258128][ T3869] 9pnet_fd: Insufficient options for proto=fd
[   39.265611][ T3872] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.280724][ T3784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.294746][ T3872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.317920][ T3665] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   39.342538][   T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.366155][ T3665] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   39.379227][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.391569][ T3784] team0: Port device team_slave_0 added
[   39.398416][ T3784] team0: Port device team_slave_1 added
[   39.434771][ T3665] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   39.450914][   T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.462508][ T3784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.469571][ T3784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.495817][ T3784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.510070][ T3665] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   39.519666][ T3896] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   39.535982][ T3784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.543033][ T3784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.569121][ T3784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.586815][   T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.607056][ T3833] syz.1.111 (3833) used greatest stack depth: 9912 bytes left
[   39.650691][ T3784] hsr_slave_0: entered promiscuous mode
[   39.658781][ T3784] hsr_slave_1: entered promiscuous mode
[   39.685937][ T3784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.702122][ T3784] Cannot create hsr debugfs directory
[   39.853308][   T50] bridge_slave_1: left allmulticast mode
[   39.859261][   T50] bridge_slave_1: left promiscuous mode
[   39.865188][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.881716][   T50] bridge_slave_0: left allmulticast mode
[   39.887491][   T50] bridge_slave_0: left promiscuous mode
[   39.893156][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.089914][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   40.109114][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   40.124262][   T50] bond0 (unregistering): Released all slaves
[   40.131946][ T3958] FAULT_INJECTION: forcing a failure.
[   40.131946][ T3958] name failslab, interval 1, probability 0, space 0, times 0
[   40.144624][ T3958] CPU: 1 UID: 0 PID: 3958 Comm: syz.2.130 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   40.155258][ T3958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   40.165338][ T3958] Call Trace:
[   40.168699][ T3958]  <TASK>
[   40.171637][ T3958]  dump_stack_lvl+0xf2/0x150
[   40.176268][ T3958]  dump_stack+0x15/0x20
[   40.180526][ T3958]  should_fail_ex+0x229/0x230
[   40.185233][ T3958]  ? security_inode_alloc+0x32/0xd0
[   40.190535][ T3958]  should_failslab+0x8f/0xb0
[   40.195184][ T3958]  kmem_cache_alloc_noprof+0x4c/0x290
[   40.200591][ T3958]  security_inode_alloc+0x32/0xd0
[   40.205688][ T3958]  inode_init_always+0x439/0x480
[   40.210669][ T3958]  alloc_inode+0x7d/0x160
[   40.215128][ T3958]  new_inode_pseudo+0x15/0x20
[   40.219873][ T3958]  alloc_anon_inode+0x1e/0x170
[   40.224735][ T3958]  aio_setup_ring+0x96/0x6b0
[   40.229366][ T3958]  ioctx_alloc+0x2b2/0x4c0
[   40.233851][ T3958]  __se_sys_io_setup+0x6b/0x1b0
[   40.238764][ T3958]  __x64_sys_io_setup+0x31/0x40
[   40.243650][ T3958]  x64_sys_call+0x2639/0x2d60
[   40.248405][ T3958]  do_syscall_64+0xc9/0x1c0
[   40.253005][ T3958]  ? clear_bhb_loop+0x55/0xb0
[   40.257715][ T3958]  ? clear_bhb_loop+0x55/0xb0
[   40.262422][ T3958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.268351][ T3958] RIP: 0033:0x7fbf884099b9
[   40.272783][ T3958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.292511][ T3958] RSP: 002b:00007fbf8703f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   40.301146][ T3958] RAX: ffffffffffffffda RBX: 00007fbf885a6130 RCX: 00007fbf884099b9
[   40.309195][ T3958] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000000af
[   40.317181][ T3958] RBP: 00007fbf8703f090 R08: 0000000000000000 R09: 0000000000000000
[   40.325171][ T3958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.333291][ T3958] R13: 0000000000000001 R14: 00007fbf885a6130 R15: 00007ffc77ed2ad8
[   40.341292][ T3958]  </TASK>
[   40.351897][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'.
[   40.421234][ T3665] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.453650][ T3665] 8021q: adding VLAN 0 to HW filter on device team0
[   40.470393][   T50] hsr_slave_0: left promiscuous mode
[   40.476392][   T50] hsr_slave_1: left promiscuous mode
[   40.484651][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.492141][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   40.512854][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.520374][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   40.550291][   T50] veth1_macvtap: left promiscuous mode
[   40.555848][   T50] veth0_macvtap: left promiscuous mode
[   40.561495][   T50] veth1_vlan: left promiscuous mode
[   40.566833][   T50] veth0_vlan: left promiscuous mode
[   40.633364][ T3983] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3983 comm=syz.1.135
[   40.715762][ T3988] loop1: detected capacity change from 0 to 1024
[   40.748823][ T3988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.826976][   T50] team0 (unregistering): Port device team_slave_1 removed
[   40.848544][   T50] team0 (unregistering): Port device team_slave_0 removed
[   40.890922][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.001079][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.008396][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.029772][ T4011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'.
[   41.059419][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.066657][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.171328][ T4029] loop1: detected capacity change from 0 to 512
[   41.201163][ T4029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.278368][ T4029] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.290699][ T3784] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   41.333362][ T3665] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.347129][   T29] kauditd_printk_skb: 141 callbacks suppressed
[   41.347144][   T29] audit: type=1400 audit(1723714535.611:444): avc:  denied  { create } for  pid=4023 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   41.392127][ T3784] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   41.399140][   T29] audit: type=1400 audit(1723714535.611:445): avc:  denied  { read } for  pid=4023 comm="syz.1.147" path="/41/bus/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   41.421820][   T29] audit: type=1400 audit(1723714535.611:446): avc:  denied  { create } for  pid=4023 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   41.441308][   T29] audit: type=1400 audit(1723714535.611:447): avc:  denied  { read } for  pid=4023 comm="syz.1.147" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   41.464317][   T29] audit: type=1400 audit(1723714535.611:448): avc:  denied  { open } for  pid=4023 comm="syz.1.147" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   41.474194][ T3948] loop3: detected capacity change from 0 to 512
[   41.487926][   T29] audit: type=1400 audit(1723714535.611:449): avc:  denied  { write } for  pid=4023 comm="syz.1.147" name="memory.events" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   41.533026][ T3784] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   41.533040][   T29] audit: type=1326 audit(1723714535.731:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff41e008350 code=0x7ffc0000
[   41.563085][   T29] audit: type=1326 audit(1723714535.731:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff41e0095bb code=0x7ffc0000
[   41.582304][ T4061] ebt_among: dst integrity fail: 101
[   41.586387][   T29] audit: type=1326 audit(1723714535.751:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff41e00864a code=0x7ffc0000
[   41.599548][ T3948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.615021][   T29] audit: type=1326 audit(1723714535.751:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff41e00864a code=0x7ffc0000
[   41.631067][ T3948] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.655761][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.676005][ T3784] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   41.755169][ T3784] 8021q: adding VLAN 0 to HW filter on device bond0
[   41.773978][ T3784] 8021q: adding VLAN 0 to HW filter on device team0
[   41.817633][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.824766][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.861527][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.868669][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.944367][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'.
[   41.978243][ T4083] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 40113 - 0
[   41.987166][ T4083] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 40113 - 0
[   41.996030][ T4083] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 40113 - 0
[   42.004869][ T4083] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 40113 - 0
[   42.015274][ T4083] geneve2: entered promiscuous mode
[   42.025568][ T4083] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 40113 - 0
[   42.034712][ T4083] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 40113 - 0
[   42.043728][ T4083] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 40113 - 0
[   42.052763][ T4083] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 40113 - 0
[   42.063733][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.088850][ T3784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   42.164213][ T3665] veth0_vlan: entered promiscuous mode
[   42.196035][ T4111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'.
[   42.206030][ T3665] veth1_vlan: entered promiscuous mode
[   42.216509][ T4114] capability: warning: `syz.3.160' uses deprecated v2 capabilities in a way that may be insecure
[   42.253520][ T3784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   42.318458][ T4127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'.
[   42.365657][ T3665] veth0_macvtap: entered promiscuous mode
[   42.412866][ T3665] veth1_macvtap: entered promiscuous mode
[   42.447491][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.458170][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.468079][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.478541][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.488428][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.498877][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.520556][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.530200][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.540770][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.550642][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.561146][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.570990][ T3665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.581727][ T3665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.594644][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.625306][ T3665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.634156][ T3665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.643040][ T3665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.651795][ T3665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.677499][ T3784] veth0_vlan: entered promiscuous mode
[   42.694741][ T3784] veth1_vlan: entered promiscuous mode
[   42.758644][ T4180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[   42.773611][ T3784] veth0_macvtap: entered promiscuous mode
[   42.790982][ T3784] veth1_macvtap: entered promiscuous mode
[   42.798061][ T4182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'.
