last executing test programs: 5.969570489s ago: executing program 4 (id=27): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) fcntl$dupfd(r2, 0x0, r1) 5.926811701s ago: executing program 4 (id=28): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x7, 0x7, 0x7, 0x4, 0x10, "d723f02d30439803c55d53f56efe320ba7f828"}) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f0000000200)=""/227, 0xe3) 5.062735681s ago: executing program 4 (id=43): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x870}}, 0x0) 4.998576595s ago: executing program 4 (id=46): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 4.880823593s ago: executing program 1 (id=48): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x4000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 4.593317173s ago: executing program 1 (id=50): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000210425bd70000000000000000000", @ANYRES32, @ANYBLOB="0000000000020100300012800800010067726500240002"], 0x50}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011003f00303030303a30303a31302e3000000000080003f4ffffff0008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.509719949s ago: executing program 4 (id=53): r0 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) utimensat(r2, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 4.418539395s ago: executing program 1 (id=57): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000300)=0x8b, 0x4) 4.290018604s ago: executing program 4 (id=60): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfffe, 0x81, 0x8, 0x9, 0xf, "6c06002004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x22) 4.289914104s ago: executing program 32 (id=60): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfffe, 0x81, 0x8, 0x9, 0xf, "6c06002004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x22) 4.080541588s ago: executing program 1 (id=68): syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaabbc1c4bec200000186ddb0a7ddf000283afffe8800000000000000000000000001"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.952113887s ago: executing program 1 (id=73): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.550531113s ago: executing program 3 (id=106): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 1.490865587s ago: executing program 3 (id=108): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @mcast2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setresuid(0xee00, 0xee00, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.400387983s ago: executing program 3 (id=109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x2200c000) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x49) 1.359233936s ago: executing program 3 (id=110): capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0x0, 0x3, 0x3ff}) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 1.222795275s ago: executing program 0 (id=113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700), 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.185023268s ago: executing program 3 (id=114): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8456, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.106197924s ago: executing program 0 (id=116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x18, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 901.070048ms ago: executing program 3 (id=118): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7, @a={0x7, 0x5, 0x0, 0x9, {0xf, 0xc, "a0a58f5a3e9639799fc56c50", 0x4, 0xd5}, 0x2}}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000080)={[{@sysvgroups}, {@bsdgroups}, {@auto_da_alloc}, {@max_dir_size_kb}, {@discard}, {@usrjquota}, {@grpquota}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}]}, 0x1, 0x66e, &(0x7f0000000f00)="$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") 840.882642ms ago: executing program 0 (id=119): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 824.676663ms ago: executing program 5 (id=61): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000040000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0x8}, 0x94) 757.075788ms ago: executing program 5 (id=121): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380), 0x0, 0x1) 619.779087ms ago: executing program 0 (id=122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_opts(0xffffffffffffffff, 0x84, 0x75, 0xfffffffffffffffe, &(0x7f0000000040)=0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8) 584.056819ms ago: executing program 5 (id=123): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_tgsigqueueinfo(r0, r1, 0x21, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 558.618202ms ago: executing program 0 (id=124): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$eJzs3MtvG8UfAPDvrvPoO/n1Vx59QAMFEVFImrRAD0gIBFIvSEhwgGNIQ1WatqgJEq0q2iBUjoi/ADgi8RdwggsCTiCuIK4IqUK9tHBARmvvJpvYTV2njkP9+Uh2ZvY1Mzs72dmdXQfQs0ayryRiW0T8EhFD9ejyBUbqf25cuzj917WL00lUq6/+OVhb7vq1i9PFosV6W/PIaBqRfpjE3ibpzp2/cGpqdnbmXB4fnz/9zvjc+QtPnjw9dWLmxMyZyaNHjxyeeObpyafaKtemFfGsXNf3vH923+5jb3zy8nQ13vz+yyy/2/L55XLUDbeVbtlIjES1Wq2my6YO1L4fXfPWN5btEbGQh5O+LmeGllUiIquu/lr7H4pKLFXeULz0QVczB3RUdn4abJhayf/2Jdn8TaVlgbvJgnYNPao442fXv8VnvfoeG8HV57PvmVr5b+Sf+py+yK7bk+H6FXulQ+lvi4jXL//9afaJpvchAADurK+z/s8Tzfp/adxbWm5HPoYyHBEHI2JnRPw/InZFxD0RtWXvi4j7bzP92vjTwlK8sf/z0+a2C9eCrP/3bD62tbz/tzhqM1zJY9tr5e9P3jo5O3Mo3yej0T+YxSdWSeObF3/++GbzRkr9v+yTpV/0BfN8/NG34gbd8an5qbWUuezqQsSevmblTxZHApKI2B0Re9rYfrbPTj7+xb4svGNr4/xbl381l9vI0XLVzyMeq9f/5VhR/kJSHyK52fjk+KaYnTk0XhwVjX748cor5Xh/Kby28q9dVv9bmh7/efmLZlCM1861uOGBpeCVXz/Kt9nYlNs9/geS15Yl897U/Py5iYiBgWicPrm0bhEvls/KP3og4ko+EFxu/zsj/vksX29vRGQH8QMR8WBE7M/z/lBEPBwRB1bZFd+98Mjbq++s7tb/8dXqP2I4KY/XtxGonPr2q2Jji1WZ/3Nprf6P1EKj+ZRW/v+1msE7sQ8BAABgo0trY9BJOrYYTtOxsfoz/LtiSzp7dm7+4Ei8e+Z4fax6OPrT4k7XUOl+6ER+b7iIT66IH46I/9WeNNpci49Nn53d3u3CQ4/bepP2n/m9Uw+9ABvHsve1bvW+XdLZvADrq6/JwCzQG1p+X7u/s/kA1p/fa4Depf1D72rW/i9F3OhCVoB1dlvn/+c6lw9g/a3W/t3yg7ub63/oXdo/9KTGV+KLR4HaedN/KbDz2JpW76FApUNbjvKPdtw6UJwDWk4i0q7vuvYDafur/3bHsrE/DwxGRKtrXbqdOl3z8QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDf928AAAD//+f51pU=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.log\x00', 0x10b0c1, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) 515.761384ms ago: executing program 2 (id=125): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) socket(0x840000000002, 