[   42.811430][ T4182] IPv6: addrconf: prefix option has invalid lifetime
[   42.822183][ T3784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.832745][ T3784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.842601][ T3784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.853161][ T3784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.863011][ T3784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.873477][ T3784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.883325][ T3784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.893874][ T3784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.907206][ T3784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.926633][ T3784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.937167][ T3784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.947066][ T3784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.957560][ T3784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.967417][ T3784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.977880][ T3784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.987727][ T3784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.998182][ T3784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.064597][ T3784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.084838][ T3784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.093712][ T3784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.102450][ T3784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.111222][ T3784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.121819][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.88'.
[   43.269270][ T4195] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm
[   43.298110][ T4201] vlan3: entered allmulticast mode
[   43.351077][ T4207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'.
[   43.428906][ T4220] xt_CT: You must specify a L4 protocol and not use inversions on it
[   43.444590][ T4222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.453414][ T4222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.468545][ T4222] loop1: detected capacity change from 0 to 512
[   43.500199][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.522988][ T4222] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.532308][ T4232] loop3: detected capacity change from 0 to 512
[   43.541965][ T4232] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.555065][ T4232] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   43.570218][ T4222] bridge_slave_1: left allmulticast mode
[   43.576028][ T4222] bridge_slave_1: left promiscuous mode
[   43.581606][ T4232] EXT4-fs (loop3): 1 orphan inode deleted
[   43.581953][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.587427][ T4232] EXT4-fs (loop3): 1 truncate cleaned up
[   43.603865][ T4232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.618970][ T4235] loop2: detected capacity change from 0 to 512
[   43.635056][ T4235] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.194: casefold flag without casefold feature
[   43.640124][ T4232] EXT4-fs error (device loop3): ext4_lookup:1811: inode #15: comm syz.3.193: iget: bad extra_isize 46 (inode size 256)
[   43.656442][ T4235] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.194: couldn't read orphan inode 15 (err -117)
[   43.670722][ T4232] EXT4-fs (loop3): Remounting filesystem read-only
[   43.682369][ T4235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.702473][ T4232] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   43.719154][ T4232] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   43.719684][ T4235] Process accounting resumed
[   43.733336][ T4232] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   43.750985][ T4235] ipt_ECN: cannot use operation on non-tcp rule
[   43.757914][ T4232] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[   43.768348][ T4232] cgroup: Unknown subsys name 'fowner>00000000000000000000'
[   43.776600][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.798686][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.829035][ T4247] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4247 comm=syz.0.198
[   43.860772][ T4259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   44.037803][ T4267] SELinux:  Context #! ./bus is not valid (left unmapped).
[   44.304015][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.352818][ T4277] ebtables: ebtables: counters copy to user failed while replacing table
[   44.426692][ T4288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.208'.
[   44.461422][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[   44.470328][ T4292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.209'.
[   44.484967][ T4295] FAULT_INJECTION: forcing a failure.
[   44.484967][ T4295] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   44.486116][ T4292] bridge1: the hash_elasticity option has been deprecated and is always 16
[   44.499265][ T4295] CPU: 0 UID: 0 PID: 4295 Comm: syz.1.211 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   44.517333][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   44.527455][ T4295] Call Trace:
[   44.530822][ T4295]  <TASK>
[   44.533763][ T4295]  dump_stack_lvl+0xf2/0x150
[   44.538504][ T4295]  dump_stack+0x15/0x20
[   44.542706][ T4295]  should_fail_ex+0x229/0x230
[   44.547642][ T4295]  should_fail+0xb/0x10
[   44.551817][ T4295]  should_fail_usercopy+0x1a/0x20
[   44.556893][ T4295]  _copy_to_user+0x1e/0xa0
[   44.561386][ T4295]  simple_read_from_buffer+0xa0/0x110
[   44.566780][ T4295]  proc_fail_nth_read+0xfc/0x140
[   44.571787][ T4295]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   44.577441][ T4295]  vfs_read+0x1a2/0x6e0
[   44.581730][ T4295]  ? __rcu_read_unlock+0x4e/0x70
[   44.586679][ T4295]  ? __fget_files+0x1da/0x210
[   44.591427][ T4295]  ksys_read+0xeb/0x1b0
[   44.595705][ T4295]  __x64_sys_read+0x42/0x50
[   44.600229][ T4295]  x64_sys_call+0x27d3/0x2d60
[   44.604985][ T4295]  do_syscall_64+0xc9/0x1c0
[   44.609509][ T4295]  ? clear_bhb_loop+0x55/0xb0
[   44.614201][ T4295]  ? clear_bhb_loop+0x55/0xb0
[   44.618974][ T4295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.624895][ T4295] RIP: 0033:0x7f5a274883fc
[   44.629312][ T4295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48
[   44.649008][ T4295] RSP: 002b:00007f5a26107030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   44.657448][ T4295] RAX: ffffffffffffffda RBX: 00007f5a27625f80 RCX: 00007f5a274883fc
[   44.665450][ T4295] RDX: 000000000000000f RSI: 00007f5a261070a0 RDI: 0000000000000004
[   44.673506][ T4295] RBP: 00007f5a26107090 R08: 0000000000000000 R09: 0000000000000000
[   44.681480][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.689453][ T4295] R13: 0000000000000000 R14: 00007f5a27625f80 R15: 00007ffea6ed61c8
[   44.697431][ T4295]  </TASK>
[   44.802949][ T4306] loop1: detected capacity change from 0 to 1024
[   44.810636][ T4306] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.852234][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.877788][ T4314] loop3: detected capacity change from 0 to 2048
[   44.914357][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.927669][ T4314]  loop3: p1 < > p4
[   44.949671][ T4314] loop3: p4 size 8388608 extends beyond EOD, truncated
[   44.957307][ T4325] loop1: detected capacity change from 0 to 512
[   44.966306][ T4327] ebt_among: dst integrity fail: 101
[   44.975472][ T4325] EXT4-fs: quotafile must be on filesystem root
[   44.991354][ T4325] Zero length message leads to an empty skb
[   45.081987][ T4332] loop2: detected capacity change from 0 to 256
[   45.093131][ T4332] msdos: Bad value for 'gid'
[   45.097938][ T4332] msdos: Bad value for 'gid'
[   45.181275][ T4348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.230'.
[   45.195743][ T4352] loop3: detected capacity change from 0 to 128
[   45.264988][ T4357] loop3: detected capacity change from 0 to 1024
[   45.272219][ T4357] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.298219][ T4357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.302057][ T4361] sit1: entered promiscuous mode
[   45.325351][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.429113][ T4373] loop4: detected capacity change from 0 to 512
[   45.449881][ T4373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.462819][ T4373] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.519973][ T3665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.739942][ T4401] sit1: entered promiscuous mode
[   45.782015][ T4405] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   45.792641][ T4405] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[   45.926485][ T4425] loop3: detected capacity change from 0 to 128
[   45.939771][ T4425] FAT-fs (loop3): bogus number of reserved sectors
[   45.946451][ T4425] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   45.955866][ T4425] FAT-fs (loop3): Can't find a valid FAT filesystem
[   45.977796][ T4425] loop3: detected capacity change from 0 to 512
[   46.011523][ T4425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.041412][ T4425] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.060114][ T4425] SELinux:  Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped).
[   46.108044][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.224007][ T4455] loop0: detected capacity change from 0 to 2048
[   46.235088][ T4457] loop3: detected capacity change from 0 to 512
[   46.247642][ T4457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.247796][ T4457] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.251492][ T4455]  loop0: p1 < > p4
[   46.253230][ T4455] loop0: p4 size 8388608 extends beyond EOD, truncated
[   46.296164][ T2960]  loop0: p1 < > p4
[   46.312408][ T4441] loop2: detected capacity change from 0 to 512
[   46.312783][ T2960] loop0: p4 size 8388608 extends beyond EOD, truncated
[   46.340628][ T4441] EXT4-fs error (device loop2): ext4_quota_enable:7022: comm syz.2.267: inode #67108864: comm syz.2.267: iget: illegal inode #
[   46.358928][ T3437] udevd[3437]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   46.371260][ T4441] EXT4-fs (loop2): Remounting filesystem read-only
[   46.377869][ T4441] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-117, ino=67108864). Please run e2fsck to fix.
[   46.396442][ T3248] udevd[3248]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   46.408449][ T4441] EXT4-fs (loop2): mount failed
[   46.411653][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.437540][ T3248] udevd[3248]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   46.448244][ T3435] udevd[3435]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   46.526895][ T4476] xt_CT: You must specify a L4 protocol and not use inversions on it
[   46.599032][ T4491] loop0: detected capacity change from 0 to 128
[   46.603635][ T4492] loop3: detected capacity change from 0 to 128
[   46.615113][ T4492] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[   46.618077][ T4491] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.628030][ T4494] IPv6: addrconf: prefix option has invalid lifetime
[   46.638592][ T4491] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   46.697998][   T29] kauditd_printk_skb: 76 callbacks suppressed
[   46.698068][   T29] audit: type=1400 audit(1723714540.961:530): avc:  denied  { map } for  pid=4489 comm="syz.0.286" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   46.715047][ T4492] FAT-fs (loop3): FAT read failed (blocknr 128)
[   46.759214][ T4497] syz.4.287 uses obsolete (PF_INET,SOCK_PACKET)
[   46.770572][ T3784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.792748][ T4499] loop0: detected capacity change from 0 to 512
[   46.812887][ T4499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.826050][ T4499] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.859542][   T29] audit: type=1326 audit(1723714541.121:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   46.882982][   T29] audit: type=1326 audit(1723714541.121:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   46.906537][   T29] audit: type=1326 audit(1723714541.121:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   46.929945][   T29] audit: type=1326 audit(1723714541.121:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   46.950040][ T4506] vlan2: entered promiscuous mode
[   46.953411][   T29] audit: type=1326 audit(1723714541.121:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   46.958274][ T4506] vlan2: entered allmulticast mode
[   46.981843][   T29] audit: type=1326 audit(1723714541.121:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   47.011387][   T29] audit: type=1326 audit(1723714541.171:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   47.034886][   T29] audit: type=1326 audit(1723714541.171:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   47.058474][   T29] audit: type=1326 audit(1723714541.171:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f0e5e99b9 code=0x7ffc0000
[   47.109636][ T3784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.235592][ T4518] sctp: [Deprecated]: syz.0.292 (pid 4518) Use of int in max_burst socket option.
[   47.235592][ T4518] Use struct sctp_assoc_value instead
[   47.272918][ T4519] loop0: detected capacity change from 0 to 512
[   47.298521][ T4527] loop4: detected capacity change from 0 to 1024
[   47.320272][ T4519] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   47.326281][ T4527] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.354745][ T4535] loop1: detected capacity change from 0 to 512
[   47.370797][ T4519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[   47.381003][ T4519] System zones: 1-12
[   47.385430][ T4519] EXT4-fs (loop0): 1 truncate cleaned up
[   47.385902][ T4527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.391664][ T4519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.434219][ T3784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.443257][ T4543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.445891][ T4535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.466589][ T4543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.474693][ T4535] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.486520][ T3665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.502509][ T4543] loop2: detected capacity change from 0 to 512
[   47.529328][ T4543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.578678][ T4543] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.585524][ T4549] ebtables: ebtables: counters copy to user failed while replacing table
[   47.598470][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.627123][ T4557] __nla_validate_parse: 13 callbacks suppressed
[   47.627139][ T4557] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'.
[   47.641806][ T4543] bridge_slave_1: left allmulticast mode
[   47.648097][ T4543] bridge_slave_1: left promiscuous mode
[   47.653802][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.703924][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'.
[   47.774143][ T4573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.313'.
[   47.831472][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'.
[   47.840400][ T4588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.318'.
[   47.846055][ T4587] loop1: detected capacity change from 0 to 1024
[   47.861942][ T4590] loop3: detected capacity change from 0 to 512
[   47.871293][ T4587] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.880201][ T4590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.893174][ T4588] bridge1: the hash_elasticity option has been deprecated and is always 16
[   47.895488][ T4590] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.923081][ T4587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.939552][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   47.959960][ T4598] sit1: entered promiscuous mode
[   47.966167][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.004400][ T4602] netlink: zone id is out of range
[   48.038262][ T4607] loop0: detected capacity change from 0 to 512
[   48.045815][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.058255][ T4607] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   48.067399][ T4607] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   48.081434][ T4607] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[   48.091350][ T4607] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   48.094529][ T4612] netlink: 80 bytes leftover after parsing attributes in process `syz.1.328'.
[   48.111753][ T4607] System zones: 0-2, 18-18, 34-34
[   48.127625][ T4607] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.325: bad orphan inode 15
[   48.140638][ T4607] ext4_test_bit(bit=14, block=18) = 1
[   48.146053][ T4607] is_bad_inode(inode)=0
[   48.150267][ T4607] NEXT_ORPHAN(inode)=2264924160
[   48.155144][ T4607] max_ino=32
[   48.158405][ T4607] i_nlink=0
[   48.162661][ T4607] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   48.177680][ T4607] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.325: bg 0: block 80: padding at end of block bitmap is not set
[   48.192226][ T4607] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem
[   48.202563][ T4607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.238259][ T3784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.275436][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.303438][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'.
[   48.400539][ T4636] loop3: detected capacity change from 0 to 512
[   48.422778][ T4636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.435640][ T4636] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.481303][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.539531][ T4641] loop3: detected capacity change from 0 to 8192
[   48.565417][ T4641] RDS: rds_bind could not find a transport for 800:0:100:0:8000:0:100:0, load rds_tcp or rds_rdma?
[   48.582505][ T4641] netlink: 104 bytes leftover after parsing attributes in process `syz.3.338'.
[   48.980160][ T4667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.990964][ T4667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.002051][ T4669] ebt_among: dst integrity fail: 101
[   49.008678][ T4667] loop4: detected capacity change from 0 to 512
[   49.031724][ T4667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.044622][ T4667] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.064690][ T4667] bridge_slave_1: left allmulticast mode
[   49.070476][ T4667] bridge_slave_1: left promiscuous mode
[   49.076302][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.109751][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.150380][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.203107][ T4687] loop1: detected capacity change from 0 to 512
[   49.210273][ T4687] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.218302][ T4687] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   49.227758][ T4687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002]
[   49.237586][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.247196][ T4687] System zones: 1-12
[   49.269936][ T4687] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.352: corrupted in-inode xattr: e_value size too large
[   49.302301][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.318591][ T4687] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.352: couldn't read orphan inode 15 (err -117)
[   49.354847][ T4687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.432068][ T4706] FAULT_INJECTION: forcing a failure.
[   49.432068][ T4706] name failslab, interval 1, probability 0, space 0, times 0
[   49.435866][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'.
[   49.444750][ T4706] CPU: 1 UID: 0 PID: 4706 Comm: syz.2.357 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   49.464324][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   49.466556][ T4687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4687 comm=syz.1.352
[   49.474382][ T4706] Call Trace:
[   49.474396][ T4706]  <TASK>
[   49.474404][ T4706]  dump_stack_lvl+0xf2/0x150
[   49.474471][ T4706]  dump_stack+0x15/0x20
[   49.474508][ T4706]  should_fail_ex+0x229/0x230
[   49.506459][ T4706]  ? ovs_ct_limit_cmd_set+0x22a/0x5d0
[   49.511860][ T4706]  should_failslab+0x8f/0xb0
[   49.516480][ T4706]  __kmalloc_cache_noprof+0x4b/0x2a0
[   49.521817][ T4706]  ovs_ct_limit_cmd_set+0x22a/0x5d0
[   49.527052][ T4706]  genl_rcv_msg+0x61b/0x6c0
[   49.531593][ T4706]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[   49.537411][ T4706]  netlink_rcv_skb+0x12c/0x230
[   49.542204][ T4706]  ? __pfx_genl_rcv_msg+0x10/0x10
[   49.547278][ T4706]  genl_rcv+0x28/0x40
[   49.551296][ T4706]  netlink_unicast+0x593/0x670
[   49.556117][ T4706]  netlink_sendmsg+0x5cc/0x6e0
[   49.560999][ T4706]  ? __pfx_netlink_sendmsg+0x10/0x10
[   49.566390][ T4706]  __sock_sendmsg+0x140/0x180
[   49.571130][ T4706]  ____sys_sendmsg+0x312/0x410
[   49.575942][ T4706]  __sys_sendmsg+0x1e9/0x280
[   49.580571][ T4706]  __x64_sys_sendmsg+0x46/0x50
[   49.585358][ T4706]  x64_sys_call+0x2689/0x2d60
[   49.590115][ T4706]  do_syscall_64+0xc9/0x1c0
[   49.594654][ T4706]  ? clear_bhb_loop+0x55/0xb0
[   49.599364][ T4706]  ? clear_bhb_loop+0x55/0xb0
[   49.604086][ T4706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.610012][ T4706] RIP: 0033:0x7fbf884099b9
[   49.614483][ T4706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.634195][ T4706] RSP: 002b:00007fbf87081038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   49.642637][ T4706] RAX: ffffffffffffffda RBX: 00007fbf885a5f80 RCX: 00007fbf884099b9
[   49.650708][ T4706] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[   49.658700][ T4706] RBP: 00007fbf87081090 R08: 0000000000000000 R09: 0000000000000000
[   49.666692][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   49.674735][ T4706] R13: 0000000000000000 R14: 00007fbf885a5f80 R15: 00007ffc77ed2ad8
[   49.682734][ T4706]  </TASK>
[   49.704723][ T4677] chnl_net:caif_netlink_parms(): no params data found
[   49.725643][   T36] bridge_slave_1: left allmulticast mode
[   49.731388][   T36] bridge_slave_1: left promiscuous mode
[   49.737250][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.750290][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.764527][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.793649][ T4716] loop1: detected capacity change from 0 to 512
[   49.811918][ T4719] loop2: detected capacity change from 0 to 512
[   49.818575][ T3665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.839467][ T4719] mmap: syz.2.362 (4719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   49.859096][ T4716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.899132][ T4716] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.120708][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   50.135074][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   50.145825][ T4750] loop4: detected capacity change from 0 to 512
[   50.160195][   T36] bond0 (unregistering): Released all slaves
[   50.238422][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.256752][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.264142][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.306033][ T4677] bridge_slave_0: entered allmulticast mode
[   50.327920][ T4677] bridge_slave_0: entered promiscuous mode
[   50.335983][   T36] tipc: Disabling bearer <eth:ipvlan0>
[   50.349572][   T36] tipc: Disabling bearer <ib:caif0>
[   50.349810][   T36] tipc: Left network mode
[   50.350477][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.350522][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.350766][ T4677] bridge_slave_1: entered allmulticast mode
[   50.351252][ T4677] bridge_slave_1: entered promiscuous mode
[   50.404448][ T4764] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 59351 - 0
[   50.404489][ T4764] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 59351 - 0
[   50.404520][ T4764] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 59351 - 0
[   50.404590][ T4764] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 59351 - 0
[   50.404679][ T4764] geneve2: entered promiscuous mode
[   50.408317][ T4764] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 59351 - 0
[   50.450979][ T4765] FAULT_INJECTION: forcing a failure.