0x3, 0xff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 456.711679ms ago: executing program 5 (id=126): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x4000000, 0x0, 0x50}, 0x4000) 373.652344ms ago: executing program 2 (id=127): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 370.961964ms ago: executing program 5 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 185.558307ms ago: executing program 2 (id=129): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000680)="c3ef7f670000ec6783b4241544b50000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 168.716538ms ago: executing program 2 (id=130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x3, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xfff2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x4, 0x6, 0x4025, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb0f}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004890}, 0x20084084) 137.355951ms ago: executing program 1 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) 93.959624ms ago: executing program 2 (id=132): signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 29.244728ms ago: executing program 2 (id=133): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 0 (id=134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close(0x3) kernel console output (not intermixed with test programs): [ 21.149939][ T28] audit: type=1400 audit(1775509360.418:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.171917][ T28] audit: type=1400 audit(1775509360.418:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.194596][ T28] audit: type=1400 audit(1775509360.418:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.218223][ T28] audit: type=1400 audit(1775509360.418:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.241315][ T28] audit: type=1400 audit(1775509360.428:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 25.379526][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 25.379543][ T28] audit: type=1400 audit(1775509364.648:70): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.380419][ T3297] cgroup: Unknown subsys name 'net' [ 25.385845][ T28] audit: type=1400 audit(1775509364.648:71): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.436163][ T28] audit: type=1400 audit(1775509364.678:72): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.551635][ T3297] cgroup: Unknown subsys name 'cpuset' [ 25.557873][ T3297] cgroup: Unknown subsys name 'rlimit' [ 25.667533][ T28] audit: type=1400 audit(1775509364.938:73): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.691016][ T28] audit: type=1400 audit(1775509364.938:74): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.713736][ T28] audit: type=1400 audit(1775509364.938:75): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.734622][ T28] audit: type=1400 audit(1775509364.938:76): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.743193][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.755201][ T28] audit: type=1400 audit(1775509364.938:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.784808][ T28] audit: type=1400 audit(1775509364.968:78): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.809876][ T28] audit: type=1400 audit(1775509364.968:79): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.833739][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.925313][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.996937][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 27.012689][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.019969][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.027381][ T3309] bridge_slave_0: entered allmulticast mode [ 27.033678][ T3309] bridge_slave_0: entered promiscuous mode [ 27.055088][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.066334][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.073737][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.080968][ T3309] bridge_slave_1: entered allmulticast mode [ 27.087301][ T3309] bridge_slave_1: entered promiscuous mode [ 27.108484][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.125545][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.138854][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.175962][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.183238][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.190442][ T3308] bridge_slave_0: entered allmulticast mode [ 27.196835][ T3308] bridge_slave_0: entered promiscuous mode [ 27.221682][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.228845][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.236238][ T3308] bridge_slave_1: entered allmulticast mode [ 27.242759][ T3308] bridge_slave_1: entered promiscuous mode [ 27.249754][ T3309] team0: Port device team_slave_0 added [ 27.265676][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.272924][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.280053][ T3313] bridge_slave_0: entered allmulticast mode [ 27.286444][ T3313] bridge_slave_0: entered promiscuous mode [ 27.299988][ T3309] team0: Port device team_slave_1 added [ 27.312361][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.319450][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.326632][ T3313] bridge_slave_1: entered allmulticast mode [ 27.332991][ T3313] bridge_slave_1: entered promiscuous mode [ 27.356708][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.363759][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.389805][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.405936][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.421580][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.428597][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.455240][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.471596][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.481020][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.488104][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.495493][ T3314] bridge_slave_0: entered allmulticast mode [ 27.501980][ T3314] bridge_slave_0: entered promiscuous mode [ 27.508401][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.521051][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.538843][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.546062][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.553731][ T3314] bridge_slave_1: entered allmulticast mode [ 27.560068][ T3314] bridge_slave_1: entered promiscuous mode [ 27.578575][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.588871][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.602789][ T3308] team0: Port device team_slave_0 added [ 27.616476][ T3313] team0: Port device team_slave_0 added [ 27.623608][ T3313] team0: Port device team_slave_1 added [ 27.630152][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.640236][ T3308] team0: Port device team_slave_1 added [ 27.676950][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.684030][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.710044][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.732129][ T3314] team0: Port device team_slave_0 added [ 27.737961][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.745007][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.771089][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.782292][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.789319][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.815625][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.828520][ T3309] hsr_slave_0: entered promiscuous mode [ 27.834650][ T3309] hsr_slave_1: entered promiscuous mode [ 27.843477][ T3314] team0: Port device team_slave_1 added [ 27.849265][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.856400][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.882812][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.922076][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.929150][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.955647][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.977940][ T3313] hsr_slave_0: entered promiscuous mode [ 27.986224][ T3313] hsr_slave_1: entered promiscuous mode [ 27.992175][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.997895][ T3313] Cannot create hsr debugfs directory [ 28.003438][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.010538][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.017801][ T3316] bridge_slave_0: entered allmulticast mode [ 28.024201][ T3316] bridge_slave_0: entered promiscuous mode [ 28.031119][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.038545][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.045835][ T3316] bridge_slave_1: entered allmulticast mode [ 28.052396][ T3316] bridge_slave_1: entered promiscuous mode [ 28.059016][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.066225][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.092390][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.144688][ T3308] hsr_slave_0: entered promiscuous mode [ 28.150632][ T3308] hsr_slave_1: entered promiscuous mode [ 28.156863][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 28.162866][ T3308] Cannot create hsr debugfs directory [ 28.174775][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.185623][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.250183][ T3314] hsr_slave_0: entered promiscuous mode [ 28.256445][ T3314] hsr_slave_1: entered promiscuous mode [ 28.262432][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 28.268162][ T3314] Cannot create hsr debugfs directory [ 28.278004][ T3316] team0: Port device team_slave_0 added [ 28.284551][ T3316] team0: Port device team_slave_1 added [ 28.337260][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.344410][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.370941][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.384514][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.391679][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.417907][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.463588][ T3316] hsr_slave_0: entered promiscuous mode [ 28.469516][ T3316] hsr_slave_1: entered promiscuous mode [ 28.475507][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.481365][ T3316] Cannot create hsr debugfs directory [ 28.514944][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.526481][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.535503][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.546619][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.607357][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.615771][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.631287][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.639991][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.685032][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.695546][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.708374][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.717710][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.755020][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.764130][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.773974][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.783018][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.797359][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.805962][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.830419][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.847680][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.861771][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.869094][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.878106][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.885399][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.894298][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.901449][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.909795][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.916972][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.948308][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.957421][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.968493][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.979304][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.014351][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.045152][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.065365][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.093294][