[   50.450979][ T4765] name failslab, interval 1, probability 0, space 0, times 0
[   50.453622][ T4764] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 59351 - 0
[   50.462423][ T4765] CPU: 0 UID: 0 PID: 4765 Comm: syz.4.369 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   50.467604][ T4764] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 59351 - 0
[   50.476481][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   50.489065][ T4764] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 59351 - 0
[   50.497981][ T4765] Call Trace:
[   50.497992][ T4765]  <TASK>
[   50.498002][ T4765]  dump_stack_lvl+0xf2/0x150
[   50.547447][ T4765]  dump_stack+0x15/0x20
[   50.551723][ T4765]  should_fail_ex+0x229/0x230
[   50.556421][ T4765]  ? memcg_list_lru_alloc+0x132/0x740
[   50.561860][ T4765]  should_failslab+0x8f/0xb0
[   50.566635][ T4765]  __kmalloc_noprof+0xa5/0x370
[   50.571427][ T4765]  memcg_list_lru_alloc+0x132/0x740
[   50.576657][ T4765]  __memcg_slab_post_alloc_hook+0x1a2/0x650
[   50.582743][ T4765]  ? __d_alloc+0x3d/0x340
[   50.587130][ T4765]  ? should_fail_ex+0xd7/0x230
[   50.591997][ T4765]  ? __d_alloc+0x3d/0x340
[   50.596396][ T4765]  kmem_cache_alloc_lru_noprof+0x1ae/0x2a0
[   50.602232][ T4765]  __d_alloc+0x3d/0x340
[   50.606417][ T4765]  d_alloc_pseudo+0x1e/0x80
[   50.610951][ T4765]  alloc_file_pseudo+0x70/0x140
[   50.615828][ T4765]  ? inode_set_ctime_current+0x35/0x50
[   50.621386][ T4765]  aio_setup_ring+0x135/0x6b0
[   50.626105][ T4765]  ioctx_alloc+0x2b2/0x4c0
[   50.630588][ T4765]  __se_sys_io_setup+0x6b/0x1b0
[   50.635467][ T4765]  __x64_sys_io_setup+0x31/0x40
[   50.640390][ T4765]  x64_sys_call+0x2639/0x2d60
[   50.645214][ T4765]  do_syscall_64+0xc9/0x1c0
[   50.649769][ T4765]  ? clear_bhb_loop+0x55/0xb0
[   50.654569][ T4765]  ? clear_bhb_loop+0x55/0xb0
[   50.659316][ T4765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.665281][ T4765] RIP: 0033:0x7f78d99f99b9
[   50.669785][ T4765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.689398][ T4765] RSP: 002b:00007f78d8635038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[   50.697841][ T4765] RAX: ffffffffffffffda RBX: 00007f78d9b96130 RCX: 00007f78d99f99b9
[   50.705811][ T4765] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000000af
[   50.713823][ T4765] RBP: 00007f78d8635090 R08: 0000000000000000 R09: 0000000000000000
[   50.721897][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.729892][ T4765] R13: 0000000000000001 R14: 00007f78d9b96130 R15: 00007ffe64953888
[   50.737893][ T4765]  </TASK>
[   50.768991][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.780283][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.792409][   T36] hsr_slave_0: left promiscuous mode
[   50.806238][   T36] hsr_slave_1: left promiscuous mode
[   50.821163][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.828657][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.848296][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.855808][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.885871][   T36] veth1_macvtap: left promiscuous mode
[   50.891569][   T36] veth0_macvtap: left promiscuous mode
[   50.897139][   T36] veth1_vlan: left promiscuous mode
[   50.902472][   T36] veth0_vlan: left promiscuous mode
[   51.019456][ T4778] loop2: detected capacity change from 0 to 512
[   51.037572][   T36] team0 (unregistering): Port device team_slave_1 removed
[   51.050537][   T36] team0 (unregistering): Port device team_slave_0 removed
[   51.052441][ T4778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.092335][ T4778] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.092455][ T4767] bridge0: port 2(bridge_slave_1) entered listening state
[   51.128471][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.155455][ T4776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   51.222259][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.240215][ T4677] team0: Port device team_slave_0 added
[   51.255579][ T4677] team0: Port device team_slave_1 added
[   51.278699][ T4790] process 'syz.1.382' launched '/dev/fd/11' with NULL argv: empty string added
[   51.289321][ T4797] loop2: detected capacity change from 0 to 164
[   51.306483][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.313548][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.339550][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.361895][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.368927][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.395025][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.461583][ T4823] FAULT_INJECTION: forcing a failure.
[   51.461583][ T4823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.474741][ T4823] CPU: 0 UID: 0 PID: 4823 Comm: syz.4.389 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   51.485351][ T4823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   51.489377][ T4821] loop1: detected capacity change from 0 to 4096
[   51.495460][ T4823] Call Trace:
[   51.495471][ T4823]  <TASK>
[   51.495480][ T4823]  dump_stack_lvl+0xf2/0x150
[   51.512690][ T4823]  dump_stack+0x15/0x20
[   51.516903][ T4823]  should_fail_ex+0x229/0x230
[   51.521621][ T4823]  should_fail+0xb/0x10
[   51.525816][ T4823]  should_fail_usercopy+0x1a/0x20
[   51.530870][ T4823]  _copy_to_user+0x1e/0xa0
[   51.535318][ T4823]  mem_rw+0x221/0x330
[   51.539409][ T4823]  mem_read+0x30/0x40
[   51.543493][ T4823]  vfs_readv+0x3f1/0x660
[   51.547833][ T4823]  ? __pfx_mem_read+0x10/0x10
[   51.552564][ T4823]  __x64_sys_preadv+0x100/0x1c0
[   51.557423][ T4823]  x64_sys_call+0x1d5c/0x2d60
[   51.562191][ T4823]  do_syscall_64+0xc9/0x1c0
[   51.566774][ T4823]  ? clear_bhb_loop+0x55/0xb0
[   51.571484][ T4823]  ? clear_bhb_loop+0x55/0xb0
[   51.576222][ T4823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.582144][ T4823] RIP: 0033:0x7f78d99f99b9
[   51.586636][ T4823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.606268][ T4823] RSP: 002b:00007f78d8677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   51.614733][ T4823] RAX: ffffffffffffffda RBX: 00007f78d9b95f80 RCX: 00007f78d99f99b9
[   51.622779][ T4823] RDX: 0000000000000002 RSI: 0000000020001100 RDI: 0000000000000004
[   51.630755][ T4823] RBP: 00007f78d8677090 R08: 0000000000000000 R09: 0000000000000000
[   51.638789][ T4823] R10: 000000001ffff000 R11: 0000000000000246 R12: 0000000000000001
[   51.647212][ T4823] R13: 0000000000000000 R14: 00007f78d9b95f80 R15: 00007ffe64953888
[   51.655227][ T4823]  </TASK>
[   51.669573][ T4821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.671043][ T4825] mmap: syz.2.390 (4825): VmData 155865088 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data.
[   51.712161][ T4677] hsr_slave_0: entered promiscuous mode
[   51.720114][ T4677] hsr_slave_1: entered promiscuous mode
[   51.740639][ T4677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   51.748805][ T4677] Cannot create hsr debugfs directory
[   51.817626][ T4838] loop1: detected capacity change from 0 to 512
[   51.871871][ T4838] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.909707][   T29] kauditd_printk_skb: 209 callbacks suppressed
[   51.909724][   T29] audit: type=1400 audit(1723714546.171:749): avc:  denied  { create } for  pid=4845 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   51.970975][   T29] audit: type=1326 audit(1723714546.231:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   51.997662][   T29] audit: type=1326 audit(1723714546.231:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   52.021030][   T29] audit: type=1326 audit(1723714546.231:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   52.021063][   T29] audit: type=1326 audit(1723714546.231:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   52.021090][   T29] audit: type=1326 audit(1723714546.231:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   52.090887][   T29] audit: type=1326 audit(1723714546.231:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   52.114356][   T29] audit: type=1326 audit(1723714546.231:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   52.137604][   T29] audit: type=1326 audit(1723714546.231:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   52.160826][   T29] audit: type=1326 audit(1723714546.231:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a274899b9 code=0x7ffc0000
[   52.233811][ T4864] loop1: detected capacity change from 0 to 256
[   52.277040][ T4864] support for cryptoloop has been removed.  Use dm-crypt instead.
[   52.397818][ T4677] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   52.409978][ T4677] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   52.421317][ T4677] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   52.444403][ T4677] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   52.515840][ T3265] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   52.517653][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.523477][ T3265] FAT-fs (loop1): Filesystem has been set read-only
[   52.539158][ T3265] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   52.641779][ T4899] __nla_validate_parse: 4 callbacks suppressed
[   52.641795][ T4899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'.
[   52.696147][ T4677] 8021q: adding VLAN 0 to HW filter on device team0
[   52.739319][ T4677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.749824][ T4677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.770576][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.777807][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.850437][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.857639][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.018153][ T4917] bridge0: port 2(vlan2) entered blocking state
[   53.024519][ T4917] bridge0: port 2(vlan2) entered disabled state
[   53.032322][ T4917] vlan2: entered allmulticast mode
[   53.038854][ T4917] vlan2: entered promiscuous mode
[   53.044130][ T4917] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   53.061819][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.153145][ T4938] loop2: detected capacity change from 0 to 512
[   53.200294][ T4938] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.333412][ T4677] veth0_vlan: entered promiscuous mode
[   53.362311][ T4919] chnl_net:caif_netlink_parms(): no params data found
[   53.372659][ T4677] veth1_vlan: entered promiscuous mode
[   53.424607][ T4971] netlink: 'syz.4.409': attribute type 7 has an invalid length.
[   53.432373][ T4971] netlink: 'syz.4.409': attribute type 39 has an invalid length.
[   53.465700][ T4677] veth0_macvtap: entered promiscuous mode
[   53.483346][ T4971] bridge2: port 1(gretap1) entered blocking state
[   53.490098][ T4971] bridge2: port 1(gretap1) entered disabled state
[   53.513021][ T4971] gretap1: entered allmulticast mode
[   53.521939][ T4971] gretap1: entered promiscuous mode
[   53.541163][ T4677] veth1_macvtap: entered promiscuous mode
[   53.576441][ T4919] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.583580][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.609542][ T5002] FAULT_INJECTION: forcing a failure.
[   53.609542][ T5002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.622732][ T5002] CPU: 0 UID: 0 PID: 5002 Comm: syz.2.412 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   53.633348][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   53.643475][ T5002] Call Trace:
[   53.646766][ T5002]  <TASK>
[   53.649705][ T5002]  dump_stack_lvl+0xf2/0x150
[   53.654425][ T5002]  dump_stack+0x15/0x20
[   53.658956][ T5002]  should_fail_ex+0x229/0x230
[   53.663668][ T5002]  should_fail+0xb/0x10
[   53.667904][ T5002]  should_fail_usercopy+0x1a/0x20
[   53.672965][ T5002]  _copy_from_user+0x1e/0xd0
[   53.677646][ T5002]  get_user_ifreq+0x8c/0x160
[   53.680574][ T4919] bridge_slave_0: entered allmulticast mode
[   53.682256][ T5002]  sock_do_ioctl+0xc6/0x260
[   53.688826][ T4919] bridge_slave_0: entered promiscuous mode
[   53.692627][ T5002]  sock_ioctl+0x470/0x640
[   53.702773][ T5002]  ? __pfx_sock_ioctl+0x10/0x10
[   53.707682][ T5002]  __se_sys_ioctl+0xd3/0x150
[   53.712315][ T5002]  __x64_sys_ioctl+0x43/0x50
[   53.716942][ T5002]  x64_sys_call+0x15cc/0x2d60
[   53.721658][ T5002]  do_syscall_64+0xc9/0x1c0
[   53.726208][ T5002]  ? clear_bhb_loop+0x55/0xb0
[   53.730974][ T5002]  ? clear_bhb_loop+0x55/0xb0
[   53.735692][ T5002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.741635][ T5002] RIP: 0033:0x7fbf884099b9
[   53.746111][ T5002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.764031][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.765735][ T5002] RSP: 002b:00007fbf87081038 EFLAGS: 00000246
[   53.776178][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.776189][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.776202][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.776216][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.782262][ T5002]  ORIG_RAX: 0000000000000010
[   53.782273][ T5002] RAX: ffffffffffffffda RBX: 00007fbf885a5f80 RCX: 00007fbf884099b9
[   53.782339][ T5002] RDX: 0000000020000040 RSI: 0000000000008914 RDI: 0000000000000005
[   53.792122][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.802493][ T5002] RBP: 00007fbf87081090 R08: 0000000000000000 R09: 0000000000000000
[   53.802511][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.812299][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   53.812314][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.815774][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.822708][ T5002] R13: 0000000000000000 R14: 00007fbf885a5f80 R15: 00007ffc77ed2ad8
[   53.822731][ T5002]  </TASK>
[   53.910938][ T5010] wg2: entered promiscuous mode
[   53.915875][ T5010] wg2: entered allmulticast mode
[   53.936789][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.943971][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.952161][ T4919] bridge_slave_1: entered allmulticast mode
[   53.958742][ T4919] bridge_slave_1: entered promiscuous mode
[   53.969705][ T5021] loop2: detected capacity change from 0 to 512
[   53.979875][ T5007] wg2: left promiscuous mode
[   53.984520][ T5007] wg2: left allmulticast mode
[   54.000032][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.010553][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.020413][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.030880][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.040712][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.051180][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.061016][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.071444][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.082820][ T5021] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.094578][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.117199][ T4919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.131118][ T4919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.146174][ T4677] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.155049][ T4677] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.164105][ T4677] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.172856][ T4677] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.205587][ T4919] team0: Port device team_slave_0 added
[   54.215436][ T4919] team0: Port device team_slave_1 added
[   54.246164][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.253193][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.279352][ T4919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.305695][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.312733][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.338957][ T4919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.382657][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'.
[   54.394245][ T5040] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 51557 - 0
[   54.403136][ T5040] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 51557 - 0
[   54.412018][ T5040] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 51557 - 0
[   54.420876][ T5040] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 51557 - 0
[   54.429808][ T5040] geneve2: entered promiscuous mode
[   54.437466][ T5040] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 51557 - 0
[   54.446534][ T5040] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 51557 - 0
[   54.455625][ T5040] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 51557 - 0
[   54.464655][ T5040] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 51557 - 0
[   54.513424][ T4919] hsr_slave_0: entered promiscuous mode
[   54.524755][ T4919] hsr_slave_1: entered promiscuous mode
[   54.531196][ T4919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.538873][ T4919] Cannot create hsr debugfs directory
[   54.586805][ T5050] unsupported nla_type 10272
[   54.603566][ T5054] loop0: detected capacity change from 0 to 512
[   54.618635][ T5054] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.620592][ T5055] netdevsim netdevsim4 : renamed from netdevsim1 (while UP)
[   54.718590][ T4919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.752285][ T5068] loop4: detected capacity change from 0 to 1024
[   54.760738][ T5068] EXT4-fs: Ignoring removed orlov option
[   54.766845][ T5068] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   54.775740][ T5068] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   54.785389][ T5068] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   54.800615][ T5070] xt_CT: You must specify a L4 protocol and not use inversions on it
[   54.809867][ T5068] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #4: comm syz.4.432: blocks 32-33 from inode overlap system zone
[   54.810165][ T4919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.825356][ T5068] EXT4-fs (loop4): failed to initialize system zone (-117)
[   54.841856][ T5068] EXT4-fs (loop4): mount failed
[   54.901134][ T4919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.994576][ T4919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.010358][ T5087] loop4: detected capacity change from 0 to 512
[   55.018403][ T5087] EXT4-fs: Ignoring removed orlov option
[   55.024181][ T5087] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.031579][ T5087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.049430][ T5087] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   55.057435][ T5087] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0102]
[   55.067879][ T5087] EXT4-fs (loop4): orphan cleanup on readonly fs
[   55.074279][ T5087] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   55.088862][ T5087] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   55.095837][ T5087] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.439: bg 0: block 40: padding at end of block bitmap is not set
[   55.111596][ T5087] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem
[   55.120637][ T5087] EXT4-fs (loop4): 1 truncate cleaned up
[   55.156886][ T4919] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.165506][ T4919] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.174786][ T4919] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.183834][ T4919] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.213923][ T5093] loop3: detected capacity change from 0 to 512
[   55.279264][ T5093] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.281121][ T4919] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.302729][ T5101] loop2: detected capacity change from 0 to 128
[   55.306433][ T4919] 8021q: adding VLAN 0 to HW filter on device team0
[   55.326162][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.331108][ T5101] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   55.333286][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.380246][ T5100] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm
[   55.387432][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.394901][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.399252][ T5101] EXT4-fs (loop2): shut down requested (0)
[   55.491351][ T4919] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.508394][ T5113] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   55.522995][ T5113] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[   55.536772][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'.
[   55.576841][ T5125] vlan2: entered allmulticast mode
[   55.592988][ T5126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.447'.