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.107045][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.126856][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.138927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.146102][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.154562][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.161636][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.173744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.180819][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.195691][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.206259][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.221686][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.228726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.245690][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.261024][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.291242][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.298420][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.326938][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.338617][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.345755][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.357051][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.437097][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.464990][ T3313] veth0_vlan: entered promiscuous mode [ 29.482748][ T3309] veth0_vlan: entered promiscuous mode [ 29.499224][ T3313] veth1_vlan: entered promiscuous mode [ 29.513771][ T3309] veth1_vlan: entered promiscuous mode [ 29.538163][ T3313] veth0_macvtap: entered promiscuous mode [ 29.556535][ T3313] veth1_macvtap: entered promiscuous mode [ 29.569084][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.580521][ T3309] veth0_macvtap: entered promiscuous mode [ 29.589511][ T3309] veth1_macvtap: entered promiscuous mode [ 29.598488][ T3308] veth0_vlan: entered promiscuous mode [ 29.612421][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.622342][ T3308] veth1_vlan: entered promiscuous mode [ 29.632116][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.650212][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.661945][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.678805][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.690832][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.699651][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.731209][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.745256][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.754670][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.778102][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.787233][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.799691][ T3308] veth0_macvtap: entered promiscuous mode [ 29.831735][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.841930][ T3308] veth1_macvtap: entered promiscuous mode [ 29.854049][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.866263][ T3314] veth0_vlan: entered promiscuous mode [ 29.876554][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.886299][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.907558][ T3314] veth1_vlan: entered promiscuous mode [ 29.916686][ T3476] loop3: detected capacity change from 0 to 512 [ 29.952336][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.964886][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.972157][ T3476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.987744][ T3476] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.001300][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.019730][ T3316] veth0_vlan: entered promiscuous mode [ 30.035800][ T3476] EXT4-fs (loop3): shut down requested (0) [ 30.039616][ T3314] veth0_macvtap: entered promiscuous mode [ 30.049695][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.066159][ T3316] veth1_vlan: entered promiscuous mode [ 30.082033][ T3314] veth1_macvtap: entered promiscuous mode [ 30.109297][ T3316] veth0_macvtap: entered promiscuous mode [ 30.118255][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.138580][ T3316] veth1_macvtap: entered promiscuous mode [ 30.144852][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.154815][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.173744][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.194167][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.217952][ C0] hrtimer: interrupt took 45925 ns [ 30.222753][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.238660][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.259235][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.276511][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.301449][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.316380][ T3498] netlink: 'syz.1.9': attribute type 3 has an invalid length. [ 30.324960][ T3498] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 30.333201][ T3498] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.9'. [ 30.348741][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.357881][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.377370][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.395100][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 30.395117][ T28] audit: type=1400 audit(1775509369.668:133): avc: denied { wake_alarm } for pid=3499 comm="syz.0.11" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.431415][ T3502] Zero length message leads to an empty skb [ 30.484115][ T28] audit: type=1326 audit(1775509369.758:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.0.11" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f95f1fd6597 code=0x0 [ 30.572992][ T28] audit: type=1400 audit(1775509369.838:135): avc: denied { read } for pid=3511 comm="syz.2.3" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.618071][ T28] audit: type=1400 audit(1775509369.838:136): avc: denied { open } for pid=3511 comm="syz.2.3" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.643762][ T28] audit: type=1400 audit(1775509369.918:137): avc: denied { append } for pid=3517 comm="syz.4.17" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.679571][ T28] audit: type=1400 audit(1775509369.948:138): avc: denied { read } for pid=3517 