[   55.635520][ T4919] veth0_vlan: entered promiscuous mode
[   55.645525][ T4919] veth1_vlan: entered promiscuous mode
[   55.669756][ T4919] veth0_macvtap: entered promiscuous mode
[   55.680534][ T4919] veth1_macvtap: entered promiscuous mode
[   55.695668][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.706141][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.716042][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.726546][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.736380][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.746874][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.756683][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.767174][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.777126][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.787574][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.798475][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.809969][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.820774][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.830704][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.841164][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.851079][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.852213][ T5133] loop3: detected capacity change from 0 to 512
[   55.861516][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.861538][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.861587][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.861603][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.861620][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.921429][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.934191][ T5138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'.
[   55.934345][ T4919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.952081][ T4919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.960936][ T4919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.969668][ T4919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.077570][ T5151] loop1: detected capacity change from 0 to 512
[   56.090271][ T5151] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.535538][ T5179] netlink: 104 bytes leftover after parsing attributes in process `syz.2.464'.
[   56.575496][ T5183] loop4: detected capacity change from 0 to 1024
[   56.579279][ T5184] loop2: detected capacity change from 0 to 512
[   56.600368][ T5183] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   56.608860][ T5184] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.690368][ T5195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=5195 comm=syz.2.467
[   56.704839][ T5195] loop2: detected capacity change from 0 to 256
[   56.712983][ T5195] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097162)
[   56.720872][ T5195] FAT-fs (loop2): Filesystem has been set read-only
[   56.841235][ T5205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'.
[   56.851084][ T5205] IPv6: addrconf: prefix option has invalid lifetime
[   56.897871][ T5208] ebtables: ebtables: counters copy to user failed while replacing table
[   57.001009][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.009644][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.092252][ T5226] atomic_op ffff88810f6ff928 conn xmit_atomic 0000000000000000
[   57.116485][ T5230] loop3: detected capacity change from 0 to 512
[   57.130321][ T5228] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm
[   57.130559][ T5230] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.154557][   T29] kauditd_printk_skb: 227 callbacks suppressed
[   57.154573][   T29] audit: type=1326 audit(1723714551.411:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.184562][   T29] audit: type=1326 audit(1723714551.411:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.207851][   T29] audit: type=1326 audit(1723714551.411:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.231366][   T29] audit: type=1326 audit(1723714551.411:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.247450][ T5236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.482'.
[   57.254744][   T29] audit: type=1326 audit(1723714551.411:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.287131][   T29] audit: type=1326 audit(1723714551.411:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.293385][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'.
[   57.310689][   T29] audit: type=1326 audit(1723714551.411:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.310725][   T29] audit: type=1326 audit(1723714551.411:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.310755][   T29] audit: type=1326 audit(1723714551.411:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.310851][   T29] audit: type=1326 audit(1723714551.411:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06feba99b9 code=0x7ffc0000
[   57.413353][ T5238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.483'.
[   57.427364][ T5238] bridge1: the hash_elasticity option has been deprecated and is always 16
[   57.524197][ T5240] bridge0: port 3(team0) entered blocking state
[   57.530558][ T5240] bridge0: port 3(team0) entered disabled state
[   57.538704][ T5240] team0: entered allmulticast mode
[   57.543890][ T5240] team_slave_0: entered allmulticast mode
[   57.549751][ T5240] team_slave_1: entered allmulticast mode
[   57.556504][ T5240] team0: entered promiscuous mode
[   57.561587][ T5240] team_slave_0: entered promiscuous mode
[   57.567412][ T5240] team_slave_1: entered promiscuous mode
[   57.574932][ T5240] bridge0: port 3(team0) entered blocking state
[   57.577561][ T5248] loop4: detected capacity change from 0 to 512
[   57.581259][ T5240] bridge0: port 3(team0) entered forwarding state
[   57.595604][ T5248] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   57.631584][ T5248] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.486: bg 0: block 64: padding at end of block bitmap is not set
[   57.648462][ T5248] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.486: Failed to acquire dquot type 0
[   57.668739][ T5248] EXT4-fs (loop4): 1 truncate cleaned up
[   57.678866][ T5253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'.
[   57.722958][ T5248] syz.4.486 (5248) used greatest stack depth: 9616 bytes left
[   57.727442][ T5261] loop3: detected capacity change from 0 to 512
[   57.804486][ T5268] netlink: 68 bytes leftover after parsing attributes in process `syz.1.495'.
[   57.827767][ T5262] 9pnet_fd: Insufficient options for proto=fd
[   57.861445][ T5261] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.887292][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'.
[   57.889198][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'.
[   57.905018][ T5279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.498'.
[   57.957229][ T5279] vlan2: entered allmulticast mode
[   57.962410][ T5279] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[   58.039898][ T5286] loop1: detected capacity change from 0 to 512
[   58.103004][ T5286] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.509: iget: bogus i_mode (0)
[   58.157691][ T5286] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.509: couldn't read orphan inode 17 (err -117)
[   58.218855][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   58.303827][ T5294] netlink: zone id is out of range
[   58.309063][ T5294] netlink: zone id is out of range
[   58.314203][ T5294] netlink: zone id is out of range
[   58.319370][ T5294] netlink: get zone limit has 8 unknown bytes
[   58.358390][ T5292] loop3: detected capacity change from 0 to 2048
[   58.369680][ T5299] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   58.465236][ T5303] loop3: detected capacity change from 0 to 1024
[   58.476012][ T5303] ext2: Unknown parameter 'hash'
[   58.506951][ T5303] tipc: Started in network mode
[   58.511893][ T5303] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711
[   58.522999][ T5303] tipc: Enabled bearer <udp:syz0>, priority 10
[   58.659022][ T5312] loop1: detected capacity change from 0 to 512
[   58.668609][ T5316] FAULT_INJECTION: forcing a failure.
[   58.668609][ T5316] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   58.681888][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.511 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   58.692494][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   58.702717][ T5316] Call Trace:
[   58.705998][ T5316]  <TASK>
[   58.708934][ T5316]  dump_stack_lvl+0xf2/0x150
[   58.713554][ T5316]  dump_stack+0x15/0x20
[   58.717730][ T5316]  should_fail_ex+0x229/0x230
[   58.722429][ T5316]  should_fail_alloc_page+0xfd/0x110
[   58.727777][ T5316]  __alloc_pages_noprof+0x109/0x360
[   58.732994][ T5316]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   58.738452][ T5316]  alloc_pages_noprof+0xe1/0x100
[   58.743466][ T5316]  get_free_pages_noprof+0xc/0x30
[   58.748516][ T5316]  mem_rw+0x61/0x330
[   58.752434][ T5316]  mem_read+0x30/0x40
[   58.756501][ T5316]  vfs_readv+0x3f1/0x660
[   58.760764][ T5316]  ? __pfx_mem_read+0x10/0x10
[   58.765457][ T5316]  __x64_sys_preadv+0x100/0x1c0
[   58.770407][ T5316]  x64_sys_call+0x1d5c/0x2d60
[   58.775119][ T5316]  do_syscall_64+0xc9/0x1c0
[   58.779680][ T5316]  ? clear_bhb_loop+0x55/0xb0
[   58.784502][ T5316]  ? clear_bhb_loop+0x55/0xb0
[   58.789288][ T5316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.795266][ T5316] RIP: 0033:0x7f2f0e5e99b9
[   58.799685][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.819533][ T5316] RSP: 002b:00007f2f0d261038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   58.827984][ T5316] RAX: ffffffffffffffda RBX: 00007f2f0e785f80 RCX: 00007f2f0e5e99b9
[   58.835958][ T5316] RDX: 0000000000000002 RSI: 0000000020001100 RDI: 0000000000000003
[   58.843935][ T5316] RBP: 00007f2f0d261090 R08: 0000000000000000 R09: 0000000000000000
[   58.852001][ T5316] R10: 000000001ffff000 R11: 0000000000000246 R12: 0000000000000001
[   58.860030][ T5316] R13: 0000000000000000 R14: 00007f2f0e785f80 R15: 00007ffdb8d5bc48
[   58.868008][ T5316]  </TASK>
[   58.918104][ T5322] ebt_among: dst integrity fail: 101
[   58.930598][ T5312] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.162470][ T5351] loop4: detected capacity change from 0 to 512
[   59.192962][ T5351] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.206498][ T5351] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: invalid header
[   59.222404][ T5351] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   59.231716][ T5351] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: invalid header
[   59.246084][ T5351] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: invalid header
[   59.260117][ T5356] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: invalid header
[   59.273544][ T5351] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   59.293252][ T5356] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   59.293824][ T5351] EXT4-fs error (device loop4): ext4_get_inode_usage:901: inode #15: comm syz.4.523: corrupted xattr block 32: invalid header
[   59.315931][ T5356] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: invalid header
[   59.331243][ T5356] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   59.396495][ T5361] loop4: detected capacity change from 0 to 512
[   59.420171][ T5361] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.528971][ T5359] loop3: detected capacity change from 0 to 1024
[   59.548770][ T3337] tipc: Node number set to 4269801490
[   59.559983][ T5359] EXT4-fs: dax option not supported
[   59.625203][ T5367] loop4: detected capacity change from 0 to 4096
[   59.729952][ T5374] FAULT_INJECTION: forcing a failure.