comm="syz.4.17" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 30.705125][ T28] audit: type=1400 audit(1775509369.948:139): avc: denied { open } for pid=3517 comm="syz.4.17" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 30.738845][ T28] audit: type=1400 audit(1775509369.958:140): avc: denied { ioctl } for pid=3517 comm="syz.4.17" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 30.764471][ T28] audit: type=1400 audit(1775509369.978:141): avc: denied { read write } for pid=3519 comm="syz.1.18" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.788932][ T28] audit: type=1400 audit(1775509369.978:142): avc: denied { open } for pid=3519 comm="syz.1.18" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.795056][ T70] nci: nci_ntf_packet: unknown ntf opcode 0x223 [ 31.404385][ T3539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 31.414850][ T3539] netlink: 196 bytes leftover after parsing attributes in process `syz.2.24'. [ 31.435069][ T3539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 31.453726][ T3539] netlink: 196 bytes leftover after parsing attributes in process `syz.2.24'. [ 31.498583][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b77de00: rx timeout, send abort [ 31.569428][ T3520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 31.998665][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b77dc00: rx timeout, send abort [ 32.007031][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b77de00: abort rx timeout. Force session deactivation [ 32.213836][ T3565] loop0: detected capacity change from 0 to 2048 [ 32.271923][ T3569] loop3: detected capacity change from 0 to 128 [ 32.279091][ T3569] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.294210][ T3565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.322638][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.359286][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.506999][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b77dc00: abort rx timeout. Force session deactivation [ 32.560595][ T3597] loop4: detected capacity change from 0 to 256 [ 32.575088][ T3597] ======================================================= [ 32.575088][ T3597] WARNING: The mand mount option has been deprecated and [ 32.575088][ T3597] and is ignored by this kernel. Remove the mand [ 32.575088][ T3597] option from the mount to silence this warning. [ 32.575088][ T3597] ======================================================= [ 32.657720][ T3600] loop2: detected capacity change from 0 to 512 [ 32.693761][ T3600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.700782][ T3597] loop4: detected capacity change from 256 to 0 [ 32.721124][ T3600] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.721808][ T3603] FAT-fs (loop4): Directory bread(block 52) failed [ 32.744824][ T3600] EXT4-fs error (device loop2): ext4_add_entry:2415: inode #12: comm syz.2.47: Directory hole found for htree leaf block 0 [ 32.757818][ T3600] EXT4-fs (loop2): Remounting filesystem read-only [ 32.768025][ T3603] FAT-fs (loop4): Directory bread(block 53) failed [ 32.783373][ T3603] FAT-fs (loop4): Directory bread(block 54) failed [ 32.790165][ T3603] FAT-fs (loop4): Directory bread(block 55) failed [ 32.798211][ T3605] loop1: detected capacity change from 0 to 128 [ 32.812790][ T3603] FAT-fs (loop4): Directory bread(block 56) failed [ 32.820499][ T3605] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.833262][ T3605] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.847642][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.848263][ T3603] FAT-fs (loop4): Directory bread(block 57) failed [ 32.861064][ T118] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.864147][ T3603] FAT-fs (loop4): Directory bread(block 58) failed [ 32.880833][ T3603] FAT-fs (loop4): Directory bread(block 59) failed [ 32.887533][ T3603] FAT-fs (loop4): Directory bread(block 3) failed [ 32.943281][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.008333][ T3612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.025024][ T3316] FAT-fs (loop4): Directory bread(block 3) failed [ 33.047881][ T3316] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 33.064817][ T3612] netlink: 'syz.1.50': attribute type 12 has an invalid length. [ 33.073007][ T3612] netlink: 'syz.1.50': attribute type 29 has an invalid length. [ 33.089343][ T3612] netlink: 148 bytes leftover after parsing attributes in process `syz.1.50'. [ 33.105895][ T3620] Illegal XDP return value 4294967294 on prog (id 19) dev syz_tun, expect packet loss! [ 33.253317][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.276384][ T3632] process 'syz.0.63' launched './file1' with NULL argv: empty string added [ 33.330293][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.471582][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.513522][ T3650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 33.556234][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.742160][ T30] bridge_slave_1: left allmulticast mode [ 33.748975][ T30] bridge_slave_1: left promiscuous mode [ 33.761012][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.781658][ T30] bridge_slave_0: left allmulticast mode [ 33.794250][ T30] bridge_slave_0: left promiscuous mode [ 33.808832][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.833459][ T3679] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 33.931030][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.969112][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.001522][ T30] bond0 (unregistering): Released all slaves [ 34.113725][ T3635] chnl_net:caif_netlink_parms(): no params data found [ 34.156003][ T30] hsr_slave_0: left promiscuous mode [ 34.216095][ T30] hsr_slave_1: left promiscuous mode [ 34.222124][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.229566][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.247431][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.255211][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.303254][ T30] veth1_macvtap: left promiscuous mode [ 34.308937][ T30] veth0_macvtap: left promiscuous mode [ 34.349507][ T30] veth1_vlan: left promiscuous mode [ 34.354834][ T30] veth0_vlan: left promiscuous mode [ 34.484503][ T30] team0 (unregistering): Port