[   59.729952][ T5374] name failslab, interval 1, probability 0, space 0, times 0
[   59.742692][ T5374] CPU: 0 UID: 0 PID: 5374 Comm: syz.4.529 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   59.753754][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   59.764011][ T5374] Call Trace:
[   59.767447][ T5374]  <TASK>
[   59.770396][ T5374]  dump_stack_lvl+0xf2/0x150
[   59.775138][ T5374]  dump_stack+0x15/0x20
[   59.779359][ T5374]  should_fail_ex+0x229/0x230
[   59.780322][ T5376] loop2: detected capacity change from 0 to 1024
[   59.784127][ T5374]  ? ovs_ct_limit_cmd_set+0x22a/0x5d0
[   59.795853][ T5374]  should_failslab+0x8f/0xb0
[   59.800495][ T5374]  __kmalloc_cache_noprof+0x4b/0x2a0
[   59.805846][ T5374]  ovs_ct_limit_cmd_set+0x22a/0x5d0
[   59.808340][ T5376] EXT4-fs: Ignoring removed orlov option
[   59.811105][ T5374]  genl_rcv_msg+0x61b/0x6c0
[   59.821276][ T5374]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[   59.827029][ T5374]  netlink_rcv_skb+0x12c/0x230
[   59.831966][ T5374]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.837033][ T5374]  genl_rcv+0x28/0x40
[   59.841135][ T5374]  netlink_unicast+0x593/0x670
[   59.845973][ T5374]  netlink_sendmsg+0x5cc/0x6e0
[   59.850870][ T5374]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.856179][ T5374]  __sock_sendmsg+0x140/0x180
[   59.860955][ T5374]  ____sys_sendmsg+0x312/0x410
[   59.865756][ T5374]  __sys_sendmsg+0x1e9/0x280
[   59.870470][ T5374]  __x64_sys_sendmsg+0x46/0x50
[   59.875267][ T5374]  x64_sys_call+0x2689/0x2d60
[   59.879975][ T5374]  do_syscall_64+0xc9/0x1c0
[   59.884508][ T5374]  ? clear_bhb_loop+0x55/0xb0
[   59.889258][ T5374]  ? clear_bhb_loop+0x55/0xb0
[   59.893970][ T5374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.899899][ T5374] RIP: 0033:0x7f78d99f99b9
[   59.904334][ T5374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.924024][ T5374] RSP: 002b:00007f78d8677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.932538][ T5374] RAX: ffffffffffffffda RBX: 00007f78d9b95f80 RCX: 00007f78d99f99b9
[   59.940531][ T5374] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[   59.948536][ T5374] RBP: 00007f78d8677090 R08: 0000000000000000 R09: 0000000000000000
[   59.956627][ T5374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   59.964805][ T5374] R13: 0000000000000000 R14: 00007f78d9b95f80 R15: 00007ffe64953888
[   59.972804][ T5374]  </TASK>
[   60.144967][ T5393] loop4: detected capacity change from 0 to 512
[   60.164253][ T5396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.538'.
[   60.183810][ T5393] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.242154][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'.
[   60.265356][ T5403] loop1: detected capacity change from 0 to 512
[   60.285204][ T5405] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 47055 - 0
[   60.294101][ T5405] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 47055 - 0
[   60.302973][ T5405] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 47055 - 0
[   60.311817][ T5405] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 47055 - 0
[   60.328045][ T5405] geneve2: entered promiscuous mode
[   60.338861][ T5405] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 47055 - 0
[   60.339069][ T5403] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.347990][ T5405] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 47055 - 0
[   60.367405][ T5405] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 47055 - 0
[   60.376482][ T5405] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 47055 - 0
[   60.497181][ T5403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.540'.
[   60.704682][ T5435] loop0: detected capacity change from 0 to 512
[   60.759961][ T5435] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.846492][ T5418] chnl_net:caif_netlink_parms(): no params data found
[   60.936311][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.943501][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.951124][ T5418] bridge_slave_0: entered allmulticast mode
[   60.957643][ T5418] bridge_slave_0: entered promiscuous mode
[   60.964821][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.972040][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.979723][ T5418] bridge_slave_1: entered allmulticast mode
[   60.986236][ T5418] bridge_slave_1: entered promiscuous mode
[   61.009587][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.022582][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.041322][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'.
[   61.064522][ T5462] FAULT_INJECTION: forcing a failure.
[   61.064522][ T5462] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   61.074076][ T5418] team0: Port device team_slave_0 added
[   61.077851][ T5462] CPU: 1 UID: 0 PID: 5462 Comm: syz.0.560 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   61.093963][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   61.104152][ T5462] Call Trace:
[   61.107432][ T5462]  <TASK>
[   61.110447][ T5462]  dump_stack_lvl+0xf2/0x150
[   61.115242][ T5462]  dump_stack+0x15/0x20
[   61.119469][ T5462]  should_fail_ex+0x229/0x230
[   61.124218][ T5462]  should_fail_alloc_page+0xfd/0x110
[   61.129522][ T5462]  __alloc_pages_noprof+0x109/0x360
[   61.134836][ T5462]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   61.140268][ T5462]  vma_alloc_folio_noprof+0x1a0/0x2f0
[   61.145681][ T5462]  handle_mm_fault+0xd6d/0x2940
[   61.150622][ T5462]  exc_page_fault+0x296/0x650
[   61.155316][ T5462]  asm_exc_page_fault+0x26/0x30
[   61.160189][ T5462] RIP: 0010:rep_movs_alternative+0x4a/0x70
[   61.166107][ T5462] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
[   61.185859][ T5462] RSP: 0018:ffffc900012d7d00 EFLAGS: 00050206
[   61.191979][ T5462] RAX: ffff888101246d80 RBX: 00000000200010c0 RCX: 00000000000000c0
[   61.200088][ T5462] RDX: 0000000000000000 RSI: ffff8881118d0f40 RDI: 0000000020002000
[   61.208150][ T5462] RBP: 00000000200010c0 R08: 0000000080000000 R09: 0000000000000000
[   61.216130][ T5462] R10: 00018881118d0000 R11: 00018881118d0fff R12: 00000000200020c0
[   61.224229][ T5462] R13: 0000000000001000 R14: 0000000000001000 R15: ffff8881118d0000
[   61.232215][ T5462]  _copy_to_user+0x77/0xa0
[   61.236653][ T5462]  mem_rw+0x221/0x330
[   61.240646][ T5462]  mem_read+0x30/0x40
[   61.244639][ T5462]  vfs_readv+0x3f1/0x660
[   61.248894][ T5462]  ? __pfx_mem_read+0x10/0x10
[   61.253585][ T5462]  __x64_sys_preadv+0x100/0x1c0
[   61.258452][ T5462]  x64_sys_call+0x1d5c/0x2d60
[   61.263206][ T5462]  do_syscall_64+0xc9/0x1c0
[   61.267824][ T5462]  ? clear_bhb_loop+0x55/0xb0
[   61.272520][ T5462]  ? clear_bhb_loop+0x55/0xb0
[   61.277220][ T5462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.283131][ T5462] RIP: 0033:0x7f2f0e5e99b9
[   61.287555][ T5462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.307237][ T5462] RSP: 002b:00007f2f0d261038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[   61.315687][ T5462] RAX: ffffffffffffffda RBX: 00007f2f0e785f80 RCX: 00007f2f0e5e99b9
[   61.323726][ T5462] RDX: 0000000000000002 RSI: 0000000020001100 RDI: 0000000000000004
[   61.331732][ T5462] RBP: 00007f2f0d261090 R08: 0000000000000000 R09: 0000000000000000
[   61.339713][ T5462] R10: 000000001ffff000 R11: 0000000000000246 R12: 0000000000000001
[   61.347703][ T5462] R13: 0000000000000000 R14: 00007f2f0e785f80 R15: 00007ffdb8d5bc48
[   61.355680][ T5462]  </TASK>
[   61.370172][ T5464] ==================================================================
[   61.371324][ T5418] team0: Port device team_slave_1 added
[   61.378277][ T5464] BUG: KCSAN: data-race in mas_wr_modify / mtree_range_walk
[   61.391115][ T5464] 
[   61.393448][ T5464] write to 0xffff888103eb9510 of 8 bytes by task 5463 on cpu 1:
[   61.401088][ T5464]  mas_wr_modify+0x155c/0x3c90
[   61.405875][ T5464]  mas_wr_store_entry+0x250/0x390
[   61.410925][ T5464]  mas_store_prealloc+0x151/0x2b0
[   61.415975][ T5464]  vma_expand+0x57f/0x660
[   61.420346][ T5464]  mmap_region+0x80c/0x1620
[   61.424855][ T5464]  do_mmap+0x72a/0xb70
[   61.428933][ T5464]  vm_mmap_pgoff+0x133/0x290
[   61.433528][ T5464]  ksys_mmap_pgoff+0xd0/0x340
[   61.438210][ T5464]  x64_sys_call+0x1884/0x2d60
[   61.442897][ T5464]  do_syscall_64+0xc9/0x1c0
[   61.447427][ T5464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.453333][ T5464] 
[   61.455652][ T5464] read to 0xffff888103eb9510 of 8 bytes by task 5464 on cpu 0:
[   61.463194][ T5464]  mtree_range_walk+0x1b4/0x460
[   61.468049][ T5464]  mas_walk+0x16e/0x320
[   61.472219][ T5464]  lock_vma_under_rcu+0x84/0x260
[   61.477172][ T5464]  exc_page_fault+0x150/0x650
[   61.481866][ T5464]  asm_exc_page_fault+0x26/0x30
[   61.486729][ T5464] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   61.489050][ T5464] value changed: 0x00007fbf87060fff -> 0x00007fbf8703ffff
[   61.496163][ T5464] 
[   61.498489][ T5464] Reported by Kernel Concurrency Sanitizer on:
[   61.504645][ T5464] CPU: 0 UID: 0 PID: 5464 Comm: syz.2.559 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0
[   61.515237][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   61.525394][ T5464] ==================================================================
[   61.643278][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.650292][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.676294][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.716175][ T3268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.777539][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   61.810941][ T3268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.871471][ T3268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.919902][ T3268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.989010][ T3268] team0: left allmulticast mode
[   61.993902][ T3268] team_slave_0: left allmulticast mode
[   61.999414][ T3268] team_slave_1: left allmulticast mode
[   62.004888][ T3268] team0: left promiscuous mode
[   62.009676][ T3268] team_slave_0: left promiscuous mode