device team_slave_1 removed [ 34.498896][ T30] team0 (unregistering): Port device team_slave_0 removed [ 34.590983][ T3729] loop0: detected capacity change from 0 to 2048 [ 34.616272][ T3729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.706853][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.714090][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.721695][ T3635] bridge_slave_0: entered allmulticast mode [ 34.728804][ T3635] bridge_slave_0: entered promiscuous mode [ 34.735926][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.743153][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.750300][ T3635] bridge_slave_1: entered allmulticast mode [ 34.757044][ T3635] bridge_slave_1: entered promiscuous mode [ 34.775031][ T3635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.776855][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.787385][ T3635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.822002][ T3635] team0: Port device team_slave_0 added [ 34.831336][ T3635] team0: Port device team_slave_1 added [ 34.849845][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.857144][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.883776][ T3635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.957805][ T3761] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 34.989935][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.009553][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.051142][ T3768] loop2: detected capacity change from 0 to 1024 [ 35.070899][ T3635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.115938][ T3768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.119974][ T3635] hsr_slave_0: entered promiscuous mode [ 35.134502][ T3635] hsr_slave_1: entered promiscuous mode [ 35.140495][ T3635] debugfs: 'hsr0' already exists in 'hsr' [ 35.146564][ T3635] Cannot create hsr debugfs directory [ 35.241359][ T3768] syz.2.93 (3768) used greatest stack depth: 10360 bytes left [ 35.256596][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.346306][ T3635] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.367899][ T3635] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.393477][ T3635] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.426134][ T3635] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.447805][ T3799] netlink: 'syz.0.98': attribute type 8 has an invalid length. [ 35.609785][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.626571][ T3635] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.644575][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.651828][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.675047][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.682235][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.710823][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 35.710841][ T28] audit: type=1400 audit(1775509374.988:207): avc: denied { write } for pid=3816 comm="syz.0.101" lport=36890 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 35.812823][ T3635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.858212][ T3825] loop0: detected capacity change from 0 to 4096 [ 35.889844][ T3825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.918315][ T28] audit: type=1400 audit(1775509375.188:208): avc: denied { bind } for pid=3834 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.016280][ T28] audit: type=1400 audit(1775509375.268:209): avc: denied { bind } for pid=3837 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.038510][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.061607][ T28] audit: type=1400 audit(1775509375.268:210): avc: denied { name_bind } for pid=3837 comm="syz.3.106" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 36.091586][ T28] audit: type=1400 audit(1775509375.268:211): avc: denied { node_bind } for pid=3837 comm="syz.3.106" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 36.191704][ T3635] veth0_vlan: entered promiscuous mode [ 36.199582][ T3635] veth1_vlan: entered promiscuous mode [ 36.205475][ T28] audit: type=1400 audit(1775509375.468:212): avc: denied { create } for pid=3851 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.224264][ T3852] loop2: detected capacity change from 0 to 1024 [ 36.225412][ T28] audit: type=1400 audit(1775509375.468:213): avc: denied { write } for pid=3851 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.251625][ T28] audit: type=1400 audit(1775509375.488:214): avc: denied { create } for pid=3855 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.271710][ T28] audit: type=1400 audit(1775509375.528:215): avc: denied { connect } for pid=3855 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.312959][ T28] audit: type=1400 audit(1775509375.548:216): avc: denied { mount } for pid=3854 comm="syz.3.110" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 36.335247][ T3852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.351444][ T3852] EXT4-fs (loop2): shut down requested (0) [ 36.360856][ T3635] veth0_macvtap: entered promiscuous mode [ 36.368572][ T3852] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 36.379194][ T3852] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 36.389059][ T3852] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 36.407668][ T3635] veth1_macvtap: entered promiscuous mode [ 36.429051][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.437900][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.453555][ T118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.466072][ T118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.482549][ T118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.494059][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.500741][ T118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.512071][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 36.523434][ T3869] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.553932][ T3869] bridge_slave_1 (unregistering): left allmulticast mode [ 36.561500][ T3869] bridge_slave_1 (unregistering): left promiscuous mode [ 36.568532][ T3869] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.719618][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 36.763769][ T3886] loop3: detected capacity change from 0 to 1024 [ 36.816233][ T3886] EXT4-fs: quotafile must be on filesystem root [ 36.890562][ T3890] loop5: detected capacity change from 0 to 1024 [ 36.901763][ T3890] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 36.901763][ T3890] [ 36.992401][ T3899] loop0: detected capacity change from 0 to 512 [ 37.005128][ T3899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.028475][ T3902] loop2: detected capacity change from 0 to 128 [ 37.065360][ T3902] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.092848][ T3902] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.104115][ T3906] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.124: Unimplemented hash flags: 0x0001 [ 37.115783][ T3906] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.124: Corrupt directory, running e2fsck is recommended [ 37.167544][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.186209][ T3899] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.124: Unimplemented hash flags: 0x0001 [ 37.209114][ T3899] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.124: Corrupt directory, running e2fsck is recommended [ 37.242585][ T3910] netlink: 'syz.2.127': attribute type 10 has an invalid length. [ 37.254387][ T3906] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.124: Unimplemented hash flags: 0x0001 [ 37.256948][ T3910] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.274357][ T3910] bond0: (slave team0): Enslaving as an active interface with an up link [ 37.282351][ T3906] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.124: Corrupt directory, running e2fsck is recommended [ 37.335881][ T3899] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.124: Unimplemented hash flags: 0x0001 [ 37.367569][ T3899] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.124: Corrupt directory, running e2fsck is recommended [ 37.445004][ T3899] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.124: Unimplemented hash flags: 0x0001 [ 37.457150][ T3899] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.124: Corrupt directory, running e2fsck is recommended [ 37.524421][ T3924] loop2: detected capacity change from 0 to 512 [ 37.534573][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.544714][ T3313] ================================================================== [ 37.552814][ T3313] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 37.560405][ T3313] [ 37.562728][ T3313] read-write to 0xffff888237d26668 of 1 bytes by task 3924 on cpu 1: [ 37.570786][ T3313] folio_add_lru+0xa4/0x1e0 [ 37.575302][ T3313] filemap_add_folio+0x267/0x350 [ 37.580265][ T3313] __filemap_get_folio_mpol+0x326/0x680 [ 37.585817][ T3313] bdev_getblk+0x173/0x3f0 [ 37.590234][ T3313] read_mmp_block+0xa4/0x2b0 [ 37.594824][ T3313] ext4_multi_mount_protect+0x112/0x600 [ 37.600368][ T3313] ext4_fill_super+0x22f2/0x37c0 [ 37.605391][ T3313] get_tree_bdev_flags+0x291/0x300 [ 37.610606][ T3313] get_tree_bdev+0x1f/0x30 [ 37.613437][ T3924] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 37.615118][ T3313] ext4_get_tree+0x1c/0x30 [ 37.615143][ T3313] vfs_get_tree+0x57/0x1d0 [ 37.615160][ T3313] do_new_mount+0x288/0x8d0 [ 37.615178][ T3313] path_mount+0x4d0/0xbc0 [ 37.615196][ T3313] __se_sys_mount+0x28c/0x2e0 [ 37.623347][ T3924] System zones: [ 37.627598][ T3313] __x64_sys_mount+0x67/0x80 [ 37.627624][ T3313] x64_sys_call+0x2d61/0x3020 [ 37.632618][ T3924] 0-2 [ 37.636545][ T3313] do_syscall_64+0x12c/0x370 [ 37.640969][ T3924] , 18-18 [ 37.645655][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.645683][ T3313] [ 37.645690][ T3313] read to 0xffff888237d26668 of 1 bytes by task 3313 on cpu 0: [ 37.645706][ T3313] __lru_add_drain_all+0x17e/0x450 [ 37.645730][ T3313] lru_add_drain_all+0x10/0x20 [ 37.649317][ T3924] , 34-35 [ 37.653859][ T3313] invalidate_bdev+0x47/0x70 [ 37.653888][ T3313] ext4_put_super+0x610/0x7b0 [ 37.653915][ T3313] generic_shutdown_super+0xee/0x220 [ 37.653944][ T3313] kill_block_super+0x2a/0x70 [ 37.653964][ T3313] ext4_kill_sb+0x42/0x80 [ 37.653986][ T3313] deactivate_locked_super+0x75/0x1c0 [ 37.659557][ T3924] [ 37.661335][ T3313] deactivate_super+0x97/0xa0 [ 37.661368][ T3313] cleanup_mnt+0x2bb/0x330 [ 37.666973][ T3924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.669308][ T3313] __cleanup_mnt+0x19/0x20 [ 37.675379][ T3924] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.677536][ T3313] task_work_run+0x130/0x1a0 [ 37.770968][ T3313] exit_to_user_mode_loop+0x1f4/0x6f0 [ 37.776409][ T3313] do_syscall_64+0x249/0x370 [ 37.781056][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.786952][ T3313] [ 37.789430][ T3313] value changed: 0x01 -> 0x02 [ 37.794098][ T3313] [ 37.796428][ T3313] Reported by Kernel Concurrency Sanitizer on: [ 37.802575][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 37.812130][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 37.822287][ T3313] ================================================================== [ 37.858632][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.900802][ T3877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 38.137675][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.223458][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.273889][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.323315][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.403170][ T36] bridge_slave_1: left allmulticast mode [ 38.408855][ T36] bridge_slave_1: left promiscuous mode [ 38.415138][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.423066][ T36] bridge_slave_0: left allmulticast mode [ 38.429037][ T36] bridge_slave_0: left promiscuous mode [ 38.435012][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.503390][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.513619][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.523090][ T36] bond0 (unregistering): Released all slaves [ 38.561586][ T36] hsr_slave_0: left promiscuous mode [ 38.567241][ T36] hsr_slave_1: left promiscuous mode [ 38.573113][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.580610][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.588601][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.596349][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.608308][ T36] veth1_macvtap: left promiscuous mode [ 38.614105][ T36] veth0_macvtap: left promiscuous mode [ 38.619839][ T36] veth1_vlan: left promiscuous mode [ 38.625581][ T36] veth0_vlan: left promiscuous mode [ 38.690592][ T36] team0 (unregistering): Port device team_slave_1 removed [ 38.700138][ T36] team0 (unregistering): Port device team_slave_0 removed [ 39.006620][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.033845][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.084389][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.163124][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.233525][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.285793][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.343137][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.383822][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.455363][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.494074][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.544098][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.595448][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.673653][ T36] bridge_slave_1: left allmulticast mode [ 39.679421][ T36] bridge_slave_1: left promiscuous mode [ 39.685267][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.693047][ T36] bridge_slave_0: left allmulticast mode [ 39.698801][ T36] bridge_slave_0: left promiscuous mode [ 39.704847][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.713413][ T36] bridge_slave_1: left allmulticast mode [ 39.719105][ T36] bridge_slave_1: left promiscuous mode [ 39.724926][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.733001][ T36] bridge_slave_0: left allmulticast mode [ 39.738743][ T36] bridge_slave_0: left promiscuous mode [ 39.744679][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.752984][ T36] bridge_slave_0: left allmulticast mode [ 39.758804][ T36] bridge_slave_0: left promiscuous mode [ 39.764707][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.884152][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.894170][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.903842][ T36] bond0 (unregistering): Released all slaves [ 39.952853][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.962293][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.972299][ T36] bond0 (unregistering): (slave team0): Releasing backup interface [ 39.981179][ T36] bond0 (unregistering): Released all slaves [ 40.092772][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.102596][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.112217][ T36] bond0 (unregistering): Released all slaves [ 40.138693][ T36] hsr_slave_0: left promiscuous mode [ 40.144602][ T36] hsr_slave_1: left promiscuous mode [ 40.150297][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.157982][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.167396][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.174964][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.184627][ T36] hsr_slave_0: left promiscuous mode [ 40.190301][ T36] hsr_slave_1: left promiscuous mode [ 40.196146][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.204614][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.212171][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.219783][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.229252][ T36] hsr_slave_0: left promiscuous mode [ 40.235094][ T36] hsr_slave_1: left promiscuous mode [ 40.240907][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.248352][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.256067][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.263814][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.278017][ T36] veth1_macvtap: left promiscuous mode [ 40.283621][ T36] veth0_macvtap: left promiscuous mode [ 40.289114][ T36] veth1_vlan: left promiscuous mode [ 40.294718][ T36] veth0_vlan: left promiscuous mode [ 40.300603][ T36] veth1_macvtap: left promiscuous mode [ 40.306191][ T36] veth0_macvtap: left promiscuous mode [ 40.312059][ T36] veth1_vlan: left promiscuous mode [ 40.317314][ T36] veth0_vlan: left promiscuous mode [ 40.323202][ T36] veth1_macvtap: left promiscuous mode [ 40.328920][ T36] veth0_macvtap: left promiscuous mode [ 40.334538][ T36] veth1_vlan: left promiscuous mode [ 40.340013][ T36] veth0_vlan: left promiscuous mode [ 40.452963][ T36] team0 (unregistering): Port device team_slave_1 removed [ 40.462503][ T36] team0 (unregistering): Port device team_slave_0 removed [ 40.513253][ T36] team0 (unregistering): Port device team_slave_1 removed [ 40.522510][ T36] team0 (unregistering): Port device team_slave_0 removed [ 40.574401][ T36] team0 (unregistering): Port device team_slave_1 removed [ 40.584492][ T36] team0 (unregistering): Port device team_slave_0 removed [ 41.306781][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.355947][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.406131][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.453676][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.520568][ T36] bridge_slave_1: left allmulticast mode [ 41.526390][ T36] bridge_slave_1: left promiscuous mode [ 41.532423][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.540373][ T36] bridge_slave_0: left allmulticast mode [ 41.546269][ T36] bridge_slave_0: left promiscuous mode [ 41.552523][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.643005][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.653051][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.662570][ T36] bond0 (unregistering): Released all slaves [ 41.724642][ T36] hsr_slave_0: left promiscuous mode [ 41.730309][ T36] hsr_slave_1: left promiscuous mode [ 41.736424][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.744218][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.752354][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.759847][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.771485][ T36] veth1_macvtap: left promiscuous mode [ 41.777151][ T36] veth0_macvtap: left promiscuous mode [ 41.782872][ T36] veth1_vlan: left promiscuous mode [ 41.788173][ T36] veth0_vlan: left promiscuous mode [ 41.847907][ T36] team0 (unregistering): Port device team_slave_1 removed [ 41.857382][ T36] team0 (unregistering): Port device team_slave_0 removed