[   62.015164][ T3268] team_slave_1: left promiscuous mode
[   62.020803][ T3268] bridge0: port 3(team0) entered disabled state
[   62.027802][ T3268] bridge_slave_1: left allmulticast mode
[   62.033439][ T3268] bridge_slave_1: left promiscuous mode
[   62.039163][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.047025][ T3268] bridge_slave_0: left allmulticast mode
[   62.052727][ T3268] bridge_slave_0: left promiscuous mode
[   62.058385][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.159735][ T3268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.169868][ T3268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.180017][ T3268] bond0 (unregistering): Released all slaves
[   62.208039][ T3268] tipc: Disabling bearer <udp:syz0>
[   62.213316][ T3268] tipc: Left network mode
[   62.260327][ T3268] hsr_slave_0: left promiscuous mode
[   62.266072][ T3268] hsr_slave_1: left promiscuous mode
[   62.273595][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.281122][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.290705][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.298299][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.308845][ T3268] veth1_macvtap: left promiscuous mode
[   62.314316][ T3268] veth0_macvtap: left promiscuous mode
[   62.319869][ T3268] veth1_vlan: left promiscuous mode
[   62.325107][ T3268] veth0_vlan: left promiscuous mode
[   62.407015][ T3268] team0 (unregistering): Port device team_slave_1 removed
[   62.421594][ T3268] team0 (unregistering): Port device team_slave_0 removed
[   62.732963][ T3268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.771185][ T3268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.810968][ T3268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.861048][ T3268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.935223][ T3268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.972116][ T3268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.018854][ T3268] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.065751][ T3268] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[   63.078411][ T3268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.180093][ T3268] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.221029][ T3268] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.271344][ T3268] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.312645][ T3268] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.405421][ T3268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.451284][ T3268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.501568][ T3268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.541428][ T3268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.609899][ T3268] bridge_slave_1: left allmulticast mode
[   63.615581][ T3268] bridge_slave_1: left promiscuous mode
[   63.621465][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.629403][ T3268] bridge_slave_0: left allmulticast mode
[   63.635188][ T3268] bridge_slave_0: left promiscuous mode
[   63.640920][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.649836][ T3268] bridge_slave_0: left allmulticast mode
[   63.655572][ T3268] bridge_slave_0: left promiscuous mode
[   63.661377][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.671432][ T3268] gretap1: left allmulticast mode
[   63.676530][ T3268] gretap1: left promiscuous mode
[   63.681765][ T3268] bridge2: port 1(gretap1) entered disabled state
[   63.691110][ T3268] bridge_slave_1: left promiscuous mode
[   63.697302][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.706319][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.716263][ T3268] bridge_slave_1: left allmulticast mode
[   63.722102][ T3268] bridge_slave_1: left promiscuous mode
[   63.727821][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.735973][ T3268] bridge_slave_0: left allmulticast mode
[   63.741742][ T3268] bridge_slave_0: left promiscuous mode
[   63.747423][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.755516][ T3268] vlan2: left allmulticast mode
[   63.760413][ T3268] vlan2: left promiscuous mode
[   63.765237][ T3268] bridge0: port 2(vlan2) entered disabled state
[   63.772084][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.008762][ T3268] gretap0 (unregistering): left promiscuous mode
[   64.469535][ T3268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.479778][ T3268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.490136][ T3268] bond0 (unregistering): Released all slaves
[   64.499625][ T3268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.509779][ T3268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.519702][ T3268] bond0 (unregistering): Released all slaves
[   64.529052][ T3268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.539106][ T3268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.549161][ T3268] bond0 (unregistering): Released all slaves
[   64.558187][ T3268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.568167][ T3268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.577988][ T3268] bond0 (unregistering): Released all slaves
[   64.587596][ T3268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.597572][ T3268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.607858][ T3268] bond0 (unregistering): Released all slaves
[   64.853011][ T3268] hsr_slave_0: left promiscuous mode
[   64.860228][ T3268] hsr_slave_1: left promiscuous mode
[   64.865993][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.873560][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.881146][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.888568][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.897859][ T3268] hsr_slave_0: left promiscuous mode
[   64.903535][ T3268] hsr_slave_1: left promiscuous mode
[   64.909510][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.916947][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.924561][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.932023][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.941306][ T3268] hsr_slave_0: left promiscuous mode
[   64.947056][ T3268] hsr_slave_1: left promiscuous mode
[   64.952670][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.960176][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.967606][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.975003][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.982747][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.990479][ T3268] batadv_slave_1: left promiscuous mode
[   64.998084][ T3268] hsr_slave_0: left promiscuous mode
[   65.003755][ T3268] hsr_slave_1: left promiscuous mode
[   65.009646][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.017181][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.024778][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.032199][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.045902][ T3268] veth1_macvtap: left promiscuous mode
[   65.051464][ T3268] veth0_macvtap: left promiscuous mode
[   65.057091][ T3268] veth1_vlan: left promiscuous mode
[   65.062447][ T3268] veth0_vlan: left promiscuous mode
[   65.068858][ T3268] veth1_macvtap: left promiscuous mode
[   65.074330][ T3268] veth0_macvtap: left promiscuous mode
[   65.079937][ T3268] veth1_vlan: left promiscuous mode
[   65.085216][ T3268] veth0_vlan: left promiscuous mode
[   65.091097][ T3268] veth1_macvtap: left promiscuous mode
[   65.096879][ T3268] veth0_macvtap: left promiscuous mode
[   65.102535][ T3268] veth1_vlan: left promiscuous mode
[   65.107869][ T3268] veth0_vlan: left promiscuous mode
[   65.113807][ T3268] veth1_macvtap: left promiscuous mode
[   65.119423][ T3268] veth0_macvtap: left promiscuous mode
[   65.124927][ T3268] veth1_vlan: left promiscuous mode
[   65.130240][ T3268] veth0_vlan: left promiscuous mode
[   65.339335][ T3268] team0 (unregistering): Port device team_slave_1 removed
[   65.349597][ T3268] team0 (unregistering): Port device team_slave_0 removed
[   65.417935][ T3268] team0 (unregistering): Port device team_slave_1 removed
[   65.428274][ T3268] team0 (unregistering): Port device team_slave_0 removed
[   65.490342][ T3268] team0 (unregistering): Port device team_slave_1 removed
[   65.500345][ T3268] team0 (unregistering): Port device team_slave_0 removed
[   65.543156][ T3268] team0 (unregistering): Port device team_slave_1 removed
[   65.553192][ T3268] team0 (unregistering): Port device team_slave_0 removed
[   65.616154][ T3268] team0 (unregistering): Port device team_slave_1 removed
[   65.626310][ T3268] team0 (unregistering): Port device team_slave_0 removed
[   69.379949][ T3268] vlan2: left allmulticast mode
[   69.384866][ T3268] geneve0: left allmulticast mode
[   69.389968][ T3268] vlan2: left promiscuous mode
[   69.394743][ T3268] geneve0: left promiscuous mode
[   69.399873][ T3268] bridge0: port 3(vlan2) entered disabled state
[   69.411006][ T3268] bridge_slave_0: left allmulticast mode
[   69.416662][ T3268] bridge_slave_0: left promiscuous mode
[   69.422499][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.559583][ T3268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.569818][ T3268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.579884][ T3268] bond0 (unregistering): Released all slaves
[   69.689181][ T3268] hsr_slave_0: left promiscuous mode
[   69.695095][ T3268] hsr_slave_1: left promiscuous mode
[   69.700933][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.708419][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.715985][ T3268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.723415][ T3268] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.734334][ T3268] veth1_macvtap: left promiscuous mode
[   69.739917][ T3268] veth0_macvtap: left promiscuous mode
[   69.745433][ T3268] veth1_vlan: left promiscuous mode
[   69.750718][ T3268] veth0_vlan: left promiscuous mode
[   69.823508][ T3268] team0 (unregistering): Port device team_slave_1 removed
[   69.834320][ T3268] team0 (unregistering): Port device team_slave